$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa File: 098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa (raw, json) Hash identifier: jisSe/4ABGcK7zHLfpXlHs7Ay2hkVzg/KIMs3ON8cyI= Subject key identifier: 55:C5:53:BB:F6:14:DA:B9:A2:38:AB:C0:20:EB:E6:58:0A:99:10:6C Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E31CF15F8A843B96DBF96CF00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 16839 IP address blocks: 149.96.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:15:f8:a8:43:b9:6d:bf:96:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=94041220-5341-4a9e-be22-2fa57189ff99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:4c:7f:c5:63:b1:09:e4:0c:11:ae:87:d1: 29:08:42:30:44:ad:56:5b:e0:1c:85:26:29:b3:e4: a6:f0:ea:f4:20:91:04:57:d1:cf:68:a2:4f:20:72: 3e:d2:22:15:c0:5e:85:9d:57:44:a8:49:6c:16:f0: 86:dd:9f:01:9c:bb:e1:f0:9a:97:35:25:ce:16:55: ec:36:8b:f7:79:bf:2d:d8:c3:3a:d9:81:2a:ce:e4: ab:8c:13:a0:97:e2:8c:16:64:a3:05:85:c0:88:89: bc:8c:3a:06:6e:4f:bd:0d:92:ec:7d:07:ce:35:fe: 50:36:a8:b9:9b:68:ad:78:09:9c:6f:6f:ae:04:ff: 3c:f7:26:84:f5:d2:35:46:4b:b0:8e:44:3b:dd:af: d1:d8:88:5b:7b:2d:f8:5c:ba:4d:f6:8a:ff:3c:18: 7a:be:07:69:26:b1:83:34:4b:3b:25:f6:60:24:50: c5:36:8a:30:74:fa:90:d1:bc:ab:bc:4a:69:c8:31: 75:75:05:c5:7f:30:38:44:c9:b7:e4:c2:99:3f:ab: 9b:25:85:0b:81:c9:eb:57:05:56:95:6c:1f:8c:31: 28:89:95:48:ac:00:3e:48:36:cc:99:68:bd:03:a5: d8:87:67:ca:85:d6:6e:4e:b5:2c:86:c3:c4:76:c0: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C5:53:BB:F6:14:DA:B9:A2:38:AB:C0:20:EB:E6:58:0A:99:10:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:84:3b:31:4a:b7:04:c1:87:a5:db:1f:e0:19:7b:0a:f1:38: 91:75:37:e8:20:77:11:1f:6f:22:dc:a5:45:63:4d:53:8d:b9: 84:26:27:63:56:09:93:eb:5a:28:f7:d8:58:04:5d:74:52:2a: 27:61:31:2b:d8:b0:ce:9c:df:43:92:d5:82:ed:c4:db:c2:b2: b4:cc:a2:73:ed:97:31:88:ab:d2:84:9f:95:d2:fc:0b:2c:ad: 68:60:ea:fe:91:08:11:3d:a0:ec:a4:68:65:80:8a:e3:8f:86: 56:28:ce:bf:23:1f:ea:b0:bd:af:b5:c3:93:81:44:13:68:8d: 4a:fd:96:57:a2:b7:ea:51:21:fc:24:58:4b:8f:3c:72:38:27: 4d:d5:ed:fc:4e:89:40:32:bc:43:9a:c1:6e:20:b4:e7:80:a1: f2:c4:7e:da:4b:21:02:1d:b6:88:00:8f:a1:82:ca:9c:99:6c: ac:d7:7a:45:ca:81:ea:24:ff:e1:70:b1:dd:1e:04:80:48:af: fd:37:5a:1e:30:34:2e:1a:b3:1e:72:60:10:cc:8c:88:10:ec: 26:a4:c2:43:61:04:51:7e:e8:98:30:dd:40:e7:d3:55:5c:67: 9e:3c:99:03:7b:32:90:1d:7b:15:d3:5e:e1:6a:80:a2:33:82: 84:18:51:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxX4qEO5bb+WzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk OTQwNDEyMjAtNTM0MS00YTllLWJlMjItMmZhNTcxODlmZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wlMf8VjsQnkDBGuh9EpCEIwRK1WW+AchSYp s+Sm8Or0IJEEV9HPaKJPIHI+0iIVwF6FnVdEqElsFvCG3Z8BnLvh8JqXNSXOFlXs Nov3eb8t2MM62YEqzuSrjBOgl+KMFmSjBYXAiIm8jDoGbk+9DZLsfQfONf5QNqi5 m2iteAmcb2+uBP889yaE9dI1RkuwjkQ73a/R2Ihbey34XLpN9or/PBh6vgdpJrGD NEs7JfZgJFDFNoowdPqQ0byrvEppyDF1dQXFfzA4RMm35MKZP6ubJYULgcnrVwVW lWwfjDEoiZVIrAA+SDbMmWi9A6XYh2fKhdZuTrUshsPEdsDDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXFU7v2FNq5ojirwCDr5lgKmRBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDk4YzBhNDAtMmE4My0z OWU3LTg4ZmItNGEwMjI2YTJiYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCEOzFKtwTBh6XbH+AZewrxOJF1N+ggdxEfbyLcpUVjTVONuYQmJ2NW CZPrWij32FgEXXRSKidhMSvYsM6c30OS1YLtxNvCsrTMonPtlzGIq9KEn5XS/Ass rWhg6v6RCBE9oOykaGWAiuOPhlYozr8jH+qwva+1w5OBRBNojUr9lleit+pRIfwk WEuPPHI4J03V7fxOiUAyvEOawW4gtOeAofLEftpLIQIdtogAj6GCypyZbKzXekXK geok/+Fwsd0eBIBIr/03Wh4wNC4asx5yYBDMjIgQ7CakwkNhBFF+6Jgw3UDn01Vc Z548mQN7MpAdexXTXuFqgKIzgoQYUQI= -----END CERTIFICATE-----Generated at Sun Jun 28 17:23:38 2026 by rpki-client