$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa File: fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa (raw, json) Hash identifier: OkDxya1Jw7e7vDRsj9aR1yoKV72dhSzVDcPUmO+ppPM= Subject key identifier: 5B:75:66:76:88:35:21:FB:01:87:44:84:99:18:5C:20:79:15:E8:48 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E6144BD653520818A59243500 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16839 IP address blocks: 149.96.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:bd:65:35:20:81:8a:59:24:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=4fcad0db-aba3-44a2-9b87-ca0d969efa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:53:52:df:46:ae:88:b8:68:8d:8e:3e:1b:f0: 06:76:c0:89:8b:c0:1a:7e:ba:3e:69:a1:ea:ab:6f: c1:a0:31:71:53:d1:02:aa:b3:a8:0e:51:1a:d6:20: 2a:70:a1:8b:16:b8:eb:15:1f:2f:33:b5:ff:65:9a: 09:b4:d2:c6:65:de:50:46:a2:71:0f:03:9d:ce:7c: eb:df:1f:b9:db:fb:9c:02:fb:64:7b:0d:d6:da:60: 6d:c7:a9:5c:10:fb:7a:4a:62:82:f3:9e:ef:d5:8b: 11:23:0c:52:4f:17:64:f6:2c:47:e1:1c:3f:cc:35: e4:81:54:35:8a:ec:71:bb:1d:08:c6:7b:07:04:80: b7:dd:0c:00:e5:42:2e:24:30:48:35:93:20:a4:89: 0a:91:07:1d:01:8b:96:39:db:b0:80:d6:b5:70:9c: 5b:99:0a:36:cc:8c:49:d2:97:21:2d:59:ac:0f:dc: 31:9c:5a:4b:7c:72:0d:fe:5b:6a:9a:80:90:14:dc: bc:bd:c6:dd:e7:93:09:99:9b:3a:37:98:50:42:53: 98:cd:b6:b0:67:bb:ef:71:70:bf:7e:22:da:3c:cb: 24:7f:c3:26:0a:e7:50:20:fa:c0:a3:94:19:cd:63: 3f:e1:74:a6:1c:36:7c:e8:d3:03:94:74:6d:cb:65: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:75:66:76:88:35:21:FB:01:87:44:84:99:18:5C:20:79:15:E8:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:5a:ff:9e:62:ac:0b:b2:12:28:fa:9d:ed:30:58:a3:85:b5: 51:79:0f:4d:fa:4c:ce:0a:77:d9:eb:b3:94:a5:cf:9a:0e:55: f0:2e:b1:65:b3:01:0a:1e:dc:9a:fa:3e:96:44:6c:84:0d:f1: c3:99:a7:45:b1:18:ff:85:e5:30:f0:a3:40:c0:4a:2c:65:6c: 71:cf:dd:3b:1b:4e:ef:1a:db:74:3b:0b:d7:30:d4:ea:9b:27: ce:54:49:ea:a3:29:c3:06:1d:60:a4:f6:fa:86:9d:18:b1:e7: 30:8a:8f:86:9a:59:a7:8f:22:06:44:6d:e4:1d:96:70:fb:5b: 03:85:88:39:83:d9:b3:47:75:3d:9b:51:e9:f2:82:9b:b3:88: 50:3b:66:bd:e4:2e:04:4b:c1:d5:d2:f5:f7:da:ec:24:a3:0f: a3:5e:f9:61:18:f1:0d:b1:6b:38:dc:f2:74:9b:da:8c:07:e7: 2b:f3:ed:87:b7:5f:20:84:22:0f:e3:aa:0a:7f:d7:58:9d:5e: 90:9a:d1:9b:bd:1d:ca:cb:b0:ee:ce:b9:1c:f7:21:f1:8e:b8: d3:6a:c9:f7:03:22:ff:e8:4e:bf:d8:bf:09:a1:45:8f:3d:d5: c8:aa:f3:83:b8:73:e9:fd:48:15:16:28:7d:66:24:aa:8b:03: 7d:45:64:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRL1lNSCBilkkNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk NGZjYWQwZGItYWJhMy00NGEyLTliODctY2EwZDk2OWVmYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1NS30auiLhojY4+G/AGdsCJi8Aafro+aaHq q2/BoDFxU9ECqrOoDlEa1iAqcKGLFrjrFR8vM7X/ZZoJtNLGZd5QRqJxDwOdznzr 3x+52/ucAvtkew3W2mBtx6lcEPt6SmKC857v1YsRIwxSTxdk9ixH4Rw/zDXkgVQ1 iuxxux0IxnsHBIC33QwA5UIuJDBINZMgpIkKkQcdAYuWOduwgNa1cJxbmQo2zIxJ 0pchLVmsD9wxnFpLfHIN/ltqmoCQFNy8vcbd55MJmZs6N5hQQlOYzbawZ7vvcXC/ fiLaPMskf8MmCudQIPrAo5QZzWM/4XSmHDZ86NMDlHRty2Wf7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt1ZnaINSH7AYdEhJkYXCB5FehIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZmRkMGNmYjctNjNlMy0z YzQxLThmMWQtNDUyYWY5NDllNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKla/55irAuyEij6ne0wWKOFtVF5D036TM4Kd9nrs5Slz5oOVfAusWWz AQoe3Jr6PpZEbIQN8cOZp0WxGP+F5TDwo0DASixlbHHP3TsbTu8a23Q7C9cw1Oqb J85USeqjKcMGHWCk9vqGnRix5zCKj4aaWaePIgZEbeQdlnD7WwOFiDmD2bNHdT2b UenygpuziFA7Zr3kLgRLwdXS9ffa7CSjD6Ne+WEY8Q2xazjc8nSb2owH5yvz7Ye3 XyCEIg/jqgp/11idXpCa0Zu9HcrLsO7OuRz3IfGOuNNqyfcDIv/oTr/YvwmhRY89 1ciq84O4c+n9SBUWKH1mJKqLA31FZC8= -----END CERTIFICATE-----Generated at Fri Jul 24 11:11:40 2026 by rpki-client