$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa File: af6fa4e3-42aa-3436-a412-9f9c477db93d.roa (raw, json) Hash identifier: eYHtzZUnQJRzXkcLnEOod3e44smt29eFqqAsTwi2RLE= Subject key identifier: E2:31:3E:0F:07:C8:10:BB:C1:ED:70:BF:CA:F0:87:5D:E7:B1:5F:ED Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D524359B6BD248A4092BE3FC0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 199.91.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:59:b6:bd:24:8a:40:92:be:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=418976ce-a8c4-4070-b09c-cc37a48ca0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:40:45:51:ba:89:fe:0f:a4:87:4b:c8:57: a7:7d:1b:26:9d:76:23:7b:60:17:8e:e9:59:d8:83: 00:7f:da:91:ff:b9:8d:c1:f8:bf:21:cb:9c:ba:62: 6e:41:39:5d:fb:dc:25:31:2b:d2:99:ac:ca:4f:0d: 37:55:01:9d:59:18:c0:af:7a:0b:89:22:41:4d:e1: 87:72:cf:bd:76:60:72:69:5f:00:92:ce:07:70:70: 75:1f:b6:34:92:9b:6e:84:f9:b1:0c:e7:91:ba:22: 2b:6d:63:2b:c3:7f:b9:17:ea:d9:e2:81:85:85:ee: 88:04:92:8b:4e:ad:48:f3:d4:72:af:29:33:fb:1d: 85:05:c1:07:49:de:4a:dc:e4:86:59:2a:63:13:1d: b1:94:5f:1c:c1:ee:a7:d7:46:c1:97:bb:b5:fa:03: 7b:60:a1:34:5e:31:3f:a5:de:e3:ff:dc:e3:40:09: 5c:7b:d5:eb:a5:1a:1f:ec:e0:84:1a:ae:98:fe:da: 6c:ae:09:e0:a2:f1:6c:c7:ef:56:96:06:dd:70:59: 45:c8:78:c8:e9:19:da:84:f0:cf:63:d1:87:ff:f5: 81:de:b0:83:f8:e0:50:71:83:8f:48:88:63:25:1b: ef:b0:cc:ef:0b:41:a1:77:a4:2e:6d:b2:7b:e0:8d: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:31:3E:0F:07:C8:10:BB:C1:ED:70:BF:CA:F0:87:5D:E7:B1:5F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:6f:cb:e6:35:c5:20:6e:82:7f:10:bb:67:e1:a3:75:3c:f7: dd:f2:ba:df:b8:74:ac:ef:7d:f2:ff:a8:a0:8f:34:21:ae:86: 8c:5d:6c:35:29:6f:fb:72:03:0e:cd:26:53:37:e3:eb:4c:3a: 0c:f8:6f:14:70:65:87:3f:5e:7d:f4:e7:7d:f6:6b:ef:00:cb: be:cc:9c:9c:38:10:c9:aa:ca:9f:d9:81:34:19:1e:e8:fb:e7: fa:d0:26:89:d2:29:e2:34:f5:85:da:35:01:5d:23:bb:6d:ca: 7e:28:85:9d:16:e8:61:10:0e:4e:64:50:f5:f9:7c:c6:c5:10: 25:1c:9e:93:a5:74:cb:75:62:47:e9:43:94:97:be:2c:31:ea: c3:f8:76:4c:f9:18:29:d7:5d:0b:85:fb:10:46:40:af:b4:cd: ef:a9:7b:02:8f:75:c8:58:ba:ef:16:ff:95:90:a7:d2:04:42: 24:3a:65:e3:4c:e0:5a:46:9e:87:b8:7a:21:b7:60:30:65:93: 3b:83:b4:8d:7b:a1:6f:d9:11:66:de:fd:69:56:d2:6b:6e:22: 5a:04:70:f0:50:c9:e6:f1:72:ba:17:c8:aa:fe:fd:85:38:3e: 90:eb:fe:2a:1e:76:cd:50:f8:cf:cb:12:a0:de:23:5d:21:d0: 8f:90:ff:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1m2vSSKQJK+P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NDE4OTc2Y2UtYThjNC00MDcwLWIwOWMtY2MzN2E0OGNhMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNNARVG6if4PpIdLyFenfRsmnXYje2AXjulZ 2IMAf9qR/7mNwfi/IcucumJuQTld+9wlMSvSmazKTw03VQGdWRjAr3oLiSJBTeGH cs+9dmByaV8Aks4HcHB1H7Y0kptuhPmxDOeRuiIrbWMrw3+5F+rZ4oGFhe6IBJKL Tq1I89Ryrykz+x2FBcEHSd5K3OSGWSpjEx2xlF8cwe6n10bBl7u1+gN7YKE0XjE/ pd7j/9zjQAlce9XrpRof7OCEGq6Y/tpsrgngovFsx+9WlgbdcFlFyHjI6RnahPDP Y9GH//WB3rCD+OBQcYOPSIhjJRvvsMzvC0Ghd6QubbJ74I2ApQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIxPg8HyBC7we1wv8rwh13nsV/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYWY2ZmE0ZTMtNDJhYS0z NDM2LWE0MTItOWY5YzQ3N2RiOTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFvy+Y1xSBugn8Qu2fho3U8993yut+4dKzvffL/qKCPNCGuhoxdbDUp b/tyAw7NJlM34+tMOgz4bxRwZYc/Xn305332a+8Ay77MnJw4EMmqyp/ZgTQZHuj7 5/rQJonSKeI09YXaNQFdI7ttyn4ohZ0W6GEQDk5kUPX5fMbFECUcnpOldMt1Ykfp Q5SXviwx6sP4dkz5GCnXXQuF+xBGQK+0ze+pewKPdchYuu8W/5WQp9IEQiQ6ZeNM 4FpGnoe4eiG3YDBlkzuDtI17oW/ZEWbe/WlW0mtuIloEcPBQyebxcroXyKr+/YU4 PpDr/ioeds1Q+M/LEqDeI10h0I+Q/50= -----END CERTIFICATE-----Generated at Sun Mar 29 17:48:26 2026 by rpki-client