$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa File: a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa (raw, json) Hash identifier: jwrHDD8vY7Y9mbvVJ8d5isvOxoSAbxxWYmRIC6BTPKU= Subject key identifier: 52:D1:35:3A:57:29:E0:D4:B3:37:18:B5:58:A8:0F:3D:29:B4:58:99 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DF4D65046ED77C3C7600 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:df:4d:65:04:6e:d7:7c:3c:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=af82e65d-789c-405e-9009-2a93d58dcc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:b1:72:78:d7:b3:97:61:7c:e9:fb:2e:2c: 9f:73:77:42:d1:53:e0:68:27:db:2f:02:01:8d:b6: eb:38:6e:46:e4:32:57:1b:b8:2e:58:10:7c:0a:78: 29:f6:ba:81:ed:8a:65:d8:b6:32:b1:5f:0c:d4:44: 92:83:65:d1:85:37:79:4c:18:63:54:c8:0e:99:17: 51:9d:ca:fc:49:f2:2f:c6:4a:bc:4b:96:74:e9:79: 70:ed:30:34:00:9e:5e:03:91:34:9e:d8:31:d8:96: 32:a9:22:d4:7e:95:89:3d:25:bf:63:01:28:c6:31: f2:91:61:e0:7a:45:e2:64:b6:37:5f:e2:fa:20:13: 8d:75:f9:66:c7:78:f2:14:b2:5b:d8:5c:72:03:5a: 8f:7f:ee:7c:8c:40:e4:d1:24:f0:af:2e:4b:0a:35: f9:ff:17:0d:93:78:58:de:3f:19:54:49:df:e6:e5: b4:84:17:4b:57:d2:ed:7e:25:81:3b:42:4c:eb:81: d9:dd:82:81:1c:f7:5f:69:17:ee:e2:16:d6:e9:fe: 8b:ec:09:e1:a7:9d:c8:09:48:b4:11:36:d6:d7:cc: 9e:54:b3:64:2c:6a:36:2d:f8:b2:f7:af:5f:3c:c5: cc:7a:1a:4d:a3:52:f9:10:1c:48:71:17:52:94:59: b3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D1:35:3A:57:29:E0:D4:B3:37:18:B5:58:A8:0F:3D:29:B4:58:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ef:5b:23:58:9f:e2:69:59:21:9c:4a:d0:69:19:5b:0c:f1: 17:d6:b5:6e:79:aa:41:c3:e4:68:d0:d4:49:dc:8d:7f:52:59: 83:cd:b3:b4:b2:29:b1:d7:65:e7:70:a0:84:d9:11:77:cd:5e: 46:2b:f4:01:f3:4f:69:f4:c0:d7:11:72:3b:a4:e5:1a:58:fc: 40:92:f7:d9:31:52:01:07:f8:3a:49:28:73:db:fa:f7:a2:c3: 69:6e:e2:1b:7c:30:30:f1:b3:8a:ec:17:cd:83:21:ac:81:81: 8e:f7:ac:fd:ba:57:31:e6:c1:a3:5a:c1:6d:54:16:61:ed:7a: 74:79:2c:6f:67:52:e7:54:f0:15:e5:79:b9:5b:b6:d8:be:50: 65:56:db:01:81:62:96:3d:e5:22:0f:06:d2:ab:bf:92:97:bc: bd:e2:a8:06:17:ab:cd:07:af:43:6d:70:6a:e3:f8:ae:22:fc: a6:d8:a1:df:24:e5:87:7c:32:33:6a:33:5c:a0:64:aa:b6:65: f4:52:64:f1:b9:55:67:aa:72:0c:14:cf:ef:54:1e:44:1d:3d: c5:bb:2b:7a:c6:aa:51:d0:cd:b4:14:cf:78:e9:46:39:40:07: 19:15:33:76:58:a2:00:b1:8d:21:3b:d1:a6:1a:89:4d:cf:7c: ed:20:7e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN9NZQRu13w8dgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWY4MmU2NWQtNzg5Yy00MDVlLTkwMDktMmE5M2Q1OGRjYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3qxcnjXs5dhfOn7Liyfc3dC0VPgaCfbLwIB jbbrOG5G5DJXG7guWBB8Cngp9rqB7Ypl2LYysV8M1ESSg2XRhTd5TBhjVMgOmRdR ncr8SfIvxkq8S5Z06Xlw7TA0AJ5eA5E0ntgx2JYyqSLUfpWJPSW/YwEoxjHykWHg ekXiZLY3X+L6IBONdflmx3jyFLJb2FxyA1qPf+58jEDk0STwry5LCjX5/xcNk3hY 3j8ZVEnf5uW0hBdLV9LtfiWBO0JM64HZ3YKBHPdfaRfu4hbW6f6L7Anhp53ICUi0 ETbW18yeVLNkLGo2Lfiy969fPMXMehpNo1L5EBxIcRdSlFmz0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLRNTpXKeDUszcYtVioDz0ptFiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYTZiYThmMTgtY2I4ZC0z ZmQ3LWExYTUtNGFlZjI3ZGU5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPvWyNYn+JpWSGcStBpGVsM8RfWtW55qkHD5GjQ1EncjX9SWYPNs7Sy KbHXZedwoITZEXfNXkYr9AHzT2n0wNcRcjuk5RpY/ECS99kxUgEH+DpJKHPb+vei w2lu4ht8MDDxs4rsF82DIayBgY73rP26VzHmwaNawW1UFmHtenR5LG9nUudU8BXl eblbtti+UGVW2wGBYpY95SIPBtKrv5KXvL3iqAYXq80Hr0NtcGrj+K4i/KbYod8k 5Yd8MjNqM1ygZKq2ZfRSZPG5VWeqcgwUz+9UHkQdPcW7K3rGqlHQzbQUz3jpRjlA BxkVM3ZYogCxjSE70aYaiU3PfO0gfnM= -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:42 2025 by rpki-client