$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa File: f4185a63-316f-3d91-b674-52ffad72f800.roa (raw, json) Hash identifier: D/3p7MVic2sGXeyPgg2fnNEu1W1sjrY8Ci2r8FlpIdU= Subject key identifier: CF:E0:67:62:62:9E:E6:31:DC:A9:71:1F:58:66:9A:76:62:0E:C9:9A Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435A22185092A5CEE86100 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:22:18:50:92:a5:ce:e8:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=cc286b82-bb08-440a-9212-8a803f25ce94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:11:4c:6d:35:21:c2:18:ba:3c:17:39:04: 57:a3:c9:7b:d5:73:e5:49:14:5e:65:b9:5c:47:e1: 23:bc:1b:76:80:8b:a7:ae:d8:c6:59:95:5c:a4:17: 0f:3d:d0:7a:46:37:d6:f7:3e:7b:63:39:a8:49:f9: 43:b1:5a:ec:90:7d:38:84:f7:f9:a8:42:68:30:2c: da:66:90:37:7f:ae:d2:5e:a6:8c:3b:e2:16:f0:46: b3:2e:32:44:22:f3:f6:ab:33:0e:ba:8d:67:72:18: 22:fa:79:58:18:59:02:20:4c:82:68:0c:f5:e8:9d: 9a:25:c7:d9:b0:4d:17:c1:c3:dc:11:37:55:07:1d: be:ee:58:0d:83:fd:f5:28:e7:0f:cb:47:4f:2c:b3: 7d:13:22:31:9d:b1:c7:57:b7:e8:45:e8:4a:36:91: c3:b2:17:0e:c6:6e:dc:1f:86:fd:e8:38:1a:c4:f4: 17:a7:24:17:fa:77:e7:d0:76:5c:ba:ef:cd:b2:f5: 88:15:99:72:1d:b8:34:03:f2:7d:ad:26:37:fc:91: b9:cb:45:8a:80:b6:77:1f:50:ac:c1:b8:25:1b:80: b1:94:07:4c:2d:0d:20:f5:75:29:6c:98:a2:48:8e: 03:41:29:a6:00:c9:ad:34:fc:72:fc:55:33:3a:9d: 94:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E0:67:62:62:9E:E6:31:DC:A9:71:1F:58:66:9A:76:62:0E:C9:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f8:64:8d:2d:8d:2e:a8:06:7a:29:cb:f0:1a:78:de:e7:72: d0:f5:15:01:cc:ae:e5:3c:59:80:af:a0:0f:a9:d4:d8:ce:4b: 6b:cc:bd:74:50:b1:41:e2:cc:c3:67:8e:54:80:61:a3:73:40: ab:6c:21:16:cd:c5:ce:18:83:33:79:cf:78:39:85:50:85:d8: 15:f4:6d:82:cc:a0:d7:6e:1a:b1:df:1c:63:f3:94:92:6f:b9: 02:b8:b6:cf:5d:ce:06:be:92:40:d9:9b:6b:4f:35:1b:93:23: 47:bc:7b:fb:34:83:7b:d4:fc:a7:aa:0e:fe:2b:3c:e4:ac:50: dd:62:33:f2:f5:1f:2c:5e:d5:2e:cf:83:cd:5a:22:02:b6:56: 0d:a6:88:eb:b7:bf:4e:04:82:f5:a4:43:20:af:e3:3e:2b:ed: b3:a9:48:88:95:53:b1:80:3e:f5:11:da:a2:0b:8d:0d:fe:83: ab:3c:ce:a5:f5:02:78:3c:bd:4d:7d:3f:b7:5b:92:b8:0f:9b: 88:84:04:fc:05:04:d2:dd:fd:44:14:9c:46:76:2c:20:86:85: b7:54:bd:45:fe:6d:6e:e6:38:63:c6:19:5b:4a:90:b7:b4:d8: 94:a4:19:28:72:b6:40:17:10:a8:d2:cb:c0:89:4a:ca:7d:4c: 1e:28:be:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1oiGFCSpc7oYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk Y2MyODZiODItYmIwOC00NDBhLTkyMTItOGE4MDNmMjVjZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K0RTG01IcIYujwXOQRXo8l71XPlSRReZblc R+EjvBt2gIunrtjGWZVcpBcPPdB6RjfW9z57YzmoSflDsVrskH04hPf5qEJoMCza ZpA3f67SXqaMO+IW8EazLjJEIvP2qzMOuo1nchgi+nlYGFkCIEyCaAz16J2aJcfZ sE0XwcPcETdVBx2+7lgNg/31KOcPy0dPLLN9EyIxnbHHV7foRehKNpHDshcOxm7c H4b96DgaxPQXpyQX+nfn0HZcuu/NsvWIFZlyHbg0A/J9rSY3/JG5y0WKgLZ3H1Cs wbglG4CxlAdMLQ0g9XUpbJiiSI4DQSmmAMmtNPxy/FUzOp2UcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/gZ2JinuYx3KlxH1hmmnZiDsmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjQxODVhNjMtMzE2Zi0z ZDkxLWI2NzQtNTJmZmFkNzJmODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG74ZI0tjS6oBnopy/AaeN7nctD1FQHMruU8WYCvoA+p1NjOS2vMvXRQ sUHizMNnjlSAYaNzQKtsIRbNxc4YgzN5z3g5hVCF2BX0bYLMoNduGrHfHGPzlJJv uQK4ts9dzga+kkDZm2tPNRuTI0e8e/s0g3vU/KeqDv4rPOSsUN1iM/L1Hyxe1S7P g81aIgK2Vg2miOu3v04EgvWkQyCv4z4r7bOpSIiVU7GAPvUR2qILjQ3+g6s8zqX1 Ang8vU19P7dbkrgPm4iEBPwFBNLd/UQUnEZ2LCCGhbdUvUX+bW7mOGPGGVtKkLe0 2JSkGShytkAXEKjSy8CJSsp9TB4ovmI= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:05 2026 by rpki-client