$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa File: 5f78b53d-576a-3370-855a-e2e24d4b4480.roa (raw, json) Hash identifier: akdtkGaLuyxOQDEqEeGnTL0eDqOeIJVF8ismpQ6qMPY= Subject key identifier: 8F:39:9F:2E:C7:A2:AC:A1:D5:D4:FF:7A:D4:BD:37:BA:D5:00:FB:1C Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435A51C98419C87DD66480 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:51:c9:84:19:c8:7d:d6:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=2457d665-21e9-4d98-a09b-ae553e0d31e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:de:41:82:d9:45:a5:06:04:51:7e:c1:bb:84: 37:9f:6b:4b:99:6a:fa:6f:8b:95:6c:45:01:b9:0f: 42:a0:d1:f7:40:78:5e:3f:13:d1:c5:35:22:ba:3d: cd:fb:56:71:6f:7f:aa:61:99:0a:ae:f5:e2:c0:65: 0c:1b:5d:28:1c:02:37:af:02:80:b2:c2:5c:97:78: fc:f5:b8:57:87:30:13:66:ac:40:51:b2:27:5a:8c: 21:ea:95:8c:2a:08:d2:89:00:01:83:d1:34:44:10: 37:df:7e:a4:b4:26:69:66:4a:f7:cd:8e:a6:e8:bf: ec:fb:be:7e:5a:fa:f3:7d:45:a6:29:ce:64:bb:15: f3:e8:30:22:e2:15:77:90:7e:e1:d4:c4:22:68:82: 6f:38:d1:bc:8a:eb:75:04:da:ab:70:ba:fc:f7:d6: 77:bc:33:8e:fb:92:16:25:5c:6f:34:ae:a9:12:11: 1d:fa:bd:b2:c6:e8:32:77:fd:df:ea:95:a6:28:90: 26:6b:ac:32:2a:49:2d:86:fc:b9:8a:cf:e3:9f:f5: b0:38:53:07:d7:08:70:fd:d5:f9:b3:58:62:76:0c: 6e:94:66:68:73:77:64:6c:f3:38:8f:87:19:05:e7: 89:04:64:5c:94:a2:44:56:3c:e4:b0:82:1d:8b:7f: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:39:9F:2E:C7:A2:AC:A1:D5:D4:FF:7A:D4:BD:37:BA:D5:00:FB:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:90:4b:fd:a2:61:b9:89:91:03:42:3b:9d:d2:40:3f:1d:61: ab:25:af:a1:fa:f4:73:35:25:e6:9c:c6:66:c1:fd:e0:47:d1: 94:eb:65:f7:f1:07:d4:5b:aa:86:2e:52:48:87:82:0a:29:a0: 71:9e:0d:46:70:3b:38:ce:eb:70:40:da:c7:ba:d5:00:11:9c: 17:0e:b2:3a:d8:cf:0b:88:0e:45:f9:45:95:4b:b8:c9:84:61: a6:f6:95:e3:7e:10:63:d4:a1:ad:5c:cf:f7:41:f4:57:51:57: de:df:ec:ef:7f:55:de:d1:59:d9:bb:9a:85:d9:c3:d8:ca:86: 83:fc:45:2c:7f:b0:ef:92:54:48:2f:cf:a6:76:cb:b8:a5:f1: d6:fd:05:ea:f4:88:59:8c:aa:fa:d6:b7:e8:43:5f:c0:3d:0c: f9:dd:f1:eb:02:38:58:5b:a5:ef:79:14:7d:9d:98:4c:58:d1: 7b:73:fa:00:eb:bb:eb:5d:45:e3:74:c8:96:51:f1:a6:35:3d: e9:b2:c1:b1:bb:90:01:39:cb:98:bc:ce:70:77:61:74:75:0b: 93:97:f8:90:1d:36:c9:d1:f5:fa:92:d7:c9:e9:e2:85:d3:a1: 7a:57:b8:8c:54:cf:85:e8:18:02:39:4d:6f:3d:ec:27:c0:c1: ef:cd:11:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1pRyYQZyH3WZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MjQ1N2Q2NjUtMjFlOS00ZDk4LWEwOWItYWU1NTNlMGQzMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd5BgtlFpQYEUX7Bu4Q3n2tLmWr6b4uVbEUB uQ9CoNH3QHhePxPRxTUiuj3N+1Zxb3+qYZkKrvXiwGUMG10oHAI3rwKAssJcl3j8 9bhXhzATZqxAUbInWowh6pWMKgjSiQABg9E0RBA3336ktCZpZkr3zY6m6L/s+75+ WvrzfUWmKc5kuxXz6DAi4hV3kH7h1MQiaIJvONG8iut1BNqrcLr899Z3vDOO+5IW JVxvNK6pEhEd+r2yxugyd/3f6pWmKJAma6wyKkkthvy5is/jn/WwOFMH1whw/dX5 s1hidgxulGZoc3dkbPM4j4cZBeeJBGRclKJEVjzksIIdi3/9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI85ny7Hoqyh1dT/etS9N7rVAPscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNWY3OGI1M2QtNTc2YS0z MzcwLTg1NWEtZTJlMjRkNGI0NDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+QS/2iYbmJkQNCO53SQD8dYaslr6H69HM1JeacxmbB/eBH0ZTrZffx B9RbqoYuUkiHggopoHGeDUZwOzjO63BA2se61QARnBcOsjrYzwuIDkX5RZVLuMmE Yab2leN+EGPUoa1cz/dB9FdRV97f7O9/Vd7RWdm7moXZw9jKhoP8RSx/sO+SVEgv z6Z2y7il8db9Ber0iFmMqvrWt+hDX8A9DPnd8esCOFhbpe95FH2dmExY0Xtz+gDr u+tdReN0yJZR8aY1PemywbG7kAE5y5i8znB3YXR1C5OX+JAdNsnR9fqS18np4oXT oXpXuIxUz4XoGAI5TW897CfAwe/NEdo= -----END CERTIFICATE-----Generated at Sun Mar 29 19:24:40 2026 by rpki-client