$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa File: febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa (raw, json) Hash identifier: f+NzddLYnYBGu9LRAB3eU+7yQ4dcFQInFvuheUcxW2A= Subject key identifier: 97:94:1C:85:0B:CC:4B:DE:05:E9:26:6F:22:68:4E:BF:05:FE:43:39 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584ED001D8BAA49564750BEB7280 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 158.247.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:d8:ba:a4:95:64:75:0b:eb:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=db5186e6-bb15-4b3d-a4f2-65b3613a1a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:68:e7:a2:ed:55:46:3d:3d:92:60:cc:e2:e3: 73:3e:d3:d0:25:45:e7:67:c2:b2:4e:9b:57:09:20: 60:83:84:f4:42:f7:33:90:15:b5:64:89:6c:38:d5: f2:80:f3:65:59:7f:9a:cd:1c:e2:0a:b4:2f:78:22: d9:77:0b:05:f1:c4:95:f6:ad:62:66:ba:85:7c:eb: 94:68:c1:e7:31:e8:4e:60:f8:4d:54:8f:9e:c3:c1: fd:96:32:9f:9b:5f:45:4d:2a:8d:33:93:a6:2a:47: b4:24:8e:c3:46:c1:56:8f:e7:86:b7:7a:7f:15:8c: c9:9e:30:54:20:14:7f:ec:b9:d1:78:d3:a2:3a:43: cf:4a:5e:8c:74:d4:f2:8b:ce:7b:4a:71:ae:10:70: 0b:2a:91:25:e2:2f:77:21:b1:d9:2e:67:71:c9:5e: 48:43:b7:bb:1e:64:cb:f2:d3:19:99:da:80:d3:ff: fe:a9:60:6d:b0:9a:bd:8a:5e:ee:5c:72:67:19:d7: ae:a1:38:1a:39:88:c1:1a:2a:6f:8f:05:1b:b2:be: f1:8b:6c:bc:35:30:b7:a4:8a:0d:26:4c:0d:df:3a: c0:83:b3:86:67:ec:3f:0d:3a:18:7d:44:b9:dd:cc: 8d:ba:42:86:e5:63:d7:07:a0:0b:54:25:3e:74:5e: 3f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:94:1C:85:0B:CC:4B:DE:05:E9:26:6F:22:68:4E:BF:05:FE:43:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 158.247.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:8e:a9:f4:9b:3b:21:23:61:1d:7d:03:c8:22:24:66:f7:eb: ff:80:4c:1c:2e:9c:5e:8f:0c:bc:6f:71:f1:22:b4:53:12:4c: 36:df:2c:02:66:bc:1c:e9:6c:df:b3:e5:74:6f:a1:18:ff:8b: d3:f9:97:51:37:16:38:ce:e1:fc:ae:cc:b5:52:6f:7a:c6:3a: 00:73:57:aa:43:07:9c:5d:9e:56:7b:44:c7:b5:ee:1b:2c:d3: eb:d1:8a:9d:fc:3d:5e:23:59:c9:a2:93:c0:c1:91:7b:bc:d1: bd:f4:0c:1c:26:17:96:8a:86:4d:bc:a5:8d:8f:12:1a:cc:b6: c7:be:21:4e:06:ca:83:3a:12:fa:c0:be:8f:6f:81:9c:14:1c: 2f:64:e9:a8:73:b5:85:cc:d9:81:09:5e:81:0f:1f:ea:1d:f0: a4:8e:ea:14:31:f9:8d:f9:0b:91:90:49:65:7a:16:8e:d0:91: 19:35:3a:4b:e0:c6:10:cb:e1:c6:d7:55:e2:b2:9b:40:54:1c: ee:54:0c:87:77:97:fe:fa:9a:54:2c:26:fc:93:cc:3a:8a:a6: 21:0c:69:49:b4:8d:99:a9:c4:ed:cd:c7:74:e2:92:a6:01:f6: 26:15:af:1e:1b:d8:5d:29:2d:57:2f:52:21:54:d8:59:07:31: cc:ab:7b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdi6pJVkdQvrcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZGI1MTg2ZTYtYmIxNS00YjNkLWE0ZjItNjViMzYxM2ExYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mjnou1VRj09kmDM4uNzPtPQJUXnZ8KyTptX CSBgg4T0QvczkBW1ZIlsONXygPNlWX+azRziCrQveCLZdwsF8cSV9q1iZrqFfOuU aMHnMehOYPhNVI+ew8H9ljKfm19FTSqNM5OmKke0JI7DRsFWj+eGt3p/FYzJnjBU IBR/7LnReNOiOkPPSl6MdNTyi857SnGuEHALKpEl4i93IbHZLmdxyV5IQ7e7HmTL 8tMZmdqA0//+qWBtsJq9il7uXHJnGdeuoTgaOYjBGipvjwUbsr7xi2y8NTC3pIoN JkwN3zrAg7OGZ+w/DToYfUS53cyNukKG5WPXB6ALVCU+dF4/qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeUHIULzEveBekmbyJoTr8F/kM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZmViZWZiYmMtMGU5OS0z ZTI3LTgwODUtNDg1N2JmMmY4ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnvcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2OqfSbOyEjYR19A8giJGb36/+ATBwunF6PDLxvcfEitFMSTDbfLAJm vBzpbN+z5XRvoRj/i9P5l1E3FjjO4fyuzLVSb3rGOgBzV6pDB5xdnlZ7RMe17hss 0+vRip38PV4jWcmik8DBkXu80b30DBwmF5aKhk28pY2PEhrMtse+IU4GyoM6EvrA vo9vgZwUHC9k6ahztYXM2YEJXoEPH+od8KSO6hQx+Y35C5GQSWV6Fo7QkRk1Okvg xhDL4cbXVeKym0BUHO5UDId3l/76mlQsJvyTzDqKpiEMaUm0jZmpxO3Nx3TikqYB 9iYVrx4b2F0pLVcvUiFU2FkHMcyrexQ= -----END CERTIFICATE-----Generated at Tue Sep 22 10:31:08 2026 by rpki-client