$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa File: af6fa4e3-42aa-3436-a412-9f9c477db93d.roa (raw, json) Hash identifier: SadS+sq1y1f8Eb8OHNlg70hyjWu6mc2pemDMqbHCFcQ= Subject key identifier: 8C:26:F6:08:ED:23:C4:96:82:A2:4E:50:FE:3E:A1:4A:80:88:A4:1D Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E31CF1B36E65C1E1ACBF49E80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 16839 IP address blocks: 199.91.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:1b:36:e6:5c:1e:1a:cb:f4:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=aac816b6-70f7-4e4a-9c80-25fe53fd6864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fe:3e:a1:50:17:6c:fc:74:33:8b:44:02:60: 27:b5:60:ce:d2:f7:f1:ef:b8:90:35:e9:0f:08:9d: 23:e2:93:6d:45:ed:b2:a6:a1:88:60:b9:a1:93:f8: 26:2d:7b:85:48:a9:3e:e3:a1:38:9c:9c:73:eb:bf: 0c:ce:ad:a7:e9:2e:b6:2d:02:e4:a9:5e:71:52:72: 33:d1:23:fe:07:48:a0:fb:3e:bb:85:22:a7:c5:09: 93:c5:72:84:c8:92:23:11:bc:e7:20:cb:0b:c7:3d: 3d:e0:8a:b9:b5:70:83:5d:e9:39:56:87:6d:04:c5: f5:47:be:63:d1:8d:6f:85:d9:6d:c2:b7:e6:d8:90: 50:6c:e4:98:e0:79:c9:00:98:0c:41:ce:6b:ee:87: d9:4e:aa:36:77:7c:e7:54:0e:ab:0d:41:a8:0e:ed: c1:91:ed:85:8b:1a:e5:90:a2:bf:70:96:f9:0e:1f: 2d:c0:78:95:3d:85:d2:dc:be:03:fd:ba:27:86:6f: a4:71:49:3b:fd:4c:65:9b:76:c6:d2:af:43:5c:6e: 94:e7:47:94:6b:bc:05:85:2f:c9:e0:74:10:ed:ea: 43:f8:5b:89:f6:e7:60:8c:04:c9:01:ca:d8:7b:fe: 1c:ec:19:0b:8c:a9:3b:7a:36:64:b6:94:c0:ac:e8: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:26:F6:08:ED:23:C4:96:82:A2:4E:50:FE:3E:A1:4A:80:88:A4:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:82:85:4d:e0:dd:37:07:0b:29:5a:c2:04:73:c4:3a:d8:08: de:1a:d0:fa:79:c4:6a:f2:25:29:08:53:71:7a:3e:f9:bf:ef: 19:9e:49:b0:7b:78:47:02:3b:a7:53:e0:0f:1d:47:c8:b6:2f: db:76:a0:cf:31:f6:96:e0:f7:6b:dc:a9:fe:dc:0d:4d:81:2f: 7d:69:98:eb:69:6a:4d:25:bf:22:b3:85:95:6c:1b:95:99:e8: ca:d6:6f:6c:ad:26:50:f1:10:58:9c:29:fb:28:85:62:21:e1: 52:43:99:ee:99:86:43:a8:98:e9:88:aa:56:e8:12:98:4d:92: fe:2a:62:5d:20:be:11:08:0c:54:47:93:ce:ae:48:8f:82:1c: 07:96:ed:0e:35:d5:08:1f:3a:e5:a8:98:3a:30:b6:e6:a2:22: 92:ca:c3:d5:0e:85:77:ae:f1:ec:7f:3b:07:97:b0:ed:57:92: a5:7d:58:29:55:eb:60:ac:b6:c8:59:b6:28:0a:7b:e4:c5:aa: fd:f8:05:39:09:1f:d5:05:69:a1:76:77:ac:3d:dd:62:71:3f: c0:08:df:e9:d9:23:ed:8b:b9:f6:93:41:4d:15:03:57:59:3a: a3:55:4a:92:17:2c:9e:65:80:1a:0c:b0:92:a2:ef:18:9f:c8: bf:74:70:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxs25lweGsv0noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk YWFjODE2YjYtNzBmNy00ZTRhLTljODAtMjVmZTUzZmQ2ODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v4+oVAXbPx0M4tEAmAntWDO0vfx77iQNekP CJ0j4pNtRe2ypqGIYLmhk/gmLXuFSKk+46E4nJxz678Mzq2n6S62LQLkqV5xUnIz 0SP+B0ig+z67hSKnxQmTxXKEyJIjEbznIMsLxz094Iq5tXCDXek5VodtBMX1R75j 0Y1vhdltwrfm2JBQbOSY4HnJAJgMQc5r7ofZTqo2d3znVA6rDUGoDu3Bke2Fixrl kKK/cJb5Dh8twHiVPYXS3L4D/bonhm+kcUk7/Uxlm3bG0q9DXG6U50eUa7wFhS/J 4HQQ7epD+FuJ9udgjATJAcrYe/4c7BkLjKk7ejZktpTArOgFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwm9gjtI8SWgqJOUP4+oUqAiKQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYWY2ZmE0ZTMtNDJhYS0z NDM2LWE0MTItOWY5YzQ3N2RiOTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeChU3g3TcHCylawgRzxDrYCN4a0Pp5xGryJSkIU3F6Pvm/7xmeSbB7 eEcCO6dT4A8dR8i2L9t2oM8x9pbg92vcqf7cDU2BL31pmOtpak0lvyKzhZVsG5WZ 6MrWb2ytJlDxEFicKfsohWIh4VJDme6ZhkOomOmIqlboEphNkv4qYl0gvhEIDFRH k86uSI+CHAeW7Q411QgfOuWomDowtuaiIpLKw9UOhXeu8ex/OweXsO1XkqV9WClV 62CstshZtigKe+TFqv34BTkJH9UFaaF2d6w93WJxP8AI3+nZI+2LufaTQU0VA1dZ OqNVSpIXLJ5lgBoMsJKi7xifyL90cOE= -----END CERTIFICATE-----Generated at Sun Jun 28 17:23:15 2026 by rpki-client