$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/5bee3bdf-2522-3fcc-851d-13be40a578cf.roa File: 5bee3bdf-2522-3fcc-851d-13be40a578cf.roa (raw, json) Hash identifier: LGkPwfkUQMD5rnBx8MMDWg0Jji5QKjfDPoXNxtqKiAo= Subject key identifier: 41:CC:6C:73:F8:F4:49:30:B1:3A:3A:46:AA:C5:B8:B3:97:BE:36:52 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584F506D4939369B8E195244E840 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/5bee3bdf-2522-3fcc-851d-13be40a578cf.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 143.244.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:49:39:36:9b:8e:19:52:44:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=b8a60f43-d452-427f-9268-0d44947d76d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:37:f1:de:e8:c8:e5:aa:8d:de:7d:e0:94:a8: 1a:16:9d:31:29:2f:0f:a5:e3:a6:3d:8a:59:a1:d3: 57:b9:1c:7b:dd:f5:0f:81:2e:c5:74:6f:a7:68:a0: 76:e9:d9:8e:f7:24:10:5b:21:60:8e:16:b5:5b:43: 5e:89:22:55:1f:3f:a5:9c:af:b4:3e:06:23:83:ad: 21:f1:1a:d1:aa:47:df:d3:50:0e:f6:4b:34:68:66: 39:dc:f2:fa:c5:c0:68:ba:89:f2:95:ef:55:48:08: 0e:14:ae:27:d6:62:ca:4f:2b:a4:52:b8:de:19:ad: 6d:ca:96:28:ad:75:ef:a9:41:26:b9:02:65:f1:6f: ea:93:33:a8:f8:78:a2:a5:33:9b:8d:de:e6:8f:99: c1:ea:6b:31:bb:84:31:5a:02:2c:c3:3d:a4:09:ab: 6e:e6:7a:f1:e4:f3:48:d5:d3:59:f4:6c:1e:13:10: a8:4c:f2:7e:6b:60:7a:08:49:25:e2:e1:6d:db:a1: 5b:af:8a:c9:23:40:e0:98:7b:e0:7c:c6:95:48:e2: 2b:1e:a2:36:da:fe:c9:f5:e1:3a:dc:ab:5a:be:3e: 9d:a2:00:35:8b:99:a0:1a:6b:4d:9e:05:8f:f3:ce: 15:3f:8b:7a:dd:64:c4:f8:6c:93:fd:66:5d:af:10: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CC:6C:73:F8:F4:49:30:B1:3A:3A:46:AA:C5:B8:B3:97:BE:36:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/5bee3bdf-2522-3fcc-851d-13be40a578cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fd:3b:ef:76:d8:bb:0c:5f:bc:4c:be:a2:38:4a:3b:d7:57: 21:8e:cd:3f:15:ae:73:f9:d0:bf:8e:4d:29:58:05:9e:b8:b3: 49:93:bd:d0:a0:03:56:e0:ca:93:50:e1:37:11:ce:fc:6a:cc: 34:90:a9:b3:78:ee:6b:6e:f8:7a:7a:d9:95:a2:17:e5:23:18: b5:64:26:ec:fd:88:28:36:d7:0f:51:59:d4:79:8b:2e:10:0e: b4:18:35:5a:8b:c5:6e:ad:76:ec:9e:28:15:f7:bb:b4:5f:aa: ef:d7:05:a1:8c:9f:a5:94:7b:c7:e8:42:4f:d2:2d:25:1e:25: 7b:23:32:92:f3:41:9b:d1:5f:ef:9f:50:39:b1:11:f2:50:fb: ca:ca:f3:3f:3e:e5:c3:5f:e7:90:c9:7e:69:28:b4:24:2c:b3: d9:9a:fa:00:b6:26:1c:05:fd:ca:af:0f:67:71:ff:5c:00:b7: dc:4b:52:9b:3e:dd:4f:b3:f0:51:f7:e3:83:77:a2:ed:99:90: 5b:8e:e1:aa:86:dc:31:5b:8d:87:46:e7:3e:9e:5f:65:35:b2: 3e:5a:ee:57:5a:17:00:6c:f9:80:b5:a4:2f:8c:af:a0:d6:8c: 5c:48:e9:95:f0:4a:c9:3a:eb:40:92:42:44:ee:21:3a:a7:49: ea:18:5a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUk5NpuOGVJE6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YjhhNjBmNDMtZDQ1Mi00MjdmLTkyNjgtMGQ0NDk0N2Q3NmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjfx3ujI5aqN3n3glKgaFp0xKS8PpeOmPYpZ odNXuRx73fUPgS7FdG+naKB26dmO9yQQWyFgjha1W0NeiSJVHz+lnK+0PgYjg60h 8RrRqkff01AO9ks0aGY53PL6xcBouonyle9VSAgOFK4n1mLKTyukUrjeGa1typYo rXXvqUEmuQJl8W/qkzOo+HiipTObjd7mj5nB6msxu4QxWgIswz2kCatu5nrx5PNI 1dNZ9GweExCoTPJ+a2B6CEkl4uFt26Fbr4rJI0DgmHvgfMaVSOIrHqI22v7J9eE6 3Ktavj6dogA1i5mgGmtNngWP884VP4t63WTE+GyT/WZdrxA1twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHMbHP49EkwsTo6RqrFuLOXvjZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvNWJlZTNiZGYtMjUyMi0z ZmNjLTg1MWQtMTNiZTQwYTU3OGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj/RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP9O+922LsMX7xMvqI4SjvXVyGOzT8VrnP50L+OTSlYBZ64s0mTvdCg A1bgypNQ4TcRzvxqzDSQqbN47mtu+Hp62ZWiF+UjGLVkJuz9iCg21w9RWdR5iy4Q DrQYNVqLxW6tduyeKBX3u7Rfqu/XBaGMn6WUe8foQk/SLSUeJXsjMpLzQZvRX++f UDmxEfJQ+8rK8z8+5cNf55DJfmkotCQss9ma+gC2JhwF/cqvD2dx/1wAt9xLUps+ 3U+z8FH344N3ou2ZkFuO4aqG3DFbjYdG5z6eX2U1sj5a7ldaFwBs+YC1pC+Mr6DW jFxI6ZXwSsk660CSQkTuITqnSeoYWvE= -----END CERTIFICATE-----Generated at Tue Sep 29 00:26:38 2026 by rpki-client