$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa File: ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa (raw, json) Hash identifier: tNsQps1Vaucs41/GFve1CaWgxJHc+0stcpazRJ0t+fI= Subject key identifier: 7F:9E:4C:4C:C2:A6:71:90:9E:D0:E2:09:D5:66:56:8C:BE:AD:1F:5A Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F119CFB19F7735B82D12F1D40 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 16839 IP address blocks: 149.96.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fb:19:f7:73:5b:82:d1:2f:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=04b8c5ca-148b-48ae-89cc-600b832d3c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:59:5b:76:a0:9d:9a:21:e6:b8:e8:0a:9e: ed:52:78:b5:8f:d3:ec:bb:d3:a3:b0:65:2a:48:14: 09:8c:1a:ab:20:bd:80:b6:2c:cd:67:86:a6:88:20: 39:f0:92:db:fe:9b:5a:ba:39:2f:17:a6:88:46:08: 92:a5:26:eb:0c:70:23:4b:a3:34:3f:bd:ee:5f:04: 76:bf:93:28:8d:4d:b1:67:38:e6:52:21:2a:7f:4e: 19:55:75:b4:a7:50:22:75:2d:96:5d:1f:b9:a4:cd: 9f:09:79:63:80:85:fb:ca:59:dc:52:ec:a0:22:99: bb:04:41:cb:73:94:82:c1:57:f5:7c:44:7b:c0:e1: ce:28:3c:71:03:ec:be:3c:98:fb:5a:fd:1a:95:2f: c5:bb:4f:f1:b1:df:98:4c:9c:21:47:77:9c:f8:bd: 55:3c:9e:56:69:31:b8:3f:b9:cb:8a:8d:5d:79:46: 72:3d:e4:52:bb:da:65:54:ac:76:f2:ec:8e:74:14: 3f:e0:14:ce:33:53:1f:08:6f:f7:90:f4:ef:07:2f: b2:62:e6:b2:92:cd:24:6b:a0:d1:c2:e9:a3:70:4d: ec:fa:0d:73:00:76:65:04:04:47:be:f2:bc:b1:21: 25:a9:be:e8:79:f0:4a:81:11:4e:d8:05:73:aa:82: 22:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9E:4C:4C:C2:A6:71:90:9E:D0:E2:09:D5:66:56:8C:BE:AD:1F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:40:42:c3:41:d9:10:52:16:cd:88:39:9a:aa:4c:1e:fc:31: 17:84:09:c1:2a:4d:75:2e:1b:a4:93:61:51:73:3e:59:41:fd: 80:67:d2:a5:fb:f1:29:f0:06:7a:d3:d5:e6:1f:72:22:5e:c3: 6c:c0:2c:e0:a1:1a:e6:df:17:f5:5c:e2:69:af:29:93:e4:da: e2:1b:5d:89:0c:6f:50:9f:9d:46:23:09:62:1d:75:1d:7e:a8: ff:4a:a7:47:b9:55:49:aa:fb:d0:64:95:46:a4:5a:5d:94:e4: 42:63:60:75:e0:55:4d:1b:84:40:2d:a7:6d:79:1e:19:3b:88: c4:7e:e1:3d:49:97:82:d1:05:47:23:b1:cc:a3:de:51:d2:a8: 42:33:df:b5:1d:5e:97:67:1e:fa:bd:65:e5:cb:25:e0:67:42: 6c:a9:a0:05:a3:f9:ba:a6:22:16:6c:1d:12:78:04:03:ec:9f: 4e:05:33:1b:4c:85:21:15:34:dc:b7:33:35:04:0b:33:c0:7e: 97:d3:c6:19:d4:f7:ef:da:36:3b:76:04:e6:b7:2b:2b:03:af: e9:44:4b:f9:05:27:77:77:c1:b2:ce:65:96:e5:75:74:ac:a7: ab:98:04:7f:ac:6d:31:71:fc:2a:01:bb:a8:6b:e5:b6:04:fe: 60:66:e9:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPsZ93NbgtEvHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDRiOGM1Y2EtMTQ4Yi00OGFlLTg5Y2MtNjAwYjgzMmQzYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG5ZW3agnZoh5rjoCp7tUni1j9Psu9OjsGUq SBQJjBqrIL2AtizNZ4amiCA58JLb/ptaujkvF6aIRgiSpSbrDHAjS6M0P73uXwR2 v5MojU2xZzjmUiEqf04ZVXW0p1AidS2WXR+5pM2fCXljgIX7ylncUuygIpm7BEHL c5SCwVf1fER7wOHOKDxxA+y+PJj7Wv0alS/Fu0/xsd+YTJwhR3ec+L1VPJ5WaTG4 P7nLio1deUZyPeRSu9plVKx28uyOdBQ/4BTOM1MfCG/3kPTvBy+yYuayks0ka6DR wumjcE3s+g1zAHZlBARHvvK8sSElqb7oefBKgRFO2AVzqoIi2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+eTEzCpnGQntDiCdVmVoy+rR9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2EzMzAxZmYtY2VkNC0z ODcwLWJlMjYtODllMmNkZTVhMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpAQsNB2RBSFs2IOZqqTB78MReECcEqTXUuG6STYVFzPllB/YBn0qX7 8SnwBnrT1eYfciJew2zALOChGubfF/Vc4mmvKZPk2uIbXYkMb1CfnUYjCWIddR1+ qP9Kp0e5VUmq+9BklUakWl2U5EJjYHXgVU0bhEAtp215Hhk7iMR+4T1Jl4LRBUcj scyj3lHSqEIz37UdXpdnHvq9ZeXLJeBnQmypoAWj+bqmIhZsHRJ4BAPsn04FMxtM hSEVNNy3MzUECzPAfpfTxhnU9+/aNjt2BOa3KysDr+lES/kFJ3d3wbLOZZbldXSs p6uYBH+sbTFx/CoBu6hr5bYE/mBm6Qs= -----END CERTIFICATE-----Generated at Fri Sep 25 07:23:25 2026 by rpki-client