$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa File: 906e2291-613d-339e-8038-3e70422ca33a.roa (raw, json) Hash identifier: 0s2/uCBA6xydr8tXmS98Yp2+At3urnjuTdw6Im43FKI= Subject key identifier: 73:65:EF:0A:4A:4C:ED:5B:5C:1B:C8:9B:6D:CB:2F:2B:AD:C3:E3:A4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F03A7EA7F953C14C240867D00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16839 IP address blocks: 149.96.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:ea:7f:95:3c:14:c2:40:86:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=fafc618c-bf34-4c05-b3f8-d6eb411fea70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:19:9c:c9:71:0a:bf:15:20:d2:e0:d3:63: 35:08:a3:a0:8a:4e:25:0e:3f:08:27:d9:6f:04:00: 1c:93:4b:9f:e2:fc:1c:62:f8:85:d5:be:91:a1:43: 25:c7:4c:cb:4c:4b:13:08:24:06:a6:99:df:08:53: ad:3e:02:3f:e6:ab:91:82:55:d5:34:d6:42:e7:c8: a1:db:8c:23:f7:36:e1:cd:a7:06:55:f6:5e:c6:42: 87:4b:85:f3:b1:42:0f:1d:95:7b:d3:58:37:35:7f: 86:0e:4a:4d:97:6a:a5:35:8a:7a:61:5e:a4:75:fb: 37:0a:b3:b6:be:09:0f:31:fc:dc:9a:38:4d:7d:67: 31:ac:7a:77:86:c2:0b:37:f5:92:29:e7:6d:5c:f5: 36:57:f8:57:b2:c0:2a:cb:3e:66:a4:d2:50:16:0d: ef:ed:fb:fa:89:50:c0:a2:a4:47:bd:ff:23:59:c0: 60:53:8c:3f:5a:e4:7c:c9:0f:7e:9d:cd:53:82:39: dc:7c:eb:28:37:4c:2e:ac:fb:20:43:c2:39:26:71: 84:d2:96:51:78:2a:e5:32:59:91:dd:d5:58:f2:a2: 4c:e6:a1:ad:ea:11:3d:dd:9c:5b:90:57:26:e1:ce: 5d:d4:0c:89:64:21:b2:12:8d:07:6b:2c:6f:d7:ea: e1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:65:EF:0A:4A:4C:ED:5B:5C:1B:C8:9B:6D:CB:2F:2B:AD:C3:E3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5a:a2:73:a1:eb:bd:c6:7a:3b:a1:51:6c:70:eb:a7:b6:66: fa:f7:73:ee:c6:78:27:31:6b:bd:13:cf:c8:76:91:07:19:0c: 0e:34:6f:1b:0a:56:6a:03:d3:91:ab:58:4a:cb:23:60:2d:01: 33:69:5a:37:39:16:48:95:df:c3:f7:a3:1e:78:f7:4f:31:3d: bd:b0:27:c8:c5:66:92:1a:85:92:d1:cc:c7:bf:73:c5:0d:2a: 63:73:82:18:f0:2e:0a:c2:c8:04:7e:e1:f1:aa:58:47:e2:5b: 38:3f:66:e9:80:eb:9d:c5:22:c6:d4:2d:44:bd:57:af:e3:6c: e4:70:00:6c:3d:16:47:b1:6d:cd:d0:d6:eb:8c:0d:14:b1:7c: 2c:31:e9:59:7c:f6:84:d3:1b:2e:7c:86:c3:30:b4:86:29:74: 6e:72:3c:2d:d1:5f:e8:e8:a3:25:23:34:9d:f2:f5:4d:69:c6: fe:b6:f4:39:9f:60:0d:df:20:a8:bb:02:e8:7a:26:c8:ba:80: 72:ba:ed:5b:57:0c:ca:39:03:10:75:c8:a1:49:5f:c7:d4:4d: 8f:9b:cc:88:06:31:12:fa:2b:71:64:2c:b3:3b:7a:dd:c9:81: 24:10:5b:d1:c5:2b:89:3e:6b:49:52:24:f8:1d:cf:be:86:9d: 0c:73:54:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp+p/lTwUwkCGfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZmFmYzYxOGMtYmYzNC00YzA1LWIzZjgtZDZlYjQxMWZlYTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyewZnMlxCr8VINLg02M1CKOgik4lDj8IJ9lv BAAck0uf4vwcYviF1b6RoUMlx0zLTEsTCCQGppnfCFOtPgI/5quRglXVNNZC58ih 24wj9zbhzacGVfZexkKHS4XzsUIPHZV701g3NX+GDkpNl2qlNYp6YV6kdfs3CrO2 vgkPMfzcmjhNfWcxrHp3hsILN/WSKedtXPU2V/hXssAqyz5mpNJQFg3v7fv6iVDA oqRHvf8jWcBgU4w/WuR8yQ9+nc1TgjncfOsoN0wurPsgQ8I5JnGE0pZReCrlMlmR 3dVY8qJM5qGt6hE93ZxbkFcm4c5d1AyJZCGyEo0Hayxv1+rhGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNl7wpKTO1bXBvIm23LLyutw+OkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTA2ZTIyOTEtNjEzZC0z MzllLTgwMzgtM2U3MDQyMmNhMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtaonOh673GejuhUWxw66e2Zvr3c+7GeCcxa70Tz8h2kQcZDA40bxsK VmoD05GrWErLI2AtATNpWjc5FkiV38P3ox54908xPb2wJ8jFZpIahZLRzMe/c8UN KmNzghjwLgrCyAR+4fGqWEfiWzg/ZumA653FIsbULUS9V6/jbORwAGw9Fkexbc3Q 1uuMDRSxfCwx6Vl89oTTGy58hsMwtIYpdG5yPC3RX+jooyUjNJ3y9U1pxv629Dmf YA3fIKi7Auh6Jsi6gHK67VtXDMo5AxB1yKFJX8fUTY+bzIgGMRL6K3FkLLM7et3J gSQQW9HFK4k+a0lSJPgdz76GnQxzVHU= -----END CERTIFICATE-----Generated at Thu Oct 8 15:48:39 2026 by rpki-client