$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa File: b672c24e-ac3a-3a73-9369-af3fde4793e9.roa (raw, json) Hash identifier: 4ZPisO5drRH/DXyl2obys3nMfPSw71C+n5KwUGbOR5Q= Subject key identifier: A6:95:D7:21:E5:F0:D2:1C:5C:10:41:76:30:76:22:DE:2A:18:4D:B6 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E6144BD7BF71234C9D7C4C500 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16839 IP address blocks: 149.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:bd:7b:f7:12:34:c9:d7:c4:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=7cee25e6-ba28-411f-907a-d941301c5da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:06:0b:53:cb:6c:ee:11:cf:42:62:95:1e:0e: b0:33:8b:2d:c6:d5:34:cf:27:03:a9:ff:68:11:79: b3:3f:f7:0f:d2:9f:8c:95:25:d7:48:bb:6b:58:46: 62:91:e6:19:a7:d8:a9:75:a5:09:9b:ca:91:31:2a: dd:37:90:62:27:f1:4c:a5:8c:b2:fd:83:4f:39:d0: c4:30:39:fb:b8:49:2b:20:3e:d4:ae:f4:ef:bb:25: 74:05:ec:9c:f3:cf:ea:08:5f:22:99:c1:0d:ad:59: 66:c9:6a:6f:53:76:9c:07:f3:e2:da:c5:61:ca:7b: 61:5a:5e:4e:7e:43:91:83:fc:28:23:a6:ce:d7:39: c4:2d:d4:87:21:f9:11:a9:f8:d0:9c:56:6b:5b:56: 3f:af:62:2f:48:86:08:49:c6:f2:f9:84:0f:0a:24: 58:4f:51:e1:f3:27:5f:be:cc:c3:f5:2f:50:34:19: d8:c7:c4:79:47:ef:36:f2:90:73:df:38:17:b0:68: 47:f8:80:5d:a7:86:57:83:81:8d:af:6e:18:10:6d: 59:af:cb:af:59:60:c9:a1:bd:46:b7:7b:ec:91:68: ba:2e:cf:b9:9f:1f:9e:b2:bb:40:f1:09:62:82:34: d9:5f:18:9c:b1:78:6c:69:2e:da:43:02:8b:e7:7c: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:95:D7:21:E5:F0:D2:1C:5C:10:41:76:30:76:22:DE:2A:18:4D:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:21:20:b9:a7:1c:d8:d5:4d:9b:09:5b:db:3e:9a:41:65:16: 3c:2e:bc:5c:39:3c:1d:80:b5:af:6e:b9:73:0c:6b:c0:c4:82: 37:62:6c:25:2e:8d:27:ad:32:02:eb:c2:f1:b4:59:da:0d:d2: c7:c3:34:84:c8:25:c3:fd:38:d7:03:dc:51:ef:c3:e0:24:2b: bb:f2:87:8c:a2:15:f8:78:3a:c9:c9:27:81:83:4c:63:54:54: e4:e5:7c:0e:de:97:9d:49:fc:f4:d6:bc:4e:de:e2:b6:fd:d8: 76:19:d9:39:ba:a9:67:75:57:6c:38:66:37:b0:05:93:d4:3a: 66:b6:fc:38:dc:e7:c1:1a:b8:93:94:9d:10:ea:6b:ab:5d:2c: 2c:22:d1:bb:4c:ca:eb:86:40:f5:37:6a:f7:68:59:d7:bc:17: 7a:62:2e:44:4b:c6:1d:c5:17:2f:48:69:b2:28:3d:7e:7d:c3: 08:9e:49:4f:45:5d:ad:93:0d:69:36:8d:a1:c6:7d:36:ac:1b: 81:2a:57:68:ae:1b:08:7f:b3:b0:76:e3:e6:56:90:81:d5:28: 52:a5:c6:24:1d:bb:20:8f:4c:41:19:42:dd:e9:58:cc:ad:df: 0b:af:5d:f1:2c:6b:e4:f4:ae:0e:14:93:e9:5b:ba:43:c0:ec: c3:fc:7e:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRL179xI0ydfExQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk N2NlZTI1ZTYtYmEyOC00MTFmLTkwN2EtZDk0MTMwMWM1ZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AYLU8ts7hHPQmKVHg6wM4stxtU0zycDqf9o EXmzP/cP0p+MlSXXSLtrWEZikeYZp9ipdaUJm8qRMSrdN5BiJ/FMpYyy/YNPOdDE MDn7uEkrID7UrvTvuyV0Beyc88/qCF8imcENrVlmyWpvU3acB/Pi2sVhynthWl5O fkORg/woI6bO1znELdSHIfkRqfjQnFZrW1Y/r2IvSIYIScby+YQPCiRYT1Hh8ydf vszD9S9QNBnYx8R5R+828pBz3zgXsGhH+IBdp4ZXg4GNr24YEG1Zr8uvWWDJob1G t3vskWi6Ls+5nx+esrtA8QligjTZXxicsXhsaS7aQwKL53z7bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaV1yHl8NIcXBBBdjB2It4qGE22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYjY3MmMyNGUtYWMzYS0z YTczLTkzNjktYWYzZmRlNDc5M2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0hILmnHNjVTZsJW9s+mkFlFjwuvFw5PB2Ata9uuXMMa8DEgjdibCUu jSetMgLrwvG0WdoN0sfDNITIJcP9ONcD3FHvw+AkK7vyh4yiFfh4OsnJJ4GDTGNU VOTlfA7el51J/PTWvE7e4rb92HYZ2Tm6qWd1V2w4ZjewBZPUOma2/Djc58EauJOU nRDqa6tdLCwi0btMyuuGQPU3avdoWde8F3piLkRLxh3FFy9IabIoPX59wwieSU9F Xa2TDWk2jaHGfTasG4EqV2iuGwh/s7B24+ZWkIHVKFKlxiQduyCPTEEZQt3pWMyt 3wuvXfEsa+T0rg4Uk+lbukPA7MP8fog= -----END CERTIFICATE-----Generated at Thu Jul 23 23:26:13 2026 by rpki-client