$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dfe64f54-2057-3893-aeb2-24d25179844e.roa File: dfe64f54-2057-3893-aeb2-24d25179844e.roa (raw, json) Hash identifier: CGbXcYZaJwF+HRU6wfqQ0G+obXF+vWE79OuwEar/Xvk= Subject key identifier: 87:7A:E4:CC:AE:60:AE:CC:1A:74:4B:0A:85:47:22:D2:7A:38:71:C5 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584CAB8C611E3391F95E6F687200 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dfe64f54-2057-3893-aeb2-24d25179844e.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 16509 IP address blocks: 216.139.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:61:1e:33:91:f9:5e:6f:68:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=fd947d81-f7c8-4d34-9a98-c82445adb4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:a2:55:44:38:97:e1:0a:3b:a6:5c:20:e9: c7:09:90:38:03:d7:2f:1c:57:ed:c5:f6:e6:ee:66: eb:1f:7b:b7:50:e5:86:e9:a5:5d:92:2c:0f:1e:d7: 1e:ea:47:92:ab:50:13:5b:c6:a2:c5:49:f1:ea:b6: fc:a5:82:55:bb:18:85:7e:22:da:67:17:a9:88:08: d4:56:3e:68:60:42:4c:93:29:42:11:be:2c:37:29: ce:18:71:48:9a:e9:80:27:ef:6d:44:9b:b1:f7:b1: e2:28:7c:11:a2:6a:ad:78:0e:32:b1:a0:4f:dd:c2: 0a:8b:ac:b3:84:de:76:f1:28:76:a6:05:39:9e:2f: 0a:6f:99:ea:5a:2e:ea:62:26:19:71:12:10:30:f4: 4f:59:8c:43:5e:a1:f0:fe:4e:02:45:b8:20:65:26: 2f:c5:7f:94:99:db:ef:70:68:40:65:16:7e:45:50: 15:31:88:f6:eb:3a:ce:a0:61:a9:77:25:46:e5:05: 17:22:f1:85:cf:c1:78:29:58:b3:24:c8:47:1d:8d: a5:fe:97:85:9a:4f:28:29:ee:2c:0f:3c:b6:2e:81: 8b:fc:8f:3c:85:5b:da:b2:5a:46:cd:ca:a8:00:ff: 86:e8:b2:67:3b:d8:22:56:47:00:45:50:b6:a8:a2: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7A:E4:CC:AE:60:AE:CC:1A:74:4B:0A:85:47:22:D2:7A:38:71:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dfe64f54-2057-3893-aeb2-24d25179844e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:81:eb:89:dd:26:74:35:03:b1:1f:db:ee:e6:64:e2:b4:85: bf:1a:8c:6c:c4:7c:93:b1:81:40:73:d7:84:80:83:6c:4f:95: ad:f5:f3:50:54:8c:33:d8:b7:65:a9:0f:31:0c:d5:c5:00:6a: 9a:1e:68:e3:20:3b:71:49:19:78:20:09:9a:85:6b:85:1f:99: dc:1b:11:fa:da:a2:e1:4f:e9:f6:8e:1d:d5:4a:06:74:93:90: 2b:dd:8c:6a:80:86:06:e6:52:c0:2a:02:90:d7:f6:12:bd:35: 60:53:1b:9e:7e:d8:9c:2d:5e:73:64:f7:97:b6:bd:a0:ce:66: 46:93:4c:e3:12:f1:8b:31:a2:fb:c3:15:29:1a:6f:34:c0:39: d7:4a:5a:42:7b:68:65:f3:f0:7f:cd:3f:db:ba:9c:97:c0:70: d5:b5:9f:15:91:26:13:17:2c:3f:bc:cf:ec:ff:f3:c6:d4:3c: 69:ef:2f:47:5b:11:3a:08:5f:02:41:c5:c8:56:ba:ea:72:e3: 0c:42:d0:83:24:18:a1:bf:0f:95:59:3b:e1:7f:00:b1:dc:ec: 11:05:68:f1:5a:79:26:a6:1e:2d:4d:96:ad:48:2e:c7:e3:39: c6:11:51:7a:0f:f8:bb:3a:95:df:96:d4:19:a5:0c:2f:c6:26: 7a:6a:bd:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjGEeM5H5Xm9ocgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk ZmQ5NDdkODEtZjdjOC00ZDM0LTlhOTgtYzgyNDQ1YWRiNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkaiVUQ4l+EKO6ZcIOnHCZA4A9cvHFftxfbm 7mbrH3u3UOWG6aVdkiwPHtce6keSq1ATW8aixUnx6rb8pYJVuxiFfiLaZxepiAjU Vj5oYEJMkylCEb4sNynOGHFImumAJ+9tRJux97HiKHwRomqteA4ysaBP3cIKi6yz hN528Sh2pgU5ni8Kb5nqWi7qYiYZcRIQMPRPWYxDXqHw/k4CRbggZSYvxX+Umdvv cGhAZRZ+RVAVMYj26zrOoGGpdyVG5QUXIvGFz8F4KVizJMhHHY2l/peFmk8oKe4s Dzy2LoGL/I88hVvaslpGzcqoAP+G6LJnO9giVkcARVC2qKLnrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId65MyuYK7MGnRLCoVHItJ6OHHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZGZlNjRmNTQtMjA1Ny0z ODkzLWFlYjItMjRkMjUxNzk4NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ItbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmB64ndJnQ1A7Ef2+7mZOK0hb8ajGzEfJOxgUBz14SAg2xPla3181BU jDPYt2WpDzEM1cUAapoeaOMgO3FJGXggCZqFa4UfmdwbEfraouFP6faOHdVKBnST kCvdjGqAhgbmUsAqApDX9hK9NWBTG55+2JwtXnNk95e2vaDOZkaTTOMS8YsxovvD FSkabzTAOddKWkJ7aGXz8H/NP9u6nJfAcNW1nxWRJhMXLD+8z+z/88bUPGnvL0db EToIXwJBxchWuupy4wxC0IMkGKG/D5VZO+F/ALHc7BEFaPFaeSamHi1Nlq1ILsfj OcYRUXoP+Ls6ld+W1BmlDC/GJnpqvXU= -----END CERTIFICATE-----Generated at Sun Mar 1 19:06:26 2026 by rpki-client