$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa File: f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa (raw, json) Hash identifier: CkbhbcGRT2Tj/0+7tBfmhj/CGq7CVry1wceQuwmL5mw= Subject key identifier: 18:3D:C4:B3:19:9B:AA:25:2F:21:D8:E9:36:DF:D4:68:5A:50:79:C4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DF5F44B2CC5ED1B81100 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 149.96.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:df:5f:44:b2:cc:5e:d1:b8:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=9e2519d2-22c9-488e-8298-fee8c3bdc833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b7:aa:11:ff:37:a9:68:78:a4:f3:75:cd:e9: 05:7f:af:7a:be:d0:0c:42:4e:13:73:78:ef:7d:82: b9:d9:34:cc:d5:2c:92:ed:ec:05:89:4d:80:60:c2: 29:60:72:5f:3f:e6:d3:1d:50:33:f6:45:d7:61:86: c0:fc:14:e5:ba:0f:f2:97:b6:f2:3a:9d:74:cc:4f: 70:24:27:63:d3:a6:ee:48:3f:04:c1:f7:03:59:3e: c2:c9:f3:76:ef:4f:05:3c:6e:58:8f:36:40:a3:e3: 9a:b7:bc:6c:7e:ac:46:b5:85:31:11:92:36:33:be: 4a:c7:26:83:c9:06:70:f4:9a:64:02:e4:1f:0c:86: 8e:7a:7e:1e:b3:c8:ea:ae:c8:15:36:cf:9c:9b:4c: 0b:a0:a4:4d:06:b4:50:3b:c8:85:e5:95:6e:65:32: 7c:eb:d3:82:7e:50:fc:b2:19:8c:b2:30:00:df:60: 36:c3:16:23:6b:f8:18:4e:9d:ce:ab:95:74:e9:aa: 31:7e:45:60:c5:08:69:03:9e:bc:ff:ea:bd:31:b6: 8e:c9:f7:f5:47:55:2b:db:38:a0:3d:08:b3:4e:fa: 7b:bf:96:bf:3d:87:7a:cf:b4:c3:20:3d:11:46:06: 46:34:c2:09:8b:98:34:15:16:e1:80:59:ff:c1:a4: 71:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3D:C4:B3:19:9B:AA:25:2F:21:D8:E9:36:DF:D4:68:5A:50:79:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ff:94:ce:30:bc:e3:35:23:a9:4d:e4:63:54:7d:19:d6:57: aa:5f:1f:04:b2:97:2c:03:4e:05:bd:b9:b7:cc:4b:81:73:0d: 9b:c0:87:66:ca:0f:1f:28:7f:ab:b2:7e:d1:77:d9:3a:b6:5b: c8:d7:2a:5e:a0:97:6e:64:6e:0e:00:5e:aa:9f:10:a4:10:c6: 6d:18:56:87:c4:eb:a9:14:c7:ed:f4:cc:2f:ad:04:45:26:1a: 51:ea:91:b1:08:22:cb:43:fa:53:78:57:8e:c4:a8:f1:21:88: 04:1e:09:39:cb:7b:3a:11:4f:c4:39:19:a6:d3:1c:81:08:85: 79:48:db:31:ed:c9:62:51:7f:10:0d:82:22:73:9e:68:48:78: 2b:4e:22:94:1d:04:13:2d:bb:64:a9:52:19:93:ea:04:dc:c3: d9:cb:d2:77:c0:3a:df:76:72:ae:6c:b9:a1:77:70:1a:3d:5e: e5:51:17:9e:b7:38:12:b6:05:08:3f:0e:5b:c9:52:13:1c:aa: b9:61:25:60:10:54:7f:34:df:e6:5b:65:c2:d9:48:1f:47:a5: 2e:ff:b4:5e:02:5c:fc:68:cf:af:8b:e5:29:1f:85:25:57:34: a6:15:64:7e:b5:ca:d8:41:7a:ba:06:bd:73:33:23:8e:27:fa: 2a:ba:e7:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN9fRLLMXtG4EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWUyNTE5ZDItMjJjOS00ODhlLTgyOTgtZmVlOGMzYmRjODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7eqEf83qWh4pPN1zekFf696vtAMQk4Tc3jv fYK52TTM1SyS7ewFiU2AYMIpYHJfP+bTHVAz9kXXYYbA/BTlug/yl7byOp10zE9w JCdj06buSD8EwfcDWT7CyfN2708FPG5YjzZAo+Oat7xsfqxGtYUxEZI2M75KxyaD yQZw9JpkAuQfDIaOen4es8jqrsgVNs+cm0wLoKRNBrRQO8iF5ZVuZTJ869OCflD8 shmMsjAA32A2wxYja/gYTp3Oq5V06aoxfkVgxQhpA568/+q9MbaOyff1R1Ur2zig PQizTvp7v5a/PYd6z7TDID0RRgZGNMIJi5g0FRbhgFn/waRxlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBg9xLMZm6olLyHY6Tbf1GhaUHnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjg1Y2UwYjItOTMxOC0z ZDRjLWJlYmUtNDc3NzRhMTA2NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7/lM4wvOM1I6lN5GNUfRnWV6pfHwSylywDTgW9ubfMS4FzDZvAh2bK Dx8of6uyftF32Tq2W8jXKl6gl25kbg4AXqqfEKQQxm0YVofE66kUx+30zC+tBEUm GlHqkbEIIstD+lN4V47EqPEhiAQeCTnLezoRT8Q5GabTHIEIhXlI2zHtyWJRfxAN giJznmhIeCtOIpQdBBMtu2SpUhmT6gTcw9nL0nfAOt92cq5suaF3cBo9XuVRF563 OBK2BQg/DlvJUhMcqrlhJWAQVH803+ZbZcLZSB9HpS7/tF4CXPxoz6+L5SkfhSVX NKYVZH61ythBeroGvXMzI44n+iq6544= -----END CERTIFICATE-----Generated at Sat Aug 9 22:37:15 2025 by rpki-client