$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa File: 542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa (raw, json) Hash identifier: WRjZ/4LVxcTn5OnuCTHYsW8FdV7Ozos5nDmL7tIRXq4= Subject key identifier: 4C:62:F3:B6:25:A8:6C:84:2F:DD:D6:43:C5:24:0D:48:7A:F6:60:52 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DDFD4A1F2F3D76C2EA00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:dd:fd:4a:1f:2f:3d:76:c2:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=57dc555d-10a6-4cfb-9b2f-82b942ef236c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bd:12:00:fe:b2:05:48:08:d7:7b:cd:28:6c: fa:42:87:48:96:26:c7:8a:d1:ef:23:4e:e4:ac:20: 83:a9:44:65:2d:63:88:ee:3a:9e:6b:6e:12:17:64: 6a:30:63:91:25:74:4f:5f:a5:81:6b:90:01:5c:9c: e7:21:ee:da:d1:8f:22:3d:1c:17:3a:d8:be:16:70: 8b:b2:a1:ff:5b:b0:a8:9a:43:0a:7a:b7:03:45:cf: 10:1c:e0:ce:3d:b6:5f:17:bd:30:06:7a:5c:a7:4f: e6:42:4f:44:9e:fb:de:e8:21:0d:df:1e:16:fe:86: 9c:b9:52:f2:92:50:77:12:5b:98:8f:d0:be:99:ea: 2b:23:e4:11:a7:b5:4f:c6:8e:2b:74:a5:8d:89:a6: 26:4b:ee:86:6e:67:d8:58:e6:b6:86:5f:2b:27:5f: 9d:63:fb:85:6f:6e:e1:dc:f5:93:6a:44:a5:75:b7: 96:71:f0:cd:5e:66:29:8e:e2:ff:a7:4a:f5:77:78: 44:ef:ac:bc:51:26:e6:be:87:94:63:b7:c2:26:92: ea:97:66:8c:4e:02:ba:06:57:c2:85:26:47:fc:b9: 0f:9d:ea:97:75:42:c3:f8:cb:19:5f:fa:88:cf:8d: 2f:72:94:e8:0f:04:e6:9b:6a:85:91:34:76:5c:8b: 59:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:62:F3:B6:25:A8:6C:84:2F:DD:D6:43:C5:24:0D:48:7A:F6:60:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:17:e6:84:75:87:d7:ea:40:14:bd:93:34:ff:5d:cb:f1:62: 76:11:be:56:cd:8d:c0:c0:de:0c:76:a7:d5:f7:7c:fc:eb:44: 75:55:da:70:b8:80:e6:86:70:87:e0:c2:02:36:48:25:d6:14: cf:af:c1:f1:35:a2:4b:85:ec:a3:4b:1c:eb:a5:f4:df:dd:45: 9f:3e:7c:30:68:91:89:5a:58:42:36:78:2f:1c:c2:0d:93:ed: 18:bc:1d:31:16:87:16:46:65:97:08:c9:bc:05:93:70:b0:ed: b0:47:4f:ad:3c:a5:8f:d3:3c:79:7d:3c:2d:49:19:45:b2:ab: 00:6c:86:45:19:ba:c1:3c:0e:15:74:b3:1e:bf:9f:3e:8d:7c: 11:dd:28:f5:61:7e:84:a0:f6:d7:fe:c3:c0:6e:b5:19:84:a4: 3f:a9:38:92:de:7a:bf:73:95:d1:d7:9e:19:21:95:77:c8:e7: 16:0a:d3:9d:8a:54:f4:df:a4:2c:b8:9a:e0:45:7d:fb:b9:b2: 14:29:50:ae:86:8e:64:88:9b:01:7f:16:05:7b:74:15:7c:55: aa:e5:14:55:e1:06:c3:a3:87:5b:8b:65:c5:85:fd:b8:80:85: 4c:44:9f:b0:41:be:43:ee:aa:1b:aa:33:fa:d3:df:f3:9b:b9: 7a:a2:df:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN39Sh8vPXbC6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTdkYzU1NWQtMTBhNi00Y2ZiLTliMmYtODJiOTQyZWYyMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg70SAP6yBUgI13vNKGz6QodIlibHitHvI07k rCCDqURlLWOI7jqea24SF2RqMGORJXRPX6WBa5ABXJznIe7a0Y8iPRwXOti+FnCL sqH/W7ComkMKercDRc8QHODOPbZfF70wBnpcp0/mQk9Envve6CEN3x4W/oacuVLy klB3EluYj9C+meorI+QRp7VPxo4rdKWNiaYmS+6GbmfYWOa2hl8rJ1+dY/uFb27h 3PWTakSldbeWcfDNXmYpjuL/p0r1d3hE76y8USbmvoeUY7fCJpLql2aMTgK6BlfC hSZH/LkPneqXdULD+MsZX/qIz40vcpToDwTmm2qFkTR2XItZGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExi87YlqGyEL93WQ8UkDUh69mBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTQyYjQ2YjUtY2FkZi0z NGQ4LWI3ZTQtMGNlOGY2M2QxOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0X5oR1h9fqQBS9kzT/XcvxYnYRvlbNjcDA3gx2p9X3fPzrRHVV2nC4 gOaGcIfgwgI2SCXWFM+vwfE1okuF7KNLHOul9N/dRZ8+fDBokYlaWEI2eC8cwg2T 7Ri8HTEWhxZGZZcIybwFk3Cw7bBHT608pY/TPHl9PC1JGUWyqwBshkUZusE8DhV0 sx6/nz6NfBHdKPVhfoSg9tf+w8ButRmEpD+pOJLeer9zldHXnhkhlXfI5xYK052K VPTfpCy4muBFffu5shQpUK6GjmSImwF/FgV7dBV8VarlFFXhBsOjh1uLZcWF/biA hUxEn7BBvkPuqhuqM/rT3/ObuXqi3xM= -----END CERTIFICATE-----Generated at Sat Aug 9 14:34:16 2025 by rpki-client