$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa File: 0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa (raw, json) Hash identifier: QvZ5bBZcHXob2TBgXI0h8tQeTayCympPqIEZttIXYjE= Subject key identifier: A5:E0:A1:9F:16:83:9B:74:92:3A:AE:DB:71:AF:5A:EE:98:91:3C:3B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435A39E63596D20A3CA590 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:39:e6:35:96:d2:0a:3c:a5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=9ee11b86-461e-460f-baa4-407fbb726446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8f:f2:0c:fd:5d:59:91:7f:30:8c:ff:50:ff: 2c:9a:3c:db:05:08:4e:0d:a7:0a:0f:97:84:01:0c: 66:5a:83:ef:3d:e2:74:dd:95:36:3f:a3:2f:03:f2: fd:a4:ee:23:a1:e7:e4:ed:0b:46:eb:40:bb:66:49: f1:8d:2e:0b:90:f6:94:29:1a:77:46:cd:4f:1c:55: bf:54:3c:ba:28:23:28:b5:a1:0b:2c:49:9c:89:ee: 18:e0:0f:46:3f:b3:a8:c1:86:f6:a7:f8:20:ba:30: 87:0c:df:29:1d:18:3d:0c:63:ac:bb:9a:87:b8:66: 71:ca:51:0b:3f:4c:51:c9:f1:12:78:83:4f:c0:81: 4e:02:08:ee:43:07:3a:02:f4:26:54:bd:fa:e4:78: 14:89:d4:c5:b9:e9:33:a3:65:5c:65:05:f1:9e:87: ab:92:69:c9:91:7b:96:38:f3:84:78:0b:3f:fe:bb: d9:f7:6e:85:4a:c7:3e:66:5f:7f:ee:90:3c:ed:2f: 17:cb:59:f0:c2:99:ff:64:87:56:2a:0d:57:4c:78: 34:0d:12:8d:07:9b:92:f4:9c:fe:d9:f5:1a:95:63: e9:e0:b5:65:45:77:e2:3d:38:99:16:5d:27:71:ae: f8:a8:f5:47:50:f8:6e:ba:1e:92:e7:a2:3e:95:e5: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:A1:9F:16:83:9B:74:92:3A:AE:DB:71:AF:5A:EE:98:91:3C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:73:6c:10:3f:8f:a5:3b:ca:02:f0:4b:00:31:02:1b:28:a3: 24:c7:f0:62:98:54:6d:d7:35:f4:3b:db:4f:4b:a0:1d:00:d3: 85:17:93:89:e9:c0:a6:30:3f:bd:31:fe:3e:d8:f9:56:97:55: b3:56:80:91:2c:38:f2:e7:83:71:03:f2:af:b6:35:2b:01:87: 0f:74:38:33:81:9e:c3:7b:f4:28:9e:8d:30:60:4b:ee:89:30: 9c:39:69:5b:55:be:45:69:c8:00:28:8b:32:0b:5d:11:38:58: 9d:cf:a8:2d:cc:1c:4d:44:b1:0a:dc:a9:3a:b2:53:ae:08:65: 25:d6:c3:5c:76:83:97:07:53:2d:a7:81:e6:24:6c:d2:5e:19: ca:18:81:02:a2:9c:bf:b8:a2:b6:19:a6:36:87:08:c4:04:64: fd:71:94:56:6a:8d:f3:08:15:9a:37:47:ba:42:1b:e5:b5:24: 44:21:69:9c:42:9a:5f:7c:c0:2a:76:38:d4:b3:81:94:db:92: 92:38:41:33:66:22:d4:9a:9e:fc:2f:a7:78:ea:04:d9:72:85: 24:a5:11:15:19:ac:8c:9c:27:df:21:3e:dd:72:ef:e1:e9:88: 4c:57:76:dc:b8:42:82:7f:58:b6:d3:de:c8:0b:67:64:9f:3d: 09:d2:fd:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1o55jWW0go8pZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OWVlMTFiODYtNDYxZS00NjBmLWJhYTQtNDA3ZmJiNzI2NDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY/yDP1dWZF/MIz/UP8smjzbBQhODacKD5eE AQxmWoPvPeJ03ZU2P6MvA/L9pO4joefk7QtG60C7ZknxjS4LkPaUKRp3Rs1PHFW/ VDy6KCMotaELLEmcie4Y4A9GP7OowYb2p/ggujCHDN8pHRg9DGOsu5qHuGZxylEL P0xRyfESeINPwIFOAgjuQwc6AvQmVL365HgUidTFuekzo2VcZQXxnoerkmnJkXuW OPOEeAs//rvZ926FSsc+Zl9/7pA87S8Xy1nwwpn/ZIdWKg1XTHg0DRKNB5uS9Jz+ 2fUalWPp4LVlRXfiPTiZFl0nca74qPVHUPhuuh6S56I+leVlJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXgoZ8Wg5t0kjqu23GvWu6YkTw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGRhOGVhNjQtYWU0ZS0z ZTc1LWE3ZmMtNjJiNmY0NDlkNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRzbBA/j6U7ygLwSwAxAhsooyTH8GKYVG3XNfQ7209LoB0A04UXk4np wKYwP70x/j7Y+VaXVbNWgJEsOPLng3ED8q+2NSsBhw90ODOBnsN79CiejTBgS+6J MJw5aVtVvkVpyAAoizILXRE4WJ3PqC3MHE1EsQrcqTqyU64IZSXWw1x2g5cHUy2n geYkbNJeGcoYgQKinL+4orYZpjaHCMQEZP1xlFZqjfMIFZo3R7pCG+W1JEQhaZxC ml98wCp2ONSzgZTbkpI4QTNmItSanvwvp3jqBNlyhSSlERUZrIycJ98hPt1y7+Hp iExXdty4QoJ/WLbT3sgLZ2SfPQnS/cQ= -----END CERTIFICATE-----Generated at Sun Mar 29 16:26:44 2026 by rpki-client