$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa File: 542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa (raw, json) Hash identifier: yz7mvl+P/8/lkC1pMaCumumpfbAiS0B2VxE5h8Kuu20= Subject key identifier: 7E:3D:A9:DE:CA:C5:15:15:CF:2D:12:0C:3A:29:1C:EA:3D:4E:77:75 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D524359DB1443CF1C74B45300 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:59:db:14:43:cf:1c:74:b4:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=a16d1b67-6924-4217-a015-f8f60f0d420a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:c2:1e:39:34:a7:2b:c8:05:8c:91:e5:4a: 72:fd:1a:74:33:bc:eb:91:e0:80:71:fa:08:4a:bb: 69:3d:43:7c:0e:b4:d6:47:93:ab:68:51:a2:13:8f: d7:8a:c1:1e:f5:6a:ab:8e:3c:a7:6b:76:85:a0:45: 92:14:9a:9e:ec:a1:ed:6d:c9:1a:13:7f:5e:7c:17: 39:7a:bd:81:9f:a4:be:6e:0a:6f:7a:50:88:0e:47: 8a:44:90:ed:70:10:9b:0a:16:50:a6:d3:7b:1f:6f: c7:53:ad:1c:b8:1c:67:da:b5:46:04:97:60:1b:14: b0:25:3d:ee:ac:0d:65:bc:78:de:5e:0e:25:37:03: f0:92:62:5d:0e:78:a0:5c:1a:1c:85:6c:65:55:56: fd:17:be:b1:b8:bf:3c:cc:a4:eb:21:04:c1:10:93: 6a:d2:f4:b3:33:2e:cd:a7:d9:81:a9:08:aa:4a:08: a8:a1:d7:5a:8c:04:3f:12:e0:7d:f5:b6:38:78:ef: e9:4f:3e:60:25:27:93:5f:03:d5:7c:de:d6:d7:60: 64:26:20:21:82:cb:c5:d0:83:26:59:37:21:14:31: 01:3c:c1:85:69:4d:1b:7e:6f:2e:4a:04:b7:27:71: be:3f:01:b2:83:e1:d2:b9:73:0f:46:ef:7e:1d:c4: fc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3D:A9:DE:CA:C5:15:15:CF:2D:12:0C:3A:29:1C:EA:3D:4E:77:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:2a:4b:0d:e4:83:ec:88:42:21:b6:f1:a9:35:0b:81:02:bb: 3c:6f:a9:2e:2d:59:26:9e:67:89:1b:e6:23:a9:1b:e1:24:76: 9f:28:77:e1:8b:d3:5a:c9:25:99:40:95:53:61:bb:df:85:3e: a2:af:07:e1:a9:60:94:a7:9d:c0:85:78:98:d8:43:ca:0c:12: a5:2d:dc:ef:a1:d1:8b:7c:2d:28:c4:21:c4:53:a5:fe:cd:7a: 6e:ed:e0:e8:4d:19:30:b3:d4:a6:d8:01:e0:32:5e:e4:39:98: d7:d9:57:42:d2:24:d2:30:26:50:e9:03:ad:df:13:ff:97:92: a4:89:c4:f7:1d:43:93:cf:dc:13:ec:24:43:69:62:7d:b4:b0: 6b:4b:eb:9d:b9:bf:1e:f8:fd:74:30:34:b2:7b:5d:bf:e3:9f: d1:65:14:39:52:bd:a0:9b:d6:41:d0:99:07:1b:34:67:16:31: 4e:ab:b0:74:3c:6d:83:96:0a:68:26:27:07:29:69:63:6c:1d: 8c:fd:d3:ac:c0:9a:e2:08:77:12:79:fe:75:56:8d:1e:d6:b0: 90:e6:e8:97:f6:90:ee:1f:45:cf:03:44:96:ea:84:e4:09:e1: d7:74:c6:0e:ba:64:7f:41:16:74:9c:ad:a8:f6:ea:3e:9d:2b: a6:a8:13:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1nbFEPPHHS0UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YTE2ZDFiNjctNjkyNC00MjE3LWEwMTUtZjhmNjBmMGQ0MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/CHjk0pyvIBYyR5Upy/Rp0M7zrkeCAcfoI SrtpPUN8DrTWR5OraFGiE4/XisEe9Wqrjjyna3aFoEWSFJqe7KHtbckaE39efBc5 er2Bn6S+bgpvelCIDkeKRJDtcBCbChZQptN7H2/HU60cuBxn2rVGBJdgGxSwJT3u rA1lvHjeXg4lNwPwkmJdDnigXBochWxlVVb9F76xuL88zKTrIQTBEJNq0vSzMy7N p9mBqQiqSgiooddajAQ/EuB99bY4eO/pTz5gJSeTXwPVfN7W12BkJiAhgsvF0IMm WTchFDEBPMGFaU0bfm8uSgS3J3G+PwGyg+HSuXMPRu9+HcT88wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH49qd7KxRUVzy0SDDopHOo9Tnd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTQyYjQ2YjUtY2FkZi0z NGQ4LWI3ZTQtMGNlOGY2M2QxOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4qSw3kg+yIQiG28ak1C4ECuzxvqS4tWSaeZ4kb5iOpG+Ekdp8od+GL 01rJJZlAlVNhu9+FPqKvB+GpYJSnncCFeJjYQ8oMEqUt3O+h0Yt8LSjEIcRTpf7N em7t4OhNGTCz1KbYAeAyXuQ5mNfZV0LSJNIwJlDpA63fE/+XkqSJxPcdQ5PP3BPs JENpYn20sGtL6525vx74/XQwNLJ7Xb/jn9FlFDlSvaCb1kHQmQcbNGcWMU6rsHQ8 bYOWCmgmJwcpaWNsHYz906zAmuIIdxJ5/nVWjR7WsJDm6Jf2kO4fRc8DRJbqhOQJ 4dd0xg66ZH9BFnScraj26j6dK6aoE8w= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:28 2026 by rpki-client