$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa File: 1bbe69ec-9686-337d-a609-e5cb951dc776.roa (raw, json) Hash identifier: 6PI5HU5sJM7o5zx7Ja2Znm+G6Kg9CC6W34AyWsp9eII= Subject key identifier: 00:27:A7:AD:B4:35:60:15:DC:3D:AE:AC:32:44:DE:09:EC:67:F8:13 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D5243541065A31FBD8FEB2700 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:54:10:65:a3:1f:bd:8f:eb:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=fafeaa74-1c8d-4c8e-99a2-a6e0ada77690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:62:7e:d6:b8:78:5b:01:f3:bc:41:9f:ae: fc:60:30:e3:8b:ae:49:47:5a:22:dd:a1:85:c2:96: 83:e9:26:ba:55:8d:77:39:7c:0c:a8:2f:5a:ba:ea: ab:f4:a6:0c:3c:ec:d9:03:47:e6:de:0a:5a:f3:4e: af:41:73:d1:af:20:38:71:8e:df:06:0e:6e:24:23: 3b:65:5a:69:34:08:fd:82:37:19:97:cc:2e:1d:d2: a8:5c:40:8a:9a:86:0a:44:09:13:fd:70:a0:2b:ce: da:06:55:31:3d:a9:fe:ad:a9:9e:24:59:18:4b:e3: 01:90:c0:5a:9a:42:1a:48:df:27:f9:de:84:30:75: a8:14:2e:08:60:a5:6e:cc:8f:d8:de:5e:42:72:e3: 05:31:06:39:78:e2:d1:4b:5b:d9:c8:17:af:b5:88: f4:0d:ed:f9:02:3e:d7:e6:a9:3a:21:f3:a3:ee:72: 40:c9:0c:d4:42:68:83:68:36:73:e9:b5:86:32:2e: ea:9c:ba:3d:f3:7f:36:81:86:f0:12:41:b8:a9:a6: 22:96:5c:bc:61:c3:98:09:73:21:6c:10:27:70:81: e5:7d:bf:46:9a:89:48:a7:c0:fe:c4:f7:fb:0e:e2: bf:a1:ba:f7:fa:df:42:ac:ee:90:8d:ff:32:82:48: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:27:A7:AD:B4:35:60:15:DC:3D:AE:AC:32:44:DE:09:EC:67:F8:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:99:da:e7:40:54:22:d3:81:1d:a6:77:f3:fd:47:18:fd:b9: d6:63:38:62:55:34:80:11:7b:83:4c:d1:be:60:ed:69:21:22: a5:e8:9c:0a:61:f4:7a:a5:28:fc:7c:84:8b:27:d2:9c:76:de: 47:be:3c:2a:e3:27:c8:08:29:69:41:3c:35:70:49:05:7d:1d: 20:fa:ec:fa:fd:ba:c5:7b:46:c8:ee:ce:9f:b2:8b:1e:38:83: 9f:e8:08:a8:ef:8c:1c:ce:1f:60:5d:41:9c:27:81:00:07:90: ff:86:d9:70:94:06:f4:fe:20:6e:93:95:a3:ad:19:17:6b:70: 32:c9:dd:14:0a:67:e9:0d:3c:f1:cb:b9:db:fd:e5:fe:5c:ae: 72:f9:3d:4f:14:07:bc:8c:3d:c2:c8:2b:f2:3f:90:17:4c:7b: e2:03:7a:0f:28:9c:45:31:3f:c7:db:bb:91:56:12:2f:27:78: 44:2a:d1:b3:05:9f:56:35:ea:e4:72:45:ef:1b:39:5c:ad:fd: c1:ad:f9:73:d2:e4:69:d5:c8:5a:c7:4f:d4:5f:67:ce:83:d2: 12:d2:2e:12:a7:6d:a4:66:79:57:eb:bc:6a:b4:1b:e0:2f:42: 8f:a2:f0:a3:2f:85:99:e1:bf:67:15:02:be:2f:5d:03:26:f9: 19:72:9c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1QQZaMfvY/rJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZmFmZWFhNzQtMWM4ZC00YzhlLTk5YTItYTZlMGFkYTc3NjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOZifta4eFsB87xBn678YDDji65JR1oi3aGF wpaD6Sa6VY13OXwMqC9auuqr9KYMPOzZA0fm3gpa806vQXPRryA4cY7fBg5uJCM7 ZVppNAj9gjcZl8wuHdKoXECKmoYKRAkT/XCgK87aBlUxPan+rameJFkYS+MBkMBa mkIaSN8n+d6EMHWoFC4IYKVuzI/Y3l5CcuMFMQY5eOLRS1vZyBevtYj0De35Aj7X 5qk6IfOj7nJAyQzUQmiDaDZz6bWGMi7qnLo98382gYbwEkG4qaYilly8YcOYCXMh bBAncIHlfb9GmolIp8D+xPf7DuK/obr3+t9CrO6Qjf8ygkhphQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAnp620NWAV3D2urDJE3gnsZ/gTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMWJiZTY5ZWMtOTY4Ni0z MzdkLWE2MDktZTVjYjk1MWRjNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCZ2udAVCLTgR2md/P9Rxj9udZjOGJVNIARe4NM0b5g7WkhIqXonAph 9HqlKPx8hIsn0px23ke+PCrjJ8gIKWlBPDVwSQV9HSD67Pr9usV7Rsjuzp+yix44 g5/oCKjvjBzOH2BdQZwngQAHkP+G2XCUBvT+IG6TlaOtGRdrcDLJ3RQKZ+kNPPHL udv95f5crnL5PU8UB7yMPcLIK/I/kBdMe+IDeg8onEUxP8fbu5FWEi8neEQq0bMF n1Y16uRyRe8bOVyt/cGt+XPS5GnVyFrHT9RfZ86D0hLSLhKnbaRmeVfrvGq0G+Av Qo+i8KMvhZnhv2cVAr4vXQMm+RlynKw= -----END CERTIFICATE-----Generated at Sun Mar 29 17:46:15 2026 by rpki-client