$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa File: 86f9e25e-c248-3933-9ce8-4e4b4097a657.roa (raw, json) Hash identifier: Rw0J9g1Owt/oe0ZrCDS1Ado69h6kfrHa6jYR4O71DnI= Subject key identifier: A5:65:E8:A5:E4:9F:99:13:31:71:EE:68:78:CE:B5:48:55:FC:30:11 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584AC48191D3758E7D2162DD4300 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa Signing time: Wed 06 Aug 2025 15:00:16 +0000 ROA not before: Wed 06 Aug 2025 15:00:16 +0000 ROA not after: Tue 04 Nov 2025 16:00:16 +0000 asID: 3359 IP address blocks: 142.244.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:81:91:d3:75:8e:7d:21:62:dd:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Aug 6 15:00:16 2025 GMT Not After : Nov 4 16:00:16 2025 GMT Subject: CN=90adff17-fe17-4d99-8c0d-6b7612044f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:78:2f:27:75:0a:4f:c3:a9:0e:eb:7d:b0:d4: 2d:e7:55:2e:e8:20:0d:ec:26:5a:29:bc:7c:93:da: 44:ca:d7:96:22:3e:5d:a6:3f:5b:29:cd:3f:ac:5c: 5f:ce:80:80:1a:ca:cf:63:ca:ff:c0:50:3b:66:3a: 61:56:54:be:ec:97:fd:eb:ff:34:76:8c:af:92:b4: ce:b4:f1:a0:b4:d7:39:99:96:5d:a5:07:5b:f2:a0: 36:5d:45:67:44:01:ba:da:64:e0:20:58:86:3a:bd: ee:32:a6:c7:89:79:7c:cd:42:9a:ad:f4:8d:4f:2a: 4d:ab:cd:b4:21:27:55:3d:b9:29:12:95:2a:3b:5a: d4:73:97:67:e0:49:5d:86:bc:48:79:40:ea:56:10: 1e:2d:e9:1d:00:32:37:d4:7c:1c:10:36:c6:cf:05: 41:7e:f7:e1:ee:9f:53:f5:5b:5e:d0:42:05:dc:57: ec:91:f1:24:2f:13:81:fb:5c:31:b9:de:14:45:52: 81:d6:6f:03:97:a5:03:c4:ab:3e:e7:86:0c:fd:7d: ac:ba:a2:50:c8:2a:4f:0e:74:62:f8:50:56:e9:4e: f7:3a:86:96:6d:b4:ce:a6:ce:9e:db:25:cf:40:e7: 63:f4:cd:44:fd:2d:08:b7:2b:2c:bb:2d:cf:5f:32: 69:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:65:E8:A5:E4:9F:99:13:31:71:EE:68:78:CE:B5:48:55:FC:30:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 142.244.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a4:68:fe:b2:e6:76:20:24:c9:8c:a0:84:b5:21:b9:8d:c8: b2:cb:30:ff:32:4c:65:a2:22:fa:15:c9:77:b2:8f:44:59:1e: 7f:ab:28:46:64:7a:c0:c4:e2:b1:0c:71:d6:14:bb:28:e8:4f: 2e:3f:6a:dc:d2:83:cd:80:c4:06:c7:82:66:d1:f8:03:f8:cc: d2:9b:8c:1d:2b:d1:12:ae:be:7b:6c:2b:6d:7a:83:f4:5f:57: c9:a3:eb:e1:07:6b:f3:56:e9:0f:74:a9:3c:d8:26:87:d3:c3: 3b:cf:7a:86:31:c8:cc:ef:21:71:ba:2d:41:43:12:1f:53:9b: da:c6:1b:06:ac:3f:83:e4:22:1e:a5:47:ce:08:4f:66:c5:6b: 1c:31:b3:d8:18:45:ce:07:14:f1:6f:84:b6:c2:50:10:f5:0f: 6b:af:af:11:95:8c:53:df:e1:81:43:e9:21:33:6a:e8:84:0f: 89:4c:79:d7:2f:4f:2a:26:51:e6:20:12:2f:77:02:19:45:e7: d9:bf:00:d2:56:be:71:0a:aa:8d:f4:52:74:8d:a2:7d:d6:9f: 9e:87:e2:07:de:58:1a:d1:96:c9:26:38:43:fd:b5:3d:66:e2: c9:c7:57:37:99:5a:79:83:2b:ae:60:ac:be:fc:18:75:45:6d: 8c:17:6b:34 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErEgZHTdY59IWLdQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI1MDgwNjE1MDAxNloXDTI1MTEwNDE2MDAxNlowLzEtMCsGA1UEAxMk OTBhZGZmMTctZmUxNy00ZDk5LThjMGQtNmI3NjEyMDQ0ZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3gvJ3UKT8OpDut9sNQt51Uu6CAN7CZaKbx8 k9pEyteWIj5dpj9bKc0/rFxfzoCAGsrPY8r/wFA7ZjphVlS+7Jf96/80doyvkrTO tPGgtNc5mZZdpQdb8qA2XUVnRAG62mTgIFiGOr3uMqbHiXl8zUKarfSNTypNq820 ISdVPbkpEpUqO1rUc5dn4EldhrxIeUDqVhAeLekdADI31HwcEDbGzwVBfvfh7p9T 9Vte0EIF3FfskfEkLxOB+1wxud4URVKB1m8Dl6UDxKs+54YM/X2suqJQyCpPDnRi +FBW6U73OoaWbbTOps6e2yXPQOdj9M1E/S0Ityssuy3PXzJp5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKVl6KXkn5kTMXHuaHjOtUhV/DARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODZmOWUyNWUtYzI0OC0z OTMzLTljZTgtNGU0YjQwOTdhNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjvQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIaRo/rLmdiAkyYyghLUhuY3Isssw/zJMZaIi+hXJd7KPRFkef6soRmR6 wMTisQxx1hS7KOhPLj9q3NKDzYDEBseCZtH4A/jM0puMHSvREq6+e2wrbXqD9F9X yaPr4Qdr81bpD3SpPNgmh9PDO896hjHIzO8hcbotQUMSH1Ob2sYbBqw/g+QiHqVH zghPZsVrHDGz2BhFzgcU8W+EtsJQEPUPa6+vEZWMU9/hgUPpITNq6IQPiUx51y9P KiZR5iASL3cCGUXn2b8A0la+cQqqjfRSdI2ifdafnofiB95YGtGWySY4Q/21PWbi ycdXN5laeYMrrmCsvvwYdUVtjBdrNA== -----END CERTIFICATE-----Generated at Thu Aug 14 06:43:00 2025 by rpki-client