$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa File: ee433468-bf42-3f91-8d0a-4a4c07f44583.roa (raw, json) Hash identifier: toECmvJBDSSeQ4aMkO1GHmEZOd2a0HutD0ZLX0uzEoY= Subject key identifier: 5A:4C:BF:A7:CE:78:6D:EA:48:10:95:09:52:35:D5:16:B8:AD:3F:CD Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435A9C90CDE21803E74C70 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:9c:90:cd:e2:18:03:e7:4c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=b7ef3786-c268-4fbf-89e3-18509dcf6a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a5:ca:42:3c:bd:40:0a:08:65:a8:91:b5:43: 09:2a:54:53:56:c0:6b:13:2e:6c:79:11:c8:9c:a6: 03:94:31:45:4f:02:90:be:ce:3a:66:bc:3e:b8:12: 13:4d:45:6e:a1:d7:6b:46:e0:15:8e:b8:19:df:68: 0f:13:11:8f:df:f6:e3:95:d2:6e:63:9d:4e:0b:d0: 57:a7:1e:f1:cf:be:86:b1:2d:99:ae:a2:33:bc:01: 2e:ba:93:55:3a:fa:a9:c8:5a:c3:da:6c:79:b6:45: 3f:7e:9d:70:60:e6:18:8f:b3:08:ed:b5:06:dc:5e: 9a:e4:7e:65:c1:7a:c2:bb:2c:ac:b7:d4:4d:73:1b: 88:ec:9f:61:17:1b:85:4f:76:54:97:9b:0f:87:f9: 21:1d:c2:ac:22:ef:a7:b9:e4:ba:0f:fd:23:8d:66: 2c:c5:cf:80:a2:f5:d3:ea:bb:33:71:68:1d:7b:cd: 5d:b0:8f:52:9b:ed:8a:58:1a:14:3c:17:c5:4a:49: 6e:b7:c1:fe:07:64:de:c4:c0:40:47:48:a3:1d:93: 7b:26:5b:92:44:b0:6b:cb:cb:65:db:cd:aa:6b:d0: dd:bc:35:cd:ab:74:2f:0a:62:24:2e:f7:fa:70:02: 36:1b:19:25:af:fd:37:1d:5d:7e:09:7e:58:fb:bd: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4C:BF:A7:CE:78:6D:EA:48:10:95:09:52:35:D5:16:B8:AD:3F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0f:d8:27:ba:9b:12:cc:d2:81:d1:a1:96:63:16:fc:a4:8f: 43:42:ec:b0:3a:d2:81:79:f3:c9:31:12:e7:d3:41:35:2d:5c: f8:db:ce:56:67:70:e0:ed:3e:a9:d2:9b:0d:c5:46:77:65:cc: dd:bb:9f:e0:53:1b:b5:5c:27:da:d3:61:d7:73:8d:a2:da:34: 7b:a0:b6:62:b9:65:b6:5e:a6:be:8b:f2:e4:53:b6:6a:8d:2a: f1:6f:b1:f1:dd:9e:03:0b:ab:8f:f5:81:6e:9d:cf:a7:b7:48: e6:43:d7:df:1d:08:ef:b9:1a:50:b6:b8:4d:4d:22:a0:c9:43: f3:92:29:ab:ce:11:8f:e4:f0:63:28:b3:65:0a:38:9c:08:d1: 53:f2:1f:55:b3:c9:07:f4:48:c9:72:59:b1:8b:61:70:3e:19: 34:36:f9:86:c7:a2:68:d1:16:f8:ea:c9:4e:03:34:ae:78:39: 35:bb:e0:44:c8:b8:20:ac:e7:15:37:66:74:d7:88:96:40:ef: 2c:6d:65:e6:03:35:68:d1:92:4e:6f:05:7d:ca:80:56:fb:cd: 05:e0:88:bd:02:1c:32:ab:b3:77:fe:be:19:fd:05:58:96:51: 99:07:8a:34:3c:16:f1:f3:cf:83:57:84:84:70:6d:b5:1c:90: 63:0f:f6:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1qckM3iGAPnTHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YjdlZjM3ODYtYzI2OC00ZmJmLTg5ZTMtMTg1MDlkY2Y2YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06XKQjy9QAoIZaiRtUMJKlRTVsBrEy5seRHI nKYDlDFFTwKQvs46Zrw+uBITTUVuoddrRuAVjrgZ32gPExGP3/bjldJuY51OC9BX px7xz76GsS2ZrqIzvAEuupNVOvqpyFrD2mx5tkU/fp1wYOYYj7MI7bUG3F6a5H5l wXrCuyyst9RNcxuI7J9hFxuFT3ZUl5sPh/khHcKsIu+nueS6D/0jjWYsxc+AovXT 6rszcWgde81dsI9Sm+2KWBoUPBfFSklut8H+B2TexMBAR0ijHZN7JluSRLBry8tl 282qa9DdvDXNq3QvCmIkLvf6cAI2Gxklr/03HV1+CX5Y+707BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpMv6fOeG3qSBCVCVI11Ra4rT/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZWU0MzM0NjgtYmY0Mi0z ZjkxLThkMGEtNGE0YzA3ZjQ0NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0P2Ce6mxLM0oHRoZZjFvykj0NC7LA60oF588kxEufTQTUtXPjbzlZn cODtPqnSmw3FRndlzN27n+BTG7VcJ9rTYddzjaLaNHugtmK5ZbZepr6L8uRTtmqN KvFvsfHdngMLq4/1gW6dz6e3SOZD198dCO+5GlC2uE1NIqDJQ/OSKavOEY/k8GMo s2UKOJwI0VPyH1WzyQf0SMlyWbGLYXA+GTQ2+YbHomjRFvjqyU4DNK54OTW74ETI uCCs5xU3ZnTXiJZA7yxtZeYDNWjRkk5vBX3KgFb7zQXgiL0CHDKrs3f+vhn9BViW UZkHijQ8FvHzz4NXhIRwbbUckGMP9s4= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:21 2026 by rpki-client