$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa File: ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa (raw, json) Hash identifier: YSUNgs1myEx7Te+Qfb/hX7h5Y/wPaKt3cbmUL5VnZMk= Subject key identifier: 95:CC:76:77:C6:6D:1B:AC:D9:81:E5:15:A5:54:6D:32:89:E3:66:C7 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E6F3A2C352F85EB2A96EC9580 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 16839 IP address blocks: 149.96.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:2c:35:2f:85:eb:2a:96:ec:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=4a5262e5-4b94-41f6-bdd7-ac73edae3c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f1:ab:c4:21:40:13:b5:22:b0:27:3c:53:9c: 73:ed:2c:a2:96:65:f8:6f:90:05:58:e6:71:da:9f: 2f:3f:8b:a3:5e:b1:43:3f:82:ec:66:5d:31:bb:81: 19:0e:06:7d:df:f1:6b:87:74:26:1a:64:eb:01:74: 61:88:28:1a:c7:2a:77:6a:8f:c4:97:38:cd:09:28: a4:16:bc:e8:1f:cb:15:b0:87:b7:44:33:ba:f5:65: 81:ae:d7:52:31:2b:8d:db:76:3c:7c:40:5e:70:b7: 0f:94:58:c3:66:ab:b4:1a:ed:4f:a7:21:e6:81:07: c8:f3:9f:57:fe:dc:45:9b:f5:ff:06:e6:0d:2a:4a: 77:aa:23:cf:46:26:9c:94:af:29:f7:cd:8f:92:4e: 35:05:f4:8c:20:91:a1:3e:96:5f:10:d7:29:b0:bb: 93:86:23:f6:a3:36:f7:4a:44:53:67:e9:57:e2:18: be:d4:64:2a:0a:0f:a6:c1:ba:23:1f:d3:29:22:d4: a6:f1:8d:6b:15:97:cd:1c:ea:3e:a6:56:00:81:ec: a8:c4:b7:09:3e:78:a9:13:28:31:85:73:40:e5:d0: 22:1d:7f:2e:c6:6e:23:2f:a0:57:86:52:a4:1a:2d: 47:f4:45:da:07:9a:26:00:9a:77:b2:26:01:bc:cd: 65:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CC:76:77:C6:6D:1B:AC:D9:81:E5:15:A5:54:6D:32:89:E3:66:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8b:04:d7:1a:46:78:30:f7:8d:0b:c3:c2:aa:df:aa:1b:36: eb:d2:55:13:3e:10:b7:bd:62:5a:b5:12:3c:1c:e0:48:21:3a: 16:ce:54:13:0b:85:bb:2b:30:c6:40:9a:f2:a3:31:9d:f5:36: b6:e1:1c:22:00:f8:44:53:e9:a0:6e:d1:0c:25:a5:b9:89:aa: d3:f9:e5:60:d8:52:38:13:2d:9b:29:34:83:d8:84:3d:25:0e: f8:10:79:c9:8e:70:56:20:d8:8f:5f:41:f0:c6:66:2a:b5:67: 12:9b:06:34:6b:87:1f:ae:f3:22:9f:33:3f:49:4e:cf:a1:d6: 5d:7b:dd:6e:3c:1a:44:3d:6a:6b:b5:a7:7c:05:45:8a:c4:37: 4c:3d:7c:d7:b8:23:a5:16:1e:00:34:8b:c2:c4:20:2c:eb:5c: 99:7f:d6:1a:07:bb:6f:35:3f:0b:a3:15:e7:b8:b6:5d:91:48: 16:7b:7a:ba:6f:c9:09:99:72:f7:70:33:3f:8e:80:de:eb:b1: 8d:51:ba:09:f1:0e:7d:2a:5d:65:a3:e8:3e:97:d3:8b:47:25: b0:71:55:40:8a:26:3e:0d:5f:0f:d2:6e:1d:63:9d:79:88:4c: 90:f7:a3:55:63:c6:4e:33:0f:84:30:46:5b:98:84:75:03:e9: 3a:49:3a:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOiw1L4XrKpbslYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NGE1MjYyZTUtNGI5NC00MWY2LWJkZDctYWM3M2VkYWUzYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vGrxCFAE7UisCc8U5xz7SyilmX4b5AFWOZx 2p8vP4ujXrFDP4LsZl0xu4EZDgZ93/Frh3QmGmTrAXRhiCgaxyp3ao/ElzjNCSik FrzoH8sVsIe3RDO69WWBrtdSMSuN23Y8fEBecLcPlFjDZqu0Gu1PpyHmgQfI859X /txFm/X/BuYNKkp3qiPPRiaclK8p982Pkk41BfSMIJGhPpZfENcpsLuThiP2ozb3 SkRTZ+lX4hi+1GQqCg+mwbojH9MpItSm8Y1rFZfNHOo+plYAgeyoxLcJPnipEygx hXNA5dAiHX8uxm4jL6BXhlKkGi1H9EXaB5omAJp3siYBvM1lUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXMdnfGbRus2YHlFaVUbTKJ42bHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2EzMzAxZmYtY2VkNC0z ODcwLWJlMjYtODllMmNkZTVhMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+LBNcaRngw940Lw8Kq36obNuvSVRM+ELe9Ylq1Ejwc4EghOhbOVBML hbsrMMZAmvKjMZ31NrbhHCIA+ERT6aBu0QwlpbmJqtP55WDYUjgTLZspNIPYhD0l DvgQecmOcFYg2I9fQfDGZiq1ZxKbBjRrhx+u8yKfMz9JTs+h1l173W48GkQ9amu1 p3wFRYrEN0w9fNe4I6UWHgA0i8LEICzrXJl/1hoHu281PwujFee4tl2RSBZ7erpv yQmZcvdwMz+OgN7rsY1RugnxDn0qXWWj6D6X04tHJbBxVUCKJj4NXw/Sbh1jnXmI TJD3o1Vjxk4zD4QwRluYhHUD6TpJOvw= -----END CERTIFICATE-----Generated at Fri Jul 24 08:27:56 2026 by rpki-client