$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa File: e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa (raw, json) Hash identifier: rN3R8B2u+8NStL5BbFYO3On1GeubFvNEUqRvGnYM+VA= Subject key identifier: 25:77:1A:6F:88:48:D4:27:45:E8:18:C1:4C:26:B5:0A:E8:07:CF:72 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E31CF1B6F49786C104DC76A80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 16839 IP address blocks: 149.96.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:1b:6f:49:78:6c:10:4d:c7:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=1459f216-f1de-4071-a32f-1f2b4017ba81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:e6:c7:94:d1:d5:77:ca:dd:d2:99:c7:48: c1:5c:a2:f0:98:25:83:a8:a3:a0:aa:8e:40:2a:92: 0b:15:dd:7b:2d:30:5c:8e:d1:aa:c7:ed:e0:db:78: 3f:1a:91:52:5e:bc:7c:2d:8f:5a:55:a0:65:4c:10: 38:1e:6d:96:b6:01:37:a4:83:f0:a6:60:9f:0d:3a: ca:51:10:b0:bb:4a:5e:87:f2:00:bf:a2:01:46:74: 12:f6:79:3a:bf:ce:a5:ec:79:2f:3e:e2:09:db:25: ad:3f:93:c0:31:6d:25:58:a5:3c:a2:5d:ea:75:3f: 9c:36:de:c8:99:88:4a:4b:4e:5b:11:ec:ae:62:b7: 1c:d4:23:cd:9a:44:92:82:81:d2:00:4f:2e:51:a7: 11:1a:c1:b3:f2:39:ee:6d:0d:13:e3:05:44:3e:68: 53:2a:96:e1:07:d7:52:95:c5:1c:89:63:d7:78:10: 8a:31:a4:ff:1b:ef:d3:a9:c4:c1:18:99:5a:28:39: 58:ff:bf:3d:8c:69:25:9c:d1:d8:3b:1f:48:7a:d4: b6:c6:9a:5f:66:b1:9d:2e:8a:57:9b:7e:bf:14:6f: 2f:00:45:5a:f4:0b:fd:09:4a:62:19:8e:fc:6b:47: 46:21:14:a4:59:23:32:02:96:59:73:3e:5a:ac:0e: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:77:1A:6F:88:48:D4:27:45:E8:18:C1:4C:26:B5:0A:E8:07:CF:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6c:bc:85:99:9c:ea:31:5f:89:92:b2:ef:51:9b:3e:de:e3: 8e:84:51:27:68:e7:c1:ce:f5:7a:8f:a7:8c:eb:52:08:04:f9: 2b:3b:18:e2:21:67:26:3a:07:fc:ab:68:5e:fa:b6:20:6b:7a: 2d:5b:62:61:bf:64:b0:59:8f:4a:db:ab:d4:12:26:54:70:05: 03:d1:87:3b:e0:aa:dd:e0:a0:1b:13:5e:12:ae:e2:0e:55:77: b3:56:29:a8:00:c0:99:ab:97:8c:f2:ee:9e:5a:a9:f9:d3:ef: c9:0c:bf:f6:89:ad:8f:37:77:3d:8b:06:3c:7a:53:f1:ee:a8: fb:01:cd:4e:77:08:fb:fb:7a:4b:11:e2:b8:cb:28:59:17:64: 4f:de:90:ba:1a:4f:6d:a3:71:b2:84:56:2b:0a:15:d9:03:f6: 03:45:34:9d:64:27:47:15:68:d2:2a:26:6a:e4:f4:d0:2a:60: 55:51:f6:1b:7f:35:28:01:6c:e5:76:07:8e:d2:f1:18:3e:97: 9e:ce:af:d1:b2:8b:b1:64:05:52:3b:d1:be:2f:cb:41:8a:ef: 49:58:42:a9:87:6f:fb:4f:27:f7:a1:f1:73:8a:6f:98:58:56: c1:79:18:17:30:27:96:49:5a:f1:0b:e1:ea:91:6f:1b:62:9b: 13:8d:2b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxtvSXhsEE3HaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk MTQ1OWYyMTYtZjFkZS00MDcxLWEzMmYtMWYyYjQwMTdiYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPrmx5TR1XfK3dKZx0jBXKLwmCWDqKOgqo5A KpILFd17LTBcjtGqx+3g23g/GpFSXrx8LY9aVaBlTBA4Hm2WtgE3pIPwpmCfDTrK URCwu0peh/IAv6IBRnQS9nk6v86l7HkvPuIJ2yWtP5PAMW0lWKU8ol3qdT+cNt7I mYhKS05bEeyuYrcc1CPNmkSSgoHSAE8uUacRGsGz8jnubQ0T4wVEPmhTKpbhB9dS lcUciWPXeBCKMaT/G+/TqcTBGJlaKDlY/789jGklnNHYOx9IetS2xppfZrGdLopX m36/FG8vAEVa9Av9CUpiGY78a0dGIRSkWSMyApZZcz5arA5ltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV3Gm+ISNQnRegYwUwmtQroB89yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZTIzZjhhNzktOWZkNi0z YWQ3LWIzZjUtM2I5MGRmYWQwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFsvIWZnOoxX4mSsu9Rmz7e446EUSdo58HO9XqPp4zrUggE+Ss7GOIh ZyY6B/yraF76tiBrei1bYmG/ZLBZj0rbq9QSJlRwBQPRhzvgqt3goBsTXhKu4g5V d7NWKagAwJmrl4zy7p5aqfnT78kMv/aJrY83dz2LBjx6U/HuqPsBzU53CPv7eksR 4rjLKFkXZE/ekLoaT22jcbKEVisKFdkD9gNFNJ1kJ0cVaNIqJmrk9NAqYFVR9ht/ NSgBbOV2B47S8Rg+l57Or9Gyi7FkBVI70b4vy0GK70lYQqmHb/tPJ/eh8XOKb5hY VsF5GBcwJ5ZJWvEL4eqRbxtimxONKwQ= -----END CERTIFICATE-----Generated at Sun Jun 28 17:22:47 2026 by rpki-client