$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa File: 4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa (raw, json) Hash identifier: pSTc5veG+dfWyS5aNJJCVPWWjitd0jMiolUxO7FM/10= Subject key identifier: 47:22:46:ED:32:21:09:2F:57:2A:D1:D7:BE:6B:F0:1A:9B:04:DF:8C Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D81004F97F3082525981D8080 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16839 IP address blocks: 149.96.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:4f:97:f3:08:25:25:98:1d:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=5b4033d6-030f-4aa3-8d61-9d6dcc48870c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:84:6c:53:0b:35:bf:18:90:ea:73:8f:5c: 66:d8:e3:70:6b:03:9b:62:e3:0d:5f:36:48:99:93: d1:a4:c4:75:c0:2a:48:e7:4e:10:3f:13:ef:b1:6b: 72:55:2d:8f:d1:43:ed:fa:c5:6e:23:6a:f6:50:80: 27:f0:2f:a6:a7:84:71:18:e8:1d:fa:de:62:a4:89: 8c:0a:bd:3e:a7:b5:47:10:6d:b8:57:80:9a:08:f7: 08:59:84:c9:fb:38:2c:61:a6:86:72:d0:05:f1:21: 50:4c:e0:57:ba:1e:c0:bc:08:12:05:3b:26:b9:74: 7d:b5:93:29:c5:77:09:96:55:a9:ca:c8:2c:5d:2d: 5b:b2:96:d5:99:29:38:56:41:68:16:57:48:15:c3: f8:69:cb:45:d9:2a:0d:f4:b9:24:f3:79:f4:48:66: f4:7f:18:d2:1b:02:80:a9:16:a9:11:99:3d:95:e6: be:b5:3a:96:b7:65:bf:3d:d3:bb:bc:a3:6d:a4:b5: 2b:97:10:5c:7c:9c:6d:07:2c:ad:d4:bb:be:83:53: 30:17:dd:72:88:64:28:f5:69:5b:83:15:7f:74:7d: 65:26:15:78:d9:34:6c:b1:df:68:83:92:4b:01:03: f8:4e:6f:f3:62:64:ff:23:c5:33:82:6e:0c:b3:f6: af:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:22:46:ED:32:21:09:2F:57:2A:D1:D7:BE:6B:F0:1A:9B:04:DF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a7:3f:cc:94:cf:6b:c2:41:0a:5a:ba:6e:89:f2:e0:2c:19: c4:c5:ee:ad:77:7b:b1:a5:a9:0c:71:12:34:11:27:10:30:22: a8:52:39:a9:1e:60:29:5a:27:01:6e:c3:2e:fc:ba:5f:29:e3: 75:ae:8c:1f:6d:e2:7f:c6:5d:53:34:97:ea:35:1a:c2:da:cd: 1a:cb:5c:8e:be:de:b9:13:68:96:84:3e:49:7e:9c:0c:81:50: 78:48:63:58:f2:e9:c6:4c:e5:75:a6:29:75:cf:ef:17:ac:ad: 5a:66:8e:b8:8a:35:66:19:4b:0a:cb:e2:48:5d:61:a8:68:f5: a0:54:d5:30:05:bf:fb:d8:51:52:d4:a6:97:f2:c5:f8:40:9b: 2d:83:80:e2:2e:5a:e3:59:10:f8:73:12:ac:8f:d4:d4:01:88: 97:65:51:79:7b:9e:7f:de:38:a9:0b:1e:da:04:85:cf:e6:11: 14:81:4a:94:a0:ae:f0:c5:9b:2b:ea:65:0d:d4:4e:3e:e6:da: 1e:34:a8:97:b1:38:50:8f:f4:4a:b9:df:48:41:91:5f:5b:fc: 5e:82:99:cd:76:07:7f:4a:9b:76:76:02:a4:77:4f:63:d2:ec: 2e:60:36:5c:1f:d0:a9:c4:93:61:9a:68:9a:ca:22:bd:41:69: 00:9f:a7:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAE+X8wglJZgdgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk NWI0MDMzZDYtMDMwZi00YWEzLThkNjEtOWQ2ZGNjNDg4NzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkGEbFMLNb8YkOpzj1xm2ONwawObYuMNXzZI mZPRpMR1wCpI504QPxPvsWtyVS2P0UPt+sVuI2r2UIAn8C+mp4RxGOgd+t5ipImM Cr0+p7VHEG24V4CaCPcIWYTJ+zgsYaaGctAF8SFQTOBXuh7AvAgSBTsmuXR9tZMp xXcJllWpysgsXS1bspbVmSk4VkFoFldIFcP4actF2SoN9Lkk83n0SGb0fxjSGwKA qRapEZk9lea+tTqWt2W/PdO7vKNtpLUrlxBcfJxtByyt1Lu+g1MwF91yiGQo9Wlb gxV/dH1lJhV42TRssd9og5JLAQP4Tm/zYmT/I8Uzgm4Ms/avLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEciRu0yIQkvVyrR175r8BqbBN+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNGE2MGFiNDktNDFjOC0z MTUyLThmM2QtZjYxZWFjZmMzMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCnP8yUz2vCQQpaum6J8uAsGcTF7q13e7GlqQxxEjQRJxAwIqhSOake YClaJwFuwy78ul8p43WujB9t4n/GXVM0l+o1GsLazRrLXI6+3rkTaJaEPkl+nAyB UHhIY1jy6cZM5XWmKXXP7xesrVpmjriKNWYZSwrL4khdYaho9aBU1TAFv/vYUVLU ppfyxfhAmy2DgOIuWuNZEPhzEqyP1NQBiJdlUXl7nn/eOKkLHtoEhc/mERSBSpSg rvDFmyvqZQ3UTj7m2h40qJexOFCP9Eq530hBkV9b/F6Cmc12B39Km3Z2AqR3T2PS 7C5gNlwf0KnEk2GaaJrKIr1BaQCfp8o= -----END CERTIFICATE-----Generated at Fri Apr 17 21:28:16 2026 by rpki-client