$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa File: 08662a15-e04a-359b-8c07-283ea782a9b0.roa (raw, json) Hash identifier: ZASqgxoufYC7F8LmGRUAjIlW8X4jZdSeP3qstKIBKU4= Subject key identifier: 4E:4A:7B:8F:9C:F5:AE:E4:CE:E2:81:DA:E4:4E:CE:AB:E3:87:D2:F8 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D81004FBAA4608F3FF82C2A80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16839 IP address blocks: 149.96.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:4f:ba:a4:60:8f:3f:f8:2c:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=64a8a9f2-fde6-45b8-befa-be3cc755fa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:94:ff:c9:ae:ee:3a:16:b4:c6:f1:0e:d4: dd:73:a5:ae:e8:dc:78:05:11:24:60:35:fe:f9:31: 5f:7e:ff:2b:5e:c0:46:68:89:a7:28:a5:2b:a9:54: 4d:d3:c1:37:b7:09:ed:94:3e:15:8e:4e:2a:7f:49: 43:f9:9c:76:bb:78:66:76:0f:11:11:07:4c:6d:a4: bf:64:43:06:7c:ea:69:dd:67:41:05:18:80:57:1d: 32:bf:4f:b5:08:b5:85:0f:09:0f:a4:3c:f5:3f:e1: f7:ca:13:dd:81:7a:a2:52:51:a7:71:ba:b8:e0:db: b2:54:f2:4d:bb:b1:ae:e2:58:0b:d8:49:d5:f1:9f: 87:e4:c5:8d:e1:e8:3b:ba:67:84:9b:b2:14:65:89: a0:43:f4:e3:cb:f6:01:4c:a7:87:5c:33:53:4b:b8: 52:24:25:f3:9d:7e:9d:d2:0d:03:d1:90:d4:fc:e7: 23:cf:69:43:2d:8f:83:36:96:1c:d5:22:47:e5:76: ca:70:c4:62:80:7a:59:22:2d:f3:bc:f4:c7:cc:b3: d3:d7:b7:d0:01:73:e0:72:d0:97:fa:a1:8f:e2:fb: 80:45:2c:fd:6d:50:90:ba:70:bf:c0:6a:20:54:8e: 0c:bf:90:8a:3c:38:73:e5:e4:07:e9:55:fb:5e:fe: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4A:7B:8F:9C:F5:AE:E4:CE:E2:81:DA:E4:4E:CE:AB:E3:87:D2:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:0b:ce:db:50:67:91:51:01:ba:9c:dd:7a:33:60:b3:eb:87: cb:57:be:ec:47:af:25:0f:b5:4e:74:93:ff:47:d2:43:ea:33: 13:62:0a:0f:2e:00:42:43:bd:4e:cc:55:a0:5f:76:84:d0:e6: 53:44:95:24:31:38:e1:ab:a9:4e:ae:b1:48:0c:1f:20:a8:a1: d9:3d:11:ae:19:06:25:70:54:b7:79:2b:ac:1d:20:40:2d:81: 98:ea:9d:31:a4:86:c6:f9:a5:7b:69:af:7b:55:e2:ea:9f:01: d0:06:c6:60:80:e6:86:4a:4d:73:32:30:05:27:51:46:b8:39: ce:13:d9:b3:db:01:06:12:56:d4:9f:c0:a3:94:f6:27:d2:04: e1:2f:15:58:ca:3e:1d:6a:93:cd:e4:ac:ab:6c:ec:53:33:4c: 4c:44:43:91:63:5d:a3:32:64:c9:5b:31:69:18:77:2f:6b:b7: f0:ee:ae:c3:46:5b:59:e5:eb:3e:e4:25:61:5f:0a:79:bc:37: ad:14:a3:18:cc:40:3b:84:69:97:69:07:68:c6:19:89:d4:d4: dd:01:c5:fd:32:7f:70:6f:21:77:cd:6b:43:a3:97:e1:94:79: a2:9f:f1:77:08:e8:7e:75:eb:15:bf:5c:b9:21:fa:aa:60:19: 54:1e:c5:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAE+6pGCPP/gsKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk NjRhOGE5ZjItZmRlNi00NWI4LWJlZmEtYmUzY2M3NTVmYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNOU/8mu7joWtMbxDtTdc6Wu6Nx4BREkYDX+ +TFffv8rXsBGaImnKKUrqVRN08E3twntlD4Vjk4qf0lD+Zx2u3hmdg8REQdMbaS/ ZEMGfOpp3WdBBRiAVx0yv0+1CLWFDwkPpDz1P+H3yhPdgXqiUlGncbq44NuyVPJN u7Gu4lgL2EnV8Z+H5MWN4eg7umeEm7IUZYmgQ/Tjy/YBTKeHXDNTS7hSJCXznX6d 0g0D0ZDU/Ocjz2lDLY+DNpYc1SJH5XbKcMRigHpZIi3zvPTHzLPT17fQAXPgctCX +qGP4vuARSz9bVCQunC/wGogVI4Mv5CKPDhz5eQH6VX7Xv4qQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5Ke4+c9a7kzuKB2uROzqvjh9L4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDg2NjJhMTUtZTA0YS0z NTliLThjMDctMjgzZWE3ODJhOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0LzttQZ5FRAbqc3XozYLPrh8tXvuxHryUPtU50k/9H0kPqMxNiCg8u AEJDvU7MVaBfdoTQ5lNElSQxOOGrqU6usUgMHyCoodk9Ea4ZBiVwVLd5K6wdIEAt gZjqnTGkhsb5pXtpr3tV4uqfAdAGxmCA5oZKTXMyMAUnUUa4Oc4T2bPbAQYSVtSf wKOU9ifSBOEvFVjKPh1qk83krKts7FMzTExEQ5FjXaMyZMlbMWkYdy9rt/DursNG W1nl6z7kJWFfCnm8N60UoxjMQDuEaZdpB2jGGYnU1N0Bxf0yf3BvIXfNa0Ojl+GU eaKf8XcI6H516xW/XLkh+qpgGVQexaw= -----END CERTIFICATE-----Generated at Sat Apr 18 01:09:08 2026 by rpki-client