$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa File: 53da01e2-4fd1-3726-8525-261dfe0ace4c.roa (raw, json) Hash identifier: xXM3g75N65DKPHISsNLMmAUX25mzerPE0Hu7hm+6U3Y= Subject key identifier: 09:C8:8B:56:1D:D3:D3:8A:86:26:7B:65:14:2F:98:35:75:A5:68:36 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D524354047D1D60DAAEF23580 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:54:04:7d:1d:60:da:ae:f2:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=7bbb0e0c-c6a0-44a5-839f-d84d6240c5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:b8:f9:11:8b:05:f0:da:e6:43:e9:cc:aa: dc:62:06:80:47:b6:6d:bd:5b:32:e6:5e:e5:9d:eb: 4d:11:73:ea:1a:ed:bf:44:37:25:d5:cc:98:0b:f6: 48:9b:7e:97:86:5e:79:c3:8f:c8:21:07:92:ab:e8: 02:61:15:f2:3f:ae:59:cc:6e:fb:ff:52:42:d8:e1: 9f:19:4c:6f:17:23:2b:11:ea:08:31:6b:03:0a:98: 9b:65:47:13:df:e6:07:0b:35:27:5d:3e:c0:cb:e0: df:24:c9:51:9e:0c:28:0c:0a:60:91:bd:8e:ba:95: 59:2f:4b:15:cf:12:29:d2:9f:b8:32:34:41:73:4d: 47:70:ff:d7:2b:50:dd:2f:83:07:47:4a:6a:8e:8f: 2c:c6:e2:bc:75:19:24:56:73:d3:ed:3c:bd:d0:42: 57:ee:75:0c:9b:4f:b6:b7:fc:05:2a:78:99:12:65: 0e:86:f9:23:11:9d:6a:df:ea:80:a3:0b:e3:95:a4: 16:c1:ad:6b:4f:9f:4d:fa:de:25:c9:21:4c:f2:c6: 0d:60:81:99:8d:7f:7d:50:f2:be:e5:53:35:15:9d: 4e:7d:59:c6:bc:2a:31:4c:98:a4:51:89:f6:48:5c: 5d:04:f7:48:01:a7:f7:6b:ae:b8:38:21:8e:2b:ba: 4e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C8:8B:56:1D:D3:D3:8A:86:26:7B:65:14:2F:98:35:75:A5:68:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:83:92:b5:a3:b9:c8:dc:36:92:ba:e0:61:b1:e5:a9:0b:03: 4f:0a:05:f5:ed:b3:bf:f9:38:45:66:22:8d:5f:7d:0c:d7:36: 03:1b:81:68:ff:ea:51:96:c2:42:8f:98:4f:8c:22:41:94:4e: 82:81:94:16:0a:ea:b8:4f:1b:2f:16:dc:c9:a4:75:99:59:64: 61:c0:57:cd:db:87:c8:c0:90:2f:c4:2f:d4:94:4d:7d:6e:d3: 5c:3b:06:e4:18:2e:21:96:83:37:7f:05:ed:52:21:fb:e7:89: b5:f8:a8:08:1d:3f:a9:c5:aa:9e:ef:c1:1e:43:1a:0c:85:95: 7d:2e:11:5e:4b:37:f4:63:b4:d9:99:a8:fb:ad:ce:43:51:1a: b6:64:43:56:f2:0b:54:d2:0f:69:92:0d:76:69:f8:57:a3:84: 81:29:2e:cc:e0:e9:ea:09:d3:eb:33:29:f3:22:eb:9e:d0:e8: 2c:1a:05:9e:f1:ce:1f:27:e3:f8:56:c5:3d:37:0c:bc:b3:92: d9:bb:92:0f:06:4e:b1:ae:6d:de:d3:41:06:51:45:51:b6:75: 7c:16:d8:c3:f4:82:14:a5:ff:77:b7:db:9b:13:13:11:39:3f: 00:fe:5a:da:ec:5a:af:81:96:3b:f2:12:66:8e:c0:75:26:05: cf:53:79:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1QEfR1g2q7yNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk N2JiYjBlMGMtYzZhMC00NGE1LTgzOWYtZDg0ZDYyNDBjNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtve4+RGLBfDa5kPpzKrcYgaAR7ZtvVsy5l7l netNEXPqGu2/RDcl1cyYC/ZIm36Xhl55w4/IIQeSq+gCYRXyP65ZzG77/1JC2OGf GUxvFyMrEeoIMWsDCpibZUcT3+YHCzUnXT7Ay+DfJMlRngwoDApgkb2OupVZL0sV zxIp0p+4MjRBc01HcP/XK1DdL4MHR0pqjo8sxuK8dRkkVnPT7Ty90EJX7nUMm0+2 t/wFKniZEmUOhvkjEZ1q3+qAowvjlaQWwa1rT59N+t4lySFM8sYNYIGZjX99UPK+ 5VM1FZ1OfVnGvCoxTJikUYn2SFxdBPdIAaf3a664OCGOK7pO0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnIi1Yd09OKhiZ7ZRQvmDV1pWg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTNkYTAxZTItNGZkMS0z NzI2LTg1MjUtMjYxZGZlMGFjZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+DkrWjucjcNpK64GGx5akLA08KBfXts7/5OEVmIo1ffQzXNgMbgWj/ 6lGWwkKPmE+MIkGUToKBlBYK6rhPGy8W3MmkdZlZZGHAV83bh8jAkC/EL9SUTX1u 01w7BuQYLiGWgzd/Be1SIfvnibX4qAgdP6nFqp7vwR5DGgyFlX0uEV5LN/RjtNmZ qPutzkNRGrZkQ1byC1TSD2mSDXZp+FejhIEpLszg6eoJ0+szKfMi657Q6CwaBZ7x zh8n4/hWxT03DLyzktm7kg8GTrGubd7TQQZRRVG2dXwW2MP0ghSl/3e325sTExE5 PwD+WtrsWq+BljvyEmaOwHUmBc9Tecg= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:21 2026 by rpki-client