$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa File: 5f78b53d-576a-3370-855a-e2e24d4b4480.roa (raw, json) Hash identifier: PrU9oLCsxu6rFqHnh6qsMZuDktGM0W28KjsRNCRSMqI= Subject key identifier: E9:85:FF:D4:15:78:BB:0F:C0:93:FB:A9:65:67:41:77:78:1C:A1:F9 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E31CF1BCD0D1F310297FC3800 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 16839 IP address blocks: 149.96.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:1b:cd:0d:1f:31:02:97:fc:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=dc4e96ef-fb02-43f5-bb68-601432d10f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fc:1c:d7:62:56:95:1e:75:34:a2:86:58:76: 4f:4f:fe:20:0d:bd:ee:70:bf:4a:2e:04:07:8c:56: 27:2a:75:83:94:fa:88:1f:63:06:5a:f7:3f:bd:66: 15:75:88:33:61:e5:05:d5:ef:21:03:9b:3b:4e:06: 78:17:c1:74:8b:86:e6:ab:43:98:93:6f:be:6e:b1: c0:ab:16:00:a2:c4:e2:43:81:99:af:8a:85:8e:9b: 42:ae:aa:6c:a0:ba:1c:b9:4f:c2:bd:98:f7:8d:47: 44:ee:3f:f2:b7:18:f8:61:91:0f:31:ce:93:c7:e4: 50:0c:86:47:44:83:e8:46:fa:32:43:c9:37:58:a3: 37:2e:61:30:9f:f9:d3:c5:d8:3d:75:e2:9c:82:a0: 96:49:ab:39:5d:9e:a7:8c:80:18:ea:72:ff:3b:2d: 30:8f:1c:c1:ab:3a:1d:33:11:97:12:3d:42:6b:44: 4c:50:7f:75:f9:99:70:7c:57:24:bb:3f:73:8c:91: ca:a5:90:29:64:66:1b:8d:98:7c:9f:1a:b4:6c:08: 1e:f6:5b:0c:30:fd:08:6f:ef:ac:e7:0d:5a:1e:83: 65:f7:69:62:e3:21:32:59:60:26:c2:e2:e1:0a:98: fc:f7:aa:f1:19:d9:dd:c3:b3:36:7d:f6:ff:e7:b4: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:85:FF:D4:15:78:BB:0F:C0:93:FB:A9:65:67:41:77:78:1C:A1:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:62:9f:75:d5:85:69:5d:58:14:09:a3:ae:9d:22:e0:72:8d: ef:47:cd:06:bb:1d:6a:3a:92:02:67:7b:73:ba:f7:7d:d3:0e: 0a:59:ee:c9:4f:26:9c:00:ff:3e:0c:03:67:05:30:89:32:65: 95:b8:56:f7:34:44:98:6d:51:fb:e4:9b:2c:6f:09:3b:3b:f8: 57:67:4e:32:b1:e6:02:27:d7:f2:13:fd:39:1e:17:02:c7:a6: 24:08:db:f3:8a:19:64:2b:0d:e4:8a:44:74:31:07:ab:70:27: 1c:58:5d:df:c6:23:7f:06:85:0a:71:b5:32:5e:33:30:c0:67: d0:ad:90:0d:f7:9e:10:1b:ee:30:3e:1a:88:63:43:17:d3:ba: 76:8f:9b:5d:ca:5b:a8:fc:2d:e5:33:62:80:bf:48:3f:bb:6c: 63:00:7c:b9:c4:e1:7d:54:34:84:90:56:00:8b:9e:1b:1f:1f: 02:d9:33:61:45:32:0a:14:34:a9:2f:71:35:1c:15:33:7f:1a: 93:1f:cf:be:0f:74:d5:68:34:2d:d4:90:00:c5:56:20:5b:d7: 77:3d:fc:c0:4e:4f:c1:c2:9b:22:7b:b2:35:f5:c8:74:6a:23: 19:f3:de:dc:5d:13:6e:b7:70:e8:63:eb:df:67:2b:44:67:c6: 80:a7:b5:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxvNDR8xApf8OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk ZGM0ZTk2ZWYtZmIwMi00M2Y1LWJiNjgtNjAxNDMyZDEwZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/wc12JWlR51NKKGWHZPT/4gDb3ucL9KLgQH jFYnKnWDlPqIH2MGWvc/vWYVdYgzYeUF1e8hA5s7TgZ4F8F0i4bmq0OYk2++brHA qxYAosTiQ4GZr4qFjptCrqpsoLocuU/CvZj3jUdE7j/ytxj4YZEPMc6Tx+RQDIZH RIPoRvoyQ8k3WKM3LmEwn/nTxdg9deKcgqCWSas5XZ6njIAY6nL/Oy0wjxzBqzod MxGXEj1Ca0RMUH91+ZlwfFckuz9zjJHKpZApZGYbjZh8nxq0bAge9lsMMP0Ib++s 5w1aHoNl92li4yEyWWAmwuLhCpj896rxGdndw7M2ffb/57TY/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmF/9QVeLsPwJP7qWVnQXd4HKH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNWY3OGI1M2QtNTc2YS0z MzcwLTg1NWEtZTJlMjRkNGI0NDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdin3XVhWldWBQJo66dIuByje9HzQa7HWo6kgJne3O6933TDgpZ7slP JpwA/z4MA2cFMIkyZZW4Vvc0RJhtUfvkmyxvCTs7+FdnTjKx5gIn1/IT/TkeFwLH piQI2/OKGWQrDeSKRHQxB6twJxxYXd/GI38GhQpxtTJeMzDAZ9CtkA33nhAb7jA+ GohjQxfTunaPm13KW6j8LeUzYoC/SD+7bGMAfLnE4X1UNISQVgCLnhsfHwLZM2FF MgoUNKkvcTUcFTN/GpMfz74PdNVoNC3UkADFViBb13c9/MBOT8HCmyJ7sjX1yHRq Ixnz3txdE263cOhj699nK0RnxoCntfM= -----END CERTIFICATE-----Generated at Sun Jun 28 18:33:15 2026 by rpki-client