$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa File: 85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa (raw, json) Hash identifier: 4X3XtqsFwBmgCgNbqUwVZoEGW4EtGEeb4hhOOf0qM7Y= Subject key identifier: 80:CF:28:E6:43:80:E7:FD:ED:36:FF:AE:D3:CC:BE:7A:F2:8E:B0:E4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DF14FDBF2E8F2BBDF700 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:df:14:fd:bf:2e:8f:2b:bd:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=1b2f8509-95a5-4ede-ac37-078de5bf216e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:eb:a9:f8:87:3e:d5:45:6e:f4:24:db:6e: 61:97:f3:df:ec:1c:cc:e7:5a:3a:15:a0:9d:65:5f: 12:17:c0:6c:a4:d5:53:24:00:c0:b0:d8:29:a2:bf: c4:81:23:e2:5f:15:be:f0:5c:e1:87:46:3c:c9:9d: cf:3d:a1:e2:b2:a2:e7:38:b5:cc:af:30:32:bc:46: 15:9f:af:63:f6:a9:30:93:2b:ff:23:ec:cb:5f:e2: 4b:82:09:04:e2:b9:5d:68:e9:eb:cd:22:63:f9:75: 12:68:a0:e1:b9:e1:f0:b9:c2:6c:b6:62:cf:ee:d1: 2b:22:96:b7:1c:2f:47:80:5f:c9:8d:81:a4:4e:c0: f8:82:cd:1a:a6:90:b2:9b:b4:dd:91:f4:ce:50:f4: 31:53:44:0e:3c:40:ce:ad:f6:b4:79:e7:43:18:74: 8b:03:0f:23:b7:e5:cb:4b:96:44:cb:d0:ca:34:0e: 1a:77:84:cf:65:5e:c9:a0:f3:e9:70:f2:e6:0d:1d: b6:86:82:b7:3b:71:60:4b:8b:4b:20:1f:e3:37:f4: e2:21:e8:60:83:88:7b:23:95:7d:1f:0d:a7:91:79: 8d:eb:10:c8:d2:b8:0f:48:4f:1d:f3:92:4a:eb:d0: c7:a8:62:16:2e:45:ae:1b:bf:e1:6e:99:98:6d:03: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CF:28:E6:43:80:E7:FD:ED:36:FF:AE:D3:CC:BE:7A:F2:8E:B0:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:67:29:e3:0e:b4:fa:2d:f2:f5:8e:20:cc:29:12:1c:9e:49: 17:aa:44:e7:1f:e9:ad:fd:2c:9c:10:d4:49:75:b5:21:af:68: 8f:4e:05:4d:62:80:3a:ac:19:56:1c:71:52:6a:8a:13:0d:77: d3:18:99:a7:70:47:50:c0:0b:db:c3:c7:68:7b:4f:88:df:ca: 48:44:f6:db:fc:f0:9d:2e:53:be:83:9b:f5:35:42:8e:83:64: e6:d4:63:30:03:2f:93:c1:86:93:0a:b5:f5:50:8a:c7:44:60: e2:a9:0b:1b:1a:b1:aa:3f:a2:d8:63:87:3a:85:be:90:04:1f: 97:39:38:4b:5e:35:d8:6a:2c:24:16:7c:e3:14:8b:11:53:5d: 3f:29:a7:68:4a:57:5e:be:77:0c:ba:62:73:3b:4a:79:51:1f: 38:2c:7a:29:c5:30:90:d7:42:52:6f:64:01:f7:53:fa:85:4e: b9:83:af:73:78:ca:78:8c:66:98:3e:e4:ee:cd:c4:6b:c1:f4: 7d:dc:09:4f:c5:dc:79:6b:7f:f9:52:49:9f:e0:ce:58:f2:cc: b4:85:cb:f2:6d:c9:7f:db:48:d2:a2:2c:5e:c0:65:01:ce:80: f2:da:b7:c1:54:c4:31:36:55:8b:a3:db:f9:fc:9b:07:4b:24: a6:7c:02:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN8U/b8ujyu99wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWIyZjg1MDktOTVhNS00ZWRlLWFjMzctMDc4ZGU1YmYyMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweLrqfiHPtVFbvQk225hl/Pf7BzM51o6FaCd ZV8SF8BspNVTJADAsNgpor/EgSPiXxW+8Fzhh0Y8yZ3PPaHisqLnOLXMrzAyvEYV n69j9qkwkyv/I+zLX+JLggkE4rldaOnrzSJj+XUSaKDhueHwucJstmLP7tErIpa3 HC9HgF/JjYGkTsD4gs0appCym7TdkfTOUPQxU0QOPEDOrfa0eedDGHSLAw8jt+XL S5ZEy9DKNA4ad4TPZV7JoPPpcPLmDR22hoK3O3FgS4tLIB/jN/TiIehgg4h7I5V9 Hw2nkXmN6xDI0rgPSE8d85JK69DHqGIWLkWuG7/hbpmYbQOPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDPKOZDgOf97Tb/rtPMvnryjrDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvODVlOWJmZGItMzJjYi0z M2ZkLWIzZjctYWYzZjY0ODViYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdnKeMOtPot8vWOIMwpEhyeSReqROcf6a39LJwQ1El1tSGvaI9OBU1i gDqsGVYccVJqihMNd9MYmadwR1DAC9vDx2h7T4jfykhE9tv88J0uU76Dm/U1Qo6D ZObUYzADL5PBhpMKtfVQisdEYOKpCxsasao/othjhzqFvpAEH5c5OEteNdhqLCQW fOMUixFTXT8pp2hKV16+dwy6YnM7SnlRHzgseinFMJDXQlJvZAH3U/qFTrmDr3N4 yniMZpg+5O7NxGvB9H3cCU/F3Hlrf/lSSZ/gzljyzLSFy/JtyX/bSNKiLF7AZQHO gPLat8FUxDE2VYuj2/n8mwdLJKZ8ArY= -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:29 2025 by rpki-client