$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa File: 85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa (raw, json) Hash identifier: gi04JuXdnrzfQs7EPgDh5kTPDzL2xjYJTp/x5M3Yz1E= Subject key identifier: B3:51:83:43:CB:7C:2C:3F:C5:ED:82:97:DB:62:F8:4B:D3:F8:17:7F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ED431F40CE6CC83C334900C80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 16839 IP address blocks: 149.96.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:f4:0c:e6:cc:83:c3:34:90:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=308dc66d-c5c2-4fe4-9821-263f3bc4915e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:61:ed:a3:2b:eb:c2:71:f2:eb:ad:69:0b:aa: 0d:81:91:20:30:22:41:07:ba:8a:78:3b:cf:69:02: fe:a9:c6:fe:ba:10:bd:0f:37:11:99:b1:21:a8:3d: 44:a8:13:2e:ec:05:61:99:e2:dd:40:28:3b:39:fb: 71:fa:36:f9:f5:cd:46:66:fc:36:6b:19:5f:b7:bf: 18:7d:26:60:75:d0:28:aa:a8:6f:f2:bc:8f:e9:06: 00:bd:15:ea:97:23:72:8b:6a:fd:dd:ea:d3:b0:54: 72:a8:cc:b2:a8:ec:50:17:bd:4d:09:13:da:20:c6: 28:2b:db:63:6a:9c:fc:e7:97:eb:4c:70:5f:f9:74: f7:33:be:3f:ad:5d:b4:10:7a:41:1d:ac:a5:28:91: 52:61:84:4f:bc:02:e4:46:63:3c:2f:71:40:3a:3a: af:02:9e:ab:6f:82:a0:96:d6:9f:ba:51:5c:1f:66: 73:2c:2e:b3:51:87:66:5b:20:bd:3a:5a:da:d4:ad: 26:a7:e3:7f:92:99:0b:bf:a4:7a:4e:b4:c8:2d:e8: c8:a5:23:d8:f6:7a:45:d8:7b:0b:c2:86:45:ff:d6: 6f:8d:01:74:05:e2:b7:72:16:ff:5d:90:24:7a:d2: cf:67:0a:8a:32:a9:e6:4a:7f:87:bc:68:2d:e1:cd: 35:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:51:83:43:CB:7C:2C:3F:C5:ED:82:97:DB:62:F8:4B:D3:F8:17:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:65:1e:f2:f7:93:eb:f6:c9:92:6b:e9:84:58:82:40:7d:22: 37:93:e3:d8:d6:48:c6:3f:c7:6d:f2:28:bc:0a:18:59:e3:f9: 43:51:03:fd:64:ec:5d:43:96:00:aa:b0:62:40:53:20:b7:27: 22:ce:ce:0b:b5:c2:68:d9:00:12:6b:15:fb:89:a8:ca:0c:b4: 05:f6:e8:f5:a7:1b:be:e0:65:38:09:2b:41:39:28:63:3f:69: 69:0e:5f:55:d5:47:52:13:07:82:91:74:be:ad:b0:1e:9a:e6: d3:0d:fa:65:37:21:72:e5:fa:6d:d9:42:22:f1:aa:68:cc:5d: 8c:16:e8:4a:32:96:51:1e:73:ac:41:e8:19:5d:09:bd:fa:5d: b4:35:7a:8a:b1:cc:8d:98:ff:e5:55:c4:c3:13:98:54:85:41: 55:50:ac:23:e7:d8:fa:93:72:db:f1:a5:9c:4e:1b:cd:e4:ab: 43:a4:22:b1:70:69:c4:12:16:db:e9:84:64:23:08:63:6c:1c: 4f:9f:55:84:18:d3:28:e1:11:5d:c2:ff:c0:48:51:f7:10:cb: 82:92:0a:cb:fe:41:09:0c:1e:6c:5a:88:af:76:cd:0d:64:ff: 6d:dd:2f:aa:49:99:c8:1a:d3:1c:71:f8:c9:96:fb:8a:3f:c0: ea:43:55:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMfQM5syDwzSQDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MzA4ZGM2NmQtYzVjMi00ZmU0LTk4MjEtMjYzZjNiYzQ5MTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWHtoyvrwnHy661pC6oNgZEgMCJBB7qKeDvP aQL+qcb+uhC9DzcRmbEhqD1EqBMu7AVhmeLdQCg7Oftx+jb59c1GZvw2axlft78Y fSZgddAoqqhv8ryP6QYAvRXqlyNyi2r93erTsFRyqMyyqOxQF71NCRPaIMYoK9tj apz855frTHBf+XT3M74/rV20EHpBHaylKJFSYYRPvALkRmM8L3FAOjqvAp6rb4Kg ltafulFcH2ZzLC6zUYdmWyC9Olra1K0mp+N/kpkLv6R6TrTILejIpSPY9npF2HsL woZF/9ZvjQF0BeK3chb/XZAketLPZwqKMqnmSn+HvGgt4c01fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNRg0PLfCw/xe2Cl9ti+EvT+Bd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvODVlOWJmZGItMzJjYi0z M2ZkLWIzZjctYWYzZjY0ODViYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRlHvL3k+v2yZJr6YRYgkB9IjeT49jWSMY/x23yKLwKGFnj+UNRA/1k 7F1DlgCqsGJAUyC3JyLOzgu1wmjZABJrFfuJqMoMtAX26PWnG77gZTgJK0E5KGM/ aWkOX1XVR1ITB4KRdL6tsB6a5tMN+mU3IXLl+m3ZQiLxqmjMXYwW6EoyllEec6xB 6BldCb36XbQ1eoqxzI2Y/+VVxMMTmFSFQVVQrCPn2PqTctvxpZxOG83kq0OkIrFw acQSFtvphGQjCGNsHE+fVYQY0yjhEV3C/8BIUfcQy4KSCsv+QQkMHmxaiK92zQ1k /23dL6pJmcga0xxx+MmW+4o/wOpDVag= -----END CERTIFICATE-----Generated at Sat Aug 15 02:29:46 2026 by rpki-client