$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa File: 85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa (raw, json) Hash identifier: jYls2BeDWc4LtrCrP+yv0zG3gU+haCrxE4AJl/LQiNE= Subject key identifier: 1E:60:BE:0C:61:22:65:31:06:FA:D1:48:C4:1D:91:5C:8B:95:B3:71 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E31CF1C045FA9E4DE28122200 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 16839 IP address blocks: 149.96.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:1c:04:5f:a9:e4:de:28:12:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=4c88e025-c62e-4d3e-b7fa-455abd92152e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ab:df:a4:e4:30:ec:0c:15:c6:76:10:2e:c1: 7d:85:1c:c0:15:d2:62:2b:32:fb:e6:3b:35:23:3c: a2:16:a4:94:aa:d8:38:b8:f9:66:d3:67:d1:f0:84: c7:0b:78:ba:87:f5:82:7d:66:b6:e7:3b:73:9a:b3: c6:99:d8:c3:6b:9c:ce:7f:bc:f8:f0:0b:9b:d1:7e: a0:2d:a3:56:9f:00:18:59:63:e8:a5:11:37:5e:0a: 53:62:95:cf:67:3e:53:03:3d:8f:07:ff:02:c1:ec: e4:a0:e5:7e:18:55:fc:1c:87:19:68:f6:a4:06:89: fa:15:1c:ce:a2:dc:46:68:21:cb:9d:c5:58:31:38: 9a:46:19:c1:f5:09:d8:eb:9f:cf:44:31:17:b9:da: 73:b2:e2:d6:5e:6a:25:ad:02:fe:ae:8f:d0:a4:56: ff:a7:5e:c1:35:c6:48:5d:11:9e:67:87:5a:ac:ce: 2e:47:14:af:bd:ad:ad:c0:5a:a8:c4:d9:2c:c8:47: 3b:d1:b5:58:26:da:06:df:2b:9e:98:38:da:ca:36: d3:3b:f9:46:ab:13:38:72:80:ab:c3:19:9b:82:56: 6a:64:40:8c:cb:ba:10:9f:89:f3:81:5d:e1:4e:d0: 84:11:53:d0:e9:1d:a1:b5:6b:00:7e:5a:19:0b:c2: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:60:BE:0C:61:22:65:31:06:FA:D1:48:C4:1D:91:5C:8B:95:B3:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2d:7e:f6:1f:c1:a9:75:33:fa:01:a8:e1:30:11:36:d5:5d: 36:4f:70:87:df:7f:fc:08:46:12:62:83:e6:ea:de:bf:24:59: ab:84:8d:1d:7f:f2:57:62:fe:5d:10:01:ea:ae:f0:30:9d:c2: c2:75:75:2a:0a:33:26:f1:d4:bf:7d:ec:eb:01:dd:64:2a:0a: 55:31:5a:a2:0b:18:96:1e:f3:b8:a9:2c:fa:da:2a:b2:0d:e4: 44:42:c4:29:4c:57:54:eb:c2:8a:aa:95:9b:81:15:8e:d7:81: 69:79:87:5e:ae:1c:17:1a:02:08:77:27:f9:2d:6c:7c:cf:9d: b8:79:91:54:ba:67:43:a7:a9:8a:4d:ff:52:77:b9:c3:02:e8: a3:5f:8f:d5:6a:bc:9b:e3:ab:bf:45:55:d3:db:40:59:57:5a: 8f:6e:e3:84:4a:7a:39:8a:e4:ec:b1:45:78:e8:3e:ab:9f:a7: ca:7e:a7:21:7e:a5:38:82:26:d8:b3:17:a5:53:df:50:4c:89: 3a:f9:39:d9:a7:e5:44:ee:3b:86:7b:24:0e:52:a5:30:bb:61: a9:09:e2:b2:65:83:86:ee:bb:b3:bd:9c:f6:7d:b5:ae:8b:5d: c1:27:04:db:32:32:f5:88:94:2b:1d:5b:e4:d5:ff:51:1c:b8: eb:dd:23:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxwEX6nk3igSIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk NGM4OGUwMjUtYzYyZS00ZDNlLWI3ZmEtNDU1YWJkOTIxNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6vfpOQw7AwVxnYQLsF9hRzAFdJiKzL75js1 IzyiFqSUqtg4uPlm02fR8ITHC3i6h/WCfWa25ztzmrPGmdjDa5zOf7z48Aub0X6g LaNWnwAYWWPopRE3XgpTYpXPZz5TAz2PB/8CwezkoOV+GFX8HIcZaPakBon6FRzO otxGaCHLncVYMTiaRhnB9QnY65/PRDEXudpzsuLWXmolrQL+ro/QpFb/p17BNcZI XRGeZ4darM4uRxSvva2twFqoxNksyEc70bVYJtoG3yuemDjayjbTO/lGqxM4coCr wxmbglZqZECMy7oQn4nzgV3hTtCEEVPQ6R2htWsAfloZC8JFmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5gvgxhImUxBvrRSMQdkVyLlbNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvODVlOWJmZGItMzJjYi0z M2ZkLWIzZjctYWYzZjY0ODViYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYtfvYfwal1M/oBqOEwETbVXTZPcIfff/wIRhJig+bq3r8kWauEjR1/ 8ldi/l0QAequ8DCdwsJ1dSoKMybx1L997OsB3WQqClUxWqILGJYe87ipLPraKrIN 5ERCxClMV1TrwoqqlZuBFY7XgWl5h16uHBcaAgh3J/ktbHzPnbh5kVS6Z0OnqYpN /1J3ucMC6KNfj9VqvJvjq79FVdPbQFlXWo9u44RKejmK5OyxRXjoPqufp8p+pyF+ pTiCJtizF6VT31BMiTr5Odmn5UTuO4Z7JA5SpTC7YakJ4rJlg4buu7O9nPZ9ta6L XcEnBNsyMvWIlCsdW+TV/1EcuOvdI8s= -----END CERTIFICATE-----Generated at Sun Jun 28 17:22:51 2026 by rpki-client