$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa File: 58789689-e2c9-3f72-af7b-00169d31da3d.roa (raw, json) Hash identifier: 37a+1nCQsxmWgA8r2pRCA63SyFUuCOgkzZyHOIMT0Mo= Subject key identifier: 86:77:7B:1E:8F:99:66:0D:37:22:46:CF:CE:6B:0E:DB:6E:EB:5B:DE Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584BAEC7AE59C9D8438142120880 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 143.244.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:ae:59:c9:d8:43:81:42:12:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=2e0e9be3-4f15-4f12-a91c-8a52dd5d103e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:51:8c:54:19:0a:4c:c0:8f:c9:1f:f4:ca:e5: 8d:4b:0a:d1:2b:8a:db:28:7b:3e:f1:d4:bb:41:6f: 16:03:e1:d5:ee:48:42:4d:c6:44:be:ce:41:a6:c2: 6e:6a:96:8b:66:4d:e9:6c:bb:b0:e1:5a:08:5b:0e: 51:b5:be:d8:bf:69:b8:be:06:39:c9:45:e7:b1:8e: df:d2:46:57:db:a0:75:4a:5c:89:23:dd:ea:87:90: 48:a6:9f:e1:0c:4f:0d:58:53:bf:f7:dc:13:a9:17: a2:c6:bf:b9:db:c9:38:30:58:6a:2d:b3:22:e7:43: 8f:ba:fa:c6:d7:ca:ad:8e:ac:7f:78:3e:21:e6:26: c4:c0:eb:8c:ea:d9:e9:8b:9f:c7:98:ad:9e:b0:42: 0d:8f:e7:e9:91:f2:3c:12:42:10:0c:1f:fe:a0:04: 7b:8f:8e:6e:f2:1f:9d:49:3b:99:19:4b:ec:6c:34: 3e:fe:30:65:b7:a2:74:24:0c:5d:1c:bb:88:2a:bc: 25:8f:f0:0e:39:3b:59:8b:48:bf:cd:3b:ce:e3:00: 61:63:ac:75:77:99:60:81:4b:64:48:49:15:47:c2: 1f:d1:53:a0:9f:48:ad:79:1a:da:c7:05:11:78:83: 58:ff:64:3c:e1:15:85:08:6d:19:86:af:ba:b2:9d: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:77:7B:1E:8F:99:66:0D:37:22:46:CF:CE:6B:0E:DB:6E:EB:5B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/58789689-e2c9-3f72-af7b-00169d31da3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:2d:1a:07:bf:63:79:a7:ad:c0:bc:13:44:fa:3e:63:ef:76: 4c:cc:67:a6:ab:b8:1b:09:84:cc:ef:75:45:bd:15:6f:96:68: 2a:32:89:b9:41:89:ed:60:f5:fd:d1:70:0b:ea:b6:d5:02:72: b0:a8:b6:be:cf:fc:14:57:00:c3:f5:c0:58:fc:b2:9a:b7:16: d6:fc:41:82:3a:35:b4:ac:36:7a:82:72:a9:12:c6:72:ea:40: c9:d7:c4:d2:2a:30:f3:1c:4d:72:25:7d:fd:d7:69:63:f3:cf: b0:d1:1c:09:f3:96:9b:e4:c2:0f:b5:f7:0b:c3:ec:2f:93:70: 5b:09:e3:87:fa:7b:e3:36:ba:ca:48:7c:a5:e0:af:81:9b:4d: 87:b2:b9:21:b3:42:bc:0b:24:72:57:b3:c5:02:af:86:8d:1d: 5b:8f:49:5b:3c:93:21:da:c7:81:15:5b:25:87:42:30:ff:24: 14:68:79:98:4f:d9:f7:21:d1:17:e6:91:e7:88:6d:3c:34:a7: 9c:80:e7:f5:2c:ad:25:94:fd:96:67:94:14:72:2a:7d:88:87: 24:2d:a5:75:07:b0:c9:33:9d:db:73:cc:55:e9:bd:33:84:8b: 2a:e6:9e:a1:17:70:2f:77:67:48:ba:c5:bc:96:1f:42:41:c9: dc:38:8a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux65ZydhDgUISCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MmUwZTliZTMtNGYxNS00ZjEyLWE5MWMtOGE1MmRkNWQxMDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVGMVBkKTMCPyR/0yuWNSwrRK4rbKHs+8dS7 QW8WA+HV7khCTcZEvs5BpsJuapaLZk3pbLuw4VoIWw5Rtb7Yv2m4vgY5yUXnsY7f 0kZX26B1SlyJI93qh5BIpp/hDE8NWFO/99wTqReixr+528k4MFhqLbMi50OPuvrG 18qtjqx/eD4h5ibEwOuM6tnpi5/HmK2esEINj+fpkfI8EkIQDB/+oAR7j45u8h+d STuZGUvsbDQ+/jBlt6J0JAxdHLuIKrwlj/AOOTtZi0i/zTvO4wBhY6x1d5lggUtk SEkVR8If0VOgn0iteRraxwUReINY/2Q84RWFCG0Zhq+6sp36bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZ3ex6PmWYNNyJGz85rDttu61veMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvNTg3ODk2ODktZTJjOS0z ZjcyLWFmN2ItMDAxNjlkMzFkYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj/RUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMtGge/Y3mnrcC8E0T6PmPvdkzMZ6aruBsJhMzvdUW9FW+WaCoyiblB ie1g9f3RcAvqttUCcrCotr7P/BRXAMP1wFj8spq3Ftb8QYI6NbSsNnqCcqkSxnLq QMnXxNIqMPMcTXIlff3XaWPzz7DRHAnzlpvkwg+19wvD7C+TcFsJ44f6e+M2uspI fKXgr4GbTYeyuSGzQrwLJHJXs8UCr4aNHVuPSVs8kyHax4EVWyWHQjD/JBRoeZhP 2fch0RfmkeeIbTw0p5yA5/UsrSWU/ZZnlBRyKn2IhyQtpXUHsMkzndtzzFXpvTOE iyrmnqEXcC93Z0i6xbyWH0JBydw4ipQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:28:53 2025 by rpki-client