$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa File: 02650ceb-0044-3d70-b562-731c5b82412a.roa (raw, json) Hash identifier: KEN8Nxn6x7isVjF45J4WZimmbscox93xOh0o83r/r1M= Subject key identifier: 1E:03:7C:10:E7:F7:83:14:D4:35:6D:C5:CA:2E:40:D7:70:4C:EE:97 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F7782F3864F4D6EDEB37BC000 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 16839 IP address blocks: 149.96.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:f3:86:4f:4d:6e:de:b3:7b:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=525c8f76-39a9-48b3-9f78-135479171766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0a:34:b8:b1:08:87:03:ed:42:02:91:ef:09: 5e:18:64:c6:6b:72:b5:a8:ee:15:38:9b:1c:32:62: 63:65:19:fe:00:d0:bc:ca:92:b4:23:73:39:c6:c3: 4c:84:55:0e:5b:37:d7:e8:a8:41:50:97:e9:96:74: f4:b6:19:73:80:1d:18:bd:ed:53:90:07:3e:01:b2: e1:79:f4:b3:fa:69:27:f9:94:80:3c:4f:71:53:71: 29:42:9a:96:7d:a8:86:a0:81:95:54:28:71:bc:e3: 15:55:4f:61:81:31:f0:63:44:31:3a:2a:78:b6:7e: 46:e9:00:dd:d7:e9:8d:11:2a:fa:32:57:a2:8f:62: 7e:d9:ee:6e:46:4a:7d:e5:75:dc:9c:1d:fc:4a:d2: 47:28:1b:c9:2c:98:fd:a4:eb:ec:51:3d:62:8d:e4: 77:2b:05:eb:42:03:44:ee:84:db:88:81:bd:29:f3: d6:86:c2:99:60:08:8c:a4:b0:bd:a5:d0:67:7c:b5: e1:bf:5c:bb:4f:78:ee:7f:e9:f8:24:78:03:3b:b7: 94:ce:b6:61:18:fb:a7:51:2f:6c:60:8c:4b:03:9d: f1:20:01:9a:e1:27:d6:4a:2c:0f:de:0f:a3:80:d8: a6:9e:99:66:14:b3:9f:9b:23:62:f0:67:89:dd:ef: 13:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:03:7C:10:E7:F7:83:14:D4:35:6D:C5:CA:2E:40:D7:70:4C:EE:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f3:33:c5:56:f9:4b:ae:6a:82:c7:cb:8e:d8:46:f7:f9:64: 7b:a7:8a:97:5a:08:55:2a:af:82:7c:dc:e9:34:b9:3a:a9:75: 64:97:c8:98:c6:8d:00:11:17:c1:7c:ba:95:2d:b1:3b:b4:58: ac:8a:f6:40:6a:3a:39:73:b1:3a:f1:0d:e0:28:e0:5a:5f:cd: a2:55:e9:38:5e:da:8a:d5:61:55:c0:84:07:cd:39:b9:46:a8: 1c:c8:94:c7:13:af:e4:6a:77:5c:32:a7:f4:c0:30:ec:36:43: b0:36:a1:53:6d:6b:3f:64:ee:13:b1:a8:24:23:54:3e:34:ea: 8d:64:a2:01:9d:62:ad:bb:ea:05:de:d8:62:26:9c:0d:78:cc: 34:cd:2e:cc:d8:c6:27:8f:b5:fd:61:ac:17:50:ad:79:77:be: 6d:f3:60:ce:f8:c7:a4:8a:9b:ca:8b:83:0b:f1:3b:d4:1f:09: 55:37:71:d1:40:94:50:2f:ed:ac:78:f9:fd:66:0d:93:20:a9: d2:47:89:3a:67:ef:34:eb:df:34:db:dd:01:e6:62:10:2f:43: 76:2b:c7:64:6b:4e:4e:dc:a5:f1:30:72:07:61:64:be:c0:27: 23:5c:c2:10:e6:04:23:12:3e:19:e3:9b:fb:92:03:0b:3f:16: 23:91:74:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gvOGT01u3rN7wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTI1YzhmNzYtMzlhOS00OGIzLTlmNzgtMTM1NDc5MTcxNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgo0uLEIhwPtQgKR7wleGGTGa3K1qO4VOJsc MmJjZRn+ANC8ypK0I3M5xsNMhFUOWzfX6KhBUJfplnT0thlzgB0Yve1TkAc+AbLh efSz+mkn+ZSAPE9xU3EpQpqWfaiGoIGVVChxvOMVVU9hgTHwY0QxOip4tn5G6QDd 1+mNESr6Mleij2J+2e5uRkp95XXcnB38StJHKBvJLJj9pOvsUT1ijeR3KwXrQgNE 7oTbiIG9KfPWhsKZYAiMpLC9pdBnfLXhv1y7T3juf+n4JHgDO7eUzrZhGPunUS9s YIxLA53xIAGa4SfWSiwP3g+jgNimnplmFLOfmyNi8GeJ3e8TuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4DfBDn94MU1DVtxcouQNdwTO6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDI2NTBjZWItMDA0NC0z ZDcwLWI1NjItNzMxYzViODI0MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTzM8VW+UuuaoLHy47YRvf5ZHunipdaCFUqr4J83Ok0uTqpdWSXyJjG jQARF8F8upUtsTu0WKyK9kBqOjlzsTrxDeAo4FpfzaJV6The2orVYVXAhAfNOblG qBzIlMcTr+Rqd1wyp/TAMOw2Q7A2oVNtaz9k7hOxqCQjVD406o1kogGdYq276gXe 2GImnA14zDTNLszYxiePtf1hrBdQrXl3vm3zYM74x6SKm8qLgwvxO9QfCVU3cdFA lFAv7ax4+f1mDZMgqdJHiTpn7zTr3zTb3QHmYhAvQ3Yrx2RrTk7cpfEwcgdhZL7A JyNcwhDmBCMSPhnjm/uSAws/FiORdLE= -----END CERTIFICATE-----Generated at Sun Oct 11 22:02:10 2026 by rpki-client