$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa File: bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa (raw, json) Hash identifier: izEglE3w1OVW5bHK0dpmf8REjT1JjugbHwl1zWsA8EA= Subject key identifier: 6F:CF:AF:A7:41:EE:62:1A:4E:92:72:0D:11:50:17:96:0A:09:31:D2 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D524353E02E005CC6CA08AA00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:53:e0:2e:00:5c:c6:ca:08:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=9cfba866-cc30-4c65-89c1-a7f016431b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c6:88:db:99:f1:a3:1a:b8:bb:fb:7a:40:82: b9:4a:a2:67:f1:80:1d:ee:79:00:9d:9d:37:64:9e: bd:56:a5:34:2b:b2:b5:d8:81:48:b0:4b:a0:84:c3: 65:37:2f:3f:28:e6:d9:4a:e0:01:6d:9f:16:75:90: 2d:91:b3:5c:91:f7:23:99:55:f3:9f:bf:24:b8:b2: 4f:76:d9:1f:45:18:45:dd:3a:93:c3:c2:cf:c9:8a: c1:2f:07:ca:59:55:bb:64:fc:9c:79:29:d6:aa:2c: de:e4:a0:37:7f:27:ef:4c:c2:b6:9e:6b:8c:7e:d9: 45:31:cc:31:bd:f7:07:29:23:e6:c2:c8:c1:97:4e: 34:94:0b:b5:d3:aa:10:78:0a:c4:0a:34:d8:d9:e8: 51:84:33:bb:1e:be:b6:96:ff:34:28:0c:36:26:f7: c8:3f:81:5c:18:98:5a:62:43:48:07:ca:a2:2a:0c: 84:17:27:83:91:1d:f1:cf:fd:23:eb:68:96:48:01: 83:17:25:44:7e:d8:3f:49:8d:38:e8:12:af:5a:95: b4:b7:8d:b5:11:11:6e:9a:4e:a0:bb:e2:91:f7:0d: ae:a2:d4:36:b4:71:f9:68:b1:ff:cb:0f:30:4b:98: 25:89:f3:5c:06:26:49:c6:27:b3:27:1d:9a:b4:ba: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CF:AF:A7:41:EE:62:1A:4E:92:72:0D:11:50:17:96:0A:09:31:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:da:6c:53:fa:4d:02:26:73:4d:d3:3c:96:3d:4a:a0:33:6d: 97:21:cb:cb:1f:f0:cc:ce:ef:7e:96:43:3d:76:a2:a2:30:d9: 5c:a4:93:21:47:5b:bf:43:8b:18:5d:7f:d0:9b:db:0c:cf:c5: 99:e6:17:4f:72:8e:e6:4f:19:12:dc:e0:b1:8a:03:36:1c:68: e5:da:25:49:7f:a0:33:b3:35:9d:d0:f2:28:83:e1:83:97:09: bc:33:05:c5:29:47:82:9d:a0:8f:85:39:f9:23:66:21:59:1f: ef:a6:3f:dc:ac:f4:d0:04:32:8b:78:57:a8:49:26:d8:b8:38: 8d:34:e5:3f:e5:da:d6:1c:9e:ec:50:ca:f4:7f:cb:72:72:25: 65:23:f8:7c:db:a9:d2:7d:ee:9c:79:6d:4d:e9:00:75:53:1b: ef:c4:51:13:53:d6:1c:59:46:96:02:10:83:07:1b:0f:5b:d0: f3:4e:69:94:2a:4b:37:97:5a:ba:80:54:38:d6:8f:2d:87:58: 82:29:bb:c2:25:91:d0:60:91:b5:54:4c:a8:f1:f0:0f:21:0d: 84:fe:00:d1:22:42:a9:a4:44:af:83:01:36:a4:32:c4:94:1a: 98:f3:62:55:26:89:22:f8:1c:ed:3a:f6:27:b4:f6:57:d3:a8: 51:74:bd:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1PgLgBcxsoIqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OWNmYmE4NjYtY2MzMC00YzY1LTg5YzEtYTdmMDE2NDMxYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicaI25nxoxq4u/t6QIK5SqJn8YAd7nkAnZ03 ZJ69VqU0K7K12IFIsEughMNlNy8/KObZSuABbZ8WdZAtkbNckfcjmVXzn78kuLJP dtkfRRhF3TqTw8LPyYrBLwfKWVW7ZPyceSnWqize5KA3fyfvTMK2nmuMftlFMcwx vfcHKSPmwsjBl040lAu106oQeArECjTY2ehRhDO7Hr62lv80KAw2JvfIP4FcGJha YkNIB8qiKgyEFyeDkR3xz/0j62iWSAGDFyVEftg/SY046BKvWpW0t421ERFumk6g u+KR9w2uotQ2tHH5aLH/yw8wS5glifNcBiZJxiezJx2atLrV6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/Pr6dB7mIaTpJyDRFQF5YKCTHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYmMwYTRjMDMtYmExMi0z NjQ2LWEwNzUtYTlhOTYzMGFmZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLabFP6TQImc03TPJY9SqAzbZchy8sf8MzO736WQz12oqIw2VykkyFH W79Dixhdf9Cb2wzPxZnmF09yjuZPGRLc4LGKAzYcaOXaJUl/oDOzNZ3Q8iiD4YOX CbwzBcUpR4KdoI+FOfkjZiFZH++mP9ys9NAEMot4V6hJJti4OI005T/l2tYcnuxQ yvR/y3JyJWUj+HzbqdJ97px5bU3pAHVTG+/EURNT1hxZRpYCEIMHGw9b0PNOaZQq SzeXWrqAVDjWjy2HWIIpu8IlkdBgkbVUTKjx8A8hDYT+ANEiQqmkRK+DATakMsSU GpjzYlUmiSL4HO069ie09lfTqFF0vR4= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:12 2026 by rpki-client