$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa File: 72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa (raw, json) Hash identifier: J6zfkAp5U413VqErOEP+XDFLWHmbpyKWIQzaG1J9KWI= Subject key identifier: 7F:06:E3:AC:B3:5F:DC:ED:9B:FE:B1:84:DA:1D:76:5E:F6:AC:02:29 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DE7ED06F321D36B78318 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:de:7e:d0:6f:32:1d:36:b7:83:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=ffeff0ec-1644-49b2-b028-cbf9153e7228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:c4:47:c8:2c:ed:65:b0:82:7e:6b:5e:f4: 49:d6:6a:03:81:2f:7d:db:06:5a:d3:a0:60:46:7a: 73:4c:cd:94:e5:35:56:1a:70:43:c9:ff:0c:65:e5: d9:99:52:9e:e0:52:08:8d:b2:7c:58:af:08:50:57: 93:4b:fd:98:b1:db:ec:6b:51:29:de:68:3e:e6:3d: 09:15:8f:bc:22:b1:6f:fb:81:6d:51:2c:27:7b:2d: 10:f7:59:21:72:e3:cd:e8:76:2b:bf:9e:f8:40:c2: 1f:e0:35:20:32:86:65:1c:5e:28:ff:aa:ff:79:36: 53:b4:52:a5:5f:02:a5:9a:15:06:e3:79:9d:40:8e: 32:1c:8e:55:e8:2e:18:a3:7c:b4:13:78:5f:04:5b: d0:7c:ee:d3:43:18:62:5e:20:b7:71:47:2c:8e:c8: fc:9b:5b:78:66:1b:ba:f4:a6:c7:ba:4f:c7:4d:44: 72:a9:2d:37:f4:36:bd:ee:0d:92:e0:18:99:d3:eb: b5:bb:f8:8b:04:c0:2a:27:92:cc:5c:7f:e7:be:dd: e9:f8:75:b5:5a:5a:89:c8:a8:51:29:97:82:3f:a0: c7:12:54:76:cf:40:8e:d1:cd:32:ab:af:ac:a9:63: d8:09:f4:32:4d:26:69:72:f6:ae:03:ee:d5:ea:43: 28:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:06:E3:AC:B3:5F:DC:ED:9B:FE:B1:84:DA:1D:76:5E:F6:AC:02:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:34:06:ff:ed:1d:85:3d:99:af:d0:3e:66:c9:a4:a3:e3:5d: 29:9b:69:cf:29:e9:2f:c8:a6:53:23:51:87:79:8d:3c:c6:43: e1:2a:aa:95:b0:ab:4c:e8:21:ac:51:fb:0e:b8:e1:64:37:3a: 13:f3:43:37:5c:99:6d:ce:24:92:44:5b:6d:92:e8:40:ff:b7: b3:d5:38:c6:31:f9:fd:c3:18:00:48:11:48:56:fb:d8:df:0a: 09:6a:37:a7:66:73:a6:fa:3f:4e:39:f6:7e:14:86:a3:7a:d4: 0e:60:bd:88:c2:ed:9d:3f:5c:f3:40:ca:ad:92:01:44:7c:0b: 5c:cc:b6:96:4d:3e:1c:67:a2:5d:fe:4b:a1:34:2a:4a:73:da: 82:cc:27:7c:5d:cc:29:f9:43:e4:64:db:de:6e:8a:54:da:df: d4:34:d0:ac:2e:19:b6:70:79:76:c4:16:23:bb:9f:2b:d4:b5: 87:9a:cc:d4:6b:b1:78:a6:a8:fa:6c:39:bb:d3:20:af:fe:68: 8e:f7:97:63:6b:ee:ba:f2:a7:e7:df:2a:bd:f8:61:44:fc:56: c4:2e:32:b1:81:dd:3c:15:0b:a8:e4:c2:37:ea:64:9e:00:60: bb:7a:ad:e7:4d:45:be:2b:06:f4:3b:99:08:00:98:5d:4b:83: e1:f4:19:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN5+0G8yHTa3gxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmZlZmYwZWMtMTY0NC00OWIyLWIwMjgtY2JmOTE1M2U3MjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxjER8gs7WWwgn5rXvRJ1moDgS992wZa06Bg RnpzTM2U5TVWGnBDyf8MZeXZmVKe4FIIjbJ8WK8IUFeTS/2Ysdvsa1Ep3mg+5j0J FY+8IrFv+4FtUSwney0Q91khcuPN6HYrv574QMIf4DUgMoZlHF4o/6r/eTZTtFKl XwKlmhUG43mdQI4yHI5V6C4Yo3y0E3hfBFvQfO7TQxhiXiC3cUcsjsj8m1t4Zhu6 9KbHuk/HTURyqS039Da97g2S4BiZ0+u1u/iLBMAqJ5LMXH/nvt3p+HW1WlqJyKhR KZeCP6DHElR2z0CO0c0yq6+sqWPYCfQyTSZpcvauA+7V6kMovwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8G46yzX9ztm/6xhNoddl72rAIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzJkMzk3NmItZTZlZS0z ZjJhLWI3YmQtNWQxMTVhOTEyZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC00Bv/tHYU9ma/QPmbJpKPjXSmbac8p6S/IplMjUYd5jTzGQ+EqqpWw q0zoIaxR+w644WQ3OhPzQzdcmW3OJJJEW22S6ED/t7PVOMYx+f3DGABIEUhW+9jf CglqN6dmc6b6P0459n4UhqN61A5gvYjC7Z0/XPNAyq2SAUR8C1zMtpZNPhxnol3+ S6E0Kkpz2oLMJ3xdzCn5Q+Rk295uilTa39Q00KwuGbZweXbEFiO7nyvUtYeazNRr sXimqPpsObvTIK/+aI73l2Nr7rryp+ffKr34YUT8VsQuMrGB3TwVC6jkwjfqZJ4A YLt6redNRb4rBvQ7mQgAmF1Lg+H0GYo= -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:05 2025 by rpki-client