$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa File: cbf5d661-caf7-3016-8cfc-b5a540e71195.roa (raw, json) Hash identifier: +WSZ+oIdFXw53cln3BKl1IoLJ0pLdo1urtZ0pxUdPXk= Subject key identifier: 24:C1:07:1C:48:9B:6F:9E:04:43:CC:A3:59:F8:8A:5B:DA:22:39:80 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D524353F88FEA0E2245D8B200 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 199.91.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:53:f8:8f:ea:0e:22:45:d8:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=4f884d97-a6ce-410f-bb81-2b375ba79e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:dc:9b:7a:73:1b:53:66:7b:a7:55:f9:b5: 60:f2:a6:a1:fd:6d:08:3a:fd:da:8a:28:8b:b1:a3: 88:43:6e:d1:d5:d2:2a:9d:56:91:dd:a2:cf:f1:7c: 45:44:a5:a5:e3:3a:d3:0e:2c:b6:5b:d0:7d:39:a5: 95:b8:13:a0:bc:9e:b9:c0:d4:be:03:a3:7f:c1:ca: 19:96:97:b2:8b:48:d9:92:29:fc:a1:8a:7e:4f:4c: d3:fa:a0:b4:00:e1:2c:46:e2:d5:0a:68:97:0a:e7: 49:1b:30:6c:08:bc:e4:37:d9:b6:9f:c6:a9:f5:37: ba:65:d0:74:0d:12:76:eb:ea:7e:6e:bf:2d:41:f1: 04:d4:79:ac:9c:41:7b:45:9c:a1:6a:bd:b7:12:e9: f8:86:9d:38:93:f4:e3:9b:b5:d7:68:59:23:b4:03: 33:7a:d5:b6:82:d3:5e:d6:6b:3f:2e:2a:f4:c2:0c: 93:55:36:d6:76:ac:b8:d2:62:21:fa:61:1a:41:42: 13:a9:d1:b6:cd:85:d6:b6:0c:92:e1:ba:47:5c:f8: e5:e8:af:fa:ce:e0:82:2e:57:99:4e:85:a6:5f:b5: b7:f6:b3:b6:2b:3a:f4:0e:08:09:ad:46:0e:ee:4c: a8:2b:2d:48:ad:db:dc:03:d4:ed:13:82:39:00:a3: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C1:07:1C:48:9B:6F:9E:04:43:CC:A3:59:F8:8A:5B:DA:22:39:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:68:7d:df:e0:56:ea:4e:83:92:d2:b3:85:fa:f4:e1:55:ec: c5:e3:6c:71:b5:8b:e8:aa:cd:ea:72:d8:14:a9:60:68:45:92: aa:cb:12:d7:f9:29:79:87:ad:27:1b:78:ae:14:b5:f1:07:cc: 51:e0:64:41:87:82:ee:25:85:69:d5:7c:12:40:66:ff:7c:9d: 5b:16:c5:62:f7:8a:90:3a:05:54:ad:8e:df:1f:44:e9:53:9a: fd:9e:8b:66:62:2c:83:d7:fb:c9:bc:fc:bb:e7:cb:d2:3f:1f: f3:aa:67:56:4b:9b:47:0c:4e:af:df:d0:e4:fb:f5:b3:1b:60: 70:da:cf:b8:9b:80:52:8f:28:3b:d2:23:f1:d6:86:3b:b5:88: 53:08:d6:2f:2a:a1:18:6c:e1:3d:6b:69:91:ea:74:2e:f7:c3: bd:66:ba:c9:00:c2:dc:f4:ce:4c:04:b3:e8:8a:93:15:ff:dd: 7d:21:ce:ff:ee:71:1e:c5:41:0c:49:41:2e:d0:c1:0d:86:e2: 14:62:1f:f3:d8:92:92:c7:22:79:3d:4e:df:c6:04:b4:bf:20: 2f:05:21:f8:6b:30:d7:54:33:9d:02:c4:18:a2:e5:3b:f2:ed: 96:70:08:c5:7d:54:c5:3e:65:d9:bd:ac:05:75:a7:79:63:8f: 49:fe:b2:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1P4j+oOIkXYsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NGY4ODRkOTctYTZjZS00MTBmLWJiODEtMmIzNzViYTc5ZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgvcm3pzG1Nme6dV+bVg8qah/W0IOv3aiiiL saOIQ27R1dIqnVaR3aLP8XxFRKWl4zrTDiy2W9B9OaWVuBOgvJ65wNS+A6N/wcoZ lpeyi0jZkin8oYp+T0zT+qC0AOEsRuLVCmiXCudJGzBsCLzkN9m2n8ap9Te6ZdB0 DRJ26+p+br8tQfEE1HmsnEF7RZyhar23Eun4hp04k/Tjm7XXaFkjtAMzetW2gtNe 1ms/Lir0wgyTVTbWdqy40mIh+mEaQUITqdG2zYXWtgyS4bpHXPjl6K/6zuCCLleZ ToWmX7W39rO2Kzr0DggJrUYO7kyoKy1IrdvcA9TtE4I5AKMr1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTBBxxIm2+eBEPMo1n4ilvaIjmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JmNWQ2NjEtY2FmNy0z MDE2LThjZmMtYjVhNTQwZTcxMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtofd/gVupOg5LSs4X69OFV7MXjbHG1i+iqzepy2BSpYGhFkqrLEtf5 KXmHrScbeK4UtfEHzFHgZEGHgu4lhWnVfBJAZv98nVsWxWL3ipA6BVStjt8fROlT mv2ei2ZiLIPX+8m8/Lvny9I/H/OqZ1ZLm0cMTq/f0OT79bMbYHDaz7ibgFKPKDvS I/HWhju1iFMI1i8qoRhs4T1raZHqdC73w71muskAwtz0zkwEs+iKkxX/3X0hzv/u cR7FQQxJQS7QwQ2G4hRiH/PYkpLHInk9Tt/GBLS/IC8FIfhrMNdUM50CxBii5Tvy 7ZZwCMV9VMU+Zdm9rAV1p3ljj0n+svs= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:13 2026 by rpki-client