$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa File: bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa (raw, json) Hash identifier: hPAUxJ2G1PY6CeBStd3a+2FbhYJ6jPn2qLM7Hyvds14= Subject key identifier: 47:A2:0A:9A:F3:78:72:00:53:08:3A:62:80:D7:27:CD:CA:E0:92:52 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D81004F5E76EAC5B1B2BFD3A0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16839 IP address blocks: 149.96.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:4f:5e:76:ea:c5:b1:b2:bf:d3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=5baafb9f-5f02-46ac-9785-1bdeef993d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:c3:0f:e9:4d:45:63:c7:e0:a4:5b:08:69: 99:c8:b2:73:d9:5a:8d:e1:16:91:39:36:36:71:28: a2:10:5b:0c:72:b1:0a:42:ac:a0:a9:b5:79:68:b2: 86:b0:3a:c8:05:7a:e9:c9:00:dd:32:57:dc:73:2b: 3f:2c:35:39:f6:7c:cf:5c:41:53:b9:b4:a0:ac:a0: fe:c9:74:3e:ac:f4:60:aa:92:d7:45:d4:06:87:b8: 0a:71:e4:8c:67:9c:36:70:f4:ce:45:75:bb:36:0d: 84:67:70:36:9d:b3:88:ce:05:2e:84:d2:c7:d9:ef: 8d:88:74:6d:97:d9:4e:85:88:8d:28:f1:11:d8:c1: 74:b7:d3:0e:fc:3e:97:78:ee:e1:1c:c7:97:a0:fc: 4a:15:18:4c:9e:cf:a4:bc:4a:c7:a6:ba:11:12:b2: 53:6e:bb:c1:5d:2a:a0:78:61:a5:50:68:31:f2:d7: 44:cb:8f:da:30:80:e6:65:36:76:6b:85:87:85:9e: 0e:b5:6e:9b:e8:9f:6d:72:85:5f:64:72:e2:ad:af: 7a:b1:b4:73:5c:92:a3:10:1c:6e:96:2e:f0:cf:98: 79:48:5b:fd:46:69:68:69:da:b5:9c:2d:98:76:a1: e4:81:1f:30:07:6f:34:f4:c3:fe:0b:b9:e9:e6:74: ae:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A2:0A:9A:F3:78:72:00:53:08:3A:62:80:D7:27:CD:CA:E0:92:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f5:e7:9a:43:24:d8:d8:0d:c6:5c:e3:72:f2:55:a4:ad:fe: 5b:bc:1c:80:0b:7b:8a:8f:95:ca:96:af:0b:cd:c5:24:90:e7: 2e:92:71:8f:71:0d:3e:8f:8e:8e:f1:a8:ba:25:00:37:54:fb: 7f:0b:82:1e:7e:11:44:9a:33:9d:81:a2:81:b6:d4:17:d5:5e: 27:e1:61:ff:2b:e8:ac:49:68:65:73:f8:e4:73:72:5f:db:41: b3:f5:5f:2f:3b:09:e7:f3:a8:07:80:c9:c7:80:23:a7:eb:fc: 9c:aa:34:4b:a5:4f:db:77:a7:da:7f:df:ef:73:14:c0:3a:e1: a1:2b:23:61:70:3e:f8:fc:e3:f1:55:a1:41:e2:3c:38:f7:b5: f2:14:fd:af:9a:23:ce:7d:27:12:ad:32:f5:5b:9f:48:82:c2: 66:5d:07:ee:d5:22:d5:3e:3d:c2:ad:7e:b8:84:7d:d2:66:b7: f2:bf:32:3a:3e:b3:68:95:65:4f:8b:27:e5:c5:81:78:65:a2: 8b:7c:2d:17:d2:0e:e5:67:e1:71:a0:59:47:6d:6a:b1:9f:c6: a4:c7:95:9a:5a:19:d0:16:0c:05:a6:b9:12:24:d2:5d:31:11: b3:02:d4:3b:9d:c8:57:45:f0:f6:d3:44:a2:da:49:e1:5a:ed: c5:eb:4a:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAE9edurFsbK/06AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk NWJhYWZiOWYtNWYwMi00NmFjLTk3ODUtMWJkZWVmOTkzZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzXDD+lNRWPH4KRbCGmZyLJz2VqN4RaROTY2 cSiiEFsMcrEKQqygqbV5aLKGsDrIBXrpyQDdMlfccys/LDU59nzPXEFTubSgrKD+ yXQ+rPRgqpLXRdQGh7gKceSMZ5w2cPTORXW7Ng2EZ3A2nbOIzgUuhNLH2e+NiHRt l9lOhYiNKPER2MF0t9MO/D6XeO7hHMeXoPxKFRhMns+kvErHproRErJTbrvBXSqg eGGlUGgx8tdEy4/aMIDmZTZ2a4WHhZ4OtW6b6J9tcoVfZHLira96sbRzXJKjEBxu li7wz5h5SFv9Rmloadq1nC2YdqHkgR8wB2809MP+C7np5nSunQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeiCprzeHIAUwg6YoDXJ83K4JJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYmRhYjg0NjktOGNiNS0z ZmRmLTlmNDktZWNjNTZjZWQyMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb155pDJNjYDcZc43LyVaSt/lu8HIALe4qPlcqWrwvNxSSQ5y6ScY9x DT6Pjo7xqLolADdU+38Lgh5+EUSaM52BooG21BfVXifhYf8r6KxJaGVz+ORzcl/b QbP1Xy87CefzqAeAyceAI6fr/JyqNEulT9t3p9p/3+9zFMA64aErI2FwPvj84/FV oUHiPDj3tfIU/a+aI859JxKtMvVbn0iCwmZdB+7VItU+PcKtfriEfdJmt/K/Mjo+ s2iVZU+LJ+XFgXhloot8LRfSDuVn4XGgWUdtarGfxqTHlZpaGdAWDAWmuRIk0l0x EbMC1DudyFdF8PbTRKLaSeFa7cXrSkM= -----END CERTIFICATE-----Generated at Fri Apr 17 21:26:01 2026 by rpki-client