$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d1df3652-eca5-3f80-8dab-2352e63c476b.roa File: d1df3652-eca5-3f80-8dab-2352e63c476b.roa (raw, json) Hash identifier: BeB+ub1VzNSv9SshhqznNkelrM19PEPkGvhcjU0MPzE= Subject key identifier: 21:A1:27:15:C2:E9:EB:C8:91:D9:2D:C4:CA:82:D7:5C:CB:27:0C:20 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584D571FB2A89C5BCEDBDE190EC0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d1df3652-eca5-3f80-8dab-2352e63c476b.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 216.157.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b2:a8:9c:5b:ce:db:de:19:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=24c12e99-26a2-4454-b055-d50a5ff6e45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:e0:9a:7c:f1:b3:82:dc:22:4e:05:ea:5d: 51:91:09:63:51:b8:f9:8f:97:37:15:91:6a:30:c6: ab:0d:9b:68:62:00:ba:b6:c6:5e:45:02:d2:f0:08: 74:e4:be:8b:59:f1:b9:e2:53:c4:37:04:7f:f9:a7: ea:44:ab:0a:b2:67:0f:b9:6e:23:63:ba:3e:17:9e: 70:dc:d4:9b:17:c9:f5:4e:bb:22:d1:a0:c6:23:f9: 86:ae:e0:e3:f2:ba:4c:1c:d4:24:5e:c6:9e:07:49: 77:31:2b:46:c2:7b:ae:a8:c3:0b:b5:a3:14:f3:46: d6:65:65:35:21:20:9a:05:d9:c8:c5:ca:6f:bb:91: 9c:ad:ed:6b:2a:d9:10:92:80:72:b0:dd:12:50:90: 34:a1:8c:b5:6a:ea:f2:ef:92:6f:01:2f:91:4e:72: 5f:3a:b2:ac:9f:8d:cd:cb:ae:c3:38:18:98:b8:a1: b6:1b:0c:9c:64:91:c1:1a:d2:5a:67:e9:24:b5:57: 13:73:80:09:61:dc:fc:2f:50:96:11:ad:8c:d1:4d: 47:ba:c2:5f:d5:3a:ed:9b:15:38:d4:ba:3b:ec:17: 38:73:5e:1a:7b:55:5a:a0:47:64:7d:36:66:81:b4: 1d:2b:ad:d7:32:81:73:3b:ca:54:50:79:98:f6:73: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A1:27:15:C2:E9:EB:C8:91:D9:2D:C4:CA:82:D7:5C:CB:27:0C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d1df3652-eca5-3f80-8dab-2352e63c476b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:46:55:69:ad:b6:00:f7:cb:85:8e:d2:4a:07:42:3c:99:22: 43:1a:bd:37:ed:54:cf:a1:30:bc:1c:ce:31:57:cb:66:23:63: 0c:d3:2e:d7:93:69:e2:f9:ce:6f:25:c5:7d:b4:8f:d1:25:d4: 61:d9:1c:5c:e0:33:39:a3:93:54:4b:a5:c7:03:28:dc:f5:1e: c8:35:e5:b8:07:6f:33:a7:6e:e2:25:ed:b8:b8:b6:71:08:3c: 69:e2:20:d9:0b:9f:ea:d2:4b:c8:1d:0c:09:b0:92:61:30:34: aa:5b:dc:5b:27:44:30:f7:a4:e0:f4:89:c4:39:fe:53:3f:34: 23:a6:79:c4:b2:20:a2:e3:7a:4e:c8:68:c1:3f:33:05:36:c9: 8c:5a:e1:56:d0:7f:f7:27:36:0d:6c:ac:0f:dc:02:04:da:ea: 82:ba:06:74:56:9e:5d:2a:9d:13:03:9b:4d:2a:cb:71:98:a4: 50:84:10:d1:a2:67:bb:e9:fd:d1:42:7d:12:d1:dc:c5:6b:e6: 05:62:9c:dc:53:d9:97:97:c8:37:fd:56:d5:1f:b4:c5:bf:c9: f0:7a:67:5f:78:fa:c3:42:07:60:dc:49:6b:72:81:57:d4:1c: ea:fc:32:0c:03:0c:b8:6f:5f:e3:89:fc:14:55:1d:c4:d4:bf: ad:42:d2:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7KonFvO294ZDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MjRjMTJlOTktMjZhMi00NDU0LWIwNTUtZDUwYTVmZjZlNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbDgmnzxs4LcIk4F6l1RkQljUbj5j5c3FZFq MMarDZtoYgC6tsZeRQLS8Ah05L6LWfG54lPENwR/+afqRKsKsmcPuW4jY7o+F55w 3NSbF8n1Trsi0aDGI/mGruDj8rpMHNQkXsaeB0l3MStGwnuuqMMLtaMU80bWZWU1 ISCaBdnIxcpvu5Gcre1rKtkQkoBysN0SUJA0oYy1aury75JvAS+RTnJfOrKsn43N y67DOBiYuKG2GwycZJHBGtJaZ+kktVcTc4AJYdz8L1CWEa2M0U1HusJf1TrtmxU4 1Lo77Bc4c14ae1VaoEdkfTZmgbQdK63XMoFzO8pUUHmY9nOz8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGhJxXC6evIkdktxMqC11zLJwwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZDFkZjM2NTItZWNhNS0z ZjgwLThkYWItMjM1MmU2M2M0NzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJGVWmttgD3y4WO0koHQjyZIkMavTftVM+hMLwczjFXy2YjYwzTLteT aeL5zm8lxX20j9El1GHZHFzgMzmjk1RLpccDKNz1Hsg15bgHbzOnbuIl7bi4tnEI PGniINkLn+rSS8gdDAmwkmEwNKpb3FsnRDD3pOD0icQ5/lM/NCOmecSyIKLjek7I aME/MwU2yYxa4VbQf/cnNg1srA/cAgTa6oK6BnRWnl0qnRMDm00qy3GYpFCEENGi Z7vp/dFCfRLR3MVr5gVinNxT2ZeXyDf9VtUftMW/yfB6Z194+sNCB2DcSWtygVfU HOr8MgwDDLhvX+OJ/BRVHcTUv61C0oQ= -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:09 2026 by rpki-client