$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa File: c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa (raw, json) Hash identifier: C6ITrHX8+3NsIscrL5ht+SaV2mwU/WR5SrqDWP/rA94= Subject key identifier: A8:C2:9D:D1:30:32:39:4E:0F:08:EB:1A:C7:DC:CB:BF:17:A0:C0:80 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D524359FED0A91CF3F402A080 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:59:fe:d0:a9:1c:f3:f4:02:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=61dcb004-2f4a-4771-8930-481471082e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:7b:e1:83:17:12:68:d3:e3:8f:e8:87:44: 59:4d:6c:20:3e:98:7a:d5:03:fb:53:17:44:80:dc: ad:e7:3d:48:0a:bd:ef:01:91:c9:be:21:fd:00:2a: 94:8e:7b:a6:e8:a6:19:d2:c0:65:6a:55:d3:7b:02: 66:a4:8c:75:b4:2d:19:71:58:be:c0:88:a7:f4:ae: 7e:02:d6:c4:d6:a1:c8:18:db:9d:77:8e:8b:ca:21: 3c:6b:fb:e1:ad:60:a6:45:08:3a:1b:91:61:0a:ba: 3a:0c:4f:94:ab:0c:2b:17:57:68:4a:95:30:95:5a: ae:2c:17:5a:ca:23:a0:54:e9:48:7b:11:1d:91:a7: 5b:3c:2c:74:60:f0:7a:d5:19:89:e2:25:a1:bd:b9: ac:3d:d2:7b:99:88:36:bb:14:03:8d:7e:7a:d1:d5: 0d:96:34:bb:47:9c:40:f3:1f:0d:91:58:22:27:f9: 96:9e:d4:a9:a4:e3:c7:37:77:5f:c7:08:64:da:e6: 69:13:ab:52:01:86:1c:bc:cc:29:3d:a9:4a:09:63: 5a:7e:ca:5d:33:00:fc:57:b0:dc:53:00:3e:91:ff: 24:3b:f3:c1:db:f4:dc:38:4f:4d:8e:fb:0b:2b:9f: 99:b0:57:4a:28:d3:ca:01:d1:b8:6f:11:96:6c:d3: c3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C2:9D:D1:30:32:39:4E:0F:08:EB:1A:C7:DC:CB:BF:17:A0:C0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4e:b3:1e:2e:f0:d4:0a:51:58:d9:b7:08:e7:7f:7c:8a:c5: a1:11:c8:61:68:a8:90:75:3e:ea:b9:90:20:2d:e6:73:17:e4: 45:92:ff:94:70:43:b4:c0:71:76:a5:da:7f:00:62:2f:97:8f: 27:00:70:90:ff:b1:02:6b:6f:52:74:7e:36:1f:33:db:67:78: b1:4f:43:76:18:62:0e:fc:87:44:8b:49:f8:19:da:c4:95:aa: b1:69:cd:85:fc:75:3f:c5:b2:13:5b:1f:6b:fc:bf:f8:f5:dc: 64:2e:df:42:f0:b8:71:b8:0c:3d:52:e3:3f:4c:06:8a:4e:e9: 86:15:ba:e0:91:3a:25:2d:0e:66:05:a9:27:5c:4f:a2:14:93: 36:fb:b8:24:4d:32:5b:62:bb:77:f0:17:7f:42:c8:fc:88:86: 51:d7:1c:72:f8:3a:f9:09:9e:f2:b9:ef:dc:80:ae:c2:e7:5d: 8d:ca:82:e4:0a:90:13:bf:0d:17:20:93:1b:9f:f0:e0:33:45: 0a:c4:a1:68:f9:ce:65:9e:43:c0:31:21:e6:ba:7d:5e:ae:be: 48:d4:b2:41:27:ad:67:26:ee:1d:c1:6c:41:cf:f5:a2:e3:04: 77:d2:b9:fe:92:01:6f:62:3a:64:f0:8c:72:23:cb:c6:2d:06: de:89:27:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1n+0Kkc8/QCoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NjFkY2IwMDQtMmY0YS00NzcxLTg5MzAtNDgxNDcxMDgyZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozt74YMXEmjT44/oh0RZTWwgPph61QP7UxdE gNyt5z1ICr3vAZHJviH9ACqUjnum6KYZ0sBlalXTewJmpIx1tC0ZcVi+wIin9K5+ AtbE1qHIGNudd46LyiE8a/vhrWCmRQg6G5FhCro6DE+UqwwrF1doSpUwlVquLBda yiOgVOlIexEdkadbPCx0YPB61RmJ4iWhvbmsPdJ7mYg2uxQDjX560dUNljS7R5xA 8x8NkVgiJ/mWntSppOPHN3dfxwhk2uZpE6tSAYYcvMwpPalKCWNafspdMwD8V7Dc UwA+kf8kO/PB2/TcOE9NjvsLK5+ZsFdKKNPKAdG4bxGWbNPDjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjCndEwMjlODwjrGsfcy78XoMCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzFkYTJlNzEtZGZhNi0z ZDA5LWJjMTctOTNhMGE3ZTczMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Osx4u8NQKUVjZtwjnf3yKxaERyGFoqJB1Puq5kCAt5nMX5EWS/5Rw Q7TAcXal2n8AYi+XjycAcJD/sQJrb1J0fjYfM9tneLFPQ3YYYg78h0SLSfgZ2sSV qrFpzYX8dT/FshNbH2v8v/j13GQu30LwuHG4DD1S4z9MBopO6YYVuuCROiUtDmYF qSdcT6IUkzb7uCRNMltiu3fwF39CyPyIhlHXHHL4OvkJnvK579yArsLnXY3KguQK kBO/DRcgkxuf8OAzRQrEoWj5zmWeQ8AxIea6fV6uvkjUskEnrWcm7h3BbEHP9aLj BHfSuf6SAW9iOmTwjHIjy8YtBt6JJ1w= -----END CERTIFICATE-----Generated at Sun Mar 29 17:46:11 2026 by rpki-client