$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa File: 0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa (raw, json) Hash identifier: /v3w2ApdjAieeGgXz1ofAugEaL8ONCi7jILQeMPs5EE= Subject key identifier: 6E:F1:5C:04:24:C5:1B:E4:E5:FF:12:A6:7F:B8:FF:A2:8B:9F:8D:E3 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435A45D75C5047C1F5E400 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:45:d7:5c:50:47:c1:f5:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=7d869b6c-4711-4c2d-8540-15576c1d5339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d2:f9:63:ae:6e:c8:60:82:4a:b1:9a:33:88: 21:ef:52:55:fd:2f:76:e0:a2:80:93:ff:b9:33:71: 50:42:93:b9:ba:6f:75:f4:72:23:fa:89:0c:ba:47: 06:2b:d6:76:1d:d5:cb:94:14:2f:ce:1b:cb:7a:46: 37:7b:b8:ef:4a:2e:8f:ca:78:6d:ab:37:a8:77:43: 98:99:f6:e3:07:c1:02:0a:aa:a5:a3:47:f2:87:63: 08:eb:13:ad:a4:03:30:6d:3e:03:95:b0:04:a6:0d: 9f:47:29:34:84:81:91:14:ca:57:e6:1c:81:c5:d3: d3:09:53:da:89:f5:41:01:80:56:67:b8:b2:40:a8: 33:dd:03:7d:66:0a:30:2b:26:ef:1e:f4:ff:39:28: d0:5b:79:40:c2:c3:80:95:e3:4f:e8:bc:11:4f:70: 04:50:af:e9:84:69:d3:6a:a5:00:a9:c9:05:c6:f8: 89:2c:32:23:ac:b4:33:a3:d4:dd:cf:22:4f:fa:b1: 54:35:96:17:54:91:11:9d:da:26:53:0f:01:3f:ff: d1:17:c9:d7:b1:80:eb:0d:39:26:50:37:6b:3c:40: 66:16:2b:46:d3:37:39:b6:1b:09:65:00:02:c7:4b: 36:39:1a:c4:4e:3e:b9:6c:8a:ef:2e:bd:1a:d6:31: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F1:5C:04:24:C5:1B:E4:E5:FF:12:A6:7F:B8:FF:A2:8B:9F:8D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d7:9e:0a:59:4c:5f:12:40:1a:2b:4f:55:01:85:96:3d:7a: d0:5c:9c:b7:d2:14:a3:c0:9c:d5:40:c2:47:5c:6b:90:64:b9: c3:5b:b7:9f:4d:a2:24:d5:74:0c:15:08:cb:42:95:3d:6e:71: d9:3f:95:1d:04:93:75:f1:47:35:21:27:ad:76:57:a5:d5:3f: fa:b2:2b:05:a2:d8:cb:20:ac:01:4e:f5:da:10:c3:af:ec:ec: 40:74:7e:e5:03:5c:bc:c1:f7:b1:3a:88:e6:3c:5c:32:1a:1e: 06:42:05:a0:92:cf:9d:30:7e:1f:21:41:ff:81:ac:94:7d:0c: 6c:cc:4e:d5:3a:2c:07:ed:49:6a:f7:80:1d:59:71:62:ae:27: 59:44:e0:0e:e9:ae:af:07:d1:82:f2:3c:99:2c:f6:cf:75:12: 76:86:bd:0e:c7:96:3f:f3:88:65:11:3a:a7:26:f5:52:80:8a: c0:cb:46:6c:9a:72:21:79:4c:bd:e6:30:8d:73:ac:39:9c:89: b6:d1:6d:54:86:1b:9b:ad:35:c1:23:cb:0d:e2:21:3e:ba:50: 25:2b:bd:33:77:5c:e4:04:b3:59:bc:10:51:05:b1:47:9f:66: e1:78:c7:ed:42:74:f4:50:18:56:bd:40:bc:b1:0f:74:17:30: bb:21:6b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1pF11xQR8H15AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk N2Q4NjliNmMtNDcxMS00YzJkLTg1NDAtMTU1NzZjMWQ1MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tL5Y65uyGCCSrGaM4gh71JV/S924KKAk/+5 M3FQQpO5um919HIj+okMukcGK9Z2HdXLlBQvzhvLekY3e7jvSi6Pynhtqzeod0OY mfbjB8ECCqqlo0fyh2MI6xOtpAMwbT4DlbAEpg2fRyk0hIGRFMpX5hyBxdPTCVPa ifVBAYBWZ7iyQKgz3QN9ZgowKybvHvT/OSjQW3lAwsOAleNP6LwRT3AEUK/phGnT aqUAqckFxviJLDIjrLQzo9TdzyJP+rFUNZYXVJERndomUw8BP//RF8nXsYDrDTkm UDdrPEBmFitG0zc5thsJZQACx0s2ORrETj65bIrvLr0a1jG9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7xXAQkxRvk5f8Spn+4/6KLn43jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGJhZjI5MTgtYmNkZi0z ZmQ2LWIyYmItNzVhMmI3MTg4NWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnXngpZTF8SQBorT1UBhZY9etBcnLfSFKPAnNVAwkdca5BkucNbt59N oiTVdAwVCMtClT1ucdk/lR0Ek3XxRzUhJ612V6XVP/qyKwWi2MsgrAFO9doQw6/s 7EB0fuUDXLzB97E6iOY8XDIaHgZCBaCSz50wfh8hQf+BrJR9DGzMTtU6LAftSWr3 gB1ZcWKuJ1lE4A7prq8H0YLyPJks9s91EnaGvQ7Hlj/ziGUROqcm9VKAisDLRmya ciF5TL3mMI1zrDmcibbRbVSGG5utNcEjyw3iIT66UCUrvTN3XOQEs1m8EFEFsUef ZuF4x+1CdPRQGFa9QLyxD3QXMLsha50= -----END CERTIFICATE-----Generated at Sun Mar 29 19:13:56 2026 by rpki-client