$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c613c992-0a9a-3d4c-b926-fbdaf1125064.roa File: c613c992-0a9a-3d4c-b926-fbdaf1125064.roa (raw, json) Hash identifier: sKaEJQBbIeGGCDX02SnCaJmPG3isMMhq4SgeOgvSnxM= Subject key identifier: C6:9E:1B:7D:5D:FC:62:B5:3E:48:11:71:78:84:16:FA:EE:8E:5A:38 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F7782F3AA1A3686878316A840 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c613c992-0a9a-3d4c-b926-fbdaf1125064.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 16839 IP address blocks: 149.96.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:f3:aa:1a:36:86:87:83:16:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=596eda85-8f75-44a6-a527-130ab7634597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:09:38:8f:b6:5d:96:82:b9:00:73:b3:df:08: 47:e2:b8:bf:20:90:f3:31:e4:9b:68:f9:ed:aa:0b: 9f:dc:f9:d2:e6:85:72:d7:5a:39:4c:13:72:cd:98: 56:73:92:67:10:55:6b:54:bd:e3:7d:5f:75:0a:ba: ba:73:d5:e8:ef:ee:13:46:9c:aa:cb:a2:7e:c3:18: 98:cf:a6:46:ae:9e:04:b7:d1:3d:f3:14:39:d8:a0: 1a:da:52:1f:cb:cb:f7:a7:8e:64:79:bd:2b:3f:5e: 3d:6c:eb:56:da:47:77:94:10:c8:5b:0a:d9:5f:a1: 2b:c8:6f:0c:6f:42:c9:ae:a3:58:f4:6c:6d:e8:65: be:61:7e:61:4e:ed:77:b5:5a:7e:5d:15:08:aa:8f: 85:19:6a:71:90:c5:55:30:b9:cf:f8:01:2c:58:e2: bc:44:f1:0b:7f:c4:4b:5b:56:1c:7e:31:8b:ae:9e: ba:34:ce:9f:40:5e:f8:f9:c4:b7:64:dc:af:eb:8a: a4:52:37:46:59:be:80:8d:d3:59:c9:72:f0:ee:33: ee:1e:f2:97:b2:5d:04:4a:72:fa:1a:aa:43:be:a7: 2d:f8:e4:44:06:8a:c0:9d:b5:b3:2a:30:3b:6b:ab: 30:9b:89:02:b2:6a:36:67:64:05:49:ec:8a:64:a9: b1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9E:1B:7D:5D:FC:62:B5:3E:48:11:71:78:84:16:FA:EE:8E:5A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c613c992-0a9a-3d4c-b926-fbdaf1125064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:12:71:0c:a8:25:b3:88:01:2c:a8:60:e6:3b:f2:37:3f:cf: 86:d3:e8:27:39:10:db:c4:65:4e:c3:db:86:21:86:9c:3e:7c: b3:ee:22:9b:f9:7c:86:9c:13:de:9f:94:a8:88:25:07:43:f6: 78:23:40:db:38:a1:96:b4:9c:a6:eb:82:a0:4f:8f:5a:15:6d: 75:a3:d7:1e:a6:1a:7b:9d:28:d4:bd:f3:9f:5c:c0:56:58:f1: 5e:19:ee:e1:9f:47:47:ae:94:35:73:5e:8a:8f:2c:52:0f:db: 40:d1:a7:5a:0e:60:6c:bc:01:0c:57:ea:8f:c0:0d:b9:5a:a5: a7:31:28:3e:45:bc:52:ce:10:f0:30:18:e4:79:d1:e6:64:ba: 22:f9:67:2d:52:5e:45:66:91:1e:0b:78:52:af:31:0f:20:64: 7f:a3:8f:8b:3d:ec:8f:6b:9e:6c:1d:ef:8f:79:1a:6a:ad:e0: 9e:34:15:c2:85:98:63:a8:eb:1f:91:cc:98:88:85:fa:2c:38: 39:f9:05:08:e6:9c:d1:5f:22:b2:ae:48:8c:c7:fd:a1:63:4a: 80:a4:d5:3d:4f:bb:b9:35:8a:8e:1c:f4:61:d2:2b:b3:ba:cf: 31:56:39:00:7f:cb:0e:1b:06:ee:8b:1d:9a:88:e6:cf:36:60: f0:54:69:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gvOqGjaGh4MWqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTk2ZWRhODUtOGY3NS00NGE2LWE1MjctMTMwYWI3NjM0NTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggk4j7ZdloK5AHOz3whH4ri/IJDzMeSbaPnt qguf3PnS5oVy11o5TBNyzZhWc5JnEFVrVL3jfV91Crq6c9Xo7+4TRpyqy6J+wxiY z6ZGrp4Et9E98xQ52KAa2lIfy8v3p45keb0rP149bOtW2kd3lBDIWwrZX6EryG8M b0LJrqNY9Gxt6GW+YX5hTu13tVp+XRUIqo+FGWpxkMVVMLnP+AEsWOK8RPELf8RL W1YcfjGLrp66NM6fQF74+cS3ZNyv64qkUjdGWb6AjdNZyXLw7jPuHvKXsl0ESnL6 GqpDvqct+OREBorAnbWzKjA7a6swm4kCsmo2Z2QFSeyKZKmxMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaeG31d/GK1PkgRcXiEFvrujlo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzYxM2M5OTItMGE5YS0z ZDRjLWI5MjYtZmJkYWYxMTI1MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4ScQyoJbOIASyoYOY78jc/z4bT6Cc5ENvEZU7D24Yhhpw+fLPuIpv5 fIacE96flKiIJQdD9ngjQNs4oZa0nKbrgqBPj1oVbXWj1x6mGnudKNS9859cwFZY 8V4Z7uGfR0eulDVzXoqPLFIP20DRp1oOYGy8AQxX6o/ADblapacxKD5FvFLOEPAw GOR50eZkuiL5Zy1SXkVmkR4LeFKvMQ8gZH+jj4s97I9rnmwd7495Gmqt4J40FcKF mGOo6x+RzJiIhfosODn5BQjmnNFfIrKuSIzH/aFjSoCk1T1Pu7k1io4c9GHSK7O6 zzFWOQB/yw4bBu6LHZqI5s82YPBUadU= -----END CERTIFICATE-----Generated at Tue Oct 13 08:52:31 2026 by rpki-client