$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/984d31cc-6f63-319f-b84b-b508e59b50d9.roa File: 984d31cc-6f63-319f-b84b-b508e59b50d9.roa (raw, json) Hash identifier: 1DDTxSoQjzLYR6tTbme6Wt32bSSPriobLpRULJsZS3w= Subject key identifier: 6C:F4:AF:EB:69:1A:9B:B2:4D:D5:C1:71:50:65:A0:BF:BC:0A:A7:76 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DEEF06C95CF479B4E881 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/984d31cc-6f63-319f-b84b-b508e59b50d9.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:de:ef:06:c9:5c:f4:79:b4:e8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=e1fc1acd-2431-46fa-a0c8-b445104956cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b0:bd:9a:f9:38:57:31:48:5d:c6:c4:c2:c7: a2:19:06:63:17:8c:77:59:77:dd:1c:34:87:76:c3: 48:85:d2:1c:39:90:21:f1:e6:06:3d:47:09:72:88: b1:19:9e:7c:96:63:73:5d:5e:2b:6b:a0:31:38:f2: 16:df:71:fa:d5:04:6c:a7:ce:08:25:a2:46:b2:09: d2:3e:18:0f:eb:f1:ce:50:30:e4:20:aa:71:12:f2: 2f:59:97:b8:d4:43:eb:e2:27:af:30:10:ca:13:2d: 7f:38:d9:79:a2:e8:ed:8c:63:f9:23:94:ae:39:b6: 24:ba:f9:df:81:a0:90:28:c0:f0:d1:1c:6b:80:6e: 73:45:fb:5a:8f:22:92:3c:29:3b:b0:6e:8c:f8:c9: c0:08:ce:db:04:13:2a:cf:a1:30:d7:81:e4:b4:ea: c0:59:fe:60:b2:ef:af:52:53:ad:fd:c3:2d:87:cb: 0d:79:60:47:9e:65:37:4c:87:45:04:39:91:58:41: 78:12:da:04:68:56:47:93:37:e7:3c:a8:fd:0a:e9: dc:66:6a:e2:cc:34:d7:59:46:09:54:33:81:1a:fd: 3e:63:20:fe:1e:dc:b6:c8:07:67:61:53:da:51:e7: 68:34:70:42:53:7c:b1:78:bb:8a:2a:21:46:58:1c: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F4:AF:EB:69:1A:9B:B2:4D:D5:C1:71:50:65:A0:BF:BC:0A:A7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/984d31cc-6f63-319f-b84b-b508e59b50d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:64:70:1b:87:da:9b:5d:69:e9:19:59:00:03:88:61:b2:be: 7d:3b:f6:77:16:15:85:c8:c8:e4:5e:82:62:b0:34:ec:ab:c7: 54:bc:59:03:75:5e:10:76:9b:af:6b:ae:38:de:16:b7:f8:2f: ad:83:af:74:d9:36:26:f3:72:63:0d:26:e7:85:1b:6e:8b:10: 4c:0b:cf:b9:0f:01:5e:6e:21:20:01:0d:0c:bf:25:cc:a2:d1: 89:4f:e5:6f:3b:84:67:e8:eb:59:a2:ec:b9:3b:ab:c9:6d:0b: 6d:ad:97:48:8c:32:fb:db:8b:55:e4:93:24:f1:b9:27:2b:28: 81:ad:17:ac:bb:af:d9:e7:91:ee:a4:a9:06:98:7f:05:63:7f: f9:ea:78:c2:b6:ae:0a:40:1d:d2:45:c8:8c:a1:88:aa:96:51: d3:9b:d7:f0:15:6c:f3:96:07:0f:7c:9e:72:8d:74:70:6e:da: 2e:90:41:52:37:38:c4:1d:4e:d2:f5:05:16:69:9f:97:9a:4c: c5:4b:25:84:3e:a3:c9:cb:13:15:fa:90:b3:09:9e:d0:67:d2: b0:9f:6f:b5:03:73:ac:da:53:0e:8c:4d:f2:99:80:c4:f3:8a: 39:9e:6e:d3:3c:d0:64:b6:aa:a5:77:c1:0d:a5:5f:7f:f7:9f: 35:5f:66:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN7vBslc9Hm06IEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTFmYzFhY2QtMjQzMS00NmZhLWEwYzgtYjQ0NTEwNDk1NmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rC9mvk4VzFIXcbEwseiGQZjF4x3WXfdHDSH dsNIhdIcOZAh8eYGPUcJcoixGZ58lmNzXV4ra6AxOPIW33H61QRsp84IJaJGsgnS PhgP6/HOUDDkIKpxEvIvWZe41EPr4ievMBDKEy1/ONl5oujtjGP5I5SuObYkuvnf gaCQKMDw0RxrgG5zRftajyKSPCk7sG6M+MnACM7bBBMqz6Ew14HktOrAWf5gsu+v UlOt/cMth8sNeWBHnmU3TIdFBDmRWEF4EtoEaFZHkzfnPKj9CuncZmrizDTXWUYJ VDOBGv0+YyD+Hty2yAdnYVPaUedoNHBCU3yxeLuKKiFGWBw56wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGz0r+tpGpuyTdXBcVBloL+8Cqd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTg0ZDMxY2MtNmY2My0z MTlmLWI4NGItYjUwOGU1OWI1MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClkcBuH2ptdaekZWQADiGGyvn079ncWFYXIyORegmKwNOyrx1S8WQN1 XhB2m69rrjjeFrf4L62Dr3TZNibzcmMNJueFG26LEEwLz7kPAV5uISABDQy/Jcyi 0YlP5W87hGfo61mi7Lk7q8ltC22tl0iMMvvbi1XkkyTxuScrKIGtF6y7r9nnke6k qQaYfwVjf/nqeMK2rgpAHdJFyIyhiKqWUdOb1/AVbPOWBw98nnKNdHBu2i6QQVI3 OMQdTtL1BRZpn5eaTMVLJYQ+o8nLExX6kLMJntBn0rCfb7UDc6zaUw6MTfKZgMTz ijmebtM80GS2qqV3wQ2lX3/3nzVfZpE= -----END CERTIFICATE-----Generated at Sat Aug 9 20:43:46 2025 by rpki-client