$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa File: 7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa (raw, json) Hash identifier: MeT1w5EHv/guB9rgLWi5jPCv25Rz1nHRedEaYDE5trk= Subject key identifier: 53:5B:4D:5D:CC:FD:08:B1:67:47:7D:BC:65:08:1D:BB:7B:90:02:EA Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E61450F565664552D28AB0C40 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16839 IP address blocks: 199.91.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:0f:56:56:64:55:2d:28:ab:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=38db40c5-d858-4da5-b397-fe4d2c10da4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:34:b9:a4:70:9e:a1:4a:52:23:ff:d2:77: c0:61:ba:b0:46:bf:bc:2d:49:06:af:64:8f:13:ba: 95:fc:90:f0:0c:d1:1c:2b:46:d1:09:4b:f0:6c:20: 39:fe:3c:67:35:ed:38:57:c0:91:d3:5f:4f:6c:82: 76:8c:d0:7f:a6:e4:bc:3c:a9:c5:14:4d:77:a9:63: 48:c0:8a:b3:dc:24:98:fe:40:9f:de:f7:77:27:1a: 8c:22:93:48:62:fd:df:4e:2b:64:5d:db:4b:79:db: db:ab:5a:f2:1d:4d:cb:38:d2:a0:f2:89:85:6e:fd: 1d:39:d3:b4:12:e7:a3:9e:1d:8c:a2:53:c3:f2:bd: 6b:c6:4c:11:82:17:b8:fa:54:3a:16:4a:a4:07:6c: 9e:64:cb:e1:af:e1:70:d4:27:0c:e6:01:a3:9d:0a: bf:cb:ca:ad:0e:e5:88:42:37:0b:b8:9f:54:20:57: 8b:5c:4e:26:66:40:33:61:4a:22:fd:fd:00:2c:17: 2b:fb:19:3a:bc:c6:3f:b5:f1:f5:27:45:4a:a8:ed: e3:80:a7:66:c1:a4:af:04:bb:ba:75:b8:11:6f:d9: e7:57:e4:52:c9:c5:e0:83:da:65:53:f5:a1:c1:cb: 43:63:c9:1b:17:57:e6:06:2f:93:87:53:6f:a6:16: f3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5B:4D:5D:CC:FD:08:B1:67:47:7D:BC:65:08:1D:BB:7B:90:02:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:73:a5:df:29:0e:2a:46:4a:6d:ca:94:f4:7b:38:fe:e3:25: b3:58:7e:97:57:08:c7:73:15:7e:62:09:32:43:36:b9:ba:35: a2:45:d1:62:73:8f:72:d0:ae:38:0e:31:84:6d:38:51:21:f1: b6:3d:c0:98:c7:5d:2b:98:24:2b:a9:d0:98:2c:af:29:3c:41: ea:31:e4:e3:a3:50:20:c5:ae:54:9c:66:51:2b:66:ab:fc:0a: c9:60:cf:83:84:04:c7:1b:06:63:37:55:3e:a8:99:5d:72:25: 5b:29:26:70:04:5d:06:86:03:1a:3d:b6:8f:30:4d:19:3f:af: 71:c5:54:85:da:2f:c8:b5:91:ee:b4:ad:5c:f7:f5:fb:a0:61: 71:da:3c:a8:ba:93:82:0f:03:f3:8d:02:02:b6:3f:83:e9:8e: dc:13:16:2a:f4:cf:f6:e1:01:fb:d2:fb:5e:ae:6b:0f:91:9a: 0d:7f:40:3d:c6:87:bd:a0:28:5f:5b:23:20:0d:41:1e:3e:da: 7b:2c:89:0d:91:51:ab:52:f2:27:93:9c:2d:a1:da:c3:5b:8f: 46:25:8b:65:43:75:b3:de:73:bf:83:39:fc:23:3b:dc:ec:7c: 8c:e9:cd:99:07:05:75:1f:36:3e:25:3a:b1:c1:46:fa:a5:e4: 4b:ef:bf:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRQ9WVmRVLSirDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk MzhkYjQwYzUtZDg1OC00ZGE1LWIzOTctZmU0ZDJjMTBkYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUU0uaRwnqFKUiP/0nfAYbqwRr+8LUkGr2SP E7qV/JDwDNEcK0bRCUvwbCA5/jxnNe04V8CR019PbIJ2jNB/puS8PKnFFE13qWNI wIqz3CSY/kCf3vd3JxqMIpNIYv3fTitkXdtLedvbq1ryHU3LONKg8omFbv0dOdO0 Euejnh2MolPD8r1rxkwRghe4+lQ6FkqkB2yeZMvhr+Fw1CcM5gGjnQq/y8qtDuWI QjcLuJ9UIFeLXE4mZkAzYUoi/f0ALBcr+xk6vMY/tfH1J0VKqO3jgKdmwaSvBLu6 dbgRb9nnV+RSycXgg9plU/WhwctDY8kbF1fmBi+Th1NvphbzjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNbTV3M/QixZ0d9vGUIHbt7kALqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2RmZmVkOGMtYjg3MC0z OTcwLWI1NDAtMGZhM2E0YWI0MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFzpd8pDipGSm3KlPR7OP7jJbNYfpdXCMdzFX5iCTJDNrm6NaJF0WJz j3LQrjgOMYRtOFEh8bY9wJjHXSuYJCup0Jgsryk8Qeox5OOjUCDFrlScZlErZqv8 Cslgz4OEBMcbBmM3VT6omV1yJVspJnAEXQaGAxo9to8wTRk/r3HFVIXaL8i1ke60 rVz39fugYXHaPKi6k4IPA/ONAgK2P4PpjtwTFir0z/bhAfvS+16uaw+Rmg1/QD3G h72gKF9bIyANQR4+2nssiQ2RUatS8ieTnC2h2sNbj0Yli2VDdbPec7+DOfwjO9zs fIzpzZkHBXUfNj4lOrHBRvql5Evvvwo= -----END CERTIFICATE-----Generated at Fri Jul 24 23:26:14 2026 by rpki-client