$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa File: cbb47c14-2799-3b64-87d8-2264da5e3862.roa (raw, json) Hash identifier: ZXNeNgTLYyGgSkbwc2xq70xos7+ejwsm4GgSH67IBZ4= Subject key identifier: AE:AE:11:1A:A2:DF:08:17:37:BD:A3:80:E0:D3:13:89:36:72:8A:8E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F7782F2EAB81FAE3F725C6F40 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 16839 IP address blocks: 149.96.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:f2:ea:b8:1f:ae:3f:72:5c:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=fb768cc0-a33c-4e42-af28-b1155888719b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:fc:3d:4f:7b:68:b7:c5:01:f6:e7:78:72: 25:35:c1:87:d6:0a:38:4b:25:aa:4f:e2:f2:28:eb: cf:5e:b8:d2:a1:68:c3:91:ea:5d:07:69:1a:8c:8c: 20:3d:1c:42:a3:f5:4a:70:7c:0b:8c:be:e7:56:e5: b5:1b:d4:ce:53:6f:04:ce:84:6a:0c:28:16:b2:e1: 16:9f:da:00:19:69:c4:c6:3b:b9:76:e2:4c:20:c9: ca:40:0a:91:fa:eb:06:8e:d4:c8:8b:70:51:48:6f: f2:bf:4b:db:4d:b3:47:e9:b2:db:d2:85:0d:80:90: d7:2a:b2:07:36:88:a5:75:d4:9c:64:f3:1e:b3:07: fd:4a:78:02:98:48:61:2c:5b:c7:7f:aa:57:9f:2a: ce:65:2a:46:e9:5f:49:32:8f:0a:af:43:e4:77:55: 24:3b:52:41:5b:bf:44:e0:03:38:72:79:a5:10:1f: 9c:18:3f:ab:11:bc:38:bc:07:b5:46:8c:b7:bb:ed: 3c:97:8e:f6:39:9b:30:ca:eb:3f:cb:38:20:d4:58: 45:0b:63:14:73:82:48:6d:14:76:e1:f3:5b:81:98: 00:97:f0:51:ba:d0:1a:cc:19:08:27:2d:89:b9:f8: bc:8d:da:ad:ad:4b:59:90:1b:77:71:3d:b8:78:3f: f2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AE:11:1A:A2:DF:08:17:37:BD:A3:80:E0:D3:13:89:36:72:8A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:48:f0:ab:56:ef:b3:87:c2:49:42:0e:8c:b4:36:a3:45:67: 64:b5:d7:1b:28:32:3d:dc:19:f0:23:10:90:15:4b:66:29:d2: 07:03:51:cb:5f:d1:43:27:67:34:b6:53:25:2f:3a:68:7f:60: e9:29:80:ff:aa:e9:01:94:02:a3:10:f0:17:85:fd:0e:e6:eb: 29:51:1c:62:6a:79:c4:39:fc:56:95:4a:2c:cf:19:1a:d2:4f: be:7a:b5:7b:c4:8b:1f:1e:61:6f:d3:3e:71:c4:04:c8:af:e2: dd:22:9c:24:c4:78:10:f9:55:aa:2f:92:65:9d:55:f4:a6:65: 17:6e:75:81:d3:0c:d3:b3:48:01:96:c9:01:c3:f7:7b:3b:c8: eb:8f:e2:19:f4:2d:1a:bf:10:65:cb:79:d5:cb:2f:78:1c:88: 91:29:8d:50:13:8d:ce:03:ef:7d:94:7d:cc:30:6f:04:89:48: 68:17:a1:0e:6c:d7:35:ad:82:5a:3a:7e:e8:26:1b:1f:7f:59: 7d:9e:00:4b:1f:8b:2b:7e:7b:b9:10:21:b5:5f:37:89:2c:73: 72:d1:c9:b9:85:76:da:8e:87:fd:7a:30:ae:54:24:f9:ae:3e: 56:ba:19:2a:44:09:9e:34:67:fe:8d:59:a1:3a:62:5b:ba:e5: 60:e0:ea:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gvLquB+uP3Jcb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZmI3NjhjYzAtYTMzYy00ZTQyLWFmMjgtYjExNTU4ODg3MTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgj8PU97aLfFAfbneHIlNcGH1go4SyWqT+Ly KOvPXrjSoWjDkepdB2kajIwgPRxCo/VKcHwLjL7nVuW1G9TOU28EzoRqDCgWsuEW n9oAGWnExju5duJMIMnKQAqR+usGjtTIi3BRSG/yv0vbTbNH6bLb0oUNgJDXKrIH NoilddScZPMeswf9SngCmEhhLFvHf6pXnyrOZSpG6V9JMo8Kr0Pkd1UkO1JBW79E 4AM4cnmlEB+cGD+rEbw4vAe1Roy3u+08l472OZswyus/yzgg1FhFC2MUc4JIbRR2 4fNbgZgAl/BRutAazBkIJy2Jufi8jdqtrUtZkBt3cT24eD/yEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6uERqi3wgXN72jgODTE4k2coqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JiNDdjMTQtMjc5OS0z YjY0LTg3ZDgtMjI2NGRhNWUzODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFI8KtW77OHwklCDoy0NqNFZ2S11xsoMj3cGfAjEJAVS2Yp0gcDUctf 0UMnZzS2UyUvOmh/YOkpgP+q6QGUAqMQ8BeF/Q7m6ylRHGJqecQ5/FaVSizPGRrS T756tXvEix8eYW/TPnHEBMiv4t0inCTEeBD5VaovkmWdVfSmZRdudYHTDNOzSAGW yQHD93s7yOuP4hn0LRq/EGXLedXLL3gciJEpjVATjc4D732UfcwwbwSJSGgXoQ5s 1zWtglo6fugmGx9/WX2eAEsfiyt+e7kQIbVfN4ksc3LRybmFdtqOh/16MK5UJPmu Pla6GSpECZ40Z/6NWaE6Ylu65WDg6hY= -----END CERTIFICATE-----Generated at Tue Oct 13 21:13:45 2026 by rpki-client