$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa File: 906e2291-613d-339e-8038-3e70422ca33a.roa (raw, json) Hash identifier: r3hCQnxkxfimMAkzRlTBTUHVo1MYyQRUGOljUA+7FNg= Subject key identifier: 44:98:78:59:3A:EC:0F:B6:4A:CB:90:79:D9:67:DE:A8:AD:01:9D:C6 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E61450F4B7DEB43889584F080 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16839 IP address blocks: 149.96.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:0f:4b:7d:eb:43:88:95:84:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=f6b80fa3-60f3-403a-98c5-6e4de1f02957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1a:1c:7b:92:2a:f6:e1:e0:9a:bc:7a:44:10: 97:7b:2e:e7:c9:50:10:73:de:c0:05:92:fb:21:42: 1d:2d:7b:ff:e5:7b:de:b1:3e:9f:b2:9d:70:b1:e7: b6:8d:aa:ff:1c:62:82:f3:4d:ac:f7:0c:c5:4f:27: d0:0d:ca:d9:c8:b8:13:3e:aa:ef:4b:3c:ed:d5:0e: 12:4d:6b:73:4f:bd:75:73:0c:a2:31:eb:ae:32:d6: fa:45:85:58:a7:aa:0b:09:a7:4b:8a:15:96:d9:e5: fd:f7:ae:44:c1:74:36:06:72:74:9a:f5:13:e4:80: e4:36:d9:8c:9a:24:de:60:f1:14:c9:ce:06:6b:b4: 3f:84:a6:5f:ad:8b:bf:77:a6:bf:41:30:23:43:13: 01:8b:3b:c7:0d:33:86:ba:93:f4:5c:e8:10:ac:47: 48:9c:28:10:2a:b0:bc:da:6d:d6:c9:47:ac:20:1b: 9a:4f:8e:41:e3:e4:7e:64:e7:5e:13:7c:73:72:4e: 03:74:20:fb:9a:1d:1b:01:0e:f8:a2:37:ff:08:8c: b8:e0:ba:6a:91:5f:a5:96:d7:d2:f3:7b:b0:a7:e6: 63:69:e5:26:51:4d:f2:67:94:15:b4:ed:c9:11:be: 36:bb:9c:50:a1:31:49:f1:76:5a:f0:42:5a:b2:58: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:98:78:59:3A:EC:0F:B6:4A:CB:90:79:D9:67:DE:A8:AD:01:9D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:dd:ab:0e:5e:c2:d9:b5:45:9a:c9:f4:b1:ef:31:63:58:5f: d5:16:8b:0a:46:fe:fd:da:30:f5:ba:af:75:cb:9f:30:c5:f9: 1d:9e:80:c8:9d:08:24:ca:8b:a6:a9:46:8b:8a:48:38:3d:35: b9:37:2d:dc:43:22:7c:8e:57:68:00:2c:5e:e4:55:98:af:db: fb:cd:4f:cf:87:81:b3:59:e5:f3:c3:82:f2:7a:d3:fd:2a:db: bc:e4:22:d9:b0:d7:b9:fb:d4:10:98:c4:6b:b3:84:a8:22:fd: 50:d5:b2:21:36:bd:9b:1f:a2:9a:4a:34:11:ba:e3:65:60:2c: 52:dd:32:d2:83:6b:a8:c8:30:f0:23:84:91:6d:b3:1c:de:09: dd:84:d4:c5:8b:1b:28:f1:94:e0:84:a6:98:80:fe:28:22:55: 10:1f:45:03:1c:83:42:b6:e2:c6:38:07:71:0e:c7:e5:c1:a0: 25:e5:5e:71:5f:73:18:5c:78:bf:b7:58:b4:78:03:ef:82:00: 96:9e:db:80:08:5b:5b:a4:c8:cb:bb:e1:51:ce:33:aa:1e:ae: 80:79:9d:1e:ad:fa:6d:a0:4e:38:4a:bd:3c:36:2d:c0:8e:10: 3f:44:7d:05:93:41:66:c0:a2:61:6f:bd:79:2c:ac:15:b1:6c: 13:c3:ae:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRQ9LfetDiJWE8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk ZjZiODBmYTMtNjBmMy00MDNhLTk4YzUtNmU0ZGUxZjAyOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xoce5Iq9uHgmrx6RBCXey7nyVAQc97ABZL7 IUIdLXv/5XvesT6fsp1wsee2jar/HGKC802s9wzFTyfQDcrZyLgTPqrvSzzt1Q4S TWtzT711cwyiMeuuMtb6RYVYp6oLCadLihWW2eX9965EwXQ2BnJ0mvUT5IDkNtmM miTeYPEUyc4Ga7Q/hKZfrYu/d6a/QTAjQxMBizvHDTOGupP0XOgQrEdInCgQKrC8 2m3WyUesIBuaT45B4+R+ZOdeE3xzck4DdCD7mh0bAQ74ojf/CIy44LpqkV+lltfS 83uwp+ZjaeUmUU3yZ5QVtO3JEb42u5xQoTFJ8XZa8EJaslhDtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESYeFk67A+2SsuQedln3qitAZ3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTA2ZTIyOTEtNjEzZC0z MzllLTgwMzgtM2U3MDQyMmNhMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7dqw5ewtm1RZrJ9LHvMWNYX9UWiwpG/v3aMPW6r3XLnzDF+R2egMid CCTKi6apRouKSDg9Nbk3LdxDInyOV2gALF7kVZiv2/vNT8+HgbNZ5fPDgvJ60/0q 27zkItmw17n71BCYxGuzhKgi/VDVsiE2vZsfoppKNBG642VgLFLdMtKDa6jIMPAj hJFtsxzeCd2E1MWLGyjxlOCEppiA/igiVRAfRQMcg0K24sY4B3EOx+XBoCXlXnFf cxhceL+3WLR4A++CAJae24AIW1ukyMu74VHOM6oeroB5nR6t+m2gTjhKvTw2LcCO ED9EfQWTQWbAomFvvXksrBWxbBPDrgk= -----END CERTIFICATE-----Generated at Thu Jul 23 23:29:50 2026 by rpki-client