$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89f00404-414a-312c-936c-4eeab53f6f64.roa File: 89f00404-414a-312c-936c-4eeab53f6f64.roa (raw, json) Hash identifier: 1ilakNlO4jjReArXILs2evGX6CbpU5r6gHw6tYl9/c4= Subject key identifier: DE:EE:4E:CD:51:F7:7E:4C:04:F1:63:4D:BF:37:B5:13:40:59:BD:08 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E3E5F2F9ED2760592C33ABC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89f00404-414a-312c-936c-4eeab53f6f64.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 6167 IP address blocks: 166.149.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:2f:9e:d2:76:05:92:c3:3a:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=cbbf634c-a7b4-46a9-bccd-823107507cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e3:99:21:4d:17:2c:27:a9:2c:c6:6f:26:eb: c3:a4:11:f6:2a:4a:89:7c:bd:9e:b8:d0:3c:59:26: 9b:be:d1:34:bb:c4:f5:f8:a0:34:ab:5d:e6:44:19: 2d:f4:30:14:42:ac:b2:bd:91:20:14:a2:41:65:6d: ec:65:10:3e:7c:21:34:12:85:25:c0:72:a9:3f:1a: 40:78:1e:28:74:31:aa:5d:6d:0c:7f:a9:7e:9a:a8: 5b:fa:6d:cf:99:4c:c4:5f:b4:45:59:83:5c:89:d6: 87:91:bd:c4:b6:03:6b:05:53:31:d5:36:c7:db:36: d3:eb:26:eb:31:ee:10:78:bc:a0:3c:15:fe:37:12: 5f:44:b9:0e:aa:c3:a3:13:91:07:d5:7b:8d:ec:73: b9:e9:d2:55:2c:d5:eb:44:fa:69:7b:b2:7a:12:dc: 04:f4:2d:b9:c9:5f:b6:d0:8a:f4:62:db:c3:5f:f1: a2:1e:8d:98:8e:10:d6:a6:66:15:31:82:91:00:68: 24:80:17:9e:49:99:f3:f4:bb:ad:16:e3:f9:30:1e: 69:55:d9:87:0a:bd:37:67:e9:79:98:94:a2:87:11: 73:83:5f:2e:dc:c1:b4:ff:a5:da:2d:49:7f:d9:ee: f2:cb:52:3b:12:94:a8:77:e2:9b:1c:7a:ba:04:cb: ef:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EE:4E:CD:51:F7:7E:4C:04:F1:63:4D:BF:37:B5:13:40:59:BD:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89f00404-414a-312c-936c-4eeab53f6f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.149.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:f1:6b:7f:85:38:98:14:3b:3a:79:86:0a:97:85:a5:ce:38: 19:80:82:d2:ee:5a:a2:68:5e:49:37:e0:47:65:a2:e8:ee:a3: 2d:5e:f5:a3:23:f9:8d:8c:fb:2d:2f:5a:b2:51:c3:b6:84:4f: 57:eb:24:5e:33:0d:f5:e3:4f:20:2a:bc:41:de:41:6f:33:82: fa:48:ee:8e:1e:e5:20:08:f4:e5:4e:5e:fa:c3:8b:27:cd:37: ba:1d:43:ba:a1:33:93:1e:55:66:02:80:69:4c:8d:ea:4e:f0: 63:a9:4c:90:bd:65:db:4b:d9:0a:71:e3:39:4b:f9:d3:6f:13: 0e:c5:fd:74:a1:b5:49:1b:d9:8b:1b:40:1b:67:a5:4e:fa:7f: 89:ac:6d:90:d0:d8:80:ef:bc:1a:7f:6b:be:72:0a:aa:5a:61: a1:de:19:2b:c0:81:85:f0:d3:8b:56:7d:a9:c0:32:b7:6a:19: cc:ef:17:9f:55:de:c5:d5:9c:98:90:75:55:61:fd:e3:16:3b: 49:f8:b1:3f:48:e9:d9:ad:61:58:46:7e:81:39:c5:4c:2a:54: 80:9a:89:de:e9:6f:4e:73:49:2d:20:c1:69:94:f0:6a:06:57: 17:48:5b:ba:6b:d7:d1:6b:33:3e:e2:24:a9:70:45:29:69:9c: e8:d2:47:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+Xy+e0nYFksM6vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk Y2JiZjYzNGMtYTdiNC00NmE5LWJjY2QtODIzMTA3NTA3Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOOZIU0XLCepLMZvJuvDpBH2KkqJfL2euNA8 WSabvtE0u8T1+KA0q13mRBkt9DAUQqyyvZEgFKJBZW3sZRA+fCE0EoUlwHKpPxpA eB4odDGqXW0Mf6l+mqhb+m3PmUzEX7RFWYNcidaHkb3EtgNrBVMx1TbH2zbT6ybr Me4QeLygPBX+NxJfRLkOqsOjE5EH1XuN7HO56dJVLNXrRPppe7J6EtwE9C25yV+2 0Ir0YtvDX/GiHo2YjhDWpmYVMYKRAGgkgBeeSZnz9LutFuP5MB5pVdmHCr03Z+l5 mJSihxFzg18u3MG0/6XaLUl/2e7yy1I7EpSod+KbHHq6BMvvXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7uTs1R935MBPFjTb83tRNAWb0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODlmMDA0MDQtNDE0YS0z MTJjLTkzNmMtNGVlYWI1M2Y2ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGppWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzxa3+FOJgUOzp5hgqXhaXOOBmAgtLuWqJoXkk34Edloujuoy1e9aMj +Y2M+y0vWrJRw7aET1frJF4zDfXjTyAqvEHeQW8zgvpI7o4e5SAI9OVOXvrDiyfN N7odQ7qhM5MeVWYCgGlMjepO8GOpTJC9ZdtL2Qpx4zlL+dNvEw7F/XShtUkb2Ysb QBtnpU76f4msbZDQ2IDvvBp/a75yCqpaYaHeGSvAgYXw04tWfanAMrdqGczvF59V 3sXVnJiQdVVh/eMWO0n4sT9I6dmtYVhGfoE5xUwqVICaid7pb05zSS0gwWmU8GoG VxdIW7pr19FrMz7iJKlwRSlpnOjSRyc= -----END CERTIFICATE-----Generated at Mon Jul 13 11:46:04 2026 by rpki-client