$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa File: 08662a15-e04a-359b-8c07-283ea782a9b0.roa (raw, json) Hash identifier: EjvyxGtHOINQprL80ii0juh4d2luQy7kQr7dXWiBMrM= Subject key identifier: 74:FD:E6:7D:70:B8:A7:FD:E6:9B:36:F8:39:94:85:40:EA:74:D2:7E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E61450F41368E0217EA242B00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16839 IP address blocks: 149.96.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:0f:41:36:8e:02:17:ea:24:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=3ba2b443-1532-4941-ab88-877583b9809a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:32:8b:2b:33:5a:d7:26:79:62:5d:65:f2: 7c:36:ab:8e:31:70:68:75:cc:64:4d:33:d2:2f:b4: 16:a9:92:90:e4:c0:8a:98:9e:1b:f1:4f:50:b3:cf: 27:3c:c1:a4:84:1b:ba:4e:a7:81:fb:e2:25:61:e3: f9:b5:b1:19:b1:52:d7:ea:c7:1f:d5:00:9b:0b:44: 6b:d5:d5:54:db:d0:30:be:e2:4b:0f:c9:38:90:93: 54:88:8a:e6:23:5f:34:b6:6a:4f:a5:de:07:f4:36: d2:3a:b6:8e:0a:ae:ed:ae:cc:db:27:86:81:4e:b4: 21:b3:77:cd:d0:68:85:81:70:87:9e:6d:00:ca:1a: ab:5d:bc:95:cf:dc:c3:d0:b8:29:8a:af:d1:4d:5d: b5:07:ab:73:9c:cb:17:15:af:b7:39:7a:4a:b1:60: 84:5a:25:f9:af:07:1a:3d:da:78:f0:dd:3c:92:5c: 55:bb:9d:1b:b1:d3:62:aa:61:cc:b0:0a:14:c4:71: 7a:30:ce:a1:77:e2:09:37:09:32:d0:f4:66:85:2c: 9a:65:08:72:65:c1:00:97:c8:c3:c9:9f:2a:b8:c7: 4f:6d:c4:23:b5:35:0d:c9:3f:21:a8:ef:81:6a:ef: 27:d1:7b:fb:11:9d:61:39:12:1c:30:e4:19:08:f9: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FD:E6:7D:70:B8:A7:FD:E6:9B:36:F8:39:94:85:40:EA:74:D2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:8d:d9:4d:bc:7a:5c:22:31:9a:84:bd:d4:53:69:13:cf:b1: e2:b9:36:3b:29:76:dc:47:24:0a:8b:5f:25:e8:7b:3e:77:e7: 64:66:74:b7:cf:9c:ab:58:cf:a5:60:09:50:76:99:e9:31:8d: 87:25:c8:d2:3e:85:27:be:11:d2:16:7e:83:8b:58:4d:43:11: c1:3f:be:62:c1:8b:68:35:37:4e:72:2a:81:1b:89:f5:04:e5: c8:04:a5:98:f3:d0:e9:47:04:91:0b:9e:c7:ab:20:d6:65:32: 16:be:70:d0:2e:ad:4b:20:5f:f0:1a:f7:ba:1f:5b:e2:4d:a2: 2a:f5:0d:38:51:6f:fd:4e:b3:45:63:9f:52:1f:b0:f0:99:90: 25:80:28:61:b8:4d:df:e7:06:ed:bf:4a:47:af:52:bf:bd:06: fe:a7:05:a3:9b:ba:47:61:9b:8f:10:f2:17:02:e6:76:cb:1f: 00:0a:4e:a0:76:38:28:cf:93:1e:f2:90:b4:4d:60:78:1e:07: bc:a0:e0:10:e2:e1:05:c7:b5:3d:6b:5d:66:ba:aa:33:f4:b3: 16:e7:71:43:d2:23:34:31:73:ea:fb:4f:13:d1:93:99:77:11: 8b:4f:b3:d3:12:32:0a:aa:d0:a5:8b:d3:15:5f:26:07:ad:2b: 21:db:b1:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRQ9BNo4CF+okKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk M2JhMmI0NDMtMTUzMi00OTQxLWFiODgtODc3NTgzYjk4MDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQUyiyszWtcmeWJdZfJ8NquOMXBodcxkTTPS L7QWqZKQ5MCKmJ4b8U9Qs88nPMGkhBu6TqeB++IlYeP5tbEZsVLX6scf1QCbC0Rr 1dVU29AwvuJLD8k4kJNUiIrmI180tmpPpd4H9DbSOraOCq7trszbJ4aBTrQhs3fN 0GiFgXCHnm0AyhqrXbyVz9zD0Lgpiq/RTV21B6tznMsXFa+3OXpKsWCEWiX5rwca Pdp48N08klxVu50bsdNiqmHMsAoUxHF6MM6hd+IJNwky0PRmhSyaZQhyZcEAl8jD yZ8quMdPbcQjtTUNyT8hqO+Bau8n0Xv7EZ1hORIcMOQZCPnWHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHT95n1wuKf95ps2+DmUhUDqdNJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDg2NjJhMTUtZTA0YS0z NTliLThjMDctMjgzZWE3ODJhOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeN2U28elwiMZqEvdRTaRPPseK5NjspdtxHJAqLXyXoez5352RmdLfP nKtYz6VgCVB2mekxjYclyNI+hSe+EdIWfoOLWE1DEcE/vmLBi2g1N05yKoEbifUE 5cgEpZjz0OlHBJELnserINZlMha+cNAurUsgX/Aa97ofW+JNoir1DThRb/1Os0Vj n1IfsPCZkCWAKGG4Td/nBu2/SkevUr+9Bv6nBaObukdhm48Q8hcC5nbLHwAKTqB2 OCjPkx7ykLRNYHgeB7yg4BDi4QXHtT1rXWa6qjP0sxbncUPSIzQxc+r7TxPRk5l3 EYtPs9MSMgqq0KWL0xVfJgetKyHbsRQ= -----END CERTIFICATE-----Generated at Fri Jul 24 12:54:43 2026 by rpki-client