$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa File: 249c943d-b89a-3ace-b703-d24eed8a0e72.roa (raw, json) Hash identifier: Kjx8atrm3ae/PuyojyAmc9ptDI5nKZSA7c1AiB1ky5g= Subject key identifier: 1D:3C:20:2B:9F:00:CC:DE:BF:CD:DC:C2:25:F2:C3:97:17:55:E9:C4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E61450F2AF808AFAA20F122C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16839 IP address blocks: 149.96.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:0f:2a:f8:08:af:aa:20:f1:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=2c069ab1-15a9-400f-b90e-42693e221b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:28:9a:94:6f:8d:9a:02:8c:66:50:df:86: 82:03:3e:f4:4e:03:e5:e8:1e:c7:36:a9:cb:27:9c: 9b:a8:1e:eb:32:54:f8:fa:dc:43:0d:f2:d7:fb:77: 58:5c:5d:0e:de:a9:d4:21:8f:4a:05:10:54:06:12: 36:b1:f9:b8:cb:db:bd:35:7c:2e:23:64:cb:79:c2: c4:03:99:90:51:55:6e:d0:43:cb:24:02:f2:55:3f: 3c:2a:03:52:69:45:ed:14:5a:db:51:e0:93:a9:bd: 9f:54:5b:0c:cf:f6:b8:a0:18:e4:4f:3f:b2:29:35: 50:60:08:f7:88:b2:57:b5:d0:56:f0:1d:b7:c5:7f: 57:ce:4d:1c:93:22:0f:26:26:8c:67:93:a1:9b:b5: 54:40:42:09:59:cf:73:dd:28:bc:17:5e:a6:e0:9e: 63:b0:3d:d1:1b:68:22:45:77:7c:ff:36:96:6a:8f: 8e:6d:91:96:1f:1c:5c:f5:ea:4c:3b:e3:64:89:9e: a2:ab:96:cc:c1:1c:c1:6c:95:6a:92:f4:42:6a:34: 05:a0:36:86:90:59:61:77:30:9e:18:eb:b2:f4:0b: cb:7a:b1:78:b3:ac:7f:c1:f3:d9:23:8e:29:2a:22: 62:fe:f7:27:e1:bb:09:73:74:bf:43:29:91:e1:20: a0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3C:20:2B:9F:00:CC:DE:BF:CD:DC:C2:25:F2:C3:97:17:55:E9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:3e:18:7e:3d:67:f1:27:3d:76:35:00:2b:20:31:34:3d:29: 6a:46:0e:43:89:c0:e7:03:f4:86:0a:4d:71:4b:aa:8c:25:29: a2:d3:a6:af:5a:0e:d6:f7:d2:5d:e8:61:9d:47:17:6d:7e:1a: ef:25:49:c8:93:46:e5:de:63:e4:90:af:5c:cd:fd:1d:5c:bf: dd:63:01:b7:54:4a:22:dd:27:26:f4:58:a5:74:bb:af:54:31: 71:b3:87:19:ed:40:95:34:c6:da:e0:55:59:86:d8:4d:d8:63: f0:f9:58:28:16:0e:5f:4a:89:4d:32:e9:0f:8b:37:3c:a1:b2: 63:41:d0:5f:97:60:11:e3:2a:f9:23:d4:a3:c0:68:d3:53:f0: ad:a7:de:39:60:8c:e5:a2:2e:00:2b:4d:ff:e1:d7:c5:17:3b: ca:47:ac:00:dc:3e:4c:35:56:92:aa:41:4c:d7:50:c8:8e:2c: 5a:bb:cb:c5:7c:e9:54:76:c0:5c:06:b6:ee:9b:43:ec:d6:4b: b1:21:92:eb:99:71:b9:b6:e0:23:fb:e6:65:a2:55:7b:9d:27: 27:3d:ea:ae:30:fd:40:33:84:87:a4:df:12:6b:2d:8f:ff:28: 24:c0:de:5a:b9:27:7e:e6:c4:f3:35:db:c7:f5:dc:c3:b5:55: b4:f6:3e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRQ8q+AivqiDxIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk MmMwNjlhYjEtMTVhOS00MDBmLWI5MGUtNDI2OTNlMjIxYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzAompRvjZoCjGZQ34aCAz70TgPl6B7HNqnL J5ybqB7rMlT4+txDDfLX+3dYXF0O3qnUIY9KBRBUBhI2sfm4y9u9NXwuI2TLecLE A5mQUVVu0EPLJALyVT88KgNSaUXtFFrbUeCTqb2fVFsMz/a4oBjkTz+yKTVQYAj3 iLJXtdBW8B23xX9Xzk0ckyIPJiaMZ5Ohm7VUQEIJWc9z3Si8F16m4J5jsD3RG2gi RXd8/zaWao+ObZGWHxxc9epMO+NkiZ6iq5bMwRzBbJVqkvRCajQFoDaGkFlhdzCe GOuy9AvLerF4s6x/wfPZI44pKiJi/vcn4bsJc3S/QymR4SCgDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB08ICufAMzev83cwiXyw5cXVenEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMjQ5Yzk0M2QtYjg5YS0z YWNlLWI3MDMtZDI0ZWVkOGEwZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0+GH49Z/EnPXY1ACsgMTQ9KWpGDkOJwOcD9IYKTXFLqowlKaLTpq9a Dtb30l3oYZ1HF21+Gu8lSciTRuXeY+SQr1zN/R1cv91jAbdUSiLdJyb0WKV0u69U MXGzhxntQJU0xtrgVVmG2E3YY/D5WCgWDl9KiU0y6Q+LNzyhsmNB0F+XYBHjKvkj 1KPAaNNT8K2n3jlgjOWiLgArTf/h18UXO8pHrADcPkw1VpKqQUzXUMiOLFq7y8V8 6VR2wFwGtu6bQ+zWS7EhkuuZcbm24CP75mWiVXudJyc96q4w/UAzhIek3xJrLY// KCTA3lq5J37mxPM128f13MO1VbT2Pvw= -----END CERTIFICATE-----Generated at Thu Jul 23 23:26:13 2026 by rpki-client