$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa File: 0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa (raw, json) Hash identifier: o9hvsw6DfB/ZwO7XEu+pTUIM/yBHfyxJ8XYUYvVUm6o= Subject key identifier: A3:A4:D7:64:31:DE:3E:88:37:F9:D4:A5:37:0F:87:61:31:24:2F:A0 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DE91C9E7209C2E3528A0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:de:91:c9:e7:20:9c:2e:35:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=10768da6-823a-453a-8db5-6409228c4b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:66:21:33:1b:16:ee:7b:ee:86:3d:e9:5c: 41:ea:69:f3:0d:5d:de:e9:15:19:19:74:cf:75:19: 8b:41:c0:1d:80:f1:c3:60:75:8f:44:d2:d0:5d:07: 00:5b:c2:9c:94:e8:cb:cd:27:50:b3:cf:30:f7:2a: 16:be:c1:3a:98:10:d3:25:95:a9:8f:4c:e1:c2:70: 33:fb:95:24:9e:10:45:cc:1c:83:77:99:6f:e2:fe: ef:0c:18:90:c4:ca:9d:a5:fc:3a:f3:7b:21:3f:f8: cc:e1:9f:85:fd:41:8e:b7:81:e8:8e:4f:47:1f:25: 8a:a8:a2:a9:3e:b2:0b:fc:91:ee:54:a4:ad:3d:92: 8b:b1:78:3e:2c:80:3b:53:98:d0:94:c7:a7:56:19: ea:81:d3:bb:b4:6b:6a:11:96:fb:04:98:6c:dd:6e: f2:0d:be:c6:fa:43:a4:68:da:0d:13:f5:81:85:14: 11:83:07:81:ef:24:47:80:5b:3d:ae:70:9d:2b:f8: b8:ca:25:a7:d7:9a:e2:e5:94:34:ec:ca:b6:7e:22: 3f:07:8d:7b:ee:ee:91:9a:db:06:9b:09:a3:b5:fa: 67:63:53:03:80:e2:ae:d7:ec:66:c7:9d:82:44:f3: c8:83:95:62:5f:83:b5:ea:03:d8:5f:f3:23:36:65: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A4:D7:64:31:DE:3E:88:37:F9:D4:A5:37:0F:87:61:31:24:2F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:86:4e:73:91:7d:e2:4e:cd:e1:34:dc:0f:41:da:f6:ee:7f: 94:a0:31:d7:a2:b3:7a:fc:23:cd:12:2d:c5:42:0e:13:2d:a6: b6:a7:2f:64:22:41:52:f1:6b:47:b2:e1:fe:bb:ad:9f:ce:24: d3:7e:58:0d:27:03:9a:56:e6:7f:8f:32:fe:94:be:47:6b:9c: 03:df:ec:45:73:29:e1:cc:54:21:e7:8a:78:bf:7c:cd:1c:ac: 4e:d2:d7:02:16:a6:0b:77:31:4f:eb:85:4f:dc:50:8e:16:c9: 8d:5d:82:86:70:b0:f8:b8:3c:92:c5:33:87:ae:f1:e8:df:2b: 2a:cc:2d:b4:ab:c5:f5:b2:17:e3:60:fa:43:f2:d1:9f:8c:2d: a3:64:31:da:87:a8:79:d6:3d:87:3c:a7:b9:ca:22:cc:c9:82: f7:b8:62:48:5a:8e:2e:1e:af:f4:95:0f:96:95:2f:69:64:ea: ee:fc:20:f4:27:26:f1:f9:fc:44:cc:9e:28:98:bb:21:18:f8: da:12:6c:2c:34:c9:5e:20:42:64:8d:11:9a:61:f9:a8:89:9e: 1e:45:38:6f:39:f6:1e:e5:20:e1:3b:3f:08:07:99:a8:c6:3e: 00:21:0e:68:00:30:c3:7c:30:80:3e:0c:b1:25:cd:f6:c5:7c: 21:9c:14:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN6RyecgnC41KKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTA3NjhkYTYtODIzYS00NTNhLThkYjUtNjQwOTIyOGM0YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswpmITMbFu577oY96VxB6mnzDV3e6RUZGXTP dRmLQcAdgPHDYHWPRNLQXQcAW8KclOjLzSdQs88w9yoWvsE6mBDTJZWpj0zhwnAz +5UknhBFzByDd5lv4v7vDBiQxMqdpfw683shP/jM4Z+F/UGOt4Hojk9HHyWKqKKp PrIL/JHuVKStPZKLsXg+LIA7U5jQlMenVhnqgdO7tGtqEZb7BJhs3W7yDb7G+kOk aNoNE/WBhRQRgweB7yRHgFs9rnCdK/i4yiWn15ri5ZQ07Mq2fiI/B4177u6RmtsG mwmjtfpnY1MDgOKu1+xmx52CRPPIg5ViX4O16gPYX/MjNmVEXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOk12Qx3j6IN/nUpTcPh2ExJC+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGRhOGVhNjQtYWU0ZS0z ZTc1LWE3ZmMtNjJiNmY0NDlkNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeGTnORfeJOzeE03A9B2vbuf5SgMdeis3r8I80SLcVCDhMtpranL2Qi QVLxa0ey4f67rZ/OJNN+WA0nA5pW5n+PMv6UvkdrnAPf7EVzKeHMVCHnini/fM0c rE7S1wIWpgt3MU/rhU/cUI4WyY1dgoZwsPi4PJLFM4eu8ejfKyrMLbSrxfWyF+Ng +kPy0Z+MLaNkMdqHqHnWPYc8p7nKIszJgve4Ykhaji4er/SVD5aVL2lk6u78IPQn JvH5/ETMniiYuyEY+NoSbCw0yV4gQmSNEZph+aiJnh5FOG859h7lIOE7PwgHmajG PgAhDmgAMMN8MIA+DLElzfbFfCGcFO0= -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:44 2025 by rpki-client