$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa File: 148e8965-c9d0-383e-82c1-fd713e6a01d1.roa (raw, json) Hash identifier: 6DKlvT4CTW+k+x4Nd3VmImCFlVoDjRt5dUgx7P5UPyQ= Subject key identifier: 4F:57:72:2D:73:2B:F2:F7:19:98:16:A2:72:EB:51:91:C2:30:E1:D4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D524359E673B7F4CD86B2F200 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:59:e6:73:b7:f4:cd:86:b2:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=db36befd-b8d6-4885-80f6-40aa00cabd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:d7:38:68:7b:d1:ad:cb:3e:88:f3:70:f6: 63:34:e1:46:d3:e8:6f:19:5e:1a:93:d3:fc:04:65: 22:d7:b9:6c:12:a6:99:32:dc:d6:69:2c:aa:13:42: de:36:3a:66:48:28:f2:56:5f:37:c0:a4:2f:b6:64: bf:11:df:5e:24:3a:04:70:97:2c:f5:62:71:a4:bb: fe:d6:8e:7b:69:fb:a9:61:33:42:1b:7b:0c:82:4c: 7c:2f:d3:9d:5f:fb:be:2c:89:9a:1a:97:11:b3:b1: eb:40:99:75:38:2d:0b:55:57:94:b8:ab:2b:ff:f5: 60:33:20:7e:fa:d2:ad:f1:6a:6e:f6:98:b1:0f:f9: 70:9d:5c:7d:f1:c1:ee:42:f7:a9:7b:bc:f5:c0:b5: 37:53:dc:7d:15:22:72:a8:af:3c:8b:2f:30:2d:c0: 46:08:03:06:56:62:54:8a:45:d5:00:c3:6f:a7:83: 0d:12:2f:b8:ac:13:db:38:8c:e7:8d:4c:39:27:43: 9d:75:50:30:0b:59:ff:9e:da:a8:a2:fc:63:77:44: 22:0e:36:b8:0a:52:7f:de:48:da:ce:3d:bb:e3:13: 68:3c:27:d7:14:22:8d:bc:00:f7:a3:b1:0d:9c:46: 59:14:d8:01:5f:fe:d8:2d:07:84:b2:f3:d0:12:2f: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:57:72:2D:73:2B:F2:F7:19:98:16:A2:72:EB:51:91:C2:30:E1:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7e:6c:3b:65:95:54:14:fe:c9:2c:2f:f4:a2:0d:16:76:68: 50:1f:f7:d2:fc:ad:65:77:00:3d:a5:5d:5c:09:3b:09:5d:7c: df:5b:e6:78:30:e0:e4:5b:85:b4:26:92:b0:0d:ee:04:de:3b: 27:46:da:98:48:81:75:48:72:a9:53:d9:be:77:02:0b:82:3e: 79:cc:0f:46:f3:22:32:f2:f6:01:f2:f6:6d:29:05:6d:01:22: 1c:5c:5e:e3:83:3a:f9:d6:70:15:1d:80:35:0f:2d:3a:18:60: 0f:d2:a7:b0:c0:21:8f:9e:7a:df:87:c5:ae:c9:4f:09:08:25: dc:36:5a:04:3a:de:da:01:ce:ce:3d:50:e1:21:c1:3d:d0:31: dd:76:b7:55:3b:2e:02:be:ea:8d:5e:3f:29:80:dc:e7:e2:78: bc:44:24:36:88:96:5f:5d:eb:2c:4a:0c:e5:df:b4:dd:bd:11: c3:5a:9c:93:4c:22:2c:02:47:53:ce:c9:73:80:b0:a9:04:81: 58:5a:c3:52:35:e3:64:83:08:9d:d8:1e:0e:05:00:b5:b4:3b: dc:4d:98:7e:6b:aa:fc:e7:bc:4b:0e:fc:47:16:e8:31:61:4e: c2:7b:55:61:41:1e:59:e6:cf:6a:b6:e5:29:28:93:91:d9:c3: 74:62:d5:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1nmc7f0zYay8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZGIzNmJlZmQtYjhkNi00ODg1LTgwZjYtNDBhYTAwY2FiZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5rXOGh70a3LPojzcPZjNOFG0+hvGV4ak9P8 BGUi17lsEqaZMtzWaSyqE0LeNjpmSCjyVl83wKQvtmS/Ed9eJDoEcJcs9WJxpLv+ 1o57afupYTNCG3sMgkx8L9OdX/u+LImaGpcRs7HrQJl1OC0LVVeUuKsr//VgMyB+ +tKt8Wpu9pixD/lwnVx98cHuQvepe7z1wLU3U9x9FSJyqK88iy8wLcBGCAMGVmJU ikXVAMNvp4MNEi+4rBPbOIznjUw5J0OddVAwC1n/ntqoovxjd0QiDja4ClJ/3kja zj274xNoPCfXFCKNvAD3o7ENnEZZFNgBX/7YLQeEsvPQEi90LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9Xci1zK/L3GZgWonLrUZHCMOHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMTQ4ZTg5NjUtYzlkMC0z ODNlLTgyYzEtZmQ3MTNlNmEwMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp+bDtllVQU/sksL/SiDRZ2aFAf99L8rWV3AD2lXVwJOwldfN9b5ngw 4ORbhbQmkrAN7gTeOydG2phIgXVIcqlT2b53AguCPnnMD0bzIjLy9gHy9m0pBW0B IhxcXuODOvnWcBUdgDUPLToYYA/Sp7DAIY+eet+Hxa7JTwkIJdw2WgQ63toBzs49 UOEhwT3QMd12t1U7LgK+6o1ePymA3OfieLxEJDaIll9d6yxKDOXftN29EcNanJNM IiwCR1POyXOAsKkEgVhaw1I142SDCJ3YHg4FALW0O9xNmH5rqvznvEsO/EcW6DFh TsJ7VWFBHlnmz2q25Skok5HZw3Ri1ek= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:06 2026 by rpki-client