$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa File: 5f78b53d-576a-3370-855a-e2e24d4b4480.roa (raw, json) Hash identifier: 6nOuPDvqtmKElV0VZi2OD5UIV/eVyl7gpX+P2AUBdOU= Subject key identifier: 8C:C5:55:6D:9A:6D:EE:60:05:11:EE:1A:A7:66:F9:DF:65:61:C8:76 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ED431F3D486A05C1A014A3080 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 16839 IP address blocks: 149.96.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:f3:d4:86:a0:5c:1a:01:4a:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=bee2679a-1a9e-4cc0-b208-63f042152627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:49:1d:fc:da:70:75:29:db:f9:81:1b:3e: d8:8d:87:81:45:88:59:bb:df:f7:df:77:1a:7a:d6: 4f:01:1e:b8:18:d7:16:68:d4:05:ea:2a:0f:6a:a0: 9e:3a:22:f1:db:b1:3e:92:e1:0a:08:2f:8c:8f:dd: 8e:95:51:e3:68:a6:39:4e:37:c7:cb:2e:12:c3:7a: ee:2f:50:73:6d:49:d2:4d:0a:bd:6f:f7:10:6d:26: c7:d8:33:88:a7:0e:59:f7:ff:3c:5c:7e:92:00:89: e9:81:33:ef:87:b5:f8:b7:98:cd:1d:4d:9f:c2:52: 37:e2:ee:08:0e:0b:b7:0f:13:e3:06:99:97:f3:38: e9:79:52:23:ea:f6:06:5e:73:d3:01:44:b4:5f:00: 68:6b:5a:3a:9e:3f:76:51:0c:1c:6c:52:36:86:47: c5:02:c3:c0:01:58:00:59:9e:d6:70:a7:30:c9:bd: ac:09:bc:40:72:9a:6d:c0:df:35:e2:d4:4b:bc:78: f4:62:f4:fd:b4:37:e2:1a:de:55:8d:65:b1:d9:05: c4:ff:a3:ac:ab:ab:a1:31:a1:86:a2:88:da:ca:e2: 16:26:e7:4b:ef:75:ac:f8:29:be:c8:3c:96:75:78: f4:d5:8a:45:c0:09:fd:25:55:84:b7:9a:b6:a0:a2: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C5:55:6D:9A:6D:EE:60:05:11:EE:1A:A7:66:F9:DF:65:61:C8:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:5e:41:fa:e1:a8:39:66:6f:72:02:13:c0:c5:53:3d:1f:2c: 58:49:9b:05:0f:d3:b2:3f:95:ef:29:f2:20:85:c4:22:56:06: 53:2e:f1:76:0b:87:db:18:6c:9e:2e:66:90:72:05:07:ba:c6: 23:21:16:5b:b2:01:8f:68:c6:14:0e:a4:5d:cb:11:9d:0d:87: 68:5a:cb:f3:2e:43:26:c1:52:c0:cd:39:51:d6:a4:91:b4:60: f5:10:be:db:fa:f4:73:6a:70:df:32:1e:73:55:ad:d7:b4:27: 18:3e:ae:54:f4:8d:71:e4:6b:31:ad:76:39:e0:1d:99:87:e8: 97:3e:05:56:c6:5d:df:98:46:14:16:05:f3:ff:dc:d7:67:a6: d2:6b:04:4a:9d:41:a0:be:9a:e7:39:ea:a6:9c:e7:30:93:65: 78:d8:87:cb:64:28:68:29:e9:6e:c7:39:e9:e9:a5:0d:60:44: e8:bd:0d:d2:5f:0a:b1:ce:a5:59:9a:0d:6b:f2:76:f7:e7:bb: aa:24:d3:bf:45:28:ab:39:4f:24:af:01:a7:6b:a3:93:21:79: 2b:2d:82:70:ea:45:2a:b4:c4:99:44:eb:4e:ff:9a:b9:7e:18: 14:82:52:4b:23:2c:34:67:4d:a4:de:d1:e1:74:9b:53:33:f2: 39:cb:0d:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMfPUhqBcGgFKMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk YmVlMjY3OWEtMWE5ZS00Y2MwLWIyMDgtNjNmMDQyMTUyNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoZJHfzacHUp2/mBGz7YjYeBRYhZu9/333ca etZPAR64GNcWaNQF6ioPaqCeOiLx27E+kuEKCC+Mj92OlVHjaKY5TjfHyy4Sw3ru L1BzbUnSTQq9b/cQbSbH2DOIpw5Z9/88XH6SAInpgTPvh7X4t5jNHU2fwlI34u4I Dgu3DxPjBpmX8zjpeVIj6vYGXnPTAUS0XwBoa1o6nj92UQwcbFI2hkfFAsPAAVgA WZ7WcKcwyb2sCbxAcpptwN814tRLvHj0YvT9tDfiGt5VjWWx2QXE/6Osq6uhMaGG oojayuIWJudL73Ws+Cm+yDyWdXj01YpFwAn9JVWEt5q2oKLKlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzFVW2abe5gBRHuGqdm+d9lYch2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNWY3OGI1M2QtNTc2YS0z MzcwLTg1NWEtZTJlMjRkNGI0NDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKteQfrhqDlmb3ICE8DFUz0fLFhJmwUP07I/le8p8iCFxCJWBlMu8XYL h9sYbJ4uZpByBQe6xiMhFluyAY9oxhQOpF3LEZ0Nh2hay/MuQybBUsDNOVHWpJG0 YPUQvtv69HNqcN8yHnNVrde0Jxg+rlT0jXHkazGtdjngHZmH6Jc+BVbGXd+YRhQW BfP/3NdnptJrBEqdQaC+muc56qac5zCTZXjYh8tkKGgp6W7HOenppQ1gROi9DdJf CrHOpVmaDWvydvfnu6ok079FKKs5TySvAadro5MheSstgnDqRSq0xJlE607/mrl+ GBSCUksjLDRnTaTe0eF0m1Mz8jnLDdE= -----END CERTIFICATE-----Generated at Sat Aug 15 02:29:51 2026 by rpki-client