$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa File: 02650ceb-0044-3d70-b562-731c5b82412a.roa (raw, json) Hash identifier: MbP1WptDP+aRuhSlHp5SM1F+THLgJqn0kV5/0hQKcxI= Subject key identifier: 1F:F5:54:B0:6B:F5:C0:B4:F1:C8:21:93:5F:C0:CB:38:A1:83:02:29 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435AA7F6BC84AFEB94DAC0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:a7:f6:bc:84:af:eb:94:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=b4753849-d5d5-4678-9dd4-0520d552ac0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:34:ca:4a:af:5d:d3:1f:10:7e:a4:df:d2: 64:4f:a0:0a:a9:47:f3:ab:1e:fb:5b:58:da:28:50: 88:4f:53:75:fb:7a:12:9b:14:e9:70:e6:87:86:ff: 53:e3:3a:59:3c:ce:0b:22:4d:63:78:f1:75:0b:8c: be:ee:13:24:a4:36:22:e4:4e:aa:d2:b7:5b:bf:28: 07:3d:88:80:01:50:cc:16:83:d1:26:6d:39:c5:54: ed:79:80:cb:f6:de:50:0f:53:33:c1:5a:1f:fc:f5: 20:3d:1b:b3:55:4c:5b:59:78:9d:28:a6:03:51:9a: 8b:06:c6:50:3b:64:61:3f:94:1b:19:ea:79:5f:fc: 8d:21:20:8c:26:ae:c0:a4:a4:25:72:79:54:47:14: 88:b5:50:3f:98:e2:b3:d3:6d:82:e6:72:ac:d0:77: 6d:88:c0:ca:4e:12:75:96:6b:29:53:a0:c1:03:0e: 1b:84:f5:3f:4d:ea:61:32:db:b3:f0:a6:73:99:71: 39:62:34:f7:28:25:8a:d4:a7:6c:b5:1c:1a:98:f7: fb:52:cb:af:b7:5b:df:f7:b8:ad:e6:85:1e:59:30: 45:0c:07:64:8a:7a:66:05:a3:12:21:05:25:14:9f: 8a:fc:e9:f5:23:bc:bd:11:07:d2:63:57:cd:4e:05: 17:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F5:54:B0:6B:F5:C0:B4:F1:C8:21:93:5F:C0:CB:38:A1:83:02:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:57:17:77:f6:b3:2e:a4:b6:e3:81:10:23:08:f6:26:ff:f8: 9a:2e:72:d8:4d:f4:0d:47:b3:1a:b9:a3:a3:13:24:3b:00:3e: c2:2a:42:1c:87:de:09:91:f9:51:1d:b1:58:77:6f:45:98:6d: 8c:e4:1e:1e:c3:07:42:b2:ff:41:e4:6e:d2:41:03:61:a0:57: 0e:b8:f3:da:8d:e5:1a:51:62:a4:60:c0:05:0b:15:be:89:6e: 6e:01:f4:05:a9:9b:13:c6:07:c2:ca:50:49:82:a9:de:2f:1f: 07:97:04:71:2b:00:df:42:d0:ef:e1:be:28:af:c8:84:82:b8: bb:7d:1a:c2:01:6f:0d:ec:a7:d5:49:27:6b:2c:bb:31:d2:bc: 62:64:95:f4:fa:41:39:2d:b2:41:88:9c:7b:7d:9f:fb:94:96: 1c:ca:1d:02:d5:07:c6:9a:19:97:79:2b:ef:b1:e0:6b:20:53: 0f:48:78:97:ea:28:90:b9:69:cd:42:d2:35:c2:c8:8d:1f:c9: be:f8:ad:e1:56:26:a8:03:03:84:c9:5e:46:d2:ff:99:19:56: 94:26:b5:40:95:db:aa:35:13:41:9d:05:f1:d6:f4:08:88:f0: 26:61:c1:ef:f4:8e:79:0d:10:74:56:94:49:8f:ef:69:32:a5: c7:ba:2b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1qn9ryEr+uU2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YjQ3NTM4NDktZDVkNS00Njc4LTlkZDQtMDUyMGQ1NTJhYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLU0ykqvXdMfEH6k39JkT6AKqUfzqx77W1ja KFCIT1N1+3oSmxTpcOaHhv9T4zpZPM4LIk1jePF1C4y+7hMkpDYi5E6q0rdbvygH PYiAAVDMFoPRJm05xVTteYDL9t5QD1MzwVof/PUgPRuzVUxbWXidKKYDUZqLBsZQ O2RhP5QbGep5X/yNISCMJq7ApKQlcnlURxSItVA/mOKz022C5nKs0HdtiMDKThJ1 lmspU6DBAw4bhPU/TephMtuz8KZzmXE5YjT3KCWK1KdstRwamPf7Usuvt1vf97it 5oUeWTBFDAdkinpmBaMSIQUlFJ+K/On1I7y9EQfSY1fNTgUXWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/1VLBr9cC08cghk1/AyzihgwIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDI2NTBjZWItMDA0NC0z ZDcwLWI1NjItNzMxYzViODI0MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNXF3f2sy6ktuOBECMI9ib/+JoucthN9A1Hsxq5o6MTJDsAPsIqQhyH 3gmR+VEdsVh3b0WYbYzkHh7DB0Ky/0HkbtJBA2GgVw6489qN5RpRYqRgwAULFb6J bm4B9AWpmxPGB8LKUEmCqd4vHweXBHErAN9C0O/hviivyISCuLt9GsIBbw3sp9VJ J2ssuzHSvGJklfT6QTktskGInHt9n/uUlhzKHQLVB8aaGZd5K++x4GsgUw9IeJfq KJC5ac1C0jXCyI0fyb74reFWJqgDA4TJXkbS/5kZVpQmtUCV26o1E0GdBfHW9AiI 8CZhwe/0jnkNEHRWlEmP72kypce6K1s= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:06 2026 by rpki-client