$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa File: 78a77a9f-d1ee-3657-8456-265177e16059.roa (raw, json) Hash identifier: ci4lOu8naWFNLm9BauyXqMK6FXiPiYf4Dy6GVRm5+MQ= Subject key identifier: 49:49:0C:7A:8A:15:67:86:32:FF:95:AC:77:E4:E0:DA:41:B4:6A:99 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E61450EF43CB798A3C441D380 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16839 IP address blocks: 149.96.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:0e:f4:3c:b7:98:a3:c4:41:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=c45a3247-13f6-4038-a444-00276235d301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:66:00:6a:36:11:86:0d:e3:14:2c:95:42: f9:55:82:61:7f:d7:15:a3:a6:72:3f:75:fa:58:21: d9:bd:87:4d:81:8f:15:ec:c2:bd:67:0b:6c:de:f1: 8b:dd:81:d8:be:01:60:33:5c:8f:6b:8d:23:5e:f0: a4:1e:2d:14:d8:88:d5:6c:e9:a5:b8:9f:a6:5a:18: 9c:58:22:3c:67:20:80:d5:b4:23:8a:84:ec:98:96: 59:68:38:39:01:65:7e:0a:52:91:56:d5:46:1c:22: e6:17:33:a0:da:31:c7:64:c0:74:c4:30:3c:c1:05: f8:ab:13:9f:27:05:15:df:99:d8:2a:b8:41:69:6e: 10:11:5c:79:1e:9c:27:15:5a:46:6f:de:65:71:f7: ed:50:04:56:e8:fd:a8:26:f2:b9:0b:09:7d:68:fd: 5f:5b:a6:bf:d0:de:7a:5d:6a:da:58:f5:d6:de:b7: d3:7c:cb:91:23:50:f9:a9:d5:d2:10:df:43:5d:7f: 1f:9c:4d:16:7a:51:d3:a0:9a:c8:91:46:c3:a4:c8: 78:d0:b5:35:42:ef:78:70:fa:3d:7f:bc:0d:87:f4: b9:15:66:8e:ca:24:b0:54:9d:98:e9:a7:63:3d:86: f8:b5:d8:72:3b:32:ff:56:ad:ad:e5:ae:d7:db:bb: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:49:0C:7A:8A:15:67:86:32:FF:95:AC:77:E4:E0:DA:41:B4:6A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7a:52:f5:e8:b7:68:4e:50:da:dd:d5:95:79:9a:1a:a0:38: 18:df:0d:e7:2f:85:05:d2:b2:ce:af:2a:81:94:fd:78:82:e0: d7:e0:d8:5c:f6:a1:69:fd:94:13:fd:d7:aa:22:77:1c:8c:6e: d3:2c:63:37:d6:09:a1:d8:3b:10:bf:cb:57:5f:c9:a9:dc:c4: 9c:30:6d:fa:e7:32:09:1e:28:0b:10:54:7f:a8:81:6c:69:34: 86:67:fc:04:01:a5:7f:42:36:10:a3:e9:5b:f0:a8:e0:1d:6c: 76:08:ca:b7:3a:ac:43:ef:b8:c3:12:65:53:81:4d:a2:33:d0: bb:89:fa:29:3b:a6:a5:b2:9a:06:9e:b8:c9:92:17:4b:79:9a: 6e:d7:b7:54:17:54:f0:6b:38:43:ce:41:fa:17:e0:05:fb:cf: 7d:a9:5b:38:99:48:3e:0d:2e:e8:0f:a2:f3:fb:19:af:47:d4: 71:96:d7:d0:2f:64:47:ef:d5:29:b3:19:a0:53:07:2e:5a:44: 00:e0:b2:4b:ab:65:e5:1c:7a:85:f2:8e:8b:81:52:61:14:1b: e5:55:c8:a6:53:b7:d5:37:da:06:be:1b:57:99:c3:89:b4:72: 70:6d:ea:55:46:8b:5e:5c:15:dc:d3:8a:f7:9b:78:ed:e3:e5: e6:9e:54:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRQ70PLeYo8RB04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk YzQ1YTMyNDctMTNmNi00MDM4LWE0NDQtMDAyNzYyMzVkMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZhmAGo2EYYN4xQslUL5VYJhf9cVo6ZyP3X6 WCHZvYdNgY8V7MK9Zwts3vGL3YHYvgFgM1yPa40jXvCkHi0U2IjVbOmluJ+mWhic WCI8ZyCA1bQjioTsmJZZaDg5AWV+ClKRVtVGHCLmFzOg2jHHZMB0xDA8wQX4qxOf JwUV35nYKrhBaW4QEVx5HpwnFVpGb95lcfftUARW6P2oJvK5Cwl9aP1fW6a/0N56 XWraWPXW3rfTfMuRI1D5qdXSEN9DXX8fnE0WelHToJrIkUbDpMh40LU1Qu94cPo9 f7wNh/S5FWaOyiSwVJ2Y6adjPYb4tdhyOzL/Vq2t5a7X27uEEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElJDHqKFWeGMv+VrHfk4NpBtGqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzhhNzdhOWYtZDFlZS0z NjU3LTg0NTYtMjY1MTc3ZTE2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWADMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd6UvXot2hOUNrd1ZV5mhqgOBjfDecvhQXSss6vKoGU/XiC4Nfg2Fz2 oWn9lBP916oidxyMbtMsYzfWCaHYOxC/y1dfyancxJwwbfrnMgkeKAsQVH+ogWxp NIZn/AQBpX9CNhCj6VvwqOAdbHYIyrc6rEPvuMMSZVOBTaIz0LuJ+ik7pqWymgae uMmSF0t5mm7Xt1QXVPBrOEPOQfoX4AX7z32pWziZSD4NLugPovP7Ga9H1HGW19Av ZEfv1SmzGaBTBy5aRADgskurZeUceoXyjouBUmEUG+VVyKZTt9U32ga+G1eZw4m0 cnBt6lVGi15cFdzTivebeO3j5eaeVFI= -----END CERTIFICATE-----Generated at Thu Jul 23 23:29:30 2026 by rpki-client