$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa File: 148e8965-c9d0-383e-82c1-fd713e6a01d1.roa (raw, json) Hash identifier: mCfvD+VmsG3BQLWN9Y/h8/iYkDP1hFD39Bfk4nFyks0= Subject key identifier: AC:74:00:B1:D5:A7:E3:52:6A:CE:EB:ED:21:F3:80:EA:E1:7C:8B:D9 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DE115585580160E8E400 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:de:11:55:85:58:01:60:e8:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=9dcc7a92-3910-4587-8c07-7fb3037f29a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e8:89:c7:74:77:20:9a:29:4c:d8:d5:b5:43: 8d:db:e5:7b:ab:74:a5:38:09:0c:f7:a8:d4:b6:e0: 9f:f4:ad:3e:44:ca:f4:f3:18:13:6d:fe:00:6a:cc: 61:40:d5:07:70:00:e6:b4:65:19:0e:30:b6:59:f1: a0:25:cf:90:a4:51:e1:04:0f:7c:75:6c:73:7e:18: 1e:61:22:c6:59:f6:ca:93:e3:41:1d:c6:28:81:ad: 14:be:93:1f:5b:fc:45:3b:be:12:60:bf:4b:37:94: a1:90:17:bf:8a:ef:ed:3c:72:ed:15:05:42:f0:f3: e8:40:30:19:00:e8:24:69:74:bb:4e:da:a5:f5:a1: f4:d6:dd:5c:1b:e4:2b:1a:c2:63:aa:53:13:71:1a: 56:80:17:ca:6d:72:13:98:e7:1e:52:26:b9:0e:61: 5f:09:e9:36:86:2c:90:66:5a:d5:be:01:36:81:26: 2d:34:c1:eb:94:6f:35:2a:68:d2:e7:94:24:7e:a5: 3c:a1:83:38:8f:51:50:2b:07:1c:ec:40:78:c8:a7: 97:51:f5:07:3b:a6:c2:dc:37:db:1d:9e:3c:12:01: 40:8a:c5:ed:41:6d:e4:fb:75:1d:ad:43:65:a7:34: 3e:cd:8f:0c:47:99:22:a2:4c:fe:c9:18:8e:28:98: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:74:00:B1:D5:A7:E3:52:6A:CE:EB:ED:21:F3:80:EA:E1:7C:8B:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:48:d3:99:20:05:ce:df:4a:c8:8a:01:c9:01:05:85:03:d3: 16:76:e0:ef:a9:5c:20:52:e6:81:77:55:8d:e6:96:6f:6f:fa: 1d:45:9f:3b:55:09:40:de:9a:f1:a9:bd:f1:eb:e4:a5:b6:4d: 04:e0:b2:44:1d:86:72:44:2c:25:be:c5:b6:0e:78:c9:64:ca: 9d:d4:82:ac:6b:94:19:87:9b:00:ab:79:35:5d:28:89:9c:76: 42:89:bf:0f:37:57:b2:6a:04:c4:ad:56:28:4e:b0:66:8e:8b: fc:9b:72:a6:09:5a:0c:a4:79:aa:63:61:27:e6:82:93:de:3f: d3:b7:56:13:c9:97:c7:53:27:4b:17:a1:ae:91:ca:42:3b:80: e6:8d:b1:a0:86:3e:3c:c4:44:2d:ac:99:6c:cb:31:53:5e:e6: f1:76:a3:31:31:f2:cd:d6:e8:3c:d4:6f:35:d6:4c:5d:64:c7: 1b:ce:b0:8b:36:bf:84:d9:9b:43:79:bc:74:04:59:db:ec:81: cc:dc:48:ff:03:47:78:19:5e:5a:b7:5c:44:11:68:b5:eb:a2: 54:58:21:68:33:86:0c:98:61:70:99:83:c7:ae:ea:2f:57:f8: 9c:ff:83:ed:96:9f:75:21:25:28:36:39:af:a2:97:a4:9e:79: 3f:7b:b7:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN4RVYVYAWDo5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWRjYzdhOTItMzkxMC00NTg3LThjMDctN2ZiMzAzN2YyOWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOiJx3R3IJopTNjVtUON2+V7q3SlOAkM96jU tuCf9K0+RMr08xgTbf4AasxhQNUHcADmtGUZDjC2WfGgJc+QpFHhBA98dWxzfhge YSLGWfbKk+NBHcYoga0UvpMfW/xFO74SYL9LN5ShkBe/iu/tPHLtFQVC8PPoQDAZ AOgkaXS7Ttql9aH01t1cG+QrGsJjqlMTcRpWgBfKbXITmOceUia5DmFfCek2hiyQ ZlrVvgE2gSYtNMHrlG81KmjS55QkfqU8oYM4j1FQKwcc7EB4yKeXUfUHO6bC3Dfb HZ48EgFAisXtQW3k+3UdrUNlpzQ+zY8MR5kiokz+yRiOKJgsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKx0ALHVp+NSas7r7SHzgOrhfIvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMTQ4ZTg5NjUtYzlkMC0z ODNlLTgyYzEtZmQ3MTNlNmEwMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtI05kgBc7fSsiKAckBBYUD0xZ24O+pXCBS5oF3VY3mlm9v+h1FnztV CUDemvGpvfHr5KW2TQTgskQdhnJELCW+xbYOeMlkyp3UgqxrlBmHmwCreTVdKImc dkKJvw83V7JqBMStVihOsGaOi/ybcqYJWgykeapjYSfmgpPeP9O3VhPJl8dTJ0sX oa6RykI7gOaNsaCGPjzERC2smWzLMVNe5vF2ozEx8s3W6DzUbzXWTF1kxxvOsIs2 v4TZm0N5vHQEWdvsgczcSP8DR3gZXlq3XEQRaLXrolRYIWgzhgyYYXCZg8eu6i9X +Jz/g+2Wn3UhJSg2Oa+il6SeeT97t6o= -----END CERTIFICATE-----Generated at Sat Aug 9 14:15:59 2025 by rpki-client