$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa File: cbb47c14-2799-3b64-87d8-2264da5e3862.roa (raw, json) Hash identifier: 8yfzc49wkdOABlpLSP6CkMHPScKhC8UjiDN6dk21bfA= Subject key identifier: 65:6B:9F:82:02:0C:20:F4:91:2C:DE:01:BC:86:01:41:5E:64:67:7E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435A16B670D3C16A0D6880 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:16:b6:70:d3:c1:6a:0d:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=aa9bb35a-fa45-4990-872d-3c2f06695200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5b:32:52:c1:05:74:38:ad:c8:0f:94:13:f6: 39:c0:f9:20:13:25:cf:bd:b8:89:05:39:ef:e4:6f: a2:ba:74:29:ae:13:2c:7c:1f:89:f9:b3:fc:fb:05: 6e:3e:ac:96:79:ef:5b:bc:c4:33:1a:69:51:1c:66: 77:55:70:05:1b:ac:2f:9a:15:0c:a5:60:d0:44:b3: 72:b9:47:1c:fa:9a:bb:fd:8d:df:dd:f4:f3:ba:4c: e6:aa:3d:51:84:29:e3:d2:d3:50:b4:f2:51:91:dc: 10:d5:52:9d:36:69:56:64:7e:bc:64:59:ba:b0:0b: 08:45:cd:3b:87:05:16:c6:be:53:f0:8e:5f:01:ab: 67:bf:cd:37:6f:58:1a:18:c5:ec:90:67:be:67:08: 33:65:74:80:1e:8a:64:60:3e:5d:bd:0a:68:7c:e8: 6c:5a:31:aa:60:ac:4f:d8:3f:00:56:fe:0f:17:d2: d6:66:96:31:49:af:4c:db:8d:10:40:f6:c9:73:61: 66:a9:cf:57:d9:76:67:05:69:6b:df:2d:a3:61:bb: 8e:8a:1e:51:00:b2:1d:f3:92:c5:67:9b:7b:27:15: e3:4c:01:66:c0:06:6a:ab:bc:00:b8:c8:61:82:82: 4d:07:7d:b2:bd:74:c3:bc:35:68:dc:40:05:3d:10: a1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6B:9F:82:02:0C:20:F4:91:2C:DE:01:BC:86:01:41:5E:64:67:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:4b:ec:cb:16:17:16:3b:12:a2:b9:61:08:7c:b9:58:e2:cc: 9d:a8:3c:70:91:39:3f:c0:69:61:b5:d2:23:5e:7d:bf:ed:ef: b4:1e:26:d7:11:05:18:63:ad:49:33:a1:01:45:0c:6d:d4:88: c5:83:e0:d0:fb:ff:72:a2:e1:4d:fc:db:16:22:74:37:23:02: a4:e6:2b:ca:8c:fc:a9:af:57:eb:fe:ae:f5:a1:37:7f:c6:e1: 20:8f:9e:a6:51:4a:48:42:8c:97:0d:cf:77:94:b4:a3:45:f1: 1f:57:4f:b1:34:91:44:36:9d:86:39:73:1a:f2:51:d3:38:fc: 73:e1:a9:d1:1f:66:fc:c6:d6:7a:69:bb:22:03:16:31:8a:c9: 1b:8f:30:39:99:ce:35:b6:23:04:f0:c6:eb:2e:70:56:cf:5a: c0:a4:10:0b:71:27:9d:09:f8:f1:24:8c:d1:17:b5:99:df:b6: 3f:08:92:d8:4e:56:e7:95:cc:37:f7:4e:90:e0:73:73:a2:ed: d2:51:6f:7e:88:52:a1:e3:30:fd:88:ed:3c:2c:7e:c2:48:3f: 85:a3:95:bd:2c:1e:ec:9e:fb:06:fa:e2:c2:f7:a6:03:46:10: b8:3b:10:92:ed:c1:74:1f:cc:af:22:e8:ca:ac:25:2d:ff:f3: 55:cd:55:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1oWtnDTwWoNaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YWE5YmIzNWEtZmE0NS00OTkwLTg3MmQtM2MyZjA2Njk1MjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lsyUsEFdDityA+UE/Y5wPkgEyXPvbiJBTnv 5G+iunQprhMsfB+J+bP8+wVuPqyWee9bvMQzGmlRHGZ3VXAFG6wvmhUMpWDQRLNy uUcc+pq7/Y3f3fTzukzmqj1RhCnj0tNQtPJRkdwQ1VKdNmlWZH68ZFm6sAsIRc07 hwUWxr5T8I5fAatnv803b1gaGMXskGe+ZwgzZXSAHopkYD5dvQpofOhsWjGqYKxP 2D8AVv4PF9LWZpYxSa9M240QQPbJc2Fmqc9X2XZnBWlr3y2jYbuOih5RALId85LF Z5t7JxXjTAFmwAZqq7wAuMhhgoJNB32yvXTDvDVo3EAFPRChswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVrn4ICDCD0kSzeAbyGAUFeZGd+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JiNDdjMTQtMjc5OS0z YjY0LTg3ZDgtMjI2NGRhNWUzODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJL7MsWFxY7EqK5YQh8uVjizJ2oPHCROT/AaWG10iNefb/t77QeJtcR BRhjrUkzoQFFDG3UiMWD4ND7/3Ki4U382xYidDcjAqTmK8qM/KmvV+v+rvWhN3/G 4SCPnqZRSkhCjJcNz3eUtKNF8R9XT7E0kUQ2nYY5cxryUdM4/HPhqdEfZvzG1npp uyIDFjGKyRuPMDmZzjW2IwTwxusucFbPWsCkEAtxJ50J+PEkjNEXtZnftj8IkthO VueVzDf3TpDgc3Oi7dJRb36IUqHjMP2I7TwsfsJIP4Wjlb0sHuye+wb64sL3pgNG ELg7EJLtwXQfzK8i6MqsJS3/81XNVZE= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:10 2026 by rpki-client