$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bf0df034-e7e6-3186-82c9-3c619c919c76.roa File: bf0df034-e7e6-3186-82c9-3c619c919c76.roa (raw, json) Hash identifier: UhTiIqDRF9Ir8fvASduh7/D60SnU21wOvm8brttciYM= Subject key identifier: BD:5C:C8:00:CD:9E:B9:BF:2A:EA:15:12:EB:E9:EA:AE:54:CB:79:95 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F03A7EA3A2B293BD4B3762640 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bf0df034-e7e6-3186-82c9-3c619c919c76.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16839 IP address blocks: 149.96.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:ea:3a:2b:29:3b:d4:b3:76:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=2fa959ba-fde0-4c6a-b22e-a77f6891940a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ae:be:f4:77:b0:95:8b:b4:36:b7:2d:a8:51: 9a:ea:11:f6:09:77:5f:be:a4:7d:cb:0a:b2:a1:f7: b4:be:a0:3d:57:78:e3:fd:43:e4:a3:32:c8:a0:b2: 0b:41:ee:31:ad:f0:da:92:13:a1:3d:ef:d0:fa:60: 55:a7:be:4a:76:35:2a:db:79:51:33:09:f6:f1:f8: 0a:c6:59:ef:52:db:08:62:5b:29:8e:ba:8b:b8:d3: 83:dc:96:c7:d7:54:30:4a:f8:17:83:0d:f5:07:6e: 9a:05:fe:cd:40:a4:41:2a:51:b1:64:7c:1b:da:52: 9f:a8:62:08:22:fb:e2:bb:34:bf:6a:74:33:bd:16: 74:bf:87:60:1c:a0:22:4f:33:1b:64:ba:44:ad:7f: 10:83:e0:cb:a2:7d:27:10:03:d6:7c:88:e8:32:92: c8:a1:a8:1f:70:d0:48:e5:f1:9e:9e:a7:fd:77:02: 7b:ea:3f:c6:a6:9c:8f:dc:3d:c1:c1:86:62:43:ba: 0b:56:d7:ee:e1:a2:62:2f:89:a7:96:65:d4:54:f8: 03:c1:3b:dd:20:65:22:d3:b0:14:d1:0c:7e:6c:ce: c8:11:66:c3:f5:23:3e:49:d5:01:e8:86:03:c2:28: 8d:c7:91:9a:66:eb:e7:31:3d:c7:10:e2:41:ad:6c: 2c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5C:C8:00:CD:9E:B9:BF:2A:EA:15:12:EB:E9:EA:AE:54:CB:79:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bf0df034-e7e6-3186-82c9-3c619c919c76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:08:0c:62:6d:6b:30:86:f7:8a:3d:2f:77:c0:ff:90:ff:2b: bb:84:61:7d:c6:54:a7:44:c8:75:64:c3:5a:47:cf:41:e3:bc: 01:1b:a2:c2:ee:fa:d2:f0:66:d0:a0:6b:cb:ff:b6:5a:44:63: 65:e4:96:19:48:3f:24:dc:92:48:40:58:4d:25:87:57:ba:69: ef:d1:f3:5a:46:a3:45:14:c6:35:e2:8a:42:a3:c5:69:ad:2a: 88:df:8f:43:ae:e1:6f:a4:ed:eb:a6:69:01:6c:99:44:3b:12: 8a:c7:21:ff:57:36:7a:d9:b3:aa:e0:6d:d1:66:5e:7c:02:9f: c8:07:42:c5:9a:a7:07:a0:2e:af:6c:26:95:61:66:88:5f:66: 76:2b:e1:bf:3b:bf:9b:2c:f2:1a:74:84:67:33:1d:21:a2:56: 60:9c:c7:29:7c:b5:12:38:6a:56:4d:81:90:d7:df:fb:b8:0c: 32:cb:d0:9b:0f:8c:fe:d2:9d:ce:4f:c5:12:2a:a9:61:06:ed: 11:ab:56:a9:cb:b8:39:13:80:5f:0f:df:39:f8:68:44:2d:53: b8:5a:44:95:60:ec:84:97:67:f3:de:e7:28:1d:d5:ed:40:40: 65:42:05:1c:65:90:18:74:19:71:a2:d3:58:28:09:6f:db:df: 92:61:af:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp+o6Kyk71LN2JkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MmZhOTU5YmEtZmRlMC00YzZhLWIyMmUtYTc3ZjY4OTE5NDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK6+9HewlYu0NrctqFGa6hH2CXdfvqR9ywqy ofe0vqA9V3jj/UPkozLIoLILQe4xrfDakhOhPe/Q+mBVp75KdjUq23lRMwn28fgK xlnvUtsIYlspjrqLuNOD3JbH11QwSvgXgw31B26aBf7NQKRBKlGxZHwb2lKfqGII IvviuzS/anQzvRZ0v4dgHKAiTzMbZLpErX8Qg+DLon0nEAPWfIjoMpLIoagfcNBI 5fGenqf9dwJ76j/GppyP3D3BwYZiQ7oLVtfu4aJiL4mnlmXUVPgDwTvdIGUi07AU 0Qx+bM7IEWbD9SM+SdUB6IYDwiiNx5GaZuvnMT3HEOJBrWwshwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1cyADNnrm/KuoVEuvp6q5Uy3mVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYmYwZGYwMzQtZTdlNi0z MTg2LTgyYzktM2M2MTljOTE5Yzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIIDGJtazCG94o9L3fA/5D/K7uEYX3GVKdEyHVkw1pHz0HjvAEbosLu +tLwZtCga8v/tlpEY2XklhlIPyTckkhAWE0lh1e6ae/R81pGo0UUxjXiikKjxWmt Kojfj0Ou4W+k7eumaQFsmUQ7EorHIf9XNnrZs6rgbdFmXnwCn8gHQsWapwegLq9s JpVhZohfZnYr4b87v5ss8hp0hGczHSGiVmCcxyl8tRI4alZNgZDX3/u4DDLL0JsP jP7Snc5PxRIqqWEG7RGrVqnLuDkTgF8P3zn4aEQtU7haRJVg7ISXZ/Pe5ygd1e1A QGVCBRxlkBh0GXGi01goCW/b35Jhrzo= -----END CERTIFICATE-----Generated at Tue Sep 22 12:44:19 2026 by rpki-client