$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa File: 96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa (raw, json) Hash identifier: rFc42agWW9fqW8ojiZ9unjublDHiOCeBOOmYgkCeEvg= Subject key identifier: C9:A3:1F:1D:20:AA:D6:C9:6C:25:91:C5:63:07:9B:2F:FB:8E:E0:46 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ED431F34B573914DD20C3D570 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 16839 IP address blocks: 149.96.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:f3:4b:57:39:14:dd:20:c3:d5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=3f805b48-0f40-4ce2-8730-733ae82940af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:ae:f8:8c:e5:68:1a:1e:d3:20:c5:a7:cd: 0f:64:6e:55:86:b8:af:16:47:6f:2d:3a:f5:e9:66: 9a:8d:11:d9:5c:16:72:9a:0c:3f:e8:e9:37:51:43: ea:18:14:40:26:36:fb:57:7b:65:2d:4d:f2:d6:62: e1:1f:1c:08:ec:b3:4a:68:fa:8b:20:f7:e4:9a:a6: d7:9b:0e:b8:2f:c3:e2:a5:b8:f0:f2:55:ff:52:27: b2:f7:cd:07:b8:21:e9:5a:18:94:6e:a5:a0:a2:76: 46:f7:11:ba:9b:0b:51:0e:b9:65:8c:9e:c4:e5:ae: 57:eb:7e:c5:cb:09:cf:25:ca:39:0c:1b:f7:a2:88: 11:78:02:2c:6e:bb:59:f8:cf:90:1e:be:9d:c2:77: a3:9e:14:5b:b1:95:66:ef:ab:87:47:df:bb:76:7d: f6:f6:4f:7b:43:98:1b:c8:93:be:ce:b0:e9:39:b2: d9:ff:ab:f5:60:71:91:26:c8:20:65:07:d4:cd:23: 66:34:90:fd:7c:3b:b7:ee:9b:af:1a:55:87:dc:cd: 24:02:d4:bb:42:1c:55:09:ab:d4:7a:cb:f5:50:da: 9b:7a:de:16:1c:a0:f2:ce:73:8b:df:cd:2b:b1:79: 0f:18:d4:a3:64:4a:11:3e:7f:34:2e:28:32:dc:4f: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A3:1F:1D:20:AA:D6:C9:6C:25:91:C5:63:07:9B:2F:FB:8E:E0:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:dd:3a:04:7a:1a:63:6d:7a:d2:a6:ad:9f:a9:80:ea:9e:ab: 42:ac:0d:a9:81:2d:98:61:8b:ad:c7:c7:43:27:46:0b:b3:51: a2:30:22:a5:9a:72:1e:0b:e9:17:45:24:47:f7:8f:28:78:15: 19:99:39:68:79:49:37:63:38:46:35:21:18:8a:d5:79:55:7b: 8f:69:d7:eb:48:08:6d:4b:38:35:0a:25:f5:dd:1c:2b:5b:50: 40:1c:c7:fb:c2:c6:c9:02:15:ce:01:a8:16:e3:a4:97:67:dd: 21:58:34:c6:9d:5f:63:e1:bb:48:7a:57:92:e8:79:fc:bb:e8: 23:20:69:57:45:31:eb:44:fa:68:8d:62:90:ac:9e:b1:d8:b3: c5:2d:06:ef:d1:02:4a:1c:89:dd:00:95:31:2d:c7:35:03:5a: 9b:59:cb:0a:e0:6e:70:dd:23:5a:e3:39:24:19:a1:d1:24:38: cd:bd:ad:4b:05:74:ee:97:4f:8c:60:f9:fb:7b:d5:44:2d:2d: 6d:cf:f5:65:0d:ef:33:35:7b:23:48:68:52:f0:7d:e1:1c:1a: b5:35:d2:33:e2:64:67:28:62:f7:d0:a0:9c:52:b6:f2:90:34: 27:bc:52:3a:09:4f:49:ed:65:7a:a7:25:1a:ce:a5:d7:af:95: d4:f4:43:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMfNLVzkU3SDD1XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk M2Y4MDViNDgtMGY0MC00Y2UyLTg3MzAtNzMzYWU4Mjk0MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosiu+IzlaBoe0yDFp80PZG5VhrivFkdvLTr1 6WaajRHZXBZymgw/6Ok3UUPqGBRAJjb7V3tlLU3y1mLhHxwI7LNKaPqLIPfkmqbX mw64L8Pipbjw8lX/Uiey980HuCHpWhiUbqWgonZG9xG6mwtRDrlljJ7E5a5X637F ywnPJco5DBv3oogReAIsbrtZ+M+QHr6dwnejnhRbsZVm76uHR9+7dn329k97Q5gb yJO+zrDpObLZ/6v1YHGRJsggZQfUzSNmNJD9fDu37puvGlWH3M0kAtS7QhxVCavU esv1UNqbet4WHKDyznOL380rsXkPGNSjZEoRPn80Ligy3E8cawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmjHx0gqtbJbCWRxWMHmy/7juBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTZmNTlkNWYtODFkNi0z ZDk4LWI2NmQtYzVlOTY3MzViM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXdOgR6GmNtetKmrZ+pgOqeq0KsDamBLZhhi63Hx0MnRguzUaIwIqWa ch4L6RdFJEf3jyh4FRmZOWh5STdjOEY1IRiK1XlVe49p1+tICG1LODUKJfXdHCtb UEAcx/vCxskCFc4BqBbjpJdn3SFYNMadX2Phu0h6V5Loefy76CMgaVdFMetE+miN YpCsnrHYs8UtBu/RAkocid0AlTEtxzUDWptZywrgbnDdI1rjOSQZodEkOM29rUsF dO6XT4xg+ft71UQtLW3P9WUN7zM1eyNIaFLwfeEcGrU10jPiZGcoYvfQoJxStvKQ NCe8UjoJT0ntZXqnJRrOpdevldT0Q1E= -----END CERTIFICATE-----Generated at Sat Aug 15 02:30:35 2026 by rpki-client