$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa File: a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa (raw, json) Hash identifier: 86+c2M/aNiTPOLnpbQmbxSaO5BR4A6wvU5XgxzK+vVo= Subject key identifier: 20:3C:33:4A:12:F5:04:ED:AF:3F:EB:BB:F7:6A:77:01:01:73:1F:BD Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E31CF1627CC1A2A403CC71990 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 16839 IP address blocks: 149.96.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:16:27:cc:1a:2a:40:3c:c7:19:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=71799c86-ab74-409c-aec7-6217301ed37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:ca:df:d0:b2:b5:59:d3:fa:9e:78:bf:cb: 70:90:66:43:cf:5a:37:d2:da:a6:b2:82:28:4b:cc: 62:f0:79:cc:57:c6:c0:d2:57:d7:3f:55:ef:58:21: 21:ae:d1:4e:37:ad:15:18:a2:a3:a7:2b:54:77:de: c5:07:d8:94:e6:cd:7c:4a:2b:ac:43:a4:cc:d3:74: 16:7c:7b:b5:8e:19:7d:02:6d:a7:cc:4e:a1:59:56: 6a:d0:18:5b:f5:ec:fc:b3:98:ba:b1:f9:76:61:a1: 09:02:2f:e6:60:a3:5e:76:2c:8e:77:f1:d8:fa:c1: e4:c4:db:1c:cd:84:8b:ad:e7:4f:3c:b0:c6:2e:99: 82:c8:2e:75:11:2c:16:fb:e5:d3:ab:0c:a4:0b:4f: c9:11:96:cf:2c:2b:61:3f:8d:a1:4b:b5:63:2e:8d: 2c:68:34:3a:46:f4:35:ed:c1:82:e0:40:dd:7c:1c: 3a:fd:1d:ad:47:45:b1:7b:5b:ab:49:f7:1d:f4:d3: 43:40:cd:88:8d:9d:1b:f7:0e:34:c8:86:22:ed:08: cb:6d:e9:e2:d5:a0:37:d8:b8:f0:53:d8:b6:15:1e: d0:31:56:49:7e:aa:a9:b4:bd:1f:b3:ae:8d:20:e7: c7:d9:41:7b:a9:01:03:63:b5:1d:63:4b:79:69:37: d9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3C:33:4A:12:F5:04:ED:AF:3F:EB:BB:F7:6A:77:01:01:73:1F:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:85:f0:1f:1a:36:66:2b:7a:4b:10:ea:fe:0c:ac:e8:a7:23: c6:e6:6e:d3:01:7c:84:c7:1d:98:88:a7:23:ce:b5:f0:86:97: d4:88:97:81:31:fd:a2:92:d6:f5:d9:6c:1b:6e:67:23:eb:22: 64:08:a2:c6:a2:eb:c2:bf:68:e6:ba:05:8e:d8:c7:01:4e:09: d8:6b:05:e1:49:b8:09:0d:ec:7c:9d:dd:ea:46:3f:77:1f:3a: 71:a1:0b:49:45:0f:2e:33:e1:22:e5:59:c2:dd:3a:e8:9b:4d: 46:e7:ed:95:58:03:8e:c1:6d:0a:fc:01:28:ce:50:4d:2b:ff: 1d:c7:39:45:dc:4d:f6:98:60:85:c6:cd:8c:69:1a:29:20:d3: 8c:e3:0f:c3:6e:61:2e:01:e3:69:a9:16:ec:07:a6:d4:7c:a8: bd:99:5d:0a:94:af:a4:76:22:92:23:13:de:27:72:73:ae:dc: 7d:bb:68:d3:4a:ec:fe:8d:9d:78:d8:c7:7c:dc:4b:04:26:1c: e9:76:7a:c0:ca:44:f0:80:e2:a8:42:72:04:48:83:6a:97:ed: 54:0d:84:6d:d9:74:62:f9:89:62:95:fc:ab:b4:15:cb:a4:6b: 2e:43:ab:6f:14:75:05:a1:23:17:6b:ad:01:d0:4a:06:54:21: 2e:08:cd:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxYnzBoqQDzHGZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk NzE3OTljODYtYWI3NC00MDljLWFlYzctNjIxNzMwMWVkMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPXK39CytVnT+p54v8twkGZDz1o30tqmsoIo S8xi8HnMV8bA0lfXP1XvWCEhrtFON60VGKKjpytUd97FB9iU5s18SiusQ6TM03QW fHu1jhl9Am2nzE6hWVZq0Bhb9ez8s5i6sfl2YaEJAi/mYKNediyOd/HY+sHkxNsc zYSLredPPLDGLpmCyC51ESwW++XTqwykC0/JEZbPLCthP42hS7VjLo0saDQ6RvQ1 7cGC4EDdfBw6/R2tR0Wxe1urSfcd9NNDQM2IjZ0b9w40yIYi7QjLbeni1aA32Ljw U9i2FR7QMVZJfqqptL0fs66NIOfH2UF7qQEDY7UdY0t5aTfZKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA8M0oS9QTtrz/ru/dqdwEBcx+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYTE3ZGVkMWYtNzdkNy0z YjUwLWFhODEtNGVhMDYwNzk4NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmF8B8aNmYreksQ6v4MrOinI8bmbtMBfITHHZiIpyPOtfCGl9SIl4Ex /aKS1vXZbBtuZyPrImQIosai68K/aOa6BY7YxwFOCdhrBeFJuAkN7Hyd3epGP3cf OnGhC0lFDy4z4SLlWcLdOuibTUbn7ZVYA47BbQr8ASjOUE0r/x3HOUXcTfaYYIXG zYxpGikg04zjD8NuYS4B42mpFuwHptR8qL2ZXQqUr6R2IpIjE94ncnOu3H27aNNK 7P6NnXjYx3zcSwQmHOl2esDKRPCA4qhCcgRIg2qX7VQNhG3ZdGL5iWKV/Ku0Fcuk ay5Dq28UdQWhIxdrrQHQSgZUIS4IzXY= -----END CERTIFICATE-----Generated at Sun Jun 28 17:23:28 2026 by rpki-client