$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa File: b672c24e-ac3a-3a73-9369-af3fde4793e9.roa (raw, json) Hash identifier: LDY+RitsPXKyeT9lORfGrzLtXZCEqhFeUlVia04mNEU= Subject key identifier: 3F:95:18:1A:9A:1D:CA:EC:BF:3F:9D:D2:5D:9E:BA:99:8B:27:32:06 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D80FFFA132C7608C2633FD2A0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16839 IP address blocks: 149.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:fa:13:2c:76:08:c2:63:3f:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=375ecaaa-3d75-447d-a29f-a3d8e72d32c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:fb:78:f8:25:07:21:d5:62:c5:01:95:63: 4d:78:db:50:e2:01:86:35:4e:38:5b:2b:1a:b8:65: 95:71:42:ae:2e:1b:69:de:a1:d7:f8:00:5b:fd:be: 99:01:32:eb:43:6c:53:cd:61:dc:63:94:6c:ff:17: 0f:e5:e6:8f:f8:ad:de:31:2f:7f:2b:5f:e5:76:3b: fb:5e:1f:94:fc:e9:ff:1f:aa:ad:de:b8:5f:d5:36: c6:4d:39:11:5f:a6:a0:32:69:a4:1d:79:28:a1:5f: ad:a8:56:4e:a4:13:01:2d:a6:6f:b9:30:9b:2b:ac: bd:42:01:d4:1e:3b:3b:46:bf:93:ca:ce:12:f0:92: 9c:57:52:32:9a:19:fa:99:40:b0:40:37:3e:a7:bc: 26:14:a4:c3:98:86:61:81:fc:f3:c0:cf:bb:6f:74: f5:71:a4:07:92:dd:a2:87:5a:db:e8:99:66:b7:ed: 43:cf:65:49:c5:8e:4a:19:28:3f:0b:80:ea:92:0f: 71:3b:0a:37:f5:51:ee:03:43:40:c6:25:02:b0:4f: 60:9a:48:ae:49:f7:03:d3:04:44:b1:5f:69:a3:45: 61:96:7c:c7:f9:07:17:fe:20:c1:c3:f3:7f:7e:76: ca:38:b7:c8:6d:35:7d:6f:47:df:5d:5c:db:f1:15: 42:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:95:18:1A:9A:1D:CA:EC:BF:3F:9D:D2:5D:9E:BA:99:8B:27:32:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:8d:2b:40:d4:77:6d:8e:1d:9d:82:c1:1a:96:20:c7:0e:ac: 13:ba:98:46:df:3a:1f:0b:03:a4:45:f9:c1:76:c3:fd:50:58: 2e:33:e4:af:1f:fd:45:ea:86:3c:bf:a1:7e:69:2f:87:83:68: 98:5e:6e:e2:a4:79:b4:35:9f:44:00:2d:71:c9:ed:f9:7c:87: f7:fd:fb:f2:21:33:ce:53:f4:a1:ae:aa:b2:ab:1b:8d:f1:ed: a8:2c:6a:71:67:ea:aa:22:29:b5:14:ba:9b:35:cf:36:b1:ee: 56:9a:dd:e0:b5:83:19:08:3b:d2:83:20:ce:e9:03:b1:a5:12: 26:16:42:5c:a8:50:50:d3:3d:8c:22:82:c4:b3:a8:f4:f5:44: f3:8d:a8:91:78:70:90:dc:5d:cb:18:53:71:87:96:7f:6b:8c: 95:7c:e1:fd:a6:f2:23:a7:07:58:c8:c2:b7:61:e3:e8:15:0c: 04:d0:9a:ec:6b:75:75:34:8c:65:31:9f:ad:6a:64:85:7e:e8: fa:8f:91:ac:6d:84:30:23:e6:a2:56:99:bc:e4:44:2c:fa:34: b2:bb:20:e8:0b:64:20:d1:9b:fb:ef:b1:2e:4f:38:29:fa:63: b2:19:5e:cb:90:46:51:69:2d:ea:f4:34:b3:0e:7f:99:5e:fb: 91:44:b0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//oTLHYIwmM/0qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk Mzc1ZWNhYWEtM2Q3NS00NDdkLWEyOWYtYTNkOGU3MmQzMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4D7ePglByHVYsUBlWNNeNtQ4gGGNU44Wysa uGWVcUKuLhtp3qHX+ABb/b6ZATLrQ2xTzWHcY5Rs/xcP5eaP+K3eMS9/K1/ldjv7 Xh+U/On/H6qt3rhf1TbGTTkRX6agMmmkHXkooV+tqFZOpBMBLaZvuTCbK6y9QgHU Hjs7Rr+Tys4S8JKcV1Iymhn6mUCwQDc+p7wmFKTDmIZhgfzzwM+7b3T1caQHkt2i h1rb6Jlmt+1Dz2VJxY5KGSg/C4Dqkg9xOwo39VHuA0NAxiUCsE9gmkiuSfcD0wRE sV9po0VhlnzH+QcX/iDBw/N/fnbKOLfIbTV9b0ffXVzb8RVCdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+VGBqaHcrsvz+d0l2eupmLJzIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYjY3MmMyNGUtYWMzYS0z YTczLTkzNjktYWYzZmRlNDc5M2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeNK0DUd22OHZ2CwRqWIMcOrBO6mEbfOh8LA6RF+cF2w/1QWC4z5K8f /UXqhjy/oX5pL4eDaJhebuKkebQ1n0QALXHJ7fl8h/f9+/IhM85T9KGuqrKrG43x 7agsanFn6qoiKbUUups1zzax7laa3eC1gxkIO9KDIM7pA7GlEiYWQlyoUFDTPYwi gsSzqPT1RPONqJF4cJDcXcsYU3GHln9rjJV84f2m8iOnB1jIwrdh4+gVDATQmuxr dXU0jGUxn61qZIV+6PqPkaxthDAj5qJWmbzkRCz6NLK7IOgLZCDRm/vvsS5POCn6 Y7IZXsuQRlFpLer0NLMOf5le+5FEsGo= -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:43 2026 by rpki-client