$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa File: 58789689-e2c9-3f72-af7b-00169d31da3d.roa (raw, json) Hash identifier: ihJB7HZ2/qJO+vo9jseXJk3LF+REYGrKxGcFsm87QI4= Subject key identifier: 68:E5:F0:16:F9:6D:BF:F2:17:5A:6A:C9:0E:E2:B7:E0:55:E9:E0:61 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584D703FCE9652D05CC4505F0C80 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 16509 IP address blocks: 143.244.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:ce:96:52:d0:5c:c4:50:5f:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=64dfc73e-06e1-41ad-8154-6730e576505e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:a9:1d:57:6b:d6:8a:bd:c4:d9:fe:08:5c: 7b:78:cd:1e:cc:d6:ae:cb:ad:a5:8d:30:99:db:a7: cf:04:91:6d:a0:f1:39:3c:4a:22:92:b1:1b:bb:41: 2b:ae:3e:90:63:d8:73:f2:38:3d:38:60:68:fc:f8: a4:98:7f:7b:9b:0c:93:91:b3:cc:ae:9c:e6:d8:f5: d1:e8:a6:fd:42:d3:d3:ac:10:46:a2:e6:63:36:bc: 0b:9d:79:a2:ac:b1:48:a0:a8:08:2a:3f:0f:7d:47: 6d:d0:42:17:57:d6:4b:28:b3:1a:f7:93:09:0c:ea: ce:97:ee:e1:37:d5:d4:70:53:70:b5:67:6c:1a:62: e4:83:39:16:6a:e6:78:2d:9e:cb:b9:c6:89:c1:7d: df:94:db:c0:2a:57:9a:40:f3:d4:f2:20:c4:b9:ea: 66:5f:3f:86:49:70:3c:bd:37:8d:b0:5a:fc:de:63: 16:a9:77:08:34:32:ce:bd:ee:db:eb:ca:84:44:ec: ba:a0:7e:7c:68:c8:0c:40:1f:e3:98:cd:d9:09:23: 59:91:d5:ef:eb:b0:93:e3:0a:cf:7d:41:6d:c5:34: ae:63:f6:81:d7:88:ca:92:25:36:21:a7:66:77:e9: c1:f2:b5:54:87:d6:cf:46:1d:eb:4f:98:ab:8c:4d: 35:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E5:F0:16:F9:6D:BF:F2:17:5A:6A:C9:0E:E2:B7:E0:55:E9:E0:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4d:e0:12:e4:9f:02:14:51:51:aa:19:a8:d3:1f:ff:a1:58: 44:f7:96:a5:c3:44:c6:f4:05:4e:30:61:ae:3f:d5:4b:5c:04: 82:fd:5f:c4:9b:1e:f6:46:71:a7:5e:f5:ea:03:6d:7f:2a:6a: 16:b1:ff:e1:b0:45:6f:42:cf:b3:3e:fb:21:7c:d1:31:3e:8a: de:06:c4:7e:42:be:98:da:80:d4:fa:7f:26:06:1d:32:57:95: 7a:67:ee:d9:20:5a:1b:8f:5f:96:a4:30:e6:40:02:8f:43:1a: d7:f1:23:cd:38:54:7d:9c:10:4f:01:8d:57:1e:97:9f:5e:a8: 8d:bf:cf:b6:d2:d7:52:22:96:eb:ae:89:b0:68:ff:ea:2e:a7: 6c:ab:a1:95:64:c1:32:39:99:34:b1:6b:e2:a5:01:40:d7:e1: e0:68:f8:98:13:4b:d1:f2:e8:e1:59:63:d2:ee:70:4c:09:2b: 4e:c6:33:b4:8f:3b:56:f3:78:2c:82:d1:e5:1f:1d:59:bb:4f: 1b:40:51:12:52:9a:a1:a9:b3:7e:f5:91:65:1f:93:91:e3:f2: 12:0d:45:7c:fc:ee:53:45:22:58:ca:81:95:6d:11:2e:10:b1: 8a:29:e1:43:6d:1a:72:d5:7f:90:15:67:f5:fa:3d:fa:a8:7d: f5:27:16:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP86WUtBcxFBfDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk NjRkZmM3M2UtMDZlMS00MWFkLTgxNTQtNjczMGU1NzY1MDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AOpHVdr1oq9xNn+CFx7eM0ezNauy62ljTCZ 26fPBJFtoPE5PEoikrEbu0Errj6QY9hz8jg9OGBo/PikmH97mwyTkbPMrpzm2PXR 6Kb9QtPTrBBGouZjNrwLnXmirLFIoKgIKj8PfUdt0EIXV9ZLKLMa95MJDOrOl+7h N9XUcFNwtWdsGmLkgzkWauZ4LZ7LucaJwX3flNvAKleaQPPU8iDEuepmXz+GSXA8 vTeNsFr83mMWqXcINDLOve7b68qEROy6oH58aMgMQB/jmM3ZCSNZkdXv67CT4wrP fUFtxTSuY/aB14jKkiU2Iadmd+nB8rVUh9bPRh3rT5irjE012QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjl8Bb5bb/yF1pqyQ7it+BV6eBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvNTg3ODk2ODktZTJjOS0z ZjcyLWFmN2ItMDAxNjlkMzFkYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj/RUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdN4BLknwIUUVGqGajTH/+hWET3lqXDRMb0BU4wYa4/1UtcBIL9X8Sb HvZGcade9eoDbX8qahax/+GwRW9Cz7M++yF80TE+it4GxH5CvpjagNT6fyYGHTJX lXpn7tkgWhuPX5akMOZAAo9DGtfxI804VH2cEE8BjVcel59eqI2/z7bS11Iiluuu ibBo/+oup2yroZVkwTI5mTSxa+KlAUDX4eBo+JgTS9Hy6OFZY9LucEwJK07GM7SP O1bzeCyC0eUfHVm7TxtAURJSmqGps371kWUfk5Hj8hINRXz87lNFIljKgZVtES4Q sYop4UNtGnLVf5AVZ/X6PfqoffUnFhU= -----END CERTIFICATE-----Generated at Fri Apr 17 10:29:52 2026 by rpki-client