$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa File: cbf5d661-caf7-3016-8cfc-b5a540e71195.roa (raw, json) Hash identifier: +jE2V6qpUmIvw6mWLxy2VrgsusvPhZu2ZMq9wVbDh+I= Subject key identifier: 32:26:BF:AF:1D:94:8B:C9:35:EE:B2:9E:87:E1:81:7C:29:CB:F7:0B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220D4EFD0478A897C348000 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 199.91.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:d4:ef:d0:47:8a:89:7c:34:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=480f56d2-e790-4bfd-ba22-78360861148f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:97:99:08:d4:a1:f9:d1:1c:02:29:07:90:15: 17:16:aa:0b:12:91:4c:5a:3f:6e:81:87:46:07:70: 0c:79:fb:2c:19:f4:f4:a5:2f:0c:90:64:47:ad:52: 28:50:80:02:01:eb:d0:47:6d:34:07:b5:06:a9:ec: d1:53:63:9f:47:e9:a4:0b:70:f5:fa:e8:5c:d9:97: 7f:b2:79:39:93:5d:88:29:fc:65:5b:8d:5b:b3:1a: 2e:5a:5f:90:c0:17:0b:b2:9c:5e:e5:54:fd:e3:97: ad:c0:27:99:c0:c4:be:00:9e:f5:0a:00:dd:75:35: 52:f0:92:d2:e1:18:04:25:c3:0f:57:76:7f:0c:94: 1d:cf:ee:b9:64:26:9b:91:47:b7:f6:be:c5:df:08: a0:07:83:01:6d:43:04:86:7f:ca:84:ee:79:9d:c7: 69:e9:09:6a:84:d8:42:35:11:ef:d9:1e:6d:01:8d: b2:9e:95:75:73:08:e8:a9:0b:b1:af:54:15:7a:32: 71:9a:b4:6c:be:fa:38:55:1a:85:61:56:21:a1:7d: 74:ca:89:07:6e:99:6e:c2:d2:3d:12:45:31:2d:d1: 04:3e:6e:4e:f0:e1:46:1a:d5:55:c1:dc:d1:f6:55: 07:f4:34:71:57:78:56:66:f8:8a:d0:ea:5e:79:c1: 44:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:26:BF:AF:1D:94:8B:C9:35:EE:B2:9E:87:E1:81:7C:29:CB:F7:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ea:9c:30:a5:0b:69:20:9c:0d:d8:4e:2c:9d:cd:c4:80:2f: f6:06:a1:c3:03:ef:b7:c6:a7:eb:d8:7b:64:a2:db:82:45:7f: ce:55:d2:89:c1:a2:16:7e:cf:d7:08:a0:54:a9:b4:72:b3:5f: 35:2d:ff:89:3d:6a:2e:39:0e:b1:fb:ca:e6:5c:32:31:e3:28: 93:52:2e:8a:10:70:a4:98:7a:70:a9:3a:58:c8:31:ad:e7:75: 61:56:c0:f4:a5:64:96:74:e1:f7:1f:49:29:c5:bd:e4:eb:a6: 0f:4d:66:6a:8f:4a:0c:1d:ef:32:0b:c7:5f:e4:09:90:28:82: 64:8b:67:c0:0d:5d:dd:88:4a:c5:23:9d:80:09:fe:de:84:3f: b6:82:98:e4:6e:fc:78:ee:74:51:0b:81:8b:ab:c4:0c:32:59: 41:3c:0b:2f:90:4f:bc:5c:dd:dc:aa:c5:93:40:c1:8b:79:aa: 81:6c:35:b6:ac:db:f0:84:c9:a2:54:46:6f:df:dd:e1:67:2b: bb:22:74:af:2c:e2:a0:fb:5a:1a:48:0f:eb:60:15:84:4c:6b: 23:79:4f:af:17:82:34:ad:aa:eb:e8:0f:68:d2:2b:30:c3:7c: dd:cc:8f:4b:24:31:2a:9c:75:c4:b6:f2:db:36:a5:3f:3c:77: b1:91:f1:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINTv0EeKiXw0gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDgwZjU2ZDItZTc5MC00YmZkLWJhMjItNzgzNjA4NjExNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5eZCNSh+dEcAikHkBUXFqoLEpFMWj9ugYdG B3AMefssGfT0pS8MkGRHrVIoUIACAevQR200B7UGqezRU2OfR+mkC3D1+uhc2Zd/ snk5k12IKfxlW41bsxouWl+QwBcLspxe5VT945etwCeZwMS+AJ71CgDddTVS8JLS 4RgEJcMPV3Z/DJQdz+65ZCabkUe39r7F3wigB4MBbUMEhn/KhO55ncdp6QlqhNhC NRHv2R5tAY2ynpV1cwjoqQuxr1QVejJxmrRsvvo4VRqFYVYhoX10yokHbpluwtI9 EkUxLdEEPm5O8OFGGtVVwdzR9lUH9DRxV3hWZviK0OpeecFEVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDImv68dlIvJNe6ynofhgXwpy/cLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JmNWQ2NjEtY2FmNy0z MDE2LThjZmMtYjVhNTQwZTcxMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXqnDClC2kgnA3YTiydzcSAL/YGocMD77fGp+vYe2Si24JFf85V0onB ohZ+z9cIoFSptHKzXzUt/4k9ai45DrH7yuZcMjHjKJNSLooQcKSYenCpOljIMa3n dWFWwPSlZJZ04fcfSSnFveTrpg9NZmqPSgwd7zILx1/kCZAogmSLZ8ANXd2ISsUj nYAJ/t6EP7aCmORu/HjudFELgYurxAwyWUE8Cy+QT7xc3dyqxZNAwYt5qoFsNbas 2/CEyaJURm/f3eFnK7sidK8s4qD7WhpID+tgFYRMayN5T68XgjStquvoD2jSKzDD fN3Mj0skMSqcdcS28ts2pT88d7GR8Yw= -----END CERTIFICATE-----Generated at Sat Aug 9 20:40:55 2025 by rpki-client