$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa File: f4185a63-316f-3d91-b674-52ffad72f800.roa (raw, json) Hash identifier: Es28JIkGoDzhKhUH3wUgBhNGqtDyzO7WG/LGRZlcYO4= Subject key identifier: BF:72:55:F8:FC:CF:F5:5C:FD:06:69:65:34:FD:8B:E5:3E:7F:CB:D3 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DE6CEF735F773561DB20 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:de:6c:ef:73:5f:77:35:61:db:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=a3cabfb7-26dc-46b6-b82c-9d493f84ac61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:97:ff:4d:2b:56:f3:74:f4:34:28:29:01:7a: 21:fe:66:12:7e:bd:42:15:e6:56:86:fc:56:6c:f1: f2:5b:a8:b2:f6:a3:b9:f0:ec:09:c6:ff:11:9e:da: 38:58:45:3b:43:fc:22:f9:d6:e9:a4:ad:7f:53:12: 8b:67:1c:04:2c:71:47:1c:dc:3f:02:2e:1d:12:0f: 5b:3a:5c:00:d2:b1:0c:75:24:8b:02:c2:2f:2c:25: 52:25:17:9f:8a:e1:8d:f7:9b:4b:4a:fe:b7:73:b4: 62:ba:be:81:12:e0:f3:76:52:80:7b:93:cb:73:87: 13:0f:18:29:a8:df:2b:f4:dd:52:44:f8:4d:e0:9c: 5a:2d:52:a9:a1:51:ee:db:5a:b6:8f:38:e8:f8:1c: a9:59:dc:1d:32:ed:bf:fe:d9:cb:1f:8b:17:3a:44: d9:30:7c:3a:e3:8a:04:9c:a1:9c:40:43:1a:c4:71: 65:98:42:37:76:9a:20:a5:9d:4b:50:59:dd:0d:a2: 15:e5:46:bb:99:d9:16:bc:7c:7c:71:3a:53:8b:09: 52:d5:64:65:6f:5a:a4:86:d1:c3:35:a8:cc:ab:ec: c7:f5:c2:ca:0e:58:e9:ec:90:af:43:cb:7e:d8:3e: 1a:b4:79:29:f4:d9:a9:3d:fe:a8:25:54:c6:68:d5: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:72:55:F8:FC:CF:F5:5C:FD:06:69:65:34:FD:8B:E5:3E:7F:CB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:17:5c:57:25:4a:c6:51:d8:f3:e8:a1:49:c4:df:34:b0:4a: 45:18:65:09:34:76:55:eb:e3:b2:fe:c2:c8:8a:65:65:a5:fb: 60:93:1e:5a:2e:47:38:b5:16:02:1c:61:d7:97:f2:0a:7c:22: 8f:d1:02:43:4b:e5:30:f8:e5:9a:47:52:12:9c:01:d4:96:6c: ab:e5:ad:05:87:95:d7:dd:3c:a2:05:9b:60:ce:a1:7e:b7:f9: 6c:c5:94:24:6a:34:3a:ef:72:46:2e:31:01:bf:84:53:5d:44: ca:22:c5:52:00:04:c6:45:e9:da:a9:40:7f:6c:e3:da:d7:22: 9c:7d:ae:8d:c2:5a:d9:f9:6d:8f:7a:42:9d:74:9e:d3:66:35: 13:ab:53:e1:d1:43:24:0f:e7:0b:ae:d7:9c:61:57:93:ad:6c: 3e:d3:1f:0d:a8:1e:8c:c0:5e:bd:0e:7d:10:b2:91:4c:81:50: fe:84:bb:de:38:05:f8:a5:a7:11:fa:36:de:4d:1e:4a:52:33: 46:73:f9:fa:b5:18:30:eb:f9:d6:88:d9:ec:87:2c:1d:f0:5f: 83:11:7a:43:ef:4c:c9:95:09:12:9a:35:2c:c0:f4:df:bd:90: 0e:42:53:98:ea:bd:39:17:32:b3:1c:e0:54:db:3a:d6:fa:cf: 4c:f7:f1:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN5s73NfdzVh2yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTNjYWJmYjctMjZkYy00NmI2LWI4MmMtOWQ0OTNmODRhYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5f/TStW83T0NCgpAXoh/mYSfr1CFeZWhvxW bPHyW6iy9qO58OwJxv8Rnto4WEU7Q/wi+dbppK1/UxKLZxwELHFHHNw/Ai4dEg9b OlwA0rEMdSSLAsIvLCVSJRefiuGN95tLSv63c7Riur6BEuDzdlKAe5PLc4cTDxgp qN8r9N1SRPhN4JxaLVKpoVHu21q2jzjo+BypWdwdMu2//tnLH4sXOkTZMHw644oE nKGcQEMaxHFlmEI3dpogpZ1LUFndDaIV5Ua7mdkWvHx8cTpTiwlS1WRlb1qkhtHD NajMq+zH9cLKDljp7JCvQ8t+2D4atHkp9NmpPf6oJVTGaNWJlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9yVfj8z/Vc/QZpZTT9i+U+f8vTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjQxODVhNjMtMzE2Zi0z ZDkxLWI2NzQtNTJmZmFkNzJmODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEXXFclSsZR2PPooUnE3zSwSkUYZQk0dlXr47L+wsiKZWWl+2CTHlou Rzi1FgIcYdeX8gp8Io/RAkNL5TD45ZpHUhKcAdSWbKvlrQWHldfdPKIFm2DOoX63 +WzFlCRqNDrvckYuMQG/hFNdRMoixVIABMZF6dqpQH9s49rXIpx9ro3CWtn5bY96 Qp10ntNmNROrU+HRQyQP5wuu15xhV5OtbD7THw2oHozAXr0OfRCykUyBUP6Eu944 BfilpxH6Nt5NHkpSM0Zz+fq1GDDr+daI2eyHLB3wX4MRekPvTMmVCRKaNSzA9N+9 kA5CU5jqvTkXMrMc4FTbOtb6z0z38cw= -----END CERTIFICATE-----Generated at Sat Aug 9 22:47:42 2025 by rpki-client