$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa File: d00a4d26-89c0-3f41-9055-9730a0f4d182.roa (raw, json) Hash identifier: nFZTk4Tt7AqAb2SWvykEoS01y3d2ZN9z8j25+mne+Rc= Subject key identifier: 32:D2:01:01:FA:39:7E:6F:4E:6A:DE:AA:F3:06:C8:1C:8C:05:BD:03 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584ED9C75746E4D4FACDBFD37A80 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 16509 IP address blocks: 216.157.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:57:46:e4:d4:fa:cd:bf:d3:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=24af6a0e-4bfc-4cbb-aff1-731cd06f951d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:63:7b:10:6b:a7:9f:ea:e8:74:9d:ea:4e: 30:05:19:8f:be:af:76:8f:37:4e:39:01:84:25:68: a3:6e:dd:6d:14:6c:a0:a6:21:06:40:96:2a:34:df: 57:2f:7f:16:d6:66:d0:33:1f:1b:3b:56:e7:c7:86: 78:00:8e:c2:e0:44:37:e5:a6:e4:2e:d3:29:a8:bf: 65:25:ae:2c:11:c4:05:77:d0:56:c8:9f:c3:8f:f9: 7a:35:91:16:42:cc:6a:45:55:51:38:25:df:c6:83: ad:39:0c:88:64:65:56:9c:bd:48:f6:a4:7c:29:23: 49:de:8f:22:f8:b8:1a:93:61:56:64:6d:f2:f6:73: cd:89:6f:96:cb:26:53:4d:6a:d2:e4:ac:28:f9:6e: a9:26:ac:f3:80:13:74:76:8a:18:32:ad:33:8d:52: c3:86:ee:1e:25:0d:8a:c9:1a:1c:9c:62:ac:3e:e4: f8:e7:df:b0:c5:8e:aa:f0:6e:cb:fb:55:81:7e:7e: 1d:28:ac:38:3e:eb:d2:db:96:23:e5:b6:9a:26:f5: 5b:e1:25:6d:49:40:6e:42:95:2a:f0:de:ab:eb:91: 62:a2:cc:96:c2:46:3c:ef:24:cc:fc:28:d0:84:5e: ab:b0:b6:44:43:c7:07:cb:d4:62:68:e4:91:fa:db: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D2:01:01:FA:39:7E:6F:4E:6A:DE:AA:F3:06:C8:1C:8C:05:BD:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ae:0a:92:de:96:a8:94:f9:3a:5a:0b:87:80:30:51:64:09: 3f:6e:6c:03:99:cc:a6:38:c1:17:3a:eb:67:45:bd:4c:68:af: 32:a6:00:3a:6a:71:e4:48:0d:7f:97:ac:9a:7b:a4:e9:37:ba: 54:0c:4e:81:5e:9f:26:19:28:c4:1d:99:fc:b8:5f:20:81:ff: cb:1f:d9:f1:0b:d2:cb:24:b0:0a:4d:c9:25:10:4d:f3:54:15: 60:66:6f:e6:5b:3a:cd:27:d8:83:03:60:fc:cf:39:29:ec:c6: 78:c2:85:cd:65:0b:8e:1e:24:14:81:0a:74:b6:0d:a1:86:9e: 9f:4a:27:5b:52:31:5c:83:c5:af:12:d8:05:28:9d:8e:2a:18: 91:f8:3f:f2:18:c8:80:c2:0e:67:33:22:d1:42:74:c6:3f:e8: 8a:01:1e:51:76:ca:06:bb:94:f4:b3:e1:6d:e5:d5:a4:7c:28: f5:8b:0f:c4:ac:8a:9f:20:44:8c:03:ba:a3:2d:7c:6b:43:66: 06:11:20:a1:ea:1e:90:fe:57:a1:d9:59:98:0d:ee:d4:55:9e: 7f:08:5d:fd:4d:91:7a:30:9b:85:be:9e:7d:d8:a0:77:ed:40: c1:11:60:6c:a9:34:0b:55:af:39:dc:0b:c2:8f:90:7d:60:fc: bd:65:9f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx1dG5NT6zb/TeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MjRhZjZhMGUtNGJmYy00Y2JiLWFmZjEtNzMxY2QwNmY5NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNZjexBrp5/q6HSd6k4wBRmPvq92jzdOOQGE JWijbt1tFGygpiEGQJYqNN9XL38W1mbQMx8bO1bnx4Z4AI7C4EQ35abkLtMpqL9l Ja4sEcQFd9BWyJ/Dj/l6NZEWQsxqRVVROCXfxoOtOQyIZGVWnL1I9qR8KSNJ3o8i +Lgak2FWZG3y9nPNiW+WyyZTTWrS5Kwo+W6pJqzzgBN0dooYMq0zjVLDhu4eJQ2K yRocnGKsPuT459+wxY6q8G7L+1WBfn4dKKw4PuvS25Yj5baaJvVb4SVtSUBuQpUq 8N6r65FiosyWwkY87yTM/CjQhF6rsLZEQ8cHy9RiaOSR+tvcoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLSAQH6OX5vTmreqvMGyByMBb0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZDAwYTRkMjYtODljMC0z ZjQxLTkwNTUtOTczMGEwZjRkMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWuCpLelqiU+TpaC4eAMFFkCT9ubAOZzKY4wRc662dFvUxorzKmADpq ceRIDX+XrJp7pOk3ulQMToFenyYZKMQdmfy4XyCB/8sf2fEL0ssksApNySUQTfNU FWBmb+ZbOs0n2IMDYPzPOSnsxnjChc1lC44eJBSBCnS2DaGGnp9KJ1tSMVyDxa8S 2AUonY4qGJH4P/IYyIDCDmczItFCdMY/6IoBHlF2yga7lPSz4W3l1aR8KPWLD8Ss ip8gRIwDuqMtfGtDZgYRIKHqHpD+V6HZWZgN7tRVnn8IXf1NkXowm4W+nn3YoHft QMERYGypNAtVrzncC8KPkH1g/L1ln5k= -----END CERTIFICATE-----Generated at Thu Sep 24 02:34:58 2026 by rpki-client