$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa File: 73276284-ecac-36ab-a7aa-14e8474f7c9c.roa (raw, json) Hash identifier: RCYsbtG9wpSqUXZ0R3DkMkRIojURVG6uQdL9rut3lFg= Subject key identifier: 0A:89:01:75:A1:48:00:46:AF:8F:AD:C5:32:E8:29:A7:C7:0D:3E:47 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435A69A668F4E4AD218D00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:69:a6:68:f4:e4:ad:21:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=1fb83bce-0711-4253-b518-60a4ec452204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9f:d7:8d:fc:91:9b:a6:6a:bc:7f:80:b5:99: 5d:7e:02:55:90:aa:92:10:49:c0:f8:50:2f:46:bd: e3:95:56:a7:67:6c:c1:a4:00:dc:5f:a2:b6:a4:a0: 45:b4:6a:d4:dd:b3:18:e4:6f:6a:a3:d2:20:3c:06: 1e:d0:a6:7e:73:de:0a:69:90:7a:9d:bd:3b:91:a1: 61:b9:48:9b:1a:9e:61:8c:ca:a6:14:8c:d2:2d:74: 78:f9:3e:18:2e:37:02:68:3e:51:49:a5:cd:26:b8: 64:67:da:48:c7:8a:88:d0:4e:b1:20:93:24:cd:b5: 63:c8:9a:2a:74:f9:17:9d:18:3f:6e:57:1c:4f:35: 5a:63:11:58:3e:93:a4:16:78:ce:c5:76:21:d9:35: 2c:c8:67:0e:9e:e1:f0:43:ba:d1:0c:16:53:93:46: 28:1c:b1:1d:3b:d3:bc:30:3c:84:d6:17:3d:e6:fe: a3:e6:c8:67:36:99:ee:dc:81:2a:31:f7:4d:3e:4f: 92:0b:e3:7b:e3:7b:15:ed:b7:73:4c:1e:32:8b:b0: 08:27:c3:00:ba:af:a7:93:40:8a:4b:be:66:53:75: d9:f3:28:d8:e6:5a:41:6b:60:d4:f0:1b:23:be:03: 0f:48:8f:2c:57:ab:52:25:3d:72:18:53:53:18:a6: 2d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:89:01:75:A1:48:00:46:AF:8F:AD:C5:32:E8:29:A7:C7:0D:3E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:bd:51:59:0b:78:ab:0c:09:0f:03:22:1e:49:85:61:37:3c: d3:1f:5a:4e:1a:cb:7d:47:67:ca:c1:5c:be:c2:8e:c7:09:28: 60:66:bf:10:15:be:72:82:40:b3:7c:27:13:98:ef:e3:71:9e: d2:0c:10:0e:03:1f:db:fd:f8:41:73:3f:9c:d3:71:1b:1c:d6: bc:08:a5:d2:ed:34:b7:1c:21:d7:f9:a0:c5:cd:98:d2:dc:eb: cd:b4:3c:5d:d4:d3:66:b9:ee:a8:af:e4:b0:2d:09:6a:0a:b1: f5:bb:11:88:23:92:7a:29:86:a3:e0:c0:e2:a9:ac:dc:80:32: 9d:80:a0:1f:20:e0:f3:f7:26:8e:98:0f:6b:57:a0:37:ff:ba: 8d:73:22:00:76:1c:f4:96:c9:cb:28:d1:77:95:25:3e:79:84: 1f:69:95:cd:aa:d5:ab:2e:d8:73:df:32:79:dd:ad:58:74:b6: ff:88:9f:4c:df:87:ca:93:08:0b:9e:66:b2:c4:a8:44:35:f8: 50:59:76:6b:be:60:b1:e5:3d:6e:8d:ea:4c:08:c7:ce:f6:0a: 7c:93:d8:84:61:97:b1:df:32:9e:20:4a:d5:8c:9b:d3:a2:44: 07:f6:d3:3a:48:99:05:b7:9e:15:21:a5:e5:5a:ba:2c:58:40: a2:8a:27:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1pppmj05K0hjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MWZiODNiY2UtMDcxMS00MjUzLWI1MTgtNjBhNGVjNDUyMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ/XjfyRm6ZqvH+AtZldfgJVkKqSEEnA+FAv Rr3jlVanZ2zBpADcX6K2pKBFtGrU3bMY5G9qo9IgPAYe0KZ+c94KaZB6nb07kaFh uUibGp5hjMqmFIzSLXR4+T4YLjcCaD5RSaXNJrhkZ9pIx4qI0E6xIJMkzbVjyJoq dPkXnRg/blccTzVaYxFYPpOkFnjOxXYh2TUsyGcOnuHwQ7rRDBZTk0YoHLEdO9O8 MDyE1hc95v6j5shnNpnu3IEqMfdNPk+SC+N743sV7bdzTB4yi7AIJ8MAuq+nk0CK S75mU3XZ8yjY5lpBa2DU8BsjvgMPSI8sV6tSJT1yGFNTGKYtbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqJAXWhSABGr4+txTLoKafHDT5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzMyNzYyODQtZWNhYy0z NmFiLWE3YWEtMTRlODQ3NGY3YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+9UVkLeKsMCQ8DIh5JhWE3PNMfWk4ay31HZ8rBXL7CjscJKGBmvxAV vnKCQLN8JxOY7+NxntIMEA4DH9v9+EFzP5zTcRsc1rwIpdLtNLccIdf5oMXNmNLc 6820PF3U02a57qiv5LAtCWoKsfW7EYgjknophqPgwOKprNyAMp2AoB8g4PP3Jo6Y D2tXoDf/uo1zIgB2HPSWycso0XeVJT55hB9plc2q1asu2HPfMnndrVh0tv+In0zf h8qTCAueZrLEqEQ1+FBZdmu+YLHlPW6N6kwIx872CnyT2IRhl7HfMp4gStWMm9Oi RAf20zpImQW3nhUhpeVauixYQKKKJ00= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:09 2026 by rpki-client