$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa File: c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa (raw, json) Hash identifier: MtS7SMG2DM/aAEJxBDmZAPHXTMi2kghFPR1Gc/MlccQ= Subject key identifier: AF:9E:D0:48:AA:96:46:A5:EE:64:CC:BD:DC:21:78:13:A2:22:D9:69 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DE3498B8C57B29CA5F80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:de:34:98:b8:c5:7b:29:ca:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=a26527c9-0a72-43c5-848c-108935ac50ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:8e:2f:0a:ed:3f:cb:b2:b9:ac:81:b3:21: f4:56:2d:1d:51:e5:93:e9:ad:4a:69:70:fb:ec:ec: bf:07:78:e3:e7:53:40:1c:8b:51:bf:ba:54:ce:ec: 9e:da:4a:64:1a:18:b7:b3:67:d1:8d:c2:fc:9d:4d: 40:65:ee:f4:26:a9:3a:3d:28:f0:c1:72:3c:5e:fd: 3e:01:a4:59:48:dc:56:fc:8e:d1:36:22:e4:a5:de: 7d:1a:bb:49:8d:39:8a:26:77:0d:64:06:8e:d8:39: 2c:5b:a3:39:f8:a7:7e:ef:0f:b0:78:cb:01:0b:91: 43:36:81:e0:5d:5f:74:5f:15:d1:3d:5c:62:ed:8c: e3:f8:4f:d7:10:0d:2c:56:52:9a:fd:4e:c3:e1:62: c9:db:28:55:50:3c:6d:8b:b4:c1:90:56:f8:5e:04: bc:fb:09:8b:e4:3f:e9:a2:27:35:b1:c9:4f:84:89: 1b:72:8f:89:2a:d4:37:d4:e6:9f:ab:34:97:b9:cd: 68:cf:b4:b6:cf:f5:9c:62:06:51:13:be:e9:a2:7e: 22:f6:e8:1b:56:8c:d3:94:33:e6:6d:ce:f8:f2:51: 80:9a:26:1f:06:7f:d1:82:92:ad:71:5e:a6:c3:13: c5:0b:8d:8d:3e:32:ff:51:ef:fb:c0:02:77:1f:47: 11:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9E:D0:48:AA:96:46:A5:EE:64:CC:BD:DC:21:78:13:A2:22:D9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b8:e7:28:bc:53:44:48:6e:f6:01:d6:bf:e4:31:c6:3a:c2: 36:c4:88:9b:6f:5d:9e:46:a7:e6:83:f5:0b:31:78:48:b0:a2: 37:8e:ed:9a:90:a0:50:a9:6c:db:9e:d8:28:2a:55:c5:e4:d8: 3b:c1:7e:98:08:87:7e:bf:6c:92:4e:ae:cf:4f:bd:7b:7b:3e: d7:93:63:a8:be:d7:ce:15:ba:d0:6a:1a:26:9f:bc:1e:e3:d0: ba:ca:2b:af:f4:79:a4:04:ca:08:de:27:42:79:cd:05:f9:6c: a0:63:d1:5e:eb:2f:93:59:87:9c:e1:09:de:92:80:3d:9a:27: 2d:c6:6c:ad:b6:5f:42:b0:14:7b:cc:e3:9c:96:92:b4:e1:bb: c0:f6:f7:43:92:08:89:53:40:e3:7b:64:29:e9:a6:55:92:d3: 13:a1:d3:1b:1c:e8:6c:e1:a7:61:0d:ea:63:9d:08:bd:e6:86: 67:03:3e:ba:41:79:73:ba:33:f8:aa:b2:e8:cb:8c:fd:43:f9: 81:7c:75:c5:4d:94:57:19:ee:03:94:fe:d2:a0:30:3d:0f:3e: f8:34:30:6b:43:ce:22:0f:5e:d8:44:90:a6:1a:df:81:d6:4f: f6:da:7d:bd:34:56:f2:90:4b:77:84:cf:dd:ee:aa:c2:d4:b2: 32:07:19:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN40mLjFeynKX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTI2NTI3YzktMGE3Mi00M2M1LTg0OGMtMTA4OTM1YWM1MGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne6OLwrtP8uyuayBsyH0Vi0dUeWT6a1KaXD7 7Oy/B3jj51NAHItRv7pUzuye2kpkGhi3s2fRjcL8nU1AZe70Jqk6PSjwwXI8Xv0+ AaRZSNxW/I7RNiLkpd59GrtJjTmKJncNZAaO2DksW6M5+Kd+7w+weMsBC5FDNoHg XV90XxXRPVxi7Yzj+E/XEA0sVlKa/U7D4WLJ2yhVUDxti7TBkFb4XgS8+wmL5D/p oic1sclPhIkbco+JKtQ31OafqzSXuc1oz7S2z/WcYgZRE77pon4i9ugbVozTlDPm bc748lGAmiYfBn/RgpKtcV6mwxPFC42NPjL/Ue/7wAJ3H0cRxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+e0Eiqlkal7mTMvdwheBOiItlpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzFkYTJlNzEtZGZhNi0z ZDA5LWJjMTctOTNhMGE3ZTczMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES45yi8U0RIbvYB1r/kMcY6wjbEiJtvXZ5Gp+aD9QsxeEiwojeO7ZqQ oFCpbNue2CgqVcXk2DvBfpgIh36/bJJOrs9PvXt7PteTY6i+184VutBqGiafvB7j 0LrKK6/0eaQEygjeJ0J5zQX5bKBj0V7rL5NZh5zhCd6SgD2aJy3GbK22X0KwFHvM 45yWkrThu8D290OSCIlTQON7ZCnpplWS0xOh0xsc6Gzhp2EN6mOdCL3mhmcDPrpB eXO6M/iqsujLjP1D+YF8dcVNlFcZ7gOU/tKgMD0PPvg0MGtDziIPXthEkKYa34HW T/bafb00VvKQS3eEz93uqsLUsjIHGcM= -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:56 2025 by rpki-client