$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa File: cbb47c14-2799-3b64-87d8-2264da5e3862.roa (raw, json) Hash identifier: qP1SQ6+9z3HBHpOVaj8Wo78omvHMnpUjMxzGpV5jBDs= Subject key identifier: 73:04:95:61:2F:75:ED:B0:1B:EE:71:FC:81:41:0D:29:36:CB:02:46 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E31CF1B91683873609B51DB50 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 16839 IP address blocks: 149.96.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:1b:91:68:38:73:60:9b:51:db:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=abf609c7-1c26-4d9b-bba4-422133fde512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:72:f1:b5:7a:b9:dc:09:8a:98:38:8f:81: 43:97:22:aa:3c:e8:2d:1e:c9:33:04:8b:ca:cf:5d: 69:fd:2f:a0:9d:8d:83:a6:06:54:c2:2f:3a:c9:e3: 25:7f:f9:9a:ef:34:45:60:b9:ac:63:99:38:b7:6b: ff:02:f0:eb:f6:a4:0e:56:ec:11:16:39:31:f7:71: c1:14:40:a2:88:d0:b9:c7:b3:49:34:7d:b8:fb:b1: 07:e2:09:6e:37:35:16:06:85:0d:73:b3:93:81:2b: 6a:7f:9c:58:45:8e:7d:c7:f6:0a:6c:ee:f1:f8:7b: df:be:7d:52:21:8f:0a:f2:78:8c:da:f6:2c:dc:2a: 60:17:ec:4b:e6:16:39:cc:16:a9:2d:d2:ae:0e:7f: fe:ce:15:ca:73:01:34:02:1c:ef:92:e7:67:8d:4f: 26:8a:28:04:2c:db:56:b1:6c:5d:5e:63:27:93:66: f9:12:ec:b0:fc:51:48:d0:36:65:49:d4:27:29:82: 0a:27:2b:74:dc:e1:27:9a:d7:55:21:0e:58:82:21: b6:50:cc:77:ac:98:16:45:c7:29:d8:5f:22:a4:4d: 85:8d:2b:8c:b4:32:69:9b:40:b1:10:3c:33:2e:f9: b4:5a:6d:f3:01:ee:1b:07:ab:35:97:8b:1d:d6:d5: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:04:95:61:2F:75:ED:B0:1B:EE:71:FC:81:41:0D:29:36:CB:02:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7e:11:59:d6:8a:5c:d5:7a:26:60:e9:da:b6:08:a2:39:a6: 2e:59:e3:cb:4f:17:ba:cb:9c:7e:3b:05:fc:27:a8:cb:08:01: 78:10:24:16:41:4c:51:86:37:3d:ef:e4:88:dc:49:ff:b4:02: 4c:0c:28:b2:75:f5:b0:6d:6c:78:20:2e:a4:45:65:c6:7a:29: f1:4b:54:07:cb:94:29:ee:15:39:63:e1:56:5d:63:bf:bc:cb: a3:f4:d8:7a:64:ff:b4:ed:eb:58:50:ec:b3:ad:3a:8e:77:e5: 70:6e:18:1d:31:eb:ad:0f:97:ee:87:b9:23:a6:86:b9:3c:36: 8b:1d:ec:d7:af:7d:6b:1e:d5:ba:42:c1:a9:ef:eb:12:02:ba: d1:7a:37:3a:90:8b:4e:ce:e0:0c:eb:8d:8e:76:e7:f5:c1:36: 92:ac:3e:22:de:2f:35:c0:32:84:af:a7:28:1b:10:f0:5e:c1: 24:11:09:5a:38:19:fa:56:2f:be:a7:ca:29:41:6d:12:a0:43: b4:c8:23:ec:d6:fd:4f:37:2c:fa:3c:ca:5b:3a:f5:d8:7b:46: bf:c3:15:2e:83:24:7b:8e:29:73:8f:b9:cc:54:7d:ee:e3:c2: 5d:e5:fb:7b:47:d7:44:4c:9e:6d:f2:0e:85:69:d2:2a:a0:6e: c6:96:f2:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxuRaDhzYJtR21AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk YWJmNjA5YzctMWMyNi00ZDliLWJiYTQtNDIyMTMzZmRlNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+5y8bV6udwJipg4j4FDlyKqPOgtHskzBIvK z11p/S+gnY2DpgZUwi86yeMlf/ma7zRFYLmsY5k4t2v/AvDr9qQOVuwRFjkx93HB FECiiNC5x7NJNH24+7EH4gluNzUWBoUNc7OTgStqf5xYRY59x/YKbO7x+Hvfvn1S IY8K8niM2vYs3CpgF+xL5hY5zBapLdKuDn/+zhXKcwE0AhzvkudnjU8miigELNtW sWxdXmMnk2b5Euyw/FFI0DZlSdQnKYIKJyt03OEnmtdVIQ5YgiG2UMx3rJgWRccp 2F8ipE2FjSuMtDJpm0CxEDwzLvm0Wm3zAe4bB6s1l4sd1tUxuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMElWEvde2wG+5x/IFBDSk2ywJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JiNDdjMTQtMjc5OS0z YjY0LTg3ZDgtMjI2NGRhNWUzODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp+EVnWilzVeiZg6dq2CKI5pi5Z48tPF7rLnH47BfwnqMsIAXgQJBZB TFGGNz3v5IjcSf+0AkwMKLJ19bBtbHggLqRFZcZ6KfFLVAfLlCnuFTlj4VZdY7+8 y6P02Hpk/7Tt61hQ7LOtOo535XBuGB0x660Pl+6HuSOmhrk8Nosd7NevfWse1bpC wanv6xICutF6NzqQi07O4AzrjY525/XBNpKsPiLeLzXAMoSvpygbEPBewSQRCVo4 GfpWL76nyilBbRKgQ7TII+zW/U83LPo8yls69dh7Rr/DFS6DJHuOKXOPucxUfe7j wl3l+3tH10RMnm3yDoVp0iqgbsaW8sc= -----END CERTIFICATE-----Generated at Sun Jun 28 17:23:35 2026 by rpki-client