$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa File: a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa (raw, json) Hash identifier: 1x0sQBQ8DFp0607eHjMhx70SDTertmhyxaty4O/dBJI= Subject key identifier: A1:80:A2:BF:89:D1:75:DF:3A:86:17:8B:95:29:84:D6:21:D4:EB:D8 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D5243541C562935FD8312C740 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:54:1c:56:29:35:fd:83:12:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=46bf4b8b-31fa-46eb-9648-090b24f14eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:d9:5e:c7:f2:71:66:bc:7a:db:a8:74:c3: dd:27:57:0e:c8:34:ca:f3:32:a7:5b:24:35:b2:93: 4f:b1:30:80:ee:f5:3c:df:8e:32:b9:b4:0d:e4:11: f4:58:19:66:f0:3e:77:e4:b7:1e:de:80:e1:d9:71: dd:6c:b9:f8:70:7a:fc:6f:4c:28:78:30:3d:07:6b: 06:d7:92:1f:10:2a:6b:78:08:13:a1:f6:f2:e8:9f: 05:c8:8d:83:82:5e:9d:ef:6b:d0:a1:27:44:2f:06: 0e:18:90:c9:e5:5d:f2:02:43:6a:20:d4:0d:cc:c3: 3b:8d:e2:5e:5d:02:71:4c:8b:3f:77:3a:95:d0:d2: 6a:b2:71:36:ba:3c:66:85:12:01:5d:1c:65:5e:88: e2:93:43:01:8f:30:04:95:7a:4a:62:b7:dd:e2:2d: 39:8a:8c:e7:0c:c3:a9:73:5d:18:ed:c8:1c:eb:20: 7d:25:43:e1:65:11:72:d9:eb:cf:71:61:11:79:6c: 87:83:8c:0f:a4:7d:35:45:c0:48:56:68:17:80:e6: a5:e7:2a:05:9e:ce:30:1a:b3:4e:ea:46:7b:12:38: 44:87:de:02:c9:46:f1:d8:b5:f5:5a:c6:e5:fc:b5: 42:9d:3d:38:ee:38:ed:64:0e:79:59:f6:9c:e7:27: 1f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:80:A2:BF:89:D1:75:DF:3A:86:17:8B:95:29:84:D6:21:D4:EB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:09:18:7b:3e:5b:0b:0a:95:54:39:7f:99:41:fc:df:e7:14: b5:d7:8c:1a:29:55:9d:9d:65:80:9d:37:db:af:e4:83:91:6c: ca:3a:cf:66:8f:c3:35:f5:8f:ed:7e:63:5a:01:2f:2d:9d:0a: 4f:e7:6c:68:88:19:42:42:98:55:3f:c6:b1:c2:65:7e:b0:82: 53:b2:6c:87:72:3b:3a:41:5f:c0:e0:1b:f5:75:13:bf:2e:ea: fb:bb:f1:99:27:5d:9e:b1:45:3d:b0:33:d2:f9:5d:a9:79:6a: f5:00:1b:d9:41:6d:2b:df:b8:b6:be:85:a4:ef:e2:53:84:b6: cf:de:b4:63:c6:58:44:e9:38:b2:9b:7d:96:69:a2:db:ec:73: 55:59:cd:6a:66:13:11:62:e9:53:3f:6a:08:17:28:9b:3a:aa: 38:34:ae:a6:1c:71:9f:d1:72:3b:0e:94:a9:76:d8:8f:62:4d: 7e:ba:8e:b2:e3:14:4a:1d:09:cf:73:d8:e8:c0:85:bf:3b:37: 56:5b:b1:cd:26:5a:16:89:04:7a:70:4b:48:97:62:61:94:28: 77:34:33:8f:6d:32:33:09:a9:a4:3d:fb:ee:72:87:f4:22:c5: 53:90:92:15:52:95:43:4b:60:79:ec:0c:93:37:8d:d5:87:91: 75:5f:01:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1QcVik1/YMSx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NDZiZjRiOGItMzFmYS00NmViLTk2NDgtMDkwYjI0ZjE0ZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn87ZXsfycWa8etuodMPdJ1cOyDTK8zKnWyQ1 spNPsTCA7vU8344yubQN5BH0WBlm8D535Lce3oDh2XHdbLn4cHr8b0woeDA9B2sG 15IfECpreAgTofby6J8FyI2Dgl6d72vQoSdELwYOGJDJ5V3yAkNqINQNzMM7jeJe XQJxTIs/dzqV0NJqsnE2ujxmhRIBXRxlXojik0MBjzAElXpKYrfd4i05ioznDMOp c10Y7cgc6yB9JUPhZRFy2evPcWEReWyHg4wPpH01RcBIVmgXgOal5yoFns4wGrNO 6kZ7EjhEh94CyUbx2LX1Wsbl/LVCnT047jjtZA55Wfac5ycfhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGAor+J0XXfOoYXi5UphNYh1OvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYTE3ZGVkMWYtNzdkNy0z YjUwLWFhODEtNGVhMDYwNzk4NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYJGHs+WwsKlVQ5f5lB/N/nFLXXjBopVZ2dZYCdN9uv5IORbMo6z2aP wzX1j+1+Y1oBLy2dCk/nbGiIGUJCmFU/xrHCZX6wglOybIdyOzpBX8DgG/V1E78u 6vu78ZknXZ6xRT2wM9L5Xal5avUAG9lBbSvfuLa+haTv4lOEts/etGPGWETpOLKb fZZpotvsc1VZzWpmExFi6VM/aggXKJs6qjg0rqYccZ/RcjsOlKl22I9iTX66jrLj FEodCc9z2OjAhb87N1Zbsc0mWhaJBHpwS0iXYmGUKHc0M49tMjMJqaQ9++5yh/Qi xVOQkhVSlUNLYHnsDJM3jdWHkXVfAf0= -----END CERTIFICATE-----Generated at Sun Mar 29 17:46:07 2026 by rpki-client