$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/50124269-513e-3754-85b0-ec7e4cf8e5c6.roa File: 50124269-513e-3754-85b0-ec7e4cf8e5c6.roa (raw, json) Hash identifier: eUcXSPHkolra6VsXcy4Xp+k16qTIvNimJMdwRva7Jrg= Subject key identifier: AC:E0:28:6E:63:41:DA:8A:E1:27:F6:84:43:D9:87:5E:27:76:C0:F8 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D80FFFA8C9CAE900BFE73BC00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/50124269-513e-3754-85b0-ec7e4cf8e5c6.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16839 IP address blocks: 199.91.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:fa:8c:9c:ae:90:0b:fe:73:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=be284fce-f501-4b2c-b045-1f6df5a78fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:35:7e:71:b2:18:f2:49:c2:f8:87:b2:0e: 80:2f:0f:42:cd:b8:ab:c7:0c:74:39:c6:e0:44:ca: 56:0b:b8:b8:6d:da:e0:f3:c0:4d:6c:c3:a4:43:3e: 4e:6f:c5:fe:5c:9f:d8:9c:f5:db:a2:c6:71:18:c7: d4:d7:34:6a:af:ae:12:1f:05:3a:14:7f:0f:bf:ac: ab:c0:cc:74:f4:b9:ab:01:07:68:81:0d:5d:b4:b0: dd:78:86:5e:41:3f:74:0f:6e:b9:fc:30:07:6e:be: c1:4a:6f:92:63:8a:d2:1e:e1:8e:54:db:9b:07:60: ee:ae:df:54:dc:31:ad:c4:e0:b2:b6:78:1f:4d:48: 98:82:7f:7c:47:81:f1:e2:53:c9:89:ff:9b:71:8a: 62:b4:41:e9:c0:ba:7a:80:a3:6f:5d:c1:61:25:3a: 60:30:d5:b6:75:06:da:77:62:9f:29:ae:fd:a8:d7: cd:c8:1f:8f:0e:f8:7a:a4:35:98:88:c7:91:8a:da: 65:79:8c:27:60:1f:ca:6c:69:f9:8a:0d:0b:ef:f3: 83:f8:2b:58:86:be:aa:13:cd:ab:84:aa:ed:cf:cd: 21:5a:85:61:f5:5f:17:4e:df:53:c3:2c:c3:6b:76: bc:ce:6d:97:4e:5f:25:10:fb:85:88:a1:bb:a6:a5: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E0:28:6E:63:41:DA:8A:E1:27:F6:84:43:D9:87:5E:27:76:C0:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/50124269-513e-3754-85b0-ec7e4cf8e5c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:00:70:7e:f7:26:e4:fc:0b:e3:9e:bd:bf:ac:45:67:25:0b: 77:a1:23:f8:95:f0:c9:e9:23:60:18:ac:df:da:93:30:9e:2c: 40:e6:a6:a0:38:7f:6b:bc:20:ae:45:74:4c:57:92:7c:69:4d: 8b:64:42:35:c7:cb:5a:b4:22:da:41:b5:2c:21:2c:4b:e4:c3: ea:87:dc:0a:e6:3f:12:c9:4a:b1:f7:e0:ee:d3:86:60:e7:35: 97:8f:93:54:a7:41:58:b7:d2:f7:f3:46:21:4a:43:f3:81:10: b7:39:f8:7e:12:33:bf:73:1b:57:4c:8c:39:6f:24:13:b3:ec: b9:31:00:0a:98:04:fa:b8:c1:7f:7c:28:7c:dc:4a:47:59:b3: a0:92:1d:89:d0:66:f9:44:39:d4:d8:7b:3f:d4:c6:c6:6e:33: 7f:7e:ef:35:c2:ff:c4:f5:6f:82:ad:48:a3:0b:6d:d4:9b:a6: 18:fc:c8:98:5f:60:f6:85:2a:e1:27:ef:05:24:d6:d7:0c:4e: 4e:3c:fe:a1:76:29:10:53:77:12:f2:b7:11:de:5d:6b:d5:5d: 46:55:96:12:98:fc:4a:07:87:63:b3:da:eb:14:83:c5:1e:1b: 08:ba:63:1a:6e:f6:94:34:68:f6:64:e0:b9:01:ba:a2:62:f1: dc:25:10:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//qMnK6QC/5zvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YmUyODRmY2UtZjUwMS00YjJjLWIwNDUtMWY2ZGY1YTc4ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ac1fnGyGPJJwviHsg6ALw9Czbirxwx0Ocbg RMpWC7i4bdrg88BNbMOkQz5Ob8X+XJ/YnPXbosZxGMfU1zRqr64SHwU6FH8Pv6yr wMx09LmrAQdogQ1dtLDdeIZeQT90D265/DAHbr7BSm+SY4rSHuGOVNubB2Durt9U 3DGtxOCytngfTUiYgn98R4Hx4lPJif+bcYpitEHpwLp6gKNvXcFhJTpgMNW2dQba d2KfKa79qNfNyB+PDvh6pDWYiMeRitpleYwnYB/KbGn5ig0L7/OD+CtYhr6qE82r hKrtz80hWoVh9V8XTt9TwyzDa3a8zm2XTl8lEPuFiKG7pqUi1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzgKG5jQdqK4Sf2hEPZh14ndsD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTAxMjQyNjktNTEzZS0z NzU0LTg1YjAtZWM3ZTRjZjhlNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoAcH73JuT8C+Oevb+sRWclC3ehI/iV8MnpI2AYrN/akzCeLEDmpqA4 f2u8IK5FdExXknxpTYtkQjXHy1q0ItpBtSwhLEvkw+qH3ArmPxLJSrH34O7ThmDn NZePk1SnQVi30vfzRiFKQ/OBELc5+H4SM79zG1dMjDlvJBOz7LkxAAqYBPq4wX98 KHzcSkdZs6CSHYnQZvlEOdTYez/UxsZuM39+7zXC/8T1b4KtSKMLbdSbphj8yJhf YPaFKuEn7wUk1tcMTk48/qF2KRBTdxLytxHeXWvVXUZVlhKY/EoHh2Oz2usUg8Ue Gwi6Yxpu9pQ0aPZk4LkBuqJi8dwlENc= -----END CERTIFICATE-----Generated at Fri Apr 17 21:28:15 2026 by rpki-client