$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa File: e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa (raw, json) Hash identifier: zGqbXc+npjsLvi7C5Dm2v5vVGoZANlAa2v/XHguSdAk= Subject key identifier: AB:4F:BA:30:F4:A6:B2:9F:F1:05:C4:7D:90:E0:6D:8D:27:1F:B4:0E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DE233D2C75924B593280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:de:23:3d:2c:75:92:4b:59:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=dc682861-3ca2-4442-830a-aea2b4d9f2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:c0:07:cb:d2:2a:cf:67:e0:60:50:e1:12: 88:9f:b9:e2:3d:d7:76:da:66:15:9c:ac:c4:af:45: 5a:b1:fc:fc:bb:cf:8a:60:01:a7:11:02:0b:b3:d4: 9a:09:37:b8:4d:b1:fa:7c:3e:3e:b2:1b:95:85:27: 0f:4c:23:1c:1e:da:48:00:61:a5:bf:31:0e:d5:a4: 04:ef:ad:ae:fd:c3:b8:bb:3b:08:9b:bd:4b:d3:d8: fe:b7:55:62:94:29:82:6a:62:7b:da:18:90:fe:5d: 69:32:65:9c:7d:e3:d3:d5:8b:c9:34:3c:5b:c6:1e: 7d:e0:3c:df:38:ab:6a:21:42:ce:a8:3d:85:28:5d: 2f:97:ee:b6:8a:82:a4:cd:d7:85:bf:34:92:3c:f7: cc:5b:fe:af:e9:06:2a:8e:59:5d:8d:bc:8c:27:a2: bf:ed:d4:df:b7:99:4b:36:4d:bd:57:13:a9:4f:44: 23:31:b7:ee:98:b8:fd:54:f5:77:79:1f:39:8b:65: c0:3b:48:d2:0c:4d:77:4a:6d:be:02:42:7e:79:c5: 09:83:4b:49:14:ed:54:69:62:74:32:22:75:3f:f2: 8a:9d:c4:24:2a:f8:57:0f:ec:4f:bb:98:81:ba:d4: 59:a1:b4:f8:ed:32:2d:2d:61:98:0a:67:b2:9a:58: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4F:BA:30:F4:A6:B2:9F:F1:05:C4:7D:90:E0:6D:8D:27:1F:B4:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:2f:0b:60:c4:84:07:56:3a:74:97:c3:fe:77:7c:90:1b:2d: 39:db:8b:3b:9c:ee:b5:cf:84:51:f4:fc:cf:9f:54:1f:12:2b: dc:d9:ab:93:27:96:db:f7:21:40:96:f9:c1:b0:12:a5:c4:62: 6f:e6:27:54:41:ab:29:08:66:8f:47:6b:4f:59:9c:aa:a9:9f: 08:f1:0d:6b:8d:d2:4d:cc:6d:40:9f:ca:df:f3:fa:09:6a:23: c8:96:45:5b:ea:d0:55:d2:0a:30:62:6e:fd:75:75:4b:66:bd: c8:86:fd:2c:8d:37:5a:a8:4c:41:59:79:ed:77:59:94:85:f2: ba:e6:22:07:a0:89:f8:c9:02:08:b6:33:32:e0:bd:c9:e5:75: 3d:f8:f9:fc:6a:f0:49:2b:43:4e:7d:e6:a5:b8:df:2c:27:c2: 16:77:ac:3c:5f:bf:0d:93:d2:2b:3a:8e:b7:9c:25:6d:3a:a6: 51:6e:3d:4a:6d:3b:a5:67:f0:43:b3:d5:4d:17:95:d7:55:08: 88:07:51:38:4a:5e:f7:13:79:d7:44:09:b7:97:82:02:9b:0c: 83:1d:00:63:7e:11:8b:18:01:49:28:ef:30:bd:7d:3c:1a:07: 4e:75:60:f5:87:9e:d4:2b:f3:45:d5:15:68:89:e7:6a:a2:ee: 37:ec:98:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN4jPSx1kktZMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGM2ODI4NjEtM2NhMi00NDQyLTgzMGEtYWVhMmI0ZDlmMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2fAB8vSKs9n4GBQ4RKIn7niPdd22mYVnKzE r0Vasfz8u8+KYAGnEQILs9SaCTe4TbH6fD4+shuVhScPTCMcHtpIAGGlvzEO1aQE 762u/cO4uzsIm71L09j+t1VilCmCamJ72hiQ/l1pMmWcfePT1YvJNDxbxh594Dzf OKtqIULOqD2FKF0vl+62ioKkzdeFvzSSPPfMW/6v6QYqjlldjbyMJ6K/7dTft5lL Nk29VxOpT0QjMbfumLj9VPV3eR85i2XAO0jSDE13Sm2+AkJ+ecUJg0tJFO1UaWJ0 MiJ1P/KKncQkKvhXD+xPu5iButRZobT47TItLWGYCmeymliBzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtPujD0prKf8QXEfZDgbY0nH7QOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZTIzZjhhNzktOWZkNi0z YWQ3LWIzZjUtM2I5MGRmYWQwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcvC2DEhAdWOnSXw/53fJAbLTnbizuc7rXPhFH0/M+fVB8SK9zZq5Mn ltv3IUCW+cGwEqXEYm/mJ1RBqykIZo9Ha09ZnKqpnwjxDWuN0k3MbUCfyt/z+glq I8iWRVvq0FXSCjBibv11dUtmvciG/SyNN1qoTEFZee13WZSF8rrmIgegifjJAgi2 MzLgvcnldT34+fxq8EkrQ0595qW43ywnwhZ3rDxfvw2T0is6jrecJW06plFuPUpt O6Vn8EOz1U0XlddVCIgHUThKXvcTeddECbeXggKbDIMdAGN+EYsYAUko7zC9fTwa B051YPWHntQr80XVFWiJ52qi7jfsmEo= -----END CERTIFICATE-----Generated at Sat Aug 9 14:34:06 2025 by rpki-client