$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa File: 6e089eef-fbf2-3611-96fd-939251a6b7fa.roa (raw, json) Hash identifier: 1tHPEeRvfxGFWCgSNO5Jf2j2BkgL+YKkD0gxRBMiFko= Subject key identifier: 9E:BC:2D:B6:3C:33:4C:D8:61:91:3D:13:AA:70:23:3E:7D:6C:7E:DB Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F7782F339E6B59BE6348E1700 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 16839 IP address blocks: 149.96.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:f3:39:e6:b5:9b:e6:34:8e:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=26a1ccc0-a79c-4534-865e-e16431488d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:fe:51:59:23:76:66:13:dc:ff:71:55:1a: e4:02:e8:41:97:4f:b6:d7:a0:29:43:2c:d4:34:af: 17:a1:45:27:83:f2:07:92:6b:e5:34:1a:a3:66:42: 72:eb:d3:d3:4f:ae:ce:75:37:1f:05:4f:d9:6b:6f: 73:51:65:de:13:21:e2:09:e7:a1:6e:70:9c:e4:b5: 4c:be:c8:e8:28:41:18:2e:73:e4:63:63:b6:8a:4a: 9d:05:4a:40:b6:f0:5e:5f:38:b3:6c:b4:21:3c:ef: d7:6b:bc:b3:7d:24:42:57:7c:f6:5e:69:75:20:2c: 24:ed:f2:05:05:90:6c:91:a8:71:2a:bd:4f:df:50: 36:a2:5f:fb:cd:33:3e:48:21:bb:60:39:f3:6d:de: 8c:81:b2:41:3a:68:0c:e2:6b:67:9b:f7:22:43:4f: a4:f3:95:f1:a9:4a:31:45:58:28:62:8f:cf:ff:18: e6:1b:a9:88:84:54:47:11:3b:31:a0:32:02:51:c4: 86:b6:bd:02:41:9f:af:21:a9:6d:b8:2f:88:b6:ae: 10:df:40:a9:11:21:65:7a:df:57:8c:08:63:ce:bc: 6b:f3:74:c9:7b:af:b0:40:82:6a:19:e5:b7:7e:0b: ae:b3:fb:8f:73:99:3f:9a:d4:2d:98:cd:4f:17:07: 7c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BC:2D:B6:3C:33:4C:D8:61:91:3D:13:AA:70:23:3E:7D:6C:7E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:1c:ad:e2:23:9d:91:8a:74:91:d3:70:5f:f1:87:00:87:e6: 99:77:95:86:9a:94:f4:ab:63:fd:c5:33:96:8a:5c:f3:33:0a: 1d:81:95:2d:eb:39:32:d3:4f:0c:e9:ed:f9:80:55:36:3e:89: 46:17:87:2a:9a:b5:05:f8:87:6d:a4:44:6b:ac:bb:99:7d:0e: 3f:f0:11:6d:67:17:12:65:4a:b0:0c:84:90:53:3e:0f:cf:9c: 9b:3c:04:75:66:28:55:38:59:49:89:b3:3c:14:1e:a6:b4:f5: cf:17:8f:c7:21:f6:77:e0:9a:54:54:16:41:36:ac:48:b0:8b: d7:16:c0:6c:05:c7:cb:43:78:8e:2f:b1:89:b6:01:23:ed:96: 94:82:fe:84:de:69:c1:a7:59:10:18:dd:39:2a:29:fd:89:f2: d0:f8:fa:c2:aa:f7:8e:2d:ae:87:cc:b3:c7:99:84:c2:a9:9e: 87:00:51:da:49:65:e3:22:83:c9:32:a9:59:b1:1f:4a:c0:3a: ec:51:4d:55:5a:3d:d2:a9:86:57:89:21:fb:a0:95:48:00:5c: 39:71:b4:74:ea:25:29:cd:eb:9b:67:d5:6a:b5:4e:1b:aa:40: e8:d2:7d:e6:d4:54:6f:41:32:c0:70:79:93:e7:cc:c1:b6:da: c0:e6:fa:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gvM55rWb5jSOFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjZhMWNjYzAtYTc5Yy00NTM0LTg2NWUtZTE2NDMxNDg4ZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZb+UVkjdmYT3P9xVRrkAuhBl0+216ApQyzU NK8XoUUng/IHkmvlNBqjZkJy69PTT67OdTcfBU/Za29zUWXeEyHiCeehbnCc5LVM vsjoKEEYLnPkY2O2ikqdBUpAtvBeXzizbLQhPO/Xa7yzfSRCV3z2Xml1ICwk7fIF BZBskahxKr1P31A2ol/7zTM+SCG7YDnzbd6MgbJBOmgM4mtnm/ciQ0+k85XxqUox RVgoYo/P/xjmG6mIhFRHETsxoDICUcSGtr0CQZ+vIaltuC+Itq4Q30CpESFlet9X jAhjzrxr83TJe6+wQIJqGeW3fguus/uPc5k/mtQtmM1PFwd8zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ68LbY8M0zYYZE9E6pwIz59bH7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNmUwODllZWYtZmJmMi0z NjExLTk2ZmQtOTM5MjUxYTZiN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUcreIjnZGKdJHTcF/xhwCH5pl3lYaalPSrY/3FM5aKXPMzCh2BlS3r OTLTTwzp7fmAVTY+iUYXhyqatQX4h22kRGusu5l9Dj/wEW1nFxJlSrAMhJBTPg/P nJs8BHVmKFU4WUmJszwUHqa09c8Xj8ch9nfgmlRUFkE2rEiwi9cWwGwFx8tDeI4v sYm2ASPtlpSC/oTeacGnWRAY3TkqKf2J8tD4+sKq944trofMs8eZhMKpnocAUdpJ ZeMig8kyqVmxH0rAOuxRTVVaPdKphleJIfuglUgAXDlxtHTqJSnN65tn1Wq1Thuq QOjSfebUVG9BMsBweZPnzMG22sDm+lQ= -----END CERTIFICATE-----Generated at Sun Oct 11 16:57:05 2026 by rpki-client