$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa File: d00a4d26-89c0-3f41-9055-9730a0f4d182.roa (raw, json) Hash identifier: FIL//Zo83hcoxu6EMvjIU4njuDEj5Vbggl1QIMOZ0NU= Subject key identifier: D8:65:0B:C3:C8:26:9F:E1:5B:04:3C:03:0E:33:B9:B7:95:86:5E:D1 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584B970CEDD8EC34869E9EA0B5C0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 216.157.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ed:d8:ec:34:86:9e:9e:a0:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=58a151db-7228-405e-babb-d2b005300872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:3d:50:a7:0f:5c:6e:e7:5a:c6:bd:d4:b3: 4e:32:23:f8:95:6e:de:0b:d8:ee:50:8f:f3:bf:b2: ac:00:19:56:ed:ae:96:46:01:cf:0c:b0:7d:30:f1: 52:57:64:8a:4f:7a:d5:e3:04:7e:95:71:f9:01:35: 30:68:54:fc:8d:d9:c2:fc:7c:24:01:22:1b:bd:38: 85:e5:d7:b9:8c:fd:a7:09:fb:9e:2b:97:df:98:5a: 7c:a0:84:4f:30:cb:12:58:6c:58:48:ad:32:bf:61: 8d:c1:de:f5:b8:88:ae:7f:a1:99:b2:7b:4e:41:83: 7e:4f:b0:69:80:a0:5e:b0:ed:47:c0:5a:f8:f7:62: 80:10:bf:14:26:3f:00:2b:a8:50:41:fb:47:0e:4e: c3:9e:56:9a:d4:e9:ce:f3:e7:26:09:ea:6a:9a:30: f0:18:ff:fc:b1:e9:15:d2:bc:01:56:40:a2:05:d9: 39:93:b8:a7:34:c8:8e:99:8f:ad:e5:42:f4:4a:fa: d5:60:22:ff:94:80:5d:93:6d:a2:88:6a:37:aa:4f: d8:45:f4:71:d5:93:48:d8:41:c2:3d:ff:45:07:8a: f2:7a:cd:0a:11:9a:bf:e5:e4:49:35:93:9c:b2:15: c2:08:be:4c:c1:44:de:57:34:d2:b4:e0:2a:33:fa: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:65:0B:C3:C8:26:9F:E1:5B:04:3C:03:0E:33:B9:B7:95:86:5E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c9:e3:6e:35:1a:f8:03:8d:e4:02:69:0f:9f:eb:ef:0a:88: 8c:02:0d:b7:a1:0b:77:2f:20:08:9b:2b:02:87:4e:87:33:ec: c4:2e:e5:22:9c:a3:22:e1:77:45:f5:a3:b2:ab:dc:71:bb:c0: 35:8b:60:01:e9:56:58:d6:ba:13:fa:ca:3a:c0:85:43:21:49: 0c:21:67:f1:8a:bc:e7:4a:49:3c:33:27:c3:aa:52:0c:49:88: 1e:9e:99:97:a7:c4:0f:b2:16:4f:cf:49:4e:3b:9e:ac:5b:40: 87:38:3f:7b:62:74:85:04:cb:d0:0d:3d:72:2f:8d:cc:77:45: b5:fd:4b:ee:f1:99:09:93:a7:c7:1a:9f:ec:ab:96:4f:cf:3f: 21:42:05:bb:25:e9:82:6e:98:73:3e:36:df:69:0f:e2:a0:37: e6:de:32:e3:95:62:f0:20:fd:2c:c7:19:ec:24:86:9d:ee:c5: a5:70:31:c2:d3:fa:77:6b:0f:0e:a5:d5:0b:8b:b5:29:9e:f0: fd:d0:ee:9a:31:d6:da:40:48:da:e7:5e:f4:c4:45:ce:80:04: fe:ff:b0:4d:71:eb:9e:63:1c:29:08:3c:ce:ca:98:ac:c8:29: 87:c4:3d:4f:61:87:20:0b:5e:79:58:74:63:52:2e:3c:d3:f7: 41:c4:d4:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDO3Y7DSGnp6gtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NThhMTUxZGItNzIyOC00MDVlLWJhYmItZDJiMDA1MzAwODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpY9UKcPXG7nWsa91LNOMiP4lW7eC9juUI/z v7KsABlW7a6WRgHPDLB9MPFSV2SKT3rV4wR+lXH5ATUwaFT8jdnC/HwkASIbvTiF 5de5jP2nCfueK5ffmFp8oIRPMMsSWGxYSK0yv2GNwd71uIiuf6GZsntOQYN+T7Bp gKBesO1HwFr492KAEL8UJj8AK6hQQftHDk7Dnlaa1OnO8+cmCepqmjDwGP/8sekV 0rwBVkCiBdk5k7inNMiOmY+t5UL0SvrVYCL/lIBdk22iiGo3qk/YRfRx1ZNI2EHC Pf9FB4ryes0KEZq/5eRJNZOcshXCCL5MwUTeVzTStOAqM/qOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhlC8PIJp/hWwQ8Aw4zubeVhl7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZDAwYTRkMjYtODljMC0z ZjQxLTkwNTUtOTczMGEwZjRkMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnJ4241GvgDjeQCaQ+f6+8KiIwCDbehC3cvIAibKwKHTocz7MQu5SKc oyLhd0X1o7Kr3HG7wDWLYAHpVljWuhP6yjrAhUMhSQwhZ/GKvOdKSTwzJ8OqUgxJ iB6emZenxA+yFk/PSU47nqxbQIc4P3tidIUEy9ANPXIvjcx3RbX9S+7xmQmTp8ca n+yrlk/PPyFCBbsl6YJumHM+Nt9pD+KgN+beMuOVYvAg/SzHGewkhp3uxaVwMcLT +ndrDw6l1QuLtSme8P3Q7pox1tpASNrnXvTERc6ABP7/sE1x655jHCkIPM7KmKzI KYfEPU9hhyALXnlYdGNSLjzT90HE1M4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:28:53 2025 by rpki-client