$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/07b02d75-59da-34dd-b4df-1d319f43a1fe.roa File: 07b02d75-59da-34dd-b4df-1d319f43a1fe.roa (raw, json) Hash identifier: b5OIw5xvmLrEQSjTHTy2FvB5iqaj0yr2/uVvFn1dNck= Subject key identifier: 1E:B3:E8:5C:7F:4B:64:2F:4E:5F:49:93:B6:81:60:A7:B5:03:4B:F5 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F1CC7AA3549468E50D587AA00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/07b02d75-59da-34dd-b4df-1d319f43a1fe.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 397182 IP address blocks: 149.96.192.0/24 maxlen: 26 149.96.193.0/24 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:aa:35:49:46:8e:50:d5:87:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=f8af78f4-c878-4bc5-9ae5-ff659f0c1028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1b:fe:c9:87:28:28:a3:28:39:d6:d2:26:e7: e7:0b:32:ad:5c:63:a1:2d:e7:de:7d:1d:14:37:c2: 0a:a9:0a:9a:48:1a:a9:5f:82:1a:96:ef:9f:8e:25: e7:36:85:28:16:3d:2c:57:96:0e:a4:e9:6d:6d:1c: 91:c7:c5:b4:49:83:2c:ff:3b:f4:a7:3f:80:21:c3: 5e:59:f6:97:7b:a7:d1:bc:95:56:a1:e7:90:60:86: 59:96:33:c6:cb:a3:0e:be:d6:3e:83:05:da:69:7b: 8b:3c:aa:ec:72:b6:60:3c:ef:b8:64:c0:f0:09:ab: b6:a6:6e:02:24:69:50:21:3e:1e:ed:06:8c:59:dc: 1a:ed:3d:32:65:47:73:31:26:dd:a8:18:99:a8:76: a8:6e:19:20:ef:a1:1c:43:4b:c9:3b:6c:ed:23:aa: 8a:73:d2:62:72:25:9f:eb:68:3e:e9:6b:9f:46:bf: c3:24:0f:82:52:53:7c:ae:af:3e:26:f2:40:62:41: 9a:b9:f6:4c:8d:92:a3:31:86:8f:35:cd:f7:59:9d: 92:aa:e2:82:96:ab:48:12:7d:e8:4a:44:70:7a:cc: 24:c4:3a:1a:0c:75:96:05:16:8b:6c:2c:73:4f:eb: ef:13:2a:e9:71:ba:e0:80:22:b4:93:6a:ce:65:10: f7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:E8:5C:7F:4B:64:2F:4E:5F:49:93:B6:81:60:A7:B5:03:4B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/07b02d75-59da-34dd-b4df-1d319f43a1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ee:27:3d:4a:97:f6:39:de:c0:82:3a:1a:19:af:6c:5e:fe: a5:af:35:46:34:d6:4d:94:bf:0b:06:86:b2:f7:8e:23:e3:11: d1:08:f1:5e:51:b6:78:5c:70:f8:6b:4b:aa:0f:f6:b2:f3:e2: 32:4c:3b:e0:65:0c:f8:bc:1b:ba:44:16:94:3f:ab:b0:c0:cc: e9:8c:ee:0d:bb:b3:97:40:2b:29:f9:64:b9:bc:3e:76:05:ea: 64:8a:a4:26:9b:d1:94:90:c2:f3:84:4c:17:8f:06:5a:77:a5: f4:e2:24:a7:9b:ad:d1:25:83:f8:96:cb:3a:b4:f4:6c:62:3b: 0e:b5:97:24:f3:0c:10:20:56:b9:68:b6:a1:e8:59:81:12:8d: 07:7b:bd:51:05:ec:5a:cf:f0:1c:e9:f6:dc:43:64:39:64:f9: 7e:89:57:06:54:9f:10:a0:ee:a5:d2:61:27:21:6a:30:fe:fd: 9e:be:03:d3:3d:cc:60:c8:79:91:68:1b:3f:c9:5b:48:bc:f9: 07:8b:fb:9a:02:57:90:6f:4e:da:3a:13:5c:f5:c2:78:0e:ec: 15:12:f1:5d:0a:77:09:34:8e:7d:7f:e0:a8:fa:08:c0:2f:d4: d6:3f:ef:ad:6e:11:6a:be:34:ee:d7:07:59:47:d3:b7:9a:03: df:d0:e8:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6o1SUaOUNWHqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ZjhhZjc4ZjQtYzg3OC00YmM1LTlhZTUtZmY2NTlmMGMxMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhv+yYcoKKMoOdbSJufnCzKtXGOhLefefR0U N8IKqQqaSBqpX4Ialu+fjiXnNoUoFj0sV5YOpOltbRyRx8W0SYMs/zv0pz+AIcNe WfaXe6fRvJVWoeeQYIZZljPGy6MOvtY+gwXaaXuLPKrscrZgPO+4ZMDwCau2pm4C JGlQIT4e7QaMWdwa7T0yZUdzMSbdqBiZqHaobhkg76EcQ0vJO2ztI6qKc9JiciWf 62g+6WufRr/DJA+CUlN8rq8+JvJAYkGaufZMjZKjMYaPNc33WZ2SquKClqtIEn3o SkRweswkxDoaDHWWBRaLbCxzT+vvEyrpcbrggCK0k2rOZRD3LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6z6Fx/S2QvTl9Jk7aBYKe1A0v1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDdiMDJkNzUtNTlkYS0z NGRkLWI0ZGYtMWQzMTlmNDNhMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlWDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHuJz1Kl/Y53sCCOhoZr2xe/qWvNUY01k2UvwsGhrL3jiPjEdEI8V5R tnhccPhrS6oP9rLz4jJMO+BlDPi8G7pEFpQ/q7DAzOmM7g27s5dAKyn5ZLm8PnYF 6mSKpCab0ZSQwvOETBePBlp3pfTiJKebrdElg/iWyzq09GxiOw61lyTzDBAgVrlo tqHoWYESjQd7vVEF7FrP8Bzp9txDZDlk+X6JVwZUnxCg7qXSYSchajD+/Z6+A9M9 zGDIeZFoGz/JW0i8+QeL+5oCV5BvTto6E1z1wngO7BUS8V0Kdwk0jn1/4Kj6CMAv 1NY/761uEWq+NO7XB1lH07eaA9/Q6FI= -----END CERTIFICATE-----Generated at Sun Sep 27 05:37:23 2026 by rpki-client