$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c613c992-0a9a-3d4c-b926-fbdaf1125064.roa File: c613c992-0a9a-3d4c-b926-fbdaf1125064.roa (raw, json) Hash identifier: ZD7/RbZ3t9S8W9RJo/jiexe5+UeN+lbrS+qF/NFSkW8= Subject key identifier: 79:D8:4E:7D:6A:58:4D:36:0C:51:AA:0D:10:60:3B:A3:66:F2:B6:A5 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435ACC4D882FAD0DFB4000 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c613c992-0a9a-3d4c-b926-fbdaf1125064.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:cc:4d:88:2f:ad:0d:fb:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=8cc8577c-0bc6-44b0-9f26-21abc5240032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:ec:11:9b:8b:8b:d4:ac:04:db:f8:99:96: 3b:73:e3:62:9b:7a:30:2b:92:12:19:6a:6b:73:e8: fd:1e:52:14:3e:58:c0:5b:e2:5e:a6:a8:8f:2f:8d: 13:f8:a7:bc:e0:c3:09:06:ae:2f:6b:be:ed:70:51: 2e:09:dc:12:8d:8a:bf:5c:a6:d8:de:0c:4c:db:be: c8:f6:ad:4c:51:29:18:82:4d:3d:23:eb:7c:24:8f: ea:69:df:c0:c5:b3:6e:48:d2:ae:89:6a:cb:81:9a: f5:c6:e4:69:56:92:8b:40:bd:b1:d6:78:cd:cd:84: 62:8b:ba:03:1c:5b:d2:67:9f:63:43:2f:aa:98:10: 34:7d:d8:84:39:89:88:6b:13:cc:6c:13:40:6d:1a: b1:fc:0e:97:e0:24:9f:71:ef:0c:4d:d2:3c:34:7b: 68:f9:3b:81:25:33:e5:84:56:df:30:04:56:62:40: ee:aa:ee:f3:b5:f3:bd:4b:84:bd:bb:ef:43:9f:0b: 3f:f5:78:94:09:0a:b0:ab:0f:d0:b0:89:28:31:49: 1f:a0:47:2f:e2:35:01:eb:b4:92:de:9c:93:fa:8a: 4a:40:ee:b4:4c:c3:9e:81:79:48:99:60:63:c5:51: 70:fb:5d:6b:e9:40:b7:82:a1:cf:f1:f6:0f:a1:aa: f9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D8:4E:7D:6A:58:4D:36:0C:51:AA:0D:10:60:3B:A3:66:F2:B6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c613c992-0a9a-3d4c-b926-fbdaf1125064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d5:08:b9:26:98:88:55:cc:32:d6:e7:ab:68:95:2d:da:cc: 38:ff:90:43:f7:aa:78:28:82:52:8f:e1:45:bf:09:62:8b:d3: 70:ea:33:55:73:6e:92:21:a4:54:28:7e:77:f5:b0:a8:39:74: 67:5c:a1:d0:00:09:72:4b:8b:27:2e:64:d4:f5:dc:89:d8:4d: 91:06:b7:06:47:30:4e:1e:63:7b:35:cc:46:86:24:5c:93:6c: f7:38:68:c2:22:1a:5f:71:cb:d7:26:6a:09:4d:51:49:51:9d: 20:90:37:dc:6b:11:95:80:0b:de:85:a0:bd:7f:cb:61:0e:6d: ca:9e:2d:20:75:82:98:f8:5e:3c:c9:11:b7:4d:5e:93:5e:d4: 24:5e:7b:17:f5:c1:d2:e8:a6:88:36:2b:92:1e:61:85:dc:75: f8:e9:06:00:5e:1a:8f:63:9e:ba:d1:13:bb:bf:76:af:74:ed: 91:78:07:41:eb:16:8a:94:9c:bb:36:d1:bc:e3:45:71:b6:85: 1c:46:af:8e:6f:94:63:f6:0a:8a:7e:e1:08:1a:ee:54:56:10: 10:b6:8f:9f:d1:bf:89:27:43:a1:dd:ca:cc:58:81:90:a0:81: 7b:ba:f1:14:99:f8:f0:ee:d6:1b:01:97:a3:04:19:c0:26:e5: 65:eb:98:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1rMTYgvrQ37QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OGNjODU3N2MtMGJjNi00NGIwLTlmMjYtMjFhYmM1MjQwMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbzsEZuLi9SsBNv4mZY7c+Nim3owK5ISGWpr c+j9HlIUPljAW+JepqiPL40T+Ke84MMJBq4va77tcFEuCdwSjYq/XKbY3gxM277I 9q1MUSkYgk09I+t8JI/qad/AxbNuSNKuiWrLgZr1xuRpVpKLQL2x1njNzYRii7oD HFvSZ59jQy+qmBA0fdiEOYmIaxPMbBNAbRqx/A6X4CSfce8MTdI8NHto+TuBJTPl hFbfMARWYkDuqu7ztfO9S4S9u+9Dnws/9XiUCQqwqw/QsIkoMUkfoEcv4jUB67SS 3pyT+opKQO60TMOegXlImWBjxVFw+11r6UC3gqHP8fYPoar5RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnYTn1qWE02DFGqDRBgO6Nm8ralMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzYxM2M5OTItMGE5YS0z ZDRjLWI5MjYtZmJkYWYxMTI1MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7VCLkmmIhVzDLW56tolS3azDj/kEP3qngoglKP4UW/CWKL03DqM1Vz bpIhpFQofnf1sKg5dGdcodAACXJLiycuZNT13InYTZEGtwZHME4eY3s1zEaGJFyT bPc4aMIiGl9xy9cmaglNUUlRnSCQN9xrEZWAC96FoL1/y2EObcqeLSB1gpj4XjzJ EbdNXpNe1CReexf1wdLopog2K5IeYYXcdfjpBgBeGo9jnrrRE7u/dq907ZF4B0Hr FoqUnLs20bzjRXG2hRxGr45vlGP2Cop+4Qga7lRWEBC2j5/Rv4knQ6HdysxYgZCg gXu68RSZ+PDu1hsBl6MEGcAm5WXrmEw= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:01 2026 by rpki-client