$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa File: d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa (raw, json) Hash identifier: ZhVnenu9yhE9LSal011vsk7w8Qq59ComEQ7oktB4cQI= Subject key identifier: F4:AC:1C:74:D1:A8:66:DF:66:DA:F7:0A:F6:5B:80:C4:DF:7E:B6:95 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F03A7963D5BE4FF59C7ACA000 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16839 IP address blocks: 149.96.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:96:3d:5b:e4:ff:59:c7:ac:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=78039022-aab8-4fff-84ab-f4e5be68692f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:6e:51:a1:c1:2d:c7:c2:21:c1:12:99:96: 1d:50:58:7e:42:fd:13:b2:1d:93:a5:6c:69:64:f1: 07:e6:c4:97:27:08:88:64:71:5d:50:47:2d:59:1c: 97:5a:69:3e:78:99:16:d6:34:f7:61:45:b2:3a:eb: ad:ee:be:06:ef:87:bc:8e:47:78:52:52:84:3e:aa: d9:93:fa:25:d8:5c:06:4d:c2:40:b2:e9:f9:d8:39: 74:11:d2:16:5a:d1:72:c1:c8:98:73:51:e9:3d:e3: 6a:52:2f:32:aa:2a:ef:ea:78:53:6d:cd:14:9e:65: 81:02:f7:c0:c9:f0:92:b2:b4:75:43:43:e6:dd:6d: 02:02:d1:61:98:9c:98:7c:27:3f:09:ff:c7:6b:ab: 0c:f1:70:5f:1f:1b:45:13:ab:b9:2b:da:bb:1e:01: ca:0f:a3:68:d6:4e:22:86:1e:33:de:1f:25:a0:39: 47:12:18:26:b1:e4:ee:77:d7:1a:c0:80:cf:b5:03: 04:00:d3:41:24:35:7f:d1:a8:49:ce:ac:bf:3c:7d: e6:b1:52:41:09:9e:72:e2:76:de:16:a2:0d:7c:c4: ef:a3:92:59:3e:ef:f4:88:20:c8:3c:ff:0d:8a:28: a6:8c:d9:00:a9:1b:9b:06:3f:a4:37:38:37:d4:ab: 9f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AC:1C:74:D1:A8:66:DF:66:DA:F7:0A:F6:5B:80:C4:DF:7E:B6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4d:b9:c6:32:7e:62:cb:77:dc:00:0c:42:7d:5f:52:df:0d: 1a:7c:93:75:90:5b:5d:38:67:c4:e4:67:9f:b3:16:cf:35:f9: 59:af:8b:45:44:c9:ac:a6:ae:1f:6d:a6:73:7c:40:a7:a9:0f: 36:17:38:f1:32:72:44:fb:81:c0:33:d5:f2:7c:90:b7:0d:95: 69:04:f6:70:59:4e:1c:cf:f8:ec:c2:09:cb:8a:5b:b1:8d:28: 1b:d6:ab:5f:8c:9d:38:fe:db:2d:98:e4:1c:4f:9b:95:14:cc: 45:e4:3a:01:86:74:74:0f:da:52:83:69:1d:8f:40:b9:1b:a6: d8:df:84:ad:37:7b:56:4a:15:73:cd:e7:4d:91:39:f0:46:4b: ad:df:c8:46:57:46:9b:7c:7e:50:1f:77:9b:cb:62:a9:3c:bc: e0:6c:3c:64:81:a0:3c:15:90:2c:56:65:a5:60:94:ba:f1:a4: f9:db:5f:c1:59:5c:5a:34:11:ff:a4:d4:d8:28:7b:9b:91:a7: 5d:8e:de:26:bf:02:3f:c5:da:d1:c0:67:3b:ff:91:3a:84:3e: b6:ee:e8:5b:fe:fa:a7:b3:b7:8e:c9:96:41:2c:6c:dc:ab:0c: 12:70:fa:43:14:74:c4:83:b2:67:52:c6:d3:c4:61:01:35:7d: 85:44:93:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp5Y9W+T/WcesoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NzgwMzkwMjItYWFiOC00ZmZmLTg0YWItZjRlNWJlNjg2OTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDBuUaHBLcfCIcESmZYdUFh+Qv0Tsh2TpWxp ZPEH5sSXJwiIZHFdUEctWRyXWmk+eJkW1jT3YUWyOuut7r4G74e8jkd4UlKEPqrZ k/ol2FwGTcJAsun52Dl0EdIWWtFywciYc1HpPeNqUi8yqirv6nhTbc0UnmWBAvfA yfCSsrR1Q0Pm3W0CAtFhmJyYfCc/Cf/Ha6sM8XBfHxtFE6u5K9q7HgHKD6No1k4i hh4z3h8loDlHEhgmseTud9cawIDPtQMEANNBJDV/0ahJzqy/PH3msVJBCZ5y4nbe FqINfMTvo5JZPu/0iCDIPP8NiiimjNkAqRubBj+kNzg31KufgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSsHHTRqGbfZtr3CvZbgMTffraVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZDJiYWIxZjgtMjVjYS0z ZDA3LWFlOWItOGY4NWM0YzVhYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdNucYyfmLLd9wADEJ9X1LfDRp8k3WQW104Z8TkZ5+zFs81+Vmvi0VE yaymrh9tpnN8QKepDzYXOPEyckT7gcAz1fJ8kLcNlWkE9nBZThzP+OzCCcuKW7GN KBvWq1+MnTj+2y2Y5BxPm5UUzEXkOgGGdHQP2lKDaR2PQLkbptjfhK03e1ZKFXPN 502ROfBGS63fyEZXRpt8flAfd5vLYqk8vOBsPGSBoDwVkCxWZaVglLrxpPnbX8FZ XFo0Ef+k1Ngoe5uRp12O3ia/Aj/F2tHAZzv/kTqEPrbu6Fv++qezt47JlkEsbNyr DBJw+kMUdMSDsmdSxtPEYQE1fYVEk5U= -----END CERTIFICATE-----Generated at Tue Sep 22 22:06:01 2026 by rpki-client