$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa File: 6e089eef-fbf2-3611-96fd-939251a6b7fa.roa (raw, json) Hash identifier: N4j88B2Xeo8CRvNjOZ7CaHsNMfbtzBR/YiFTy5gafW4= Subject key identifier: 93:90:8C:E1:28:8F:8C:C0:9B:88:44:DD:F5:FA:91:56:DE:64:55:DC Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ED431F3DF596AA295236D7500 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 16839 IP address blocks: 149.96.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:f3:df:59:6a:a2:95:23:6d:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=bc4d7d3a-407c-4ea4-bbfa-9d5c602ddb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:16:bc:94:82:fa:7e:b6:e6:93:1c:f3:bb:20: 9b:b8:80:e6:86:7f:56:64:5e:0d:18:7b:ef:0a:76: 12:50:e7:58:0a:62:22:64:7b:98:4f:9a:9a:c2:61: c2:5e:04:09:3a:c4:b7:8c:9c:d6:f5:1c:c0:0f:45: 80:b6:39:28:5f:56:fe:d9:da:1a:94:d5:7c:ef:ca: 17:20:b6:50:82:e2:e5:bb:85:5d:4f:3a:a2:b5:6b: 05:2b:26:16:b9:51:ee:79:1c:8d:62:6d:ca:33:23: 03:59:0c:67:a8:a3:61:30:a0:96:f2:e3:96:d4:93: 0d:1c:7f:4c:2e:41:9e:f8:48:a4:2c:ec:5e:83:3e: 43:ac:14:fa:03:72:0b:76:ca:3e:1e:52:33:27:bc: 72:c4:78:17:b7:76:e3:9f:96:0e:e8:27:c4:78:d3: d3:af:3c:a9:ee:57:7c:53:ce:00:95:68:55:cf:2a: 9f:4f:65:10:25:04:49:97:e8:15:ba:ba:11:f1:be: 3e:92:73:65:4d:08:84:ac:7d:54:b4:86:9d:f8:db: 27:53:19:78:a7:62:05:31:ba:cc:f4:f7:8f:67:75: c0:02:fe:45:e8:5b:a2:aa:2a:b8:17:22:3f:a3:87: d7:eb:4c:91:3c:74:56:74:7f:74:26:b0:2b:10:5e: 71:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:90:8C:E1:28:8F:8C:C0:9B:88:44:DD:F5:FA:91:56:DE:64:55:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c3:5c:d0:57:7c:19:87:e4:ee:67:a8:84:b6:e1:fe:45:2c: 59:86:e0:ae:25:2f:ab:17:bf:d1:27:a3:ff:9c:17:16:5c:63: 3f:ed:06:f4:a4:ed:35:c3:66:14:0d:04:1d:ad:b3:27:41:e1: 15:a5:27:88:bf:88:d4:d8:a2:21:3d:b6:5f:3a:40:2d:4b:c5: e4:65:76:aa:47:7a:53:c8:4e:05:73:73:7d:15:ab:d5:80:95: 38:2b:2e:0d:ed:aa:ec:94:5e:bc:d3:f4:fa:60:e9:8b:ba:c7: a1:30:cb:0e:dc:8e:01:df:4c:dc:de:2d:86:fe:4a:8b:6c:0e: 80:6d:b0:98:7e:03:ed:af:9f:eb:48:72:29:8c:55:15:2d:b8: c5:a4:c1:0c:fa:35:4f:29:17:70:50:6a:9e:89:ac:87:10:05: ff:09:ce:ba:4a:c1:64:4d:7d:a7:ad:5c:0d:b1:7c:b5:d8:98: c2:ff:9d:c6:2c:75:e9:22:df:b6:3b:79:50:f3:9e:9b:50:66: 12:fc:7a:b8:3d:3b:d5:75:8e:ce:1c:c1:70:66:d0:58:56:81: b3:25:6a:a0:ab:40:fc:3e:86:53:e2:3c:79:9a:5a:f6:08:18: cc:9b:ac:dc:b8:a5:ea:db:78:39:21:ce:96:d6:80:33:85:8d: 03:00:4b:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMfPfWWqilSNtdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk YmM0ZDdkM2EtNDA3Yy00ZWE0LWJiZmEtOWQ1YzYwMmRkYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxa8lIL6frbmkxzzuyCbuIDmhn9WZF4NGHvv CnYSUOdYCmIiZHuYT5qawmHCXgQJOsS3jJzW9RzAD0WAtjkoX1b+2doalNV878oX ILZQguLlu4VdTzqitWsFKyYWuVHueRyNYm3KMyMDWQxnqKNhMKCW8uOW1JMNHH9M LkGe+EikLOxegz5DrBT6A3ILdso+HlIzJ7xyxHgXt3bjn5YO6CfEeNPTrzyp7ld8 U84AlWhVzyqfT2UQJQRJl+gVuroR8b4+knNlTQiErH1UtIad+NsnUxl4p2IFMbrM 9PePZ3XAAv5F6Fuiqiq4FyI/o4fX60yRPHRWdH90JrArEF5xJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOQjOEoj4zAm4hE3fX6kVbeZFXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNmUwODllZWYtZmJmMi0z NjExLTk2ZmQtOTM5MjUxYTZiN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbDXNBXfBmH5O5nqIS24f5FLFmG4K4lL6sXv9Eno/+cFxZcYz/tBvSk 7TXDZhQNBB2tsydB4RWlJ4i/iNTYoiE9tl86QC1LxeRldqpHelPITgVzc30Vq9WA lTgrLg3tquyUXrzT9Ppg6Yu6x6Ewyw7cjgHfTNzeLYb+SotsDoBtsJh+A+2vn+tI cimMVRUtuMWkwQz6NU8pF3BQap6JrIcQBf8JzrpKwWRNfaetXA2xfLXYmML/ncYs deki37Y7eVDznptQZhL8erg9O9V1js4cwXBm0FhWgbMlaqCrQPw+hlPiPHmaWvYI GMybrNy4perbeDkhzpbWgDOFjQMAS7o= -----END CERTIFICATE-----Generated at Sat Aug 15 02:30:34 2026 by rpki-client