$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa File: bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa (raw, json) Hash identifier: eW4IAL4KPqS5Ux9MPHH9yMKCqVAhp1YE1Unm6s/Ekrw= Subject key identifier: 9C:D3:DE:D5:3D:3E:19:95:F0:3A:48:87:D3:3C:42:06:C0:6A:65:C4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F03A7EA191D45D2938198BB80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16839 IP address blocks: 149.96.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:ea:19:1d:45:d2:93:81:98:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=ece863a1-c02b-42d6-a4f8-fd93373130a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:09:2b:e9:76:51:4e:9b:52:26:f7:28:d2:bc: dd:b4:bb:5f:e4:8e:61:cd:6a:c5:34:04:8a:f6:16: f3:26:13:b0:15:cc:4b:9d:48:68:25:6d:b8:dd:e5: db:48:5f:f7:bc:62:95:cc:bc:65:a3:80:89:1a:1b: e6:20:5e:83:6f:61:0f:5b:09:4c:4e:d2:25:74:c7: 12:19:ce:f6:2f:a8:7a:67:b1:ba:ef:7d:5a:75:be: 89:dd:67:a1:35:c8:12:35:01:c1:b5:02:84:95:f0: 60:a7:87:03:21:61:f7:84:39:d0:ba:28:e1:1b:86: c8:f0:79:64:9f:e6:df:a5:45:5b:62:f1:7a:78:2e: 2a:39:b8:dd:96:b9:67:45:98:b0:28:26:0d:d5:eb: fa:c8:96:b4:3f:b5:87:2a:b7:e3:91:79:32:c1:ec: 84:43:54:9b:97:bc:09:96:19:19:2c:16:80:03:00: ee:83:5b:de:2f:7a:05:13:cd:8a:95:80:bb:a2:4a: de:d3:3c:78:27:16:93:07:e0:fa:94:f6:aa:ce:98: 1e:9e:02:6a:da:0f:42:ec:61:3c:65:f8:e2:78:a6: 46:71:ba:59:f1:a4:36:43:22:19:fe:1f:63:da:6e: 5d:cd:02:4e:18:21:5d:58:7c:c2:76:f0:c8:fb:e7: 8c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D3:DE:D5:3D:3E:19:95:F0:3A:48:87:D3:3C:42:06:C0:6A:65:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ac:01:bb:4a:84:c0:94:49:0b:34:98:96:91:e9:ef:e4:fe: a5:d2:37:9d:be:d1:ae:89:9f:32:68:b0:3c:77:e9:56:5b:b5: 5a:ec:c7:53:23:df:f5:d6:1b:86:8c:41:cf:a5:36:88:d4:a1: 8b:d2:35:48:ee:c2:7c:29:6f:c7:5c:33:18:a1:c9:d4:08:a0: df:b0:94:f0:b4:e4:a0:c3:2f:fe:ed:af:47:55:94:30:02:2a: cb:a7:e7:b4:fe:65:23:e5:de:c0:cf:53:35:e2:3e:ba:23:b2: b7:4f:5c:99:99:6d:8e:55:9f:83:a0:e7:a6:35:06:dc:48:00: d5:04:89:33:06:07:33:55:88:0e:8e:ff:aa:85:6e:4d:8a:87: 8f:9f:9b:58:88:03:b7:ed:37:38:a3:58:69:77:47:0d:9f:9b: 08:31:d0:d4:ed:81:c7:09:f2:f4:f5:90:63:67:ac:62:d4:f5: fa:4f:4d:b1:06:97:e3:43:ba:09:5a:83:f9:20:b6:a3:6f:8d: 4d:7d:d6:f8:df:8e:2d:f4:12:59:f1:a5:52:26:f5:30:fd:c0: 2d:1a:da:56:fe:db:ab:22:42:ba:fe:c0:ad:2e:ea:8e:66:9b: a3:be:ad:91:56:2f:19:40:60:86:5d:a3:8f:17:c6:ec:19:96: fd:f7:3a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp+oZHUXSk4GYu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZWNlODYzYTEtYzAyYi00MmQ2LWE0ZjgtZmQ5MzM3MzEzMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwkr6XZRTptSJvco0rzdtLtf5I5hzWrFNASK 9hbzJhOwFcxLnUhoJW243eXbSF/3vGKVzLxlo4CJGhvmIF6Db2EPWwlMTtIldMcS Gc72L6h6Z7G6731adb6J3WehNcgSNQHBtQKElfBgp4cDIWH3hDnQuijhG4bI8Hlk n+bfpUVbYvF6eC4qObjdlrlnRZiwKCYN1ev6yJa0P7WHKrfjkXkyweyEQ1Sbl7wJ lhkZLBaAAwDug1veL3oFE82KlYC7okre0zx4JxaTB+D6lPaqzpgengJq2g9C7GE8 ZfjieKZGcbpZ8aQ2QyIZ/h9j2m5dzQJOGCFdWHzCdvDI++eM7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzT3tU9PhmV8DpIh9M8QgbAamXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYmRhYjg0NjktOGNiNS0z ZmRmLTlmNDktZWNjNTZjZWQyMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGsAbtKhMCUSQs0mJaR6e/k/qXSN52+0a6JnzJosDx36VZbtVrsx1Mj 3/XWG4aMQc+lNojUoYvSNUjuwnwpb8dcMxihydQIoN+wlPC05KDDL/7tr0dVlDAC Ksun57T+ZSPl3sDPUzXiProjsrdPXJmZbY5Vn4Og56Y1BtxIANUEiTMGBzNViA6O /6qFbk2Kh4+fm1iIA7ftNzijWGl3Rw2fmwgx0NTtgccJ8vT1kGNnrGLU9fpPTbEG l+NDuglag/kgtqNvjU191vjfji30ElnxpVIm9TD9wC0a2lb+26siQrr+wK0u6o5m m6O+rZFWLxlAYIZdo48XxuwZlv33Oog= -----END CERTIFICATE-----Generated at Tue Sep 22 11:25:20 2026 by rpki-client