$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa File: ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa (raw, json) Hash identifier: pyJ5Koe6kHJs0Fbm85m5egutY8vMH9UNtzo+8/GKLVo= Subject key identifier: BF:A2:5A:1C:E2:D3:AB:E0:4C:8F:F4:32:DA:2B:5D:D2:6A:10:2B:FB Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435A8434FD514E8A684F00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:84:34:fd:51:4e:8a:68:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=e5414f20-c08c-49eb-9fdd-c9631603618b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:be:bb:0e:15:dc:df:ba:55:14:75:b7:3d: 94:08:9f:a2:ca:cd:45:32:83:9f:c6:ec:c6:bf:c7: 3a:73:65:36:29:f4:4f:24:8b:73:db:85:55:6d:d2: 53:a2:c3:07:e4:a6:87:ad:10:1e:07:8f:40:2a:b0: 1e:e0:f4:9d:ff:5d:3d:ee:5e:72:97:3c:83:25:3d: 6b:7a:96:72:eb:ac:25:0e:7e:65:24:7f:a0:5f:cc: b5:0a:7e:db:e8:c0:e1:37:f9:73:da:ce:d4:db:ff: 76:09:d4:47:25:c0:ba:e7:0d:94:44:4d:bb:fb:3f: 3a:49:ad:45:05:60:ef:4f:69:9a:7b:74:0b:34:f7: 38:b5:49:33:07:12:f2:4c:0f:2e:4e:ae:33:c5:99: 2d:b7:07:6e:89:56:e9:b1:4f:b1:e9:a7:17:48:d1: f4:8b:a2:70:52:02:37:4f:e2:64:a2:18:27:b0:cd: 95:d9:65:23:db:a5:e8:c5:5a:44:1e:02:71:c3:4c: f6:25:57:4c:da:82:bf:7b:66:a1:b2:29:ae:99:2b: e6:d5:f7:c7:5c:6a:5e:87:82:6f:f0:b1:39:48:3b: 9a:9b:8c:a1:cd:af:79:e9:d3:fc:fa:51:ea:67:8d: 08:b2:4e:3d:31:4a:85:42:dc:99:e7:d6:28:70:26: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A2:5A:1C:E2:D3:AB:E0:4C:8F:F4:32:DA:2B:5D:D2:6A:10:2B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9b:19:71:20:ef:43:ca:c4:9c:34:de:f7:ad:86:67:dc:84: de:f8:17:8a:73:4a:25:f4:c9:50:cb:ff:e8:fe:21:d5:68:98: 2a:a6:43:2e:d3:65:a3:02:00:f8:4b:c6:5c:5c:75:34:6f:93: 59:af:24:bd:ec:5c:5c:f4:76:a4:da:08:a1:88:6c:5d:3b:a2: 5b:cd:13:79:7f:14:62:12:07:42:af:37:c5:d6:1d:fc:4f:df: 17:a7:d2:80:2a:26:d8:a2:ff:e1:b5:9f:69:3a:b3:1f:39:34: 44:78:81:7d:24:3b:d2:5d:d2:7a:48:5c:d7:d0:0d:f5:3f:69: 71:8b:a6:dc:78:62:f0:0d:34:b6:92:cd:a3:bb:0f:4c:56:13: 2a:d1:b6:9f:6a:d5:3b:03:08:4a:42:75:00:66:45:ae:c1:6a: c5:d7:11:3f:4f:9a:2e:2f:77:f8:ab:d7:bb:22:06:33:f7:77: 86:9c:7d:91:be:db:9d:dc:93:ae:b7:d7:89:55:2d:96:5a:48: c3:9c:71:1e:63:6a:f7:e2:11:23:0d:96:89:65:a3:fb:98:01: f6:d2:d5:99:58:11:21:52:38:a8:31:11:1c:56:8c:fa:53:dc: 2c:35:96:01:dd:7a:ec:26:c3:b2:4e:39:e2:88:10:25:30:5b: fc:4d:6e:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1qENP1RTopoTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZTU0MTRmMjAtYzA4Yy00OWViLTlmZGQtYzk2MzE2MDM2MThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml++uw4V3N+6VRR1tz2UCJ+iys1FMoOfxuzG v8c6c2U2KfRPJItz24VVbdJTosMH5KaHrRAeB49AKrAe4PSd/1097l5ylzyDJT1r epZy66wlDn5lJH+gX8y1Cn7b6MDhN/lz2s7U2/92CdRHJcC65w2URE27+z86Sa1F BWDvT2mae3QLNPc4tUkzBxLyTA8uTq4zxZkttwduiVbpsU+x6acXSNH0i6JwUgI3 T+JkohgnsM2V2WUj26XoxVpEHgJxw0z2JVdM2oK/e2ahsimumSvm1ffHXGpeh4Jv 8LE5SDuam4yhza956dP8+lHqZ40Isk49MUqFQtyZ59YocCZoKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+iWhzi06vgTI/0MtorXdJqECv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZWEwNmEwMDctYTFmMC0z OGM4LWJiZWItMmI3OGRiZDZiNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKbGXEg70PKxJw03vethmfchN74F4pzSiX0yVDL/+j+IdVomCqmQy7T ZaMCAPhLxlxcdTRvk1mvJL3sXFz0dqTaCKGIbF07olvNE3l/FGISB0KvN8XWHfxP 3xen0oAqJtii/+G1n2k6sx85NER4gX0kO9Jd0npIXNfQDfU/aXGLptx4YvANNLaS zaO7D0xWEyrRtp9q1TsDCEpCdQBmRa7BasXXET9Pmi4vd/ir17siBjP3d4acfZG+ 253ck66314lVLZZaSMOccR5javfiESMNlollo/uYAfbS1ZlYESFSOKgxERxWjPpT 3Cw1lgHdeuwmw7JOOeKIECUwW/xNbpk= -----END CERTIFICATE-----Generated at Sun Mar 29 19:13:48 2026 by rpki-client