$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa File: febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa (raw, json) Hash identifier: U4ibpPSrVyKKtIRpNdky6GXLvMn6XFKCX/hCnE5yN84= Subject key identifier: 56:7F:03:58:71:6B:F5:1F:F0:AE:93:3B:E3:C7:C0:62:52:F6:48:94 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584D4D5A4B514618EB214D928880 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 158.247.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4b:51:46:18:eb:21:4d:92:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=b667cfeb-5187-4520-9c00-d367be4385a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:5b:5e:9f:fa:aa:f5:d6:f1:40:44:2e:66: 66:ac:6c:9f:50:b6:e9:c5:47:f8:e0:05:e1:b6:7a: 25:d7:d0:ea:3a:07:ec:c6:4e:17:f6:6c:51:d6:65: 89:7e:8a:3c:5b:68:04:03:a7:8c:a8:41:da:7a:fb: ce:87:fb:02:93:b1:4a:8b:07:19:dc:3a:63:0d:97: 14:f6:49:0a:bf:f8:43:18:64:ee:e6:2b:a3:01:25: 78:bf:88:67:bc:c3:a0:52:ae:4a:69:1f:3b:9d:ea: c9:3b:b8:ab:65:0b:52:ed:59:93:35:ff:36:7f:a2: 6b:5d:4b:92:a4:64:6a:4d:35:fc:ef:f9:b4:6a:20: 2e:50:93:4a:9b:71:5c:44:62:c5:d5:bb:8f:6a:66: 49:b9:a7:ab:95:ad:e9:c3:14:e7:4e:00:66:83:72: a8:b7:be:38:15:95:b3:e6:ed:ef:05:ba:78:89:0e: 54:cf:75:d1:67:68:d3:05:4a:ad:77:fb:10:13:6b: 09:fb:72:ad:69:92:eb:5c:aa:f0:e0:55:e6:9a:7b: 1c:18:a3:ca:21:58:35:23:4b:0a:ab:52:17:30:52: c8:89:72:4a:b8:64:dc:57:5f:ba:5d:57:ea:39:c9: 2d:06:42:29:2d:92:d9:77:25:a0:f2:9e:04:64:31: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7F:03:58:71:6B:F5:1F:F0:AE:93:3B:E3:C7:C0:62:52:F6:48:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 158.247.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:72:8f:89:c5:e0:bc:4a:96:93:55:f1:e0:3b:a1:7f:14:4e: 69:cb:50:b2:9b:1a:a0:66:a0:67:64:c1:c4:fc:e7:ea:bb:46: b3:98:23:d4:08:a6:1f:a5:62:8a:4b:ff:48:3d:5d:05:99:fb: 62:29:55:6a:47:7c:e0:f7:d7:3c:8e:d7:89:a3:49:22:11:d2: 44:b2:32:83:ab:4d:33:77:d2:1a:0c:40:fe:03:4f:53:61:c7: 4e:2c:63:66:0f:84:8c:5f:72:9b:82:dc:df:3c:8f:2f:39:60: 45:3d:40:2f:d8:12:9c:bd:de:35:5b:f1:b1:0b:00:5a:c1:2e: 2c:58:9c:4e:30:70:47:70:f2:ce:ef:f9:85:2e:af:23:41:7f: e3:4e:18:ae:22:c8:f4:20:9e:00:f9:81:af:92:35:56:0d:fb: 09:41:12:1d:f7:12:45:23:a6:7e:4f:be:61:2b:be:c7:2e:5d: 56:50:81:40:97:da:9f:1b:ff:50:98:cb:b0:3b:fa:09:38:e1: 0f:1a:11:48:bd:47:e1:6b:e7:2e:c4:ef:27:59:8b:c2:c0:55: 28:85:aa:c6:8e:0d:ee:5e:ee:32:80:93:2f:d7:cd:03:22:93: 2a:54:4a:96:56:5c:a0:83:c1:34:05:8f:3c:4b:2c:d7:8d:17: e2:dd:dc:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWktRRhjrIU2SiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YjY2N2NmZWItNTE4Ny00NTIwLTljMDAtZDM2N2JlNDM4NWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyNbXp/6qvXW8UBELmZmrGyfULbpxUf44AXh tnol19DqOgfsxk4X9mxR1mWJfoo8W2gEA6eMqEHaevvOh/sCk7FKiwcZ3DpjDZcU 9kkKv/hDGGTu5iujASV4v4hnvMOgUq5KaR87nerJO7irZQtS7VmTNf82f6JrXUuS pGRqTTX87/m0aiAuUJNKm3FcRGLF1buPamZJuaerla3pwxTnTgBmg3Kot744FZWz 5u3vBbp4iQ5Uz3XRZ2jTBUqtd/sQE2sJ+3KtaZLrXKrw4FXmmnscGKPKIVg1I0sK q1IXMFLIiXJKuGTcV1+6XVfqOcktBkIpLZLZdyWg8p4EZDFiMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ/A1hxa/Uf8K6TO+PHwGJS9kiUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZmViZWZiYmMtMGU5OS0z ZTI3LTgwODUtNDg1N2JmMmY4ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnvcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlyj4nF4LxKlpNV8eA7oX8UTmnLULKbGqBmoGdkwcT85+q7RrOYI9QI ph+lYopL/0g9XQWZ+2IpVWpHfOD31zyO14mjSSIR0kSyMoOrTTN30hoMQP4DT1Nh x04sY2YPhIxfcpuC3N88jy85YEU9QC/YEpy93jVb8bELAFrBLixYnE4wcEdw8s7v +YUuryNBf+NOGK4iyPQgngD5ga+SNVYN+wlBEh33EkUjpn5PvmErvscuXVZQgUCX 2p8b/1CYy7A7+gk44Q8aEUi9R+Fr5y7E7ydZi8LAVSiFqsaODe5e7jKAky/XzQMi kypUSpZWXKCDwTQFjzxLLNeNF+Ld3NU= -----END CERTIFICATE-----Generated at Fri Apr 17 11:36:33 2026 by rpki-client