$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa File: 148e8965-c9d0-383e-82c1-fd713e6a01d1.roa (raw, json) Hash identifier: Q1n9BYRhyX8MzkrtJAmWispr+6umNdWXT8DKm0CwAfw= Subject key identifier: 1E:35:FF:BB:8D:E7:69:CF:BF:06:10:65:D1:06:19:BD:FC:FB:A9:5E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F7782F2AE0CAD20B6C9632C80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 16839 IP address blocks: 149.96.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:f2:ae:0c:ad:20:b6:c9:63:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=6ab1a56c-83bd-42ff-9877-2bebbaaf6c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:c4:db:d0:2d:b4:27:8d:0c:6f:77:24:0c: 3f:28:6a:70:cf:6f:f5:8e:13:e2:7c:b2:15:22:c7: ed:08:2c:0d:a3:8e:ce:00:ba:bf:c5:39:ae:1b:c3: f5:1d:7e:ac:f5:2d:b1:b4:d0:58:0b:08:f9:9d:33: 4e:59:4d:5b:f5:d0:2b:4b:bb:15:1c:5d:d0:4e:2f: 12:d3:69:96:ab:05:db:ce:e4:60:fd:eb:bc:5a:b8: 2c:6d:15:46:cb:c3:33:6c:07:7e:e3:3d:ab:63:fd: fb:3b:9b:dc:c5:0f:23:d7:55:6e:a7:63:3f:2b:0f: 92:db:1f:59:9d:9a:10:39:b2:1d:ac:f4:03:ad:bc: 6a:9b:67:42:19:3e:17:60:a3:79:e2:bf:72:c5:1a: d4:11:94:18:c7:b7:05:d5:b9:f1:50:3f:23:93:d1: 1b:d2:b8:7b:d8:92:fb:8a:19:3a:4d:d8:2c:8f:ff: ac:01:42:52:cf:6f:96:3c:32:28:06:58:78:7b:d6: 3e:da:bc:ea:67:82:65:f8:74:69:e3:e0:60:86:56: 4f:44:13:ed:e6:1a:ff:24:31:a2:dd:25:8a:14:24: a9:ea:60:af:d9:eb:07:61:46:72:e1:8c:35:a0:05: d4:8d:66:75:0e:ea:5c:70:72:66:45:48:09:64:73: 97:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:35:FF:BB:8D:E7:69:CF:BF:06:10:65:D1:06:19:BD:FC:FB:A9:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:be:07:54:ef:b9:32:12:b2:0a:99:3a:05:40:31:7b:f3:36: 7b:09:fa:f0:40:28:64:01:a5:63:bd:ef:fc:7b:ad:a1:aa:b4: 5a:bf:7a:13:73:f6:1b:8c:0c:ac:36:42:b7:98:cb:d2:05:47: 90:a3:12:39:4f:da:97:3f:af:a8:cb:85:0d:af:8d:11:48:34: a5:0a:dc:c8:cb:f7:dc:af:fb:3d:1b:5f:25:15:cc:ac:33:10: e5:b5:f0:b2:bc:22:65:ad:f0:ef:1b:60:3d:07:9a:24:55:39: 56:9f:d7:6d:0e:d4:49:e4:5e:3e:e1:cb:5e:50:1e:1d:98:52: c7:be:f2:9f:d6:e4:16:70:35:9e:a7:bf:26:ed:da:1c:e3:5e: 3d:85:f8:be:fc:e0:68:bc:59:ed:e6:33:01:30:6d:a3:3c:59: 29:f5:d8:db:df:31:0a:12:80:7d:be:c7:c1:f7:97:95:2c:26: 09:73:e5:07:28:6e:67:46:16:61:2f:a7:14:d9:48:71:14:b5: be:7f:81:68:ee:2f:9e:77:70:c9:c7:af:56:80:13:39:0e:89: d3:48:30:a6:10:57:1f:8d:ac:49:0a:72:e4:a0:c8:17:48:00: e1:42:bb:ca:df:60:6e:5f:e1:8d:86:73:71:cf:0b:14:b4:68: e5:b6:8c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gvKuDK0gtsljLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NmFiMWE1NmMtODNiZC00MmZmLTk4NzctMmJlYmJhYWY2YzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVHE29AttCeNDG93JAw/KGpwz2/1jhPifLIV IsftCCwNo47OALq/xTmuG8P1HX6s9S2xtNBYCwj5nTNOWU1b9dArS7sVHF3QTi8S 02mWqwXbzuRg/eu8WrgsbRVGy8MzbAd+4z2rY/37O5vcxQ8j11Vup2M/Kw+S2x9Z nZoQObIdrPQDrbxqm2dCGT4XYKN54r9yxRrUEZQYx7cF1bnxUD8jk9Eb0rh72JL7 ihk6Tdgsj/+sAUJSz2+WPDIoBlh4e9Y+2rzqZ4Jl+HRp4+BghlZPRBPt5hr/JDGi 3SWKFCSp6mCv2esHYUZy4Yw1oAXUjWZ1DupccHJmRUgJZHOXbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB41/7uN52nPvwYQZdEGGb38+6leMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMTQ4ZTg5NjUtYzlkMC0z ODNlLTgyYzEtZmQ3MTNlNmEwMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW+B1TvuTISsgqZOgVAMXvzNnsJ+vBAKGQBpWO97/x7raGqtFq/ehNz 9huMDKw2QreYy9IFR5CjEjlP2pc/r6jLhQ2vjRFINKUK3MjL99yv+z0bXyUVzKwz EOW18LK8ImWt8O8bYD0HmiRVOVaf120O1EnkXj7hy15QHh2YUse+8p/W5BZwNZ6n vybt2hzjXj2F+L784Gi8We3mMwEwbaM8WSn12NvfMQoSgH2+x8H3l5UsJglz5Qco bmdGFmEvpxTZSHEUtb5/gWjuL553cMnHr1aAEzkOidNIMKYQVx+NrEkKcuSgyBdI AOFCu8rfYG5f4Y2Gc3HPCxS0aOW2jGU= -----END CERTIFICATE-----Generated at Wed Oct 14 16:11:22 2026 by rpki-client