$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa File: d00a4d26-89c0-3f41-9055-9730a0f4d182.roa (raw, json) Hash identifier: GAVKSy5AlXFNZrMURMnN0oA3keF1+cr7ywhU2e4m02Q= Subject key identifier: 6B:2F:9A:85:62:4D:DD:C3:71:56:C1:24:B7:66:7D:A1:F8:63:08:DA Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584D571FB29040AFAB2264B25180 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 216.157.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b2:90:40:af:ab:22:64:b2:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=55023477-249f-4c6a-b70d-47f84b6cb122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:89:d9:bb:83:45:6e:46:d7:92:9c:fb:d8:3f: af:31:4f:03:52:ad:9e:7a:c9:01:0a:6b:cf:e4:0e: b0:a8:56:4f:32:6f:52:f6:d7:d5:22:f7:1f:fa:ff: 4a:6c:88:88:f8:4c:98:3f:b4:30:d4:50:6c:1d:56: de:10:29:60:a0:7f:78:f5:3b:64:1d:69:e7:fe:54: e8:98:b5:5e:05:4b:57:8f:47:42:10:d3:70:0e:33: 9d:1e:35:9f:7c:2d:37:10:29:6b:7e:6a:50:45:8f: d7:df:c4:ed:16:d6:6d:c9:e2:ac:a7:be:cf:c6:15: 98:f5:80:1e:0e:4e:0e:df:95:df:a7:14:9d:47:ae: 5c:8e:7e:bf:9d:90:0d:39:c0:45:9d:04:86:5c:8e: e3:65:74:fd:8c:80:33:c4:b6:f7:64:bc:46:cb:b7: e8:b6:43:fb:c8:53:a3:54:3c:71:55:a9:d2:ec:dd: eb:f6:80:c9:3d:f5:32:f5:46:f3:0a:90:44:ce:7f: 59:0f:7f:37:b9:c2:03:49:aa:78:07:ec:f9:86:68: ef:53:22:0f:5e:43:85:f8:75:ed:a7:13:2b:e4:e1: 79:5e:5d:22:21:cb:a3:93:7d:75:b8:0e:7f:45:de: de:26:d4:c7:4b:42:c5:bd:eb:da:82:b0:3e:a3:e4: 49:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2F:9A:85:62:4D:DD:C3:71:56:C1:24:B7:66:7D:A1:F8:63:08:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ba:7d:3a:f4:69:3d:a4:d5:a6:d6:11:55:ee:91:4f:5e:2b: e5:69:e1:75:a5:ba:d7:ce:44:4d:e0:15:ed:0e:ba:ce:60:27: 41:c0:81:bc:d5:52:56:94:55:b8:65:11:88:76:69:94:1b:c9: 96:0c:a5:24:0f:b8:62:3a:d9:aa:84:95:2b:93:16:38:53:f1: 8b:4e:86:a1:a1:14:61:07:8c:52:ca:1b:0a:30:01:c7:2a:c7: e2:e2:2d:0e:c4:46:ae:4e:42:37:e8:7f:d0:c2:f3:0d:f7:4e: 9c:3d:6f:5c:86:35:bb:ec:06:a9:93:53:43:e0:b7:d9:f1:da: 29:0f:76:10:7c:c0:28:3a:8f:28:7a:71:3a:41:25:a3:b3:d0: 1a:72:0e:75:45:b3:d8:ac:49:b4:79:0c:a5:03:50:6d:2f:9c: 60:82:ac:23:a2:3b:07:ec:2e:6d:67:97:78:ca:fd:47:74:9a: f9:51:c6:e1:7e:3f:b8:18:e5:1c:0f:b3:6f:db:5c:a4:4a:b7: 3e:69:3d:ef:fe:ad:08:60:9c:fb:3d:35:92:90:36:17:06:be: cc:41:24:cb:7a:f6:41:2b:73:5a:0a:47:fb:29:a7:67:04:38: 8b:4d:3f:d9:3c:03:9c:9b:b9:2a:51:1b:d5:c6:12:f5:bc:e1: 6b:0d:4d:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7KQQK+rImSyUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NTUwMjM0NzctMjQ5Zi00YzZhLWI3MGQtNDdmODRiNmNiMTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYnZu4NFbkbXkpz72D+vMU8DUq2eeskBCmvP 5A6wqFZPMm9S9tfVIvcf+v9KbIiI+EyYP7Qw1FBsHVbeEClgoH949TtkHWnn/lTo mLVeBUtXj0dCENNwDjOdHjWffC03EClrfmpQRY/X38TtFtZtyeKsp77PxhWY9YAe Dk4O35XfpxSdR65cjn6/nZANOcBFnQSGXI7jZXT9jIAzxLb3ZLxGy7fotkP7yFOj VDxxVanS7N3r9oDJPfUy9UbzCpBEzn9ZD383ucIDSap4B+z5hmjvUyIPXkOF+HXt pxMr5OF5Xl0iIcujk311uA5/Rd7eJtTHS0LFvevagrA+o+RJKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsvmoViTd3DcVbBJLdmfaH4YwjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZDAwYTRkMjYtODljMC0z ZjQxLTkwNTUtOTczMGEwZjRkMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG6fTr0aT2k1abWEVXukU9eK+Vp4XWlutfORE3gFe0Ous5gJ0HAgbzV UlaUVbhlEYh2aZQbyZYMpSQPuGI62aqElSuTFjhT8YtOhqGhFGEHjFLKGwowAccq x+LiLQ7ERq5OQjfof9DC8w33Tpw9b1yGNbvsBqmTU0Pgt9nx2ikPdhB8wCg6jyh6 cTpBJaOz0BpyDnVFs9isSbR5DKUDUG0vnGCCrCOiOwfsLm1nl3jK/Ud0mvlRxuF+ P7gY5RwPs2/bXKRKtz5pPe/+rQhgnPs9NZKQNhcGvsxBJMt69kErc1oKR/spp2cE OItNP9k8A5ybuSpRG9XGEvW84WsNTXM= -----END CERTIFICATE-----Generated at Fri Apr 17 07:31:18 2026 by rpki-client