$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa File: 0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa (raw, json) Hash identifier: 1Noe7ex/cv/97QKGjo2vHNueWh24Yr9+5A5xlm48QB4= Subject key identifier: 1A:05:6C:30:BF:9A:A4:09:9B:2B:F8:72:FA:72:35:4B:EF:17:82:5B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E31CF1BB6D4627A2559BFF6C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 16839 IP address blocks: 149.96.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:1b:b6:d4:62:7a:25:59:bf:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=ef88814f-cf95-443a-b256-149e716dee42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:3c:e2:26:c9:ce:d6:e2:77:cd:42:1c:ae: 65:66:9e:c0:72:3d:81:bf:52:04:c4:34:57:ae:f1: 07:97:ef:8c:aa:da:21:0d:b3:e0:cf:1f:46:30:1b: 0f:a7:a3:44:c3:97:39:e5:18:5b:54:0f:a6:84:67: 67:7b:e1:ec:09:48:c3:05:b2:e2:f0:7f:e6:74:03: 99:ae:5a:cf:f3:ba:92:82:22:c6:e4:65:99:c9:ea: 51:ec:0f:be:f1:21:0a:e9:cc:cd:84:2c:46:33:cd: 74:4d:b2:01:c4:39:f7:6c:44:1c:4e:be:10:17:8b: 03:50:40:a0:a6:44:ca:5c:61:87:e4:8d:fe:58:b6: 72:c0:61:16:f2:63:8b:49:09:71:66:15:08:89:89: ba:79:37:a1:af:42:dc:bb:11:b7:a2:2a:f2:b3:0d: 03:0c:94:b5:db:35:ab:11:01:a7:0c:fb:49:af:27: 0c:3c:72:7c:09:73:81:8c:f6:dc:0d:93:25:2a:e2: ae:42:8e:e9:71:6f:21:96:a6:00:fd:50:9e:87:6f: ec:57:29:e6:33:47:95:fa:ef:8c:40:34:4e:c3:a2: aa:5f:e1:7d:c2:44:84:cf:16:ac:dd:fc:58:70:7e: ae:73:d5:89:6d:df:a0:4d:70:ff:6c:20:53:cf:70: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:05:6C:30:BF:9A:A4:09:9B:2B:F8:72:FA:72:35:4B:EF:17:82:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c0:d2:d9:d9:31:57:29:7e:41:b3:fb:6e:75:6a:40:05:45: 39:e8:07:0f:7a:6e:52:19:97:b9:1a:a5:25:63:ed:58:f7:77: b9:b8:6a:9b:c8:0c:fa:63:d5:4b:80:19:fc:ea:15:d7:b6:1c: d5:38:70:3c:ee:15:d0:d3:e1:a3:a3:50:3d:67:f8:70:07:09: 0c:1d:fc:08:a4:df:cc:bf:53:79:1e:4c:b7:a4:cb:73:c3:c1: 4d:00:85:91:e7:9d:3f:8c:d1:b8:eb:a3:8a:6f:3f:1f:9d:2d: af:2f:13:c2:26:77:90:c7:97:86:97:0c:2a:1e:c3:b4:3f:bd: 84:f2:92:67:dc:fc:65:25:da:69:c2:49:02:40:b1:27:cc:67: e2:97:96:90:34:21:5e:a2:f6:e2:80:6c:ad:d2:37:99:b6:52: 27:d0:3b:8f:c2:88:4e:c7:06:50:12:e8:74:06:c6:d8:d5:79: 08:4b:11:90:a9:4f:c3:6e:8a:8c:34:5c:f0:b0:fe:02:5e:59: 0c:e5:c5:44:d3:8b:57:04:9d:8a:dd:10:fc:f1:1c:df:3e:5c: 1e:a7:ab:de:ca:77:51:5c:d1:5f:1c:44:78:4e:7f:1b:fc:71: 73:0a:45:7a:bc:c9:5f:c9:c6:62:76:6b:7f:10:eb:18:5c:16: 24:d6:5f:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxu21GJ6JVm/9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk ZWY4ODgxNGYtY2Y5NS00NDNhLWIyNTYtMTQ5ZTcxNmRlZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7084ibJztbid81CHK5lZp7Acj2Bv1IExDRX rvEHl++MqtohDbPgzx9GMBsPp6NEw5c55RhbVA+mhGdne+HsCUjDBbLi8H/mdAOZ rlrP87qSgiLG5GWZyepR7A++8SEK6czNhCxGM810TbIBxDn3bEQcTr4QF4sDUECg pkTKXGGH5I3+WLZywGEW8mOLSQlxZhUIiYm6eTehr0LcuxG3oirysw0DDJS12zWr EQGnDPtJrycMPHJ8CXOBjPbcDZMlKuKuQo7pcW8hlqYA/VCeh2/sVynmM0eV+u+M QDROw6KqX+F9wkSEzxas3fxYcH6uc9WJbd+gTXD/bCBTz3Ba9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoFbDC/mqQJmyv4cvpyNUvvF4JbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGRhOGVhNjQtYWU0ZS0z ZTc1LWE3ZmMtNjJiNmY0NDlkNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADA0tnZMVcpfkGz+251akAFRTnoBw96blIZl7kapSVj7Vj3d7m4apvI DPpj1UuAGfzqFde2HNU4cDzuFdDT4aOjUD1n+HAHCQwd/Aik38y/U3keTLeky3PD wU0AhZHnnT+M0bjro4pvPx+dLa8vE8Imd5DHl4aXDCoew7Q/vYTykmfc/GUl2mnC SQJAsSfMZ+KXlpA0IV6i9uKAbK3SN5m2UifQO4/CiE7HBlAS6HQGxtjVeQhLEZCp T8Nuiow0XPCw/gJeWQzlxUTTi1cEnYrdEPzxHN8+XB6nq97Kd1Fc0V8cRHhOfxv8 cXMKRXq8yV/JxmJ2a38Q6xhcFiTWX8Y= -----END CERTIFICATE-----Generated at Sun Jun 28 17:19:17 2026 by rpki-client