$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa File: f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa (raw, json) Hash identifier: 7bLsv7yMMZpqclW/980Sx0BZ8BbvJN+G2H8N2inhO9o= Subject key identifier: F5:81:F8:36:9E:83:22:29:7A:17:44:BA:AD:27:38:07:3F:35:23:D4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D52435AC05A56689240844F60 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:c0:5a:56:68:92:40:84:4f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=905bb967-a721-49fb-b21b-0d7b96a71a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5f:31:b2:ab:16:17:3a:f0:2f:24:5d:10:f3: ce:6b:af:1c:5e:cf:af:57:17:a5:65:20:46:ff:c7: f6:85:29:e5:59:27:b3:75:06:e0:fb:0b:0b:c8:56: bd:0b:cd:df:88:5f:37:fd:2e:93:56:b9:1f:d5:60: fe:88:d6:e4:59:be:ec:00:d0:e3:97:e5:87:37:d4: a3:9a:2a:8a:f1:0e:2d:f0:16:87:1f:df:81:b5:e4: 90:71:bd:12:a5:12:e3:b5:28:45:12:f6:81:63:be: 5d:3d:f9:67:41:be:04:d6:d0:b7:32:8b:e2:73:53: 56:7d:d5:82:b7:09:82:aa:05:b4:83:77:67:ba:07: df:8b:e5:e8:24:6e:e6:fb:dc:db:47:44:23:3d:62: 3f:48:c6:73:f1:a8:50:89:d5:11:73:85:f7:3e:c1: 46:bd:61:f8:0e:c5:82:80:3b:b9:1e:42:67:e5:54: 47:7b:e2:3d:54:bc:21:6c:27:97:3b:2e:d9:47:e9: 90:fd:90:7b:58:36:cc:6b:38:12:2c:24:4c:84:25: b1:98:4e:62:1a:a2:fa:0b:05:30:10:44:ec:46:b5: 52:2f:00:bc:8f:3f:85:81:02:80:50:c6:e9:c1:51: a0:d7:5b:3d:2e:e8:a5:1a:1a:fc:45:38:39:cb:ff: 6b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:81:F8:36:9E:83:22:29:7A:17:44:BA:AD:27:38:07:3F:35:23:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:74:e8:65:cb:74:39:81:e4:dd:ed:16:1c:e9:73:6a:94:e8: 08:8e:d6:ff:d6:32:6a:05:8c:a1:f1:38:3f:6b:cd:3d:a7:d6: 21:84:ec:75:7e:b7:d9:2b:a4:e2:5c:5e:06:47:94:e3:15:c2: 22:b2:90:c7:15:c6:8c:5f:23:ed:fe:ea:3c:1a:4e:05:6f:2a: 1c:9e:f0:46:e8:41:61:90:7c:84:f1:47:59:98:88:2f:c3:24: e2:41:a6:ba:75:2f:77:3c:98:8b:99:c1:7e:f1:e1:34:d3:c5: 60:7b:68:f9:f1:2a:c2:8b:6d:fd:03:5e:5c:a4:0d:49:2a:38: 7b:c9:09:9a:13:d2:9a:e2:bf:be:2f:ee:13:bf:34:28:af:42: 9a:a0:1d:39:56:af:6d:ad:2e:f5:cd:a1:aa:e5:fe:d2:e9:a4: fd:a8:b2:79:c0:d3:f5:58:b6:2d:ce:a2:a1:a2:2c:40:01:ac: e5:77:58:53:ad:51:4d:1c:a1:99:ab:0f:cd:9e:74:59:4c:c7: cf:98:e3:f9:0c:a9:65:6f:0b:16:47:33:97:05:55:0c:ae:02: ad:23:fe:73:5f:47:36:e1:e0:a7:73:a4:56:01:39:ed:be:c7: 89:48:41:0e:d8:34:68:24:13:f5:8b:cb:4f:56:b2:cc:b2:6e: e1:d9:77:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1rAWlZokkCET2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OTA1YmI5NjctYTcyMS00OWZiLWIyMWItMGQ3Yjk2YTcxYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj18xsqsWFzrwLyRdEPPOa68cXs+vVxelZSBG /8f2hSnlWSezdQbg+wsLyFa9C83fiF83/S6TVrkf1WD+iNbkWb7sANDjl+WHN9Sj miqK8Q4t8BaHH9+BteSQcb0SpRLjtShFEvaBY75dPflnQb4E1tC3Movic1NWfdWC twmCqgW0g3dnugffi+XoJG7m+9zbR0QjPWI/SMZz8ahQidURc4X3PsFGvWH4DsWC gDu5HkJn5VRHe+I9VLwhbCeXOy7ZR+mQ/ZB7WDbMazgSLCRMhCWxmE5iGqL6CwUw EETsRrVSLwC8jz+FgQKAUMbpwVGg11s9LuilGhr8RTg5y/9rjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWB+DaegyIpehdEuq0nOAc/NSPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjg1Y2UwYjItOTMxOC0z ZDRjLWJlYmUtNDc3NzRhMTA2NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB06GXLdDmB5N3tFhzpc2qU6AiO1v/WMmoFjKHxOD9rzT2n1iGE7HV+ t9krpOJcXgZHlOMVwiKykMcVxoxfI+3+6jwaTgVvKhye8EboQWGQfITxR1mYiC/D JOJBprp1L3c8mIuZwX7x4TTTxWB7aPnxKsKLbf0DXlykDUkqOHvJCZoT0priv74v 7hO/NCivQpqgHTlWr22tLvXNoarl/tLppP2osnnA0/VYti3OoqGiLEABrOV3WFOt UU0coZmrD82edFlMx8+Y4/kMqWVvCxZHM5cFVQyuAq0j/nNfRzbh4KdzpFYBOe2+ x4lIQQ7YNGgkE/WLy09WssyybuHZdxA= -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:27 2026 by rpki-client