$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa File: b672c24e-ac3a-3a73-9369-af3fde4793e9.roa (raw, json) Hash identifier: 2yIuruCHVC98Jyf/WhGWywGKoXEsCqrQmy6gfb0m6bM= Subject key identifier: 2F:1D:34:FC:F1:CA:BE:0F:3D:6C:C7:D2:7E:D6:99:F0:58:5E:E7:82 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F03A7963200FC6B459B578B80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16839 IP address blocks: 149.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:96:32:00:fc:6b:45:9b:57:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=ed5113cc-1864-4a91-b7ec-6043b0734903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:69:02:79:8c:3c:76:7c:9b:a2:f3:7a:42: b0:35:e4:19:e7:a9:60:27:6b:ff:77:e3:26:df:48: 2d:15:a2:73:64:01:b0:18:53:1a:a7:8b:51:f6:38: 4f:a4:22:cb:76:f0:29:60:8a:b9:f7:08:ca:22:a2: 70:24:6f:9c:02:89:a8:13:1f:a5:83:c8:ac:77:98: cb:69:bd:74:b0:90:e3:e6:39:08:6f:d0:3f:7d:b2: 4a:aa:91:7c:ef:b7:47:40:28:2e:fa:40:ba:d4:16: 9b:1b:4a:14:91:97:dd:76:8a:b9:e6:29:34:a5:3a: 1e:94:b3:6b:d0:25:7f:52:48:9d:a9:fd:3d:db:ad: f3:f9:7e:11:da:fb:78:83:95:8b:38:32:54:c0:7e: 86:b9:47:45:27:15:df:97:51:b3:3d:0a:07:f5:d8: 5f:7b:e4:f5:39:c2:3e:f1:ea:46:f9:33:a3:7a:ab: 0c:ae:fa:23:9a:54:8b:fd:4d:11:89:d2:92:32:9e: b7:e5:dd:09:4a:64:c0:c9:a1:1f:03:c2:06:c9:e2: 9a:2e:27:ca:87:28:a2:a6:86:88:97:1c:8d:66:32: ad:67:54:68:49:5b:2e:7c:54:0d:7f:08:00:fa:3a: 6b:ed:70:fb:93:8e:2e:a3:f2:11:58:26:06:92:38: fb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1D:34:FC:F1:CA:BE:0F:3D:6C:C7:D2:7E:D6:99:F0:58:5E:E7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4b:3c:33:69:c0:90:ec:8b:fd:be:b7:57:a3:0a:19:bc:8c: a3:b8:72:30:6e:5b:b1:82:4a:3f:fd:95:3d:df:59:3c:9e:68: 93:13:d8:96:ff:11:7c:f5:11:a0:54:ff:1e:75:49:12:a6:cf: 15:97:56:a3:83:5a:32:73:90:89:ab:58:f9:45:e9:51:0f:2d: f0:e9:2d:a9:14:88:0c:38:4c:63:5c:09:ab:99:00:a3:f2:34: d0:3a:84:20:e8:cc:21:ae:10:94:bd:93:a1:af:32:39:6c:0a: d4:cf:c5:cf:c3:86:0e:81:3b:e4:56:7b:07:59:54:08:f1:98: 81:9a:60:b6:7c:89:f5:c7:a8:7c:cc:28:8a:89:ea:cd:03:ec: 1c:91:03:d3:0b:99:21:17:f6:23:79:30:78:8b:e2:cd:9c:ba: 60:b6:d4:eb:bd:b0:80:72:e5:9f:9f:49:a3:3b:c9:d2:0c:89: f8:c0:a2:41:8d:9d:2f:d9:09:2c:4b:0c:d8:e1:75:56:a1:d1: ec:e3:ae:4c:12:08:09:ac:80:4e:41:72:b5:30:b6:bc:8b:d7: 52:63:5f:95:1d:aa:2b:01:96:36:ce:50:40:3c:6b:b0:35:11: 90:79:7a:ed:06:94:b1:ad:1c:4f:2a:c3:1f:2d:d2:71:31:9f: 2e:c1:d0:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp5YyAPxrRZtXi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZWQ1MTEzY2MtMTg2NC00YTkxLWI3ZWMtNjA0M2IwNzM0OTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfVpAnmMPHZ8m6LzekKwNeQZ56lgJ2v/d+Mm 30gtFaJzZAGwGFMap4tR9jhPpCLLdvApYIq59wjKIqJwJG+cAomoEx+lg8isd5jL ab10sJDj5jkIb9A/fbJKqpF877dHQCgu+kC61BabG0oUkZfddoq55ik0pToelLNr 0CV/Ukidqf09263z+X4R2vt4g5WLODJUwH6GuUdFJxXfl1GzPQoH9dhfe+T1OcI+ 8epG+TOjeqsMrvojmlSL/U0RidKSMp635d0JSmTAyaEfA8IGyeKaLifKhyiipoaI lxyNZjKtZ1RoSVsufFQNfwgA+jpr7XD7k44uo/IRWCYGkjj7dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8dNPzxyr4PPWzH0n7WmfBYXueCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYjY3MmMyNGUtYWMzYS0z YTczLTkzNjktYWYzZmRlNDc5M2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1LPDNpwJDsi/2+t1ejChm8jKO4cjBuW7GCSj/9lT3fWTyeaJMT2Jb/ EXz1EaBU/x51SRKmzxWXVqODWjJzkImrWPlF6VEPLfDpLakUiAw4TGNcCauZAKPy NNA6hCDozCGuEJS9k6GvMjlsCtTPxc/Dhg6BO+RWewdZVAjxmIGaYLZ8ifXHqHzM KIqJ6s0D7ByRA9MLmSEX9iN5MHiL4s2cumC21Ou9sIBy5Z+fSaM7ydIMifjAokGN nS/ZCSxLDNjhdVah0ezjrkwSCAmsgE5BcrUwtryL11JjX5UdqisBljbOUEA8a7A1 EZB5eu0GlLGtHE8qwx8t0nExny7B0Iw= -----END CERTIFICATE-----Generated at Tue Sep 22 20:48:01 2026 by rpki-client