$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa File: ee433468-bf42-3f91-8d0a-4a4c07f44583.roa (raw, json) Hash identifier: xoH/vLnhgLh8EjSi8SMplA+ZOD4hhMfIo/MLP8yGyxw= Subject key identifier: F9:75:66:84:C5:0A:41:7C:71:BE:4A:C5:46:5C:DA:C0:F3:20:C0:77 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DF27F6C18EAAAD2CEE00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:df:27:f6:c1:8e:aa:ad:2c:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=d818039b-f357-4a5b-b3a4-f87f9ff1a951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:40:e3:26:f0:19:53:d5:d1:a4:d9:18:b4:8e: 9e:88:ad:09:e7:9e:df:e6:1f:84:77:04:55:9b:d1: 79:99:96:69:72:a8:4b:cd:d4:07:ea:14:bc:63:33: 22:00:af:76:89:ab:c1:f3:c7:fe:2b:67:a1:06:ce: 6b:f8:79:d5:d9:60:cb:1c:43:61:03:02:6f:96:97: 12:92:96:7a:c9:d5:d5:31:a8:15:b5:1b:30:81:61: 25:74:cc:75:11:3b:5f:66:2d:92:79:f2:24:84:8e: 8d:ad:20:15:b4:cb:9b:e1:bb:05:bd:73:6c:9c:50: 87:c2:07:dc:d2:5f:0b:6f:58:11:6f:6b:5a:24:65: cd:a2:26:83:01:16:ab:6b:f9:4b:63:62:f7:3c:b1: ad:a8:c8:33:1b:39:fb:d5:1d:aa:94:a9:a6:2f:1f: 05:b1:2b:a6:a9:4d:d5:80:f8:d2:ec:cf:51:36:f7: 0c:0f:3c:39:56:a2:24:1f:a3:6a:ed:ca:ba:83:b5: 08:0a:b7:5c:fa:e9:e8:10:32:44:47:a0:02:6e:5c: 51:2e:d9:7e:0e:2f:d5:b2:d8:9a:eb:b8:df:e4:d9: 61:f6:d9:5f:b6:ea:ec:7d:7e:79:bb:55:53:fd:34: 6c:83:d9:42:17:21:f6:b5:c1:0b:b4:1a:5f:b4:c0: 78:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:75:66:84:C5:0A:41:7C:71:BE:4A:C5:46:5C:DA:C0:F3:20:C0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:64:32:53:9d:01:07:c3:84:61:bb:dd:c8:cf:cd:d8:cb:11: f1:03:5a:f8:ec:8a:86:e1:4e:29:14:30:1f:78:a0:3b:96:48: 5e:68:76:7e:66:ae:37:c9:6d:b9:e9:5e:09:c0:0b:cc:60:14: ff:32:7c:25:ed:5f:7c:0c:76:59:f2:25:c6:8f:7e:b7:9f:96: 97:b9:9d:09:e7:f0:81:a5:82:fd:6c:bf:6f:9e:0b:b8:19:3f: 78:4a:e8:5d:29:c2:66:06:6f:7f:42:f2:40:99:80:fa:e7:28: 9f:d6:c5:a7:c2:a1:43:3e:6b:f5:d3:e4:f8:b0:e2:dd:11:eb: 0d:f8:4d:d1:44:69:fb:e6:5a:f8:d5:f2:c9:eb:ae:f2:82:8b: f1:4f:b3:d2:ab:e8:ab:ac:04:81:6e:18:24:6f:d7:98:84:ce: 8f:64:54:8b:27:73:f4:d5:66:c5:a9:4e:e0:7e:b7:f8:4f:0e: cb:72:1d:10:9b:0c:2f:e9:41:af:4f:30:ad:6f:dc:f4:c6:d3: 93:0c:40:32:42:2d:da:5f:17:77:ce:37:9f:50:b2:18:0b:e3: 5f:ec:5b:ba:09:05:d5:83:45:a6:0a:5a:6f:fd:4c:02:db:a5: 43:e7:7a:31:bc:05:98:05:61:40:e0:1e:2a:7c:fc:eb:bc:d8: 96:95:56:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN8n9sGOqq0s7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDgxODAzOWItZjM1Ny00YTViLWIzYTQtZjg3ZjlmZjFhOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0DjJvAZU9XRpNkYtI6eiK0J557f5h+EdwRV m9F5mZZpcqhLzdQH6hS8YzMiAK92iavB88f+K2ehBs5r+HnV2WDLHENhAwJvlpcS kpZ6ydXVMagVtRswgWEldMx1ETtfZi2SefIkhI6NrSAVtMub4bsFvXNsnFCHwgfc 0l8Lb1gRb2taJGXNoiaDARara/lLY2L3PLGtqMgzGzn71R2qlKmmLx8FsSumqU3V gPjS7M9RNvcMDzw5VqIkH6Nq7cq6g7UICrdc+unoEDJER6ACblxRLtl+Di/Vstia 67jf5Nlh9tlftursfX55u1VT/TRsg9lCFyH2tcELtBpftMB4VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl1ZoTFCkF8cb5KxUZc2sDzIMB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZWU0MzM0NjgtYmY0Mi0z ZjkxLThkMGEtNGE0YzA3ZjQ0NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxkMlOdAQfDhGG73cjPzdjLEfEDWvjsiobhTikUMB94oDuWSF5odn5m rjfJbbnpXgnAC8xgFP8yfCXtX3wMdlnyJcaPfreflpe5nQnn8IGlgv1sv2+eC7gZ P3hK6F0pwmYGb39C8kCZgPrnKJ/WxafCoUM+a/XT5Piw4t0R6w34TdFEafvmWvjV 8snrrvKCi/FPs9Kr6KusBIFuGCRv15iEzo9kVIsnc/TVZsWpTuB+t/hPDstyHRCb DC/pQa9PMK1v3PTG05MMQDJCLdpfF3fON59QshgL41/sW7oJBdWDRaYKWm/9TALb pUPnejG8BZgFYUDgHip8/Ou82JaVVpA= -----END CERTIFICATE-----Generated at Sat Aug 9 14:19:55 2025 by rpki-client