$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa File: 72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa (raw, json) Hash identifier: nkRcgABlbvozmI1FCvVZjs3uNuo5fhbyQw8lGOEdZ3U= Subject key identifier: F0:E8:19:39:A6:77:96:CB:1A:0A:95:14:CB:CB:63:03:ED:27:7D:02 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435A2D6E58E6F92DF58048 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:2d:6e:58:e6:f9:2d:f5:80:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=f1f89cb7-2ec6-4b25-b20b-ecccec1d952f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4c:5b:69:30:99:9b:5a:14:97:fb:cb:82:da: 7c:e8:4f:1a:e9:64:a6:1b:8a:a0:23:59:27:ad:0a: 11:04:0c:b8:53:96:6d:02:20:db:7e:8b:03:f5:75: a2:13:93:93:fa:df:64:ac:33:cb:81:e4:a5:3c:14: 2c:e6:04:2c:f4:70:73:e1:b5:14:a4:14:ae:94:3b: f3:3f:23:c8:99:45:8a:05:5d:61:43:f9:9a:10:16: c6:77:f0:fe:18:38:d1:ee:5f:25:17:0d:1d:bb:6a: f4:8b:03:6a:74:eb:e3:dd:22:7f:4b:c9:09:df:a8: ef:78:1f:bf:fc:86:a6:76:72:cd:24:37:f3:5f:15: 94:86:28:36:c9:99:1a:bf:a3:e3:41:83:08:50:1f: df:b6:d7:93:cd:fa:38:f6:9d:17:b8:c6:a4:0b:ca: 55:69:d1:4b:89:20:4e:ac:7f:c2:cf:59:6f:0f:66: 06:68:c8:ed:48:0f:d3:f4:f1:56:e5:9a:be:6f:b7: 7e:1f:94:c1:e0:df:b6:ad:cb:1b:1f:43:45:9f:57: 0f:1b:6e:5d:fe:09:5d:6a:e6:05:8b:3e:1b:40:f0: 5d:a8:b2:5e:2c:f3:51:44:df:44:48:c7:cf:81:f1: 69:91:87:61:2c:27:a5:a6:58:c1:8b:f1:33:31:7e: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E8:19:39:A6:77:96:CB:1A:0A:95:14:CB:CB:63:03:ED:27:7D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:88:8f:df:49:72:a0:0e:80:0d:05:47:fd:71:ac:bb:ac:18: 0a:41:5a:09:49:bb:e8:90:08:ee:96:6c:f4:70:b3:48:fb:74: ac:88:0a:ea:02:69:6d:e3:21:9c:5d:52:23:82:ce:c6:7c:e7: 94:06:68:ac:0e:55:b6:43:f4:98:3d:e3:d4:ef:df:dd:dc:10: f8:64:b2:c8:c2:72:6f:16:01:64:f1:e4:a0:ba:b6:93:ff:25: 28:8e:1a:d7:1e:8f:ba:07:5a:01:d8:c5:f6:0f:c9:f8:80:7e: 04:ed:8f:57:14:d6:31:f5:54:bd:51:09:68:c9:dd:7c:ac:63: d0:1b:b0:4b:2d:c1:21:62:87:90:2f:f6:b2:e1:a4:5d:7c:72: b0:8a:5b:c6:f6:09:d3:1f:07:bb:66:ba:a4:4c:31:1f:41:bb: 78:de:d7:ff:22:bd:77:83:af:5f:a5:99:e9:08:a0:94:18:d3: d0:65:2c:f1:b4:14:33:97:e9:3c:2b:d2:e7:c5:38:40:38:92: a8:bf:1e:c6:f4:83:5d:b0:46:27:9f:3a:b8:d4:04:b9:77:c6: cb:38:11:8e:e3:9d:af:c4:8d:a2:47:4a:0c:e0:e7:b9:00:07: 21:a4:58:6b:b2:02:b8:58:13:89:54:e3:37:e5:66:c2:76:04: a0:7e:09:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1otbljm+S31gEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZjFmODljYjctMmVjNi00YjI1LWIyMGItZWNjY2VjMWQ5NTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0xbaTCZm1oUl/vLgtp86E8a6WSmG4qgI1kn rQoRBAy4U5ZtAiDbfosD9XWiE5OT+t9krDPLgeSlPBQs5gQs9HBz4bUUpBSulDvz PyPImUWKBV1hQ/maEBbGd/D+GDjR7l8lFw0du2r0iwNqdOvj3SJ/S8kJ36jveB+/ /IamdnLNJDfzXxWUhig2yZkav6PjQYMIUB/ftteTzfo49p0XuMakC8pVadFLiSBO rH/Cz1lvD2YGaMjtSA/T9PFW5Zq+b7d+H5TB4N+2rcsbH0NFn1cPG25d/gldauYF iz4bQPBdqLJeLPNRRN9ESMfPgfFpkYdhLCelpljBi/EzMX6YzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDoGTmmd5bLGgqVFMvLYwPtJ30CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzJkMzk3NmItZTZlZS0z ZjJhLWI3YmQtNWQxMTVhOTEyZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmIj99JcqAOgA0FR/1xrLusGApBWglJu+iQCO6WbPRws0j7dKyICuoC aW3jIZxdUiOCzsZ855QGaKwOVbZD9Jg949Tv393cEPhkssjCcm8WAWTx5KC6tpP/ JSiOGtcej7oHWgHYxfYPyfiAfgTtj1cU1jH1VL1RCWjJ3XysY9AbsEstwSFih5Av 9rLhpF18crCKW8b2CdMfB7tmuqRMMR9Bu3je1/8ivXeDr1+lmekIoJQY09BlLPG0 FDOX6Twr0ufFOEA4kqi/Hsb0g12wRiefOrjUBLl3xss4EY7jna/EjaJHSgzg57kA ByGkWGuyArhYE4lU4zflZsJ2BKB+CQM= -----END CERTIFICATE-----Generated at Sun Mar 29 19:14:46 2026 by rpki-client