$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa File: 08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa (raw, json) Hash identifier: 6KPpefu2AMeCYCYu5Klg55LUwUoe6xFTK/caOaj+cpA= Subject key identifier: 64:43:92:42:81:BF:E5:98:5C:FF:D9:E3:FC:F2:1F:0B:B5:81:3F:DD Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DDE9C4014F2A1C5C7700 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:dd:e9:c4:01:4f:2a:1c:5c:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=ca0ecd30-4cfa-42c1-bfe9-91df9fdea593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:22:cc:e5:83:df:ba:d3:17:b9:67:99:36:43: fc:45:6a:dc:19:fa:02:4d:3c:84:78:09:c9:85:ba: fa:5f:ca:2f:4c:cd:50:fa:ae:48:00:89:b3:8b:c6: 26:ad:1b:1f:d2:81:a5:61:57:3a:c7:43:41:4b:4f: ae:94:63:fb:43:32:54:ad:cc:ff:24:83:31:43:e9: 4b:20:b6:3a:b8:45:3f:9c:2c:52:61:23:0d:2d:7b: fa:13:c7:76:21:8c:eb:ac:1b:85:2a:83:01:b8:9f: a8:64:6e:e7:67:f0:b6:15:17:3a:8b:8d:d0:e0:90: a0:e5:37:a9:f5:fa:c2:69:cf:1d:d2:cc:62:1d:b1: 14:4d:1b:88:08:a4:7e:aa:11:72:4a:ef:09:72:f0: a8:6b:7d:2f:d8:a1:bb:a2:ea:a0:52:ca:c4:49:1e: 2e:b3:79:25:20:a4:39:55:99:eb:9b:b7:de:34:26: b4:eb:2d:38:04:e7:9a:be:80:87:4c:88:2c:fb:71: 40:e5:d3:7e:f8:8b:d4:00:66:bb:64:00:eb:29:0b: 9d:b2:88:b8:79:1b:e5:1f:f3:37:40:a3:8b:e5:4d: c6:22:9f:3a:03:2c:5f:ec:98:6f:c2:88:d1:98:de: cf:87:1f:96:13:c2:8f:ae:19:c9:c4:c3:d2:38:36: 08:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:43:92:42:81:BF:E5:98:5C:FF:D9:E3:FC:F2:1F:0B:B5:81:3F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f4:ad:1a:9d:2b:2f:ba:20:d5:61:7c:72:fa:28:40:bb:ca: f2:21:a4:1a:5e:bb:53:01:d8:8e:56:92:62:f4:5d:d5:6d:73: 04:72:fd:8e:c6:0c:9b:08:c2:ee:29:14:f9:81:a1:3f:31:ea: 2c:24:92:9b:04:bb:62:0d:f6:d5:4a:b9:1f:89:f5:be:ac:f6: 18:34:6e:df:4f:8e:37:b6:33:2e:27:53:b7:0f:97:c7:67:5b: 67:e8:17:d3:61:7f:41:97:52:9f:79:3c:4d:a4:89:58:cc:08: 11:6f:fd:8d:6d:9a:e3:0f:d5:7a:c5:c5:23:7d:e2:f4:05:29: b0:47:59:5d:c4:1c:42:71:ce:28:3c:59:29:5e:a8:fd:da:65: 8f:31:58:e2:5e:db:2d:67:62:c8:eb:eb:de:29:16:58:32:da: 75:02:f1:da:21:8b:06:7f:11:13:11:2c:22:d9:63:2d:71:54: 52:d1:df:c1:6b:67:37:a9:e7:cb:48:3d:8f:6b:71:77:28:58: 69:89:d1:68:3b:4b:4b:09:99:4f:ea:fa:e0:5b:c0:63:ca:85: 8a:7d:00:e0:ed:64:8a:3e:fa:e4:1a:99:83:e9:3c:7f:df:ab: fe:28:6d:7c:e4:12:23:32:26:02:1f:d7:36:e4:87:6f:4a:bb: 5e:ac:09:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN3pxAFPKhxcdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2EwZWNkMzAtNGNmYS00MmMxLWJmZTktOTFkZjlmZGVhNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiLM5YPfutMXuWeZNkP8RWrcGfoCTTyEeAnJ hbr6X8ovTM1Q+q5IAImzi8YmrRsf0oGlYVc6x0NBS0+ulGP7QzJUrcz/JIMxQ+lL ILY6uEU/nCxSYSMNLXv6E8d2IYzrrBuFKoMBuJ+oZG7nZ/C2FRc6i43Q4JCg5Tep 9frCac8d0sxiHbEUTRuICKR+qhFySu8JcvCoa30v2KG7ouqgUsrESR4us3klIKQ5 VZnrm7feNCa06y04BOeavoCHTIgs+3FA5dN++IvUAGa7ZADrKQudsoi4eRvlH/M3 QKOL5U3GIp86Ayxf7JhvwojRmN7Phx+WE8KPrhnJxMPSODYI8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRDkkKBv+WYXP/Z4/zyHwu1gT/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDhhZDdhZTEtNGJmYS0z ZDFjLTk2YWMtYTllMmNlYTE0MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf0rRqdKy+6INVhfHL6KEC7yvIhpBpeu1MB2I5WkmL0XdVtcwRy/Y7G DJsIwu4pFPmBoT8x6iwkkpsEu2IN9tVKuR+J9b6s9hg0bt9Pjje2My4nU7cPl8dn W2foF9Nhf0GXUp95PE2kiVjMCBFv/Y1tmuMP1XrFxSN94vQFKbBHWV3EHEJxzig8 WSleqP3aZY8xWOJe2y1nYsjr694pFlgy2nUC8dohiwZ/ERMRLCLZYy1xVFLR38Fr Zzep58tIPY9rcXcoWGmJ0Wg7S0sJmU/q+uBbwGPKhYp9AODtZIo++uQamYPpPH/f q/4obXzkEiMyJgIf1zbkh29Ku16sCR8= -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:53 2025 by rpki-client