$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa File: 7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa (raw, json) Hash identifier: yLtA7xwUr258d5dSeFa9xa2G15GJA03SGr0xjcpIez4= Subject key identifier: D1:AC:0F:11:70:83:79:0E:56:BB:71:F3:C4:6B:91:78:24:34:28:83 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F03A79648BB28FD52D8082F80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16839 IP address blocks: 149.96.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:96:48:bb:28:fd:52:d8:08:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=ec817a18-eee7-4a38-acca-a519b6483222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:90:3d:19:3d:85:39:09:aa:df:f5:69:f0: 0a:b6:98:f8:96:c3:ed:ff:00:f4:ea:02:59:36:10: 43:3b:e9:21:fd:9f:9e:32:d0:7c:37:a6:71:33:a2: ab:be:62:d8:6b:71:19:54:58:b5:ef:72:98:25:94: 48:94:0b:50:91:fb:9b:89:f2:8f:bf:f9:50:2d:72: 41:5e:e8:a0:7a:2c:1b:dc:ec:f8:d6:91:3b:e7:e6: 42:25:f6:7a:45:23:12:6a:51:71:eb:ca:2b:23:5f: d8:a6:84:35:dd:52:fb:a0:a0:42:fb:ae:3c:2b:11: ba:7b:87:23:7d:45:a1:0a:5e:f8:8e:f0:56:b6:1e: fd:96:e7:f2:47:02:bd:f9:72:00:76:e6:5a:a8:48: e5:cc:84:bc:77:38:05:61:9f:16:ef:f6:35:49:56: d8:27:07:2c:d5:42:5c:d3:b3:25:b5:ee:85:6b:0a: fa:02:97:f7:c2:55:8d:95:f6:2a:35:78:b6:a0:e4: e3:dc:d7:2b:24:10:51:98:ec:ca:53:fa:e6:15:3e: f4:d2:b4:2f:4d:aa:af:52:cb:25:b8:30:5f:7c:bd: 73:c2:f7:0c:89:6b:99:57:3d:ed:0d:67:99:3c:b6: 61:b3:b8:05:3f:2a:02:b3:0e:99:70:6a:3d:dd:5a: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AC:0F:11:70:83:79:0E:56:BB:71:F3:C4:6B:91:78:24:34:28:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:21:e6:50:19:41:15:90:69:a9:37:e0:55:15:44:70:3b:d1: 79:29:25:d3:19:0d:8b:9e:ef:18:dc:9d:b0:9b:c7:12:52:c8: 93:31:3d:5a:66:b5:b3:d0:1f:16:b5:5d:ac:e1:4e:70:59:a6: 05:d0:2e:be:8a:9e:5a:35:bf:b6:62:65:05:cc:98:48:36:f4: e7:68:2f:98:41:be:9c:75:4e:32:37:87:b3:73:85:f2:f0:d8: 2c:9b:0e:81:18:da:16:d8:b6:92:00:03:a3:02:86:a6:59:a5: 08:37:39:18:ae:af:78:82:22:87:19:c5:e6:89:dd:41:c5:ed: 21:81:48:8b:37:9e:55:6e:b7:00:ef:d4:c1:8a:48:42:56:be: 2a:b7:dc:86:cc:89:99:47:90:31:f8:d7:5b:7c:b6:d7:df:1c: 13:21:7b:9b:d0:d6:9a:2e:72:bd:18:bd:81:2d:6f:71:4e:15: 77:26:ab:64:18:f2:98:61:6e:61:31:9f:85:91:7c:cf:10:32: 23:64:d9:9c:13:a4:fc:52:a5:cc:4e:ac:9f:5f:e9:a4:be:41: c4:17:f6:71:ec:15:d6:aa:b1:41:a9:9b:34:c0:7e:42:ea:30: 85:5b:79:39:a4:ce:66:63:1f:7b:be:61:40:c7:26:53:f1:70: bb:20:16:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp5ZIuyj9UtgIL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZWM4MTdhMTgtZWVlNy00YTM4LWFjY2EtYTUxOWI2NDgzMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogmQPRk9hTkJqt/1afAKtpj4lsPt/wD06gJZ NhBDO+kh/Z+eMtB8N6ZxM6KrvmLYa3EZVFi173KYJZRIlAtQkfubifKPv/lQLXJB Xuigeiwb3Oz41pE75+ZCJfZ6RSMSalFx68orI1/YpoQ13VL7oKBC+648KxG6e4cj fUWhCl74jvBWth79lufyRwK9+XIAduZaqEjlzIS8dzgFYZ8W7/Y1SVbYJwcs1UJc 07Mlte6Fawr6Apf3wlWNlfYqNXi2oOTj3NcrJBBRmOzKU/rmFT700rQvTaqvUssl uDBffL1zwvcMiWuZVz3tDWeZPLZhs7gFPyoCsw6ZcGo93VoJOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGsDxFwg3kOVrtx88RrkXgkNCiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2FiYjFlOGYtMTAyMC0z MWU0LWExZDUtNjliYTg4ZTkyNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8h5lAZQRWQaak34FUVRHA70XkpJdMZDYue7xjcnbCbxxJSyJMxPVpm tbPQHxa1XazhTnBZpgXQLr6Knlo1v7ZiZQXMmEg29OdoL5hBvpx1TjI3h7NzhfLw 2CybDoEY2hbYtpIAA6MChqZZpQg3ORiur3iCIocZxeaJ3UHF7SGBSIs3nlVutwDv 1MGKSEJWviq33IbMiZlHkDH411t8ttffHBMhe5vQ1poucr0YvYEtb3FOFXcmq2QY 8phhbmExn4WRfM8QMiNk2ZwTpPxSpcxOrJ9f6aS+QcQX9nHsFdaqsUGpmzTAfkLq MIVbeTmkzmZjH3u+YUDHJlPxcLsgFu8= -----END CERTIFICATE-----Generated at Mon Sep 28 19:59:18 2026 by rpki-client