$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dc1d157b-c428-308d-9aba-56de00fe1d82.roa File: dc1d157b-c428-308d-9aba-56de00fe1d82.roa (raw, json) Hash identifier: zC/VUcnsJ7CafipWraFIjb3472gAAQmHhIm2jQHTbO8= Subject key identifier: 38:AC:52:31:9B:B1:18:BE:17:3F:12:E3:53:16:D5:CE:CB:EC:79:48 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584ED9C7576DE84FC7378B213100 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dc1d157b-c428-308d-9aba-56de00fe1d82.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 14618 IP address blocks: 216.157.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:57:6d:e8:4f:c7:37:8b:21:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=7f65575c-f422-4f21-a108-adbf78195706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:79:4c:91:73:0b:f2:6b:f6:78:77:18:6f: ef:41:81:82:c7:fc:4d:11:ee:bc:73:d8:38:01:60: 06:e7:4f:e7:53:86:f0:e0:b8:36:27:93:2e:b0:51: 70:3a:70:f7:8b:a4:1c:a4:35:d1:fd:de:aa:f2:fe: 90:e7:c5:22:3d:81:28:01:c4:f7:e2:6a:33:32:c6: 48:cd:ba:62:d1:6f:c5:72:a7:4a:17:a4:78:c2:58: ff:ff:65:ce:b8:79:b1:dd:42:ba:c4:c9:63:7d:f8: 18:cd:54:a8:36:ad:c1:a8:08:c3:12:25:a2:f2:09: f1:26:e3:cd:93:1b:97:0e:f7:e9:89:71:d3:2e:5c: c4:17:a3:b7:d9:56:d7:20:f0:01:f7:a5:c8:62:bb: 3b:2b:b0:25:45:b3:c4:27:ed:8a:46:a2:42:f1:0c: 75:a5:f6:90:18:09:3b:2b:05:2d:41:1c:eb:53:cd: 94:55:06:ab:fe:57:b1:17:12:8e:41:85:66:1e:e4: f6:14:d2:a9:6b:ed:c9:b5:32:b9:7e:86:45:91:c6: a1:c3:26:af:b1:be:50:c4:82:66:26:39:56:0e:6c: 40:9c:18:0d:ce:02:c7:c4:6b:1f:c8:25:44:2d:34: 25:57:67:21:6b:af:f7:80:1c:ee:6b:38:13:ca:1d: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AC:52:31:9B:B1:18:BE:17:3F:12:E3:53:16:D5:CE:CB:EC:79:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dc1d157b-c428-308d-9aba-56de00fe1d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:54:ec:c4:35:99:70:86:d1:ec:bd:bb:c8:0c:f8:d9:0a:b3: 4b:6a:89:76:6e:23:7b:e5:a0:d1:2c:f1:e1:d6:46:bf:84:fe: 0a:06:4e:49:49:78:a8:4a:c7:41:ae:c3:9c:9c:c0:37:6c:3c: d8:60:76:e0:9b:66:0f:09:42:a7:ea:4f:82:cc:fe:11:b0:4f: 77:1f:2b:8f:67:01:7e:33:96:29:cf:c0:8c:72:c4:91:3e:27: ab:82:04:ad:2e:e8:2a:60:48:86:5f:64:c9:45:a7:32:6e:53: 99:50:db:80:88:e7:da:4b:8d:ce:63:dc:79:b9:54:7f:2b:07: 34:99:cd:60:92:d8:ec:af:56:47:9b:7d:c4:b1:78:ed:fb:b1: cd:0e:f1:55:ad:6b:33:eb:a7:15:ee:06:b9:59:fb:b1:53:ef: 5f:44:08:fb:a3:23:db:5d:21:fd:6d:00:c4:b0:e3:92:24:85: 30:da:dc:7a:e2:bb:79:c7:94:7f:6e:ea:0f:2b:4e:44:e9:11: 2d:6a:99:78:6f:8b:ee:fc:18:58:a5:b8:1c:a7:30:4a:b0:dc: 46:c6:5f:93:6d:7c:86:e4:4c:1c:93:6e:c2:86:c1:cb:ec:4b: 95:37:5f:be:85:93:2d:9c:58:bf:e2:aa:d2:23:7e:58:5a:20: ac:40:10:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx1dt6E/HN4shMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk N2Y2NTU3NWMtZjQyMi00ZjIxLWExMDgtYWRiZjc4MTk1NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV95TJFzC/Jr9nh3GG/vQYGCx/xNEe68c9g4 AWAG50/nU4bw4Lg2J5MusFFwOnD3i6QcpDXR/d6q8v6Q58UiPYEoAcT34mozMsZI zbpi0W/FcqdKF6R4wlj//2XOuHmx3UK6xMljffgYzVSoNq3BqAjDEiWi8gnxJuPN kxuXDvfpiXHTLlzEF6O32VbXIPAB96XIYrs7K7AlRbPEJ+2KRqJC8Qx1pfaQGAk7 KwUtQRzrU82UVQar/lexFxKOQYVmHuT2FNKpa+3JtTK5foZFkcahwyavsb5QxIJm JjlWDmxAnBgNzgLHxGsfyCVELTQlV2cha6/3gBzuazgTyh2jfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDisUjGbsRi+Fz8S41MW1c7L7HlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZGMxZDE1N2ItYzQyOC0z MDhkLTlhYmEtNTZkZTAwZmUxZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpU7MQ1mXCG0ey9u8gM+NkKs0tqiXZuI3vloNEs8eHWRr+E/goGTklJ eKhKx0Guw5ycwDdsPNhgduCbZg8JQqfqT4LM/hGwT3cfK49nAX4zlinPwIxyxJE+ J6uCBK0u6CpgSIZfZMlFpzJuU5lQ24CI59pLjc5j3Hm5VH8rBzSZzWCS2OyvVkeb fcSxeO37sc0O8VWtazPrpxXuBrlZ+7FT719ECPujI9tdIf1tAMSw45IkhTDa3Hri u3nHlH9u6g8rTkTpES1qmXhvi+78GFiluBynMEqw3EbGX5NtfIbkTByTbsKGwcvs S5U3X76Fky2cWL/iqtIjflhaIKxAEHA= -----END CERTIFICATE-----Generated at Tue Sep 22 22:59:39 2026 by rpki-client