$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa File: 098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa (raw, json) Hash identifier: o6Upktqc8IC1wyIMSpk6aHqGBZfbAZ+hK0B/gYH+cLc= Subject key identifier: A9:36:3F:21:6D:AB:5F:6A:12:13:06:57:C2:7B:42:13:BE:FD:19:C2 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220D4DD5A0EEAE6E8891D00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:d4:dd:5a:0e:ea:e6:e8:89:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=9973f9e5-4ca1-408f-b30a-115320c8df35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:56:b0:50:5e:af:a5:e0:86:5b:33:a3:0f: 7e:c5:54:8e:44:10:af:a7:04:1d:a3:a5:37:32:55: 47:d1:13:82:62:a9:a1:58:03:ee:df:4e:07:76:5b: d7:79:d8:ef:1f:50:2e:9a:95:d3:8b:bf:70:5b:0e: e5:7b:2b:9e:f6:ef:0f:07:58:95:33:d4:b1:32:48: f7:ef:9f:67:2c:ee:43:42:ea:00:97:b2:c3:85:30: 25:d6:bb:ad:ea:bb:ed:cd:4d:ae:7a:5c:59:01:2a: f3:86:53:04:9e:08:dd:cb:8e:1b:04:e0:0b:9b:db: 9a:27:2e:28:b5:10:de:1f:4d:f9:04:75:7f:96:f4: df:c4:b2:ba:b2:bb:2e:f1:b8:0c:e1:9d:1a:6e:70: fa:9c:5b:66:07:66:8b:be:81:a8:cd:d4:05:75:49: 41:d0:4b:4a:6b:7a:6b:41:df:aa:aa:e1:f4:03:77: 3c:90:f9:2e:ea:f1:a8:39:ae:1c:49:06:87:36:45: 89:aa:ae:16:17:e2:c8:8c:7b:4f:60:84:90:2f:1a: ed:80:a7:93:40:b5:4f:2c:5f:68:86:b0:2f:0c:7a: aa:a2:b5:5e:2e:c4:25:d4:da:0b:c0:af:28:3d:aa: ac:91:80:c8:8f:79:d5:95:00:03:1d:c0:d6:ae:f0: ab:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:36:3F:21:6D:AB:5F:6A:12:13:06:57:C2:7B:42:13:BE:FD:19:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6a:65:ed:55:11:95:b0:64:8e:3b:0f:1f:ce:8d:d6:fa:30: 27:82:aa:7f:2b:da:59:57:bb:b3:fa:ec:30:e2:71:35:84:4d: 0b:d7:0e:6c:91:d6:d7:bb:f5:6e:50:59:2d:72:56:1e:93:04: f6:92:3e:fc:b2:80:7d:31:a1:07:65:c2:b6:54:c1:f6:e4:a1: cb:59:59:c6:d2:40:91:c0:1b:6d:e5:ae:a6:42:7c:fb:93:5c: ab:28:db:6b:88:0c:80:72:6b:fe:b1:b5:6c:b2:ae:d9:60:6b: d3:ec:42:1c:79:25:2d:5b:18:d9:c9:17:13:05:e0:40:a4:74: f0:8f:54:9c:9b:cf:a3:06:c9:58:f4:75:e4:f4:76:3f:b9:eb: 21:13:44:1c:ac:89:ae:72:88:20:6f:3a:78:c2:df:3f:ac:84: 77:35:45:2e:8c:a0:24:28:78:d6:0a:66:e2:41:d2:81:d0:bd: 17:39:78:4b:a5:42:c3:0d:41:30:d8:20:35:fe:6c:ab:6b:b2: c3:45:42:02:9d:bd:fe:6f:eb:4c:d2:dd:51:ee:c1:85:e0:21: 50:0d:8b:0e:61:51:88:38:39:90:9d:6e:7a:7d:96:91:92:59: bc:ae:77:14:93:f3:d5:2d:8a:31:26:bc:8a:ab:ca:81:8f:c9: 3e:a1:3b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINTdWg7q5uiJHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTk3M2Y5ZTUtNGNhMS00MDhmLWIzMGEtMTE1MzIwYzhkZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr01WsFBer6Xghlszow9+xVSORBCvpwQdo6U3 MlVH0ROCYqmhWAPu304HdlvXedjvH1AumpXTi79wWw7leyue9u8PB1iVM9SxMkj3 759nLO5DQuoAl7LDhTAl1rut6rvtzU2uelxZASrzhlMEngjdy44bBOALm9uaJy4o tRDeH035BHV/lvTfxLK6srsu8bgM4Z0abnD6nFtmB2aLvoGozdQFdUlB0EtKa3pr Qd+qquH0A3c8kPku6vGoOa4cSQaHNkWJqq4WF+LIjHtPYISQLxrtgKeTQLVPLF9o hrAvDHqqorVeLsQl1NoLwK8oPaqskYDIj3nVlQADHcDWrvCrKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk2PyFtq19qEhMGV8J7QhO+/RnCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDk4YzBhNDAtMmE4My0z OWU3LTg4ZmItNGEwMjI2YTJiYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9qZe1VEZWwZI47Dx/Ojdb6MCeCqn8r2llXu7P67DDicTWETQvXDmyR 1te79W5QWS1yVh6TBPaSPvyygH0xoQdlwrZUwfbkoctZWcbSQJHAG23lrqZCfPuT XKso22uIDIBya/6xtWyyrtlga9PsQhx5JS1bGNnJFxMF4ECkdPCPVJybz6MGyVj0 deT0dj+56yETRBysia5yiCBvOnjC3z+shHc1RS6MoCQoeNYKZuJB0oHQvRc5eEul QsMNQTDYIDX+bKtrssNFQgKdvf5v60zS3VHuwYXgIVANiw5hUYg4OZCdbnp9lpGS WbyudxST89UtijEmvIqryoGPyT6hO1o= -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:55 2025 by rpki-client