$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa File: 5f78b53d-576a-3370-855a-e2e24d4b4480.roa (raw, json) Hash identifier: 1JWAn58Zl1skyIijsrFK9Qz7ByXBc5m9bklQ8bV532E= Subject key identifier: 58:1E:B2:54:9F:B7:AE:5F:1F:E2:1E:34:89:96:94:F9:04:3F:76:F9 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DEB6AE619BEA5977E480 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:de:b6:ae:61:9b:ea:59:77:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=48dd890e-0633-499e-afe7-acb3fdd40d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:2d:a9:f4:44:86:8d:86:8d:2b:bd:ce:7f: 25:8f:f8:c9:c8:f2:95:19:2e:4d:c1:9b:e3:e4:f6: 03:e9:95:ad:a7:7e:18:b5:ff:ae:bd:d5:1f:54:fc: fe:ee:29:6c:be:79:7a:a5:e6:61:9c:f3:50:5e:43: cf:00:6b:a1:21:4f:36:2f:df:98:9b:ee:33:39:f0: c6:3c:b2:c8:81:8c:63:8d:5e:df:b8:87:7f:ca:86: 72:5e:b3:29:17:d1:be:b8:a8:f9:7e:26:fd:9f:ad: 7a:04:12:7b:26:48:78:e7:cb:e5:9b:82:22:a6:70: a7:1c:5c:37:99:22:f5:84:9b:08:e7:3a:5a:8d:41: 42:d6:ac:07:11:05:f1:c0:7f:1a:fa:e1:b7:01:77: 14:58:5b:08:30:5c:71:50:a3:27:4c:07:64:ab:be: 8f:ee:3e:61:1d:69:7e:f0:11:f8:72:6e:0b:db:2a: 1d:82:a8:29:e3:75:40:8d:cf:2c:26:52:4b:14:01: 05:d3:f8:9d:16:87:1e:49:9b:15:e4:53:f9:e5:3d: 0e:ba:74:4f:1a:05:cf:7f:c6:f0:fe:8b:75:54:2e: e6:51:a7:cc:33:fe:b9:53:4b:9c:9d:ed:1c:57:5d: d8:bb:21:24:7f:6e:e6:f7:a0:34:b0:f7:8b:82:f0: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1E:B2:54:9F:B7:AE:5F:1F:E2:1E:34:89:96:94:F9:04:3F:76:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:df:3b:8b:b9:5a:89:44:20:ad:fe:12:72:f9:0e:59:11:18: bc:e7:8d:0b:cc:c9:23:08:60:80:45:fa:3b:93:93:a1:83:f7: 25:46:04:6a:59:31:03:f6:d5:a6:57:61:29:b2:d2:e7:36:f1: 32:39:ba:3e:dd:e6:65:4f:f9:cd:ff:09:75:62:35:e6:75:dc: b8:83:23:36:14:6d:14:48:e4:d3:28:75:c9:5b:d0:bc:db:ed: ef:f4:74:a1:d2:08:fc:ad:62:2e:49:f0:1f:3b:74:0b:7a:04: 85:83:ab:5f:ba:2e:99:5c:a6:77:da:a6:4f:9a:ee:b5:9a:6e: 83:22:b1:af:66:65:5e:c3:16:49:92:14:84:5c:1a:9e:14:8f: cb:c5:00:ec:05:50:65:61:77:03:c0:21:6e:c1:6f:56:26:b7: c6:15:c0:d6:18:77:01:cf:5c:39:c5:f8:05:dd:63:b9:27:33: 48:9c:af:8f:6b:08:3e:c5:a2:84:d8:2d:95:b8:a8:e5:9e:62: a7:47:bb:6b:e0:c5:dc:75:2b:a2:1b:dc:de:37:12:02:ac:a2: 52:40:96:01:2e:1d:c6:73:55:57:09:d6:7f:ff:9d:0b:4e:c5: d6:f0:8f:de:da:86:42:ac:7f:de:d0:e3:45:c9:26:34:2a:c6: 1f:f5:16:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN62rmGb6ll35IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDhkZDg5MGUtMDYzMy00OTllLWFmZTctYWNiM2ZkZDQwZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs00tqfREho2GjSu9zn8lj/jJyPKVGS5NwZvj 5PYD6ZWtp34Ytf+uvdUfVPz+7ilsvnl6peZhnPNQXkPPAGuhIU82L9+Ym+4zOfDG PLLIgYxjjV7fuId/yoZyXrMpF9G+uKj5fib9n616BBJ7Jkh458vlm4IipnCnHFw3 mSL1hJsI5zpajUFC1qwHEQXxwH8a+uG3AXcUWFsIMFxxUKMnTAdkq76P7j5hHWl+ 8BH4cm4L2yodgqgp43VAjc8sJlJLFAEF0/idFoceSZsV5FP55T0OunRPGgXPf8bw /ot1VC7mUafMM/65U0ucne0cV13YuyEkf27m96A0sPeLgvCaBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgeslSft65fH+IeNImWlPkEP3b5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNWY3OGI1M2QtNTc2YS0z MzcwLTg1NWEtZTJlMjRkNGI0NDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7fO4u5WolEIK3+EnL5DlkRGLznjQvMySMIYIBF+juTk6GD9yVGBGpZ MQP21aZXYSmy0uc28TI5uj7d5mVP+c3/CXViNeZ13LiDIzYUbRRI5NModclb0Lzb 7e/0dKHSCPytYi5J8B87dAt6BIWDq1+6Lplcpnfapk+a7rWaboMisa9mZV7DFkmS FIRcGp4Uj8vFAOwFUGVhdwPAIW7Bb1Ymt8YVwNYYdwHPXDnF+AXdY7knM0icr49r CD7FooTYLZW4qOWeYqdHu2vgxdx1K6Ib3N43EgKsolJAlgEuHcZzVVcJ1n//nQtO xdbwj97ahkKsf97Q40XJJjQqxh/1FoU= -----END CERTIFICATE-----Generated at Sat Aug 9 20:46:53 2025 by rpki-client