$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa File: ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa (raw, json) Hash identifier: Y1yFcyjjlV2E89e7FM9Hhmp/3O0qBbXM0+l9N2LDxaU= Subject key identifier: 1B:CD:B0:27:56:80:54:5E:D5:D5:0A:A7:98:FB:8D:1D:3D:01:05:74 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D8EF5684C703CB6E21142F340 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 16839 IP address blocks: 149.96.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:68:4c:70:3c:b6:e2:11:42:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b39041bb-dd7c-4826-8b35-c2b2e9cc1cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:6e:28:12:01:24:a2:00:18:b8:5f:f8:18: b2:13:a1:6d:d5:a8:c5:f2:04:2a:7d:fc:60:8e:a5: 42:1a:45:93:8e:e4:65:d5:66:98:8e:b9:c1:9f:41: 1f:c6:69:44:da:19:fa:b9:71:a3:9d:dc:3d:d1:12: 25:ac:46:ca:d2:75:22:7e:fb:bf:aa:9c:b9:33:33: 5b:9e:d1:e0:5b:6b:75:5e:08:b2:1b:a0:c8:9f:1c: 3c:82:13:7e:7b:43:de:ae:72:be:84:89:68:a7:d3: 26:95:b7:c7:fd:bf:b2:8f:1d:30:7a:e2:9b:c5:24: dd:78:47:f9:e1:1e:f7:85:ac:3d:dc:83:89:b5:4c: 13:0f:84:5d:16:8f:92:ff:96:36:67:8c:5c:27:70: ff:b9:c7:74:b7:e5:d9:41:b9:e9:90:37:1d:7b:5b: ae:25:3a:4b:fa:8e:7d:c0:3d:0d:ab:33:7b:99:ef: af:9c:65:6e:90:43:b3:08:07:ef:2a:db:0b:56:ab: 0a:ff:1f:46:74:65:4a:86:47:a5:0e:d9:12:87:17: 78:9f:f9:07:7c:c9:bd:76:4d:32:24:40:11:d6:c8: 02:03:be:05:32:1f:10:d8:0b:a8:b6:01:59:a4:36: 3d:5c:c0:58:ff:04:7a:a8:ba:7b:8c:76:7b:35:dc: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:B0:27:56:80:54:5E:D5:D5:0A:A7:98:FB:8D:1D:3D:01:05:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:dc:f2:e2:3b:03:76:bc:23:90:9b:3c:37:58:a4:01:44:1b: ee:f4:0d:92:fe:56:53:c0:ec:a4:11:88:0e:60:9e:4f:77:9e: 41:5f:03:b1:43:52:46:6e:70:cf:cf:24:66:b0:7e:40:53:b2: fd:10:6f:54:54:03:40:7e:59:76:d1:f2:50:c7:68:8d:07:c1: 4e:4d:9f:17:e0:62:bd:4b:96:8e:bb:00:f0:a2:91:c7:7d:c2: ff:c9:71:bc:56:b4:c8:a2:88:14:c3:5e:61:8b:1b:90:e1:9b: ce:a1:18:73:23:70:d7:32:40:c6:2a:b8:36:d7:47:0f:f5:81: 9c:1d:cc:28:ef:90:d7:d8:dc:80:dd:d7:8e:ed:af:d7:0d:2d: 0a:03:47:84:5d:2a:79:d4:2a:ef:4d:b1:4e:22:89:00:4c:33: ec:9d:cd:eb:18:6e:f6:46:f7:17:ef:7c:7e:4e:df:29:5d:5a: cc:a8:8d:2c:b9:d9:4b:de:25:e8:53:64:9f:b4:35:08:d3:04: 1d:80:35:b3:81:87:d8:4e:f4:c4:b8:ad:50:69:cd:c8:ef:c9: cb:64:31:97:50:a2:d1:fc:70:59:56:40:14:ab:eb:72:cf:72: c6:18:ca:02:3d:db:25:d2:1b:09:fc:c1:7b:23:9a:91:03:28: 84:38:a2:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WhMcDy24hFC80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjM5MDQxYmItZGQ3Yy00ODI2LThiMzUtYzJiMmU5Y2MxY2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop9uKBIBJKIAGLhf+BiyE6Ft1ajF8gQqffxg jqVCGkWTjuRl1WaYjrnBn0EfxmlE2hn6uXGjndw90RIlrEbK0nUifvu/qpy5MzNb ntHgW2t1XgiyG6DInxw8ghN+e0PernK+hIlop9MmlbfH/b+yjx0weuKbxSTdeEf5 4R73haw93IOJtUwTD4RdFo+S/5Y2Z4xcJ3D/ucd0t+XZQbnpkDcde1uuJTpL+o59 wD0NqzN7me+vnGVukEOzCAfvKtsLVqsK/x9GdGVKhkelDtkShxd4n/kHfMm9dk0y JEAR1sgCA74FMh8Q2AuotgFZpDY9XMBY/wR6qLp7jHZ7NdzZywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvNsCdWgFRe1dUKp5j7jR09AQV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2EzMzAxZmYtY2VkNC0z ODcwLWJlMjYtODllMmNkZTVhMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLc8uI7A3a8I5CbPDdYpAFEG+70DZL+VlPA7KQRiA5gnk93nkFfA7FD UkZucM/PJGawfkBTsv0Qb1RUA0B+WXbR8lDHaI0HwU5NnxfgYr1Llo67APCikcd9 wv/JcbxWtMiiiBTDXmGLG5Dhm86hGHMjcNcyQMYquDbXRw/1gZwdzCjvkNfY3IDd 147tr9cNLQoDR4RdKnnUKu9NsU4iiQBMM+ydzesYbvZG9xfvfH5O3yldWsyojSy5 2UveJehTZJ+0NQjTBB2ANbOBh9hO9MS4rVBpzcjvyctkMZdQotH8cFlWQBSr63LP csYYygI92yXSGwn8wXsjmpEDKIQ4oq8= -----END CERTIFICATE-----Generated at Wed May 13 09:58:19 2026 by rpki-client