$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/07b02d75-59da-34dd-b4df-1d319f43a1fe.roa File: 07b02d75-59da-34dd-b4df-1d319f43a1fe.roa (raw, json) Hash identifier: 8MsvbD9myVpqHUWreuBgj8mo9Pw3VLGCQNrpuxWEWzw= Subject key identifier: C3:7D:30:32:45:86:02:84:18:C5:8D:84:35:20:C7:E3:85:4C:F2:74 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AF95146A759DECE239BB73800 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/07b02d75-59da-34dd-b4df-1d319f43a1fe.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 397182 IP address blocks: 149.96.192.0/24 maxlen: 26 149.96.193.0/24 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:46:a7:59:de:ce:23:9b:b7:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=91923781-479f-467a-b4be-0c21ec81567f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:28:d2:b5:96:df:1d:7d:4e:6d:98:60:66: c6:7e:47:f4:9e:a1:80:39:bd:85:e9:55:81:0f:7a: ff:6a:ce:3a:c4:4f:5e:dd:9f:6c:51:9d:0b:04:f4: 66:5d:bf:f5:12:b2:78:d9:4b:b3:0d:36:b9:49:df: 54:37:04:00:66:0a:3a:3a:3f:cc:5b:5c:1a:ba:f0: be:bf:f0:20:38:48:81:2b:fe:52:7b:90:e0:32:88: be:57:d3:a4:86:a6:1c:c0:29:f2:8c:81:26:4e:b2: 22:c1:4d:71:83:02:77:a0:43:dc:ed:04:d1:95:99: 0f:ac:6e:4a:5a:3d:ba:04:2c:b8:e9:a4:25:d1:64: 34:53:22:52:6a:94:fb:e0:27:20:ba:ec:34:cd:10: da:71:f0:1a:e7:3f:56:b1:a0:2d:26:8b:fa:65:8b: 23:25:25:87:3b:f1:2e:4f:1a:7c:97:e2:1e:a7:59: 99:c0:ad:cf:ce:85:df:86:0f:b1:95:e4:f0:a2:36: 96:31:91:b8:30:49:a6:98:49:17:50:d9:db:27:72: 67:f9:5c:ef:30:71:66:4b:7d:eb:10:f5:da:df:2f: e3:18:02:70:4f:c3:99:2f:aa:e0:4a:50:aa:8c:fe: 13:e0:0b:5a:c4:48:1e:e8:73:36:66:92:7f:3e:93: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7D:30:32:45:86:02:84:18:C5:8D:84:35:20:C7:E3:85:4C:F2:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/07b02d75-59da-34dd-b4df-1d319f43a1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c3:81:ed:32:a4:08:f6:47:28:1e:93:cf:cf:54:32:b1:51: c2:59:fc:5e:88:e1:d1:0f:d2:f2:7b:7d:70:88:e8:c6:86:a6: 37:8b:91:0c:a9:f4:83:2f:e2:a0:43:50:07:b1:ac:c3:b1:45: 33:76:0e:3f:5c:94:b9:49:68:17:29:9a:5d:43:1a:45:90:42: 3a:54:c5:9d:6f:4d:ef:df:36:a2:eb:b9:f4:8c:2e:46:69:b2: e9:a5:80:bc:d3:49:55:9c:0a:c7:69:30:1e:8d:13:3e:3b:c7: cd:0c:90:f4:73:ad:02:11:0f:58:7b:84:ed:c4:7a:b7:b4:36: 73:66:a1:ce:03:2d:13:60:02:a7:0a:f2:ab:96:72:17:10:82: a1:f7:dc:26:0c:d6:23:b7:70:f9:ae:80:21:0e:79:05:b2:12: e1:a6:95:92:68:3d:ba:27:7e:ec:23:db:de:b9:1f:3f:47:7e: f5:74:38:a8:37:42:1e:45:e9:e9:b5:6d:be:76:4a:1e:b9:3c: e9:20:f8:32:f0:3e:ac:2a:29:2f:4b:35:a8:63:02:84:6b:19: c2:d6:16:d5:14:0c:cb:e3:fb:a8:dc:4f:83:db:5d:e6:f8:1b: 9a:56:77:97:8c:ca:c0:26:58:b8:64:bb:6f:f3:10:93:f1:05: 78:7d:be:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUanWd7OI5u3OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTE5MjM3ODEtNDc5Zi00NjdhLWI0YmUtMGMyMWVjODE1NjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBIo0rWW3x19Tm2YYGbGfkf0nqGAOb2F6VWB D3r/as46xE9e3Z9sUZ0LBPRmXb/1ErJ42UuzDTa5Sd9UNwQAZgo6Oj/MW1wauvC+ v/AgOEiBK/5Se5DgMoi+V9OkhqYcwCnyjIEmTrIiwU1xgwJ3oEPc7QTRlZkPrG5K Wj26BCy46aQl0WQ0UyJSapT74Ccguuw0zRDacfAa5z9WsaAtJov6ZYsjJSWHO/Eu Txp8l+Iep1mZwK3PzoXfhg+xleTwojaWMZG4MEmmmEkXUNnbJ3Jn+VzvMHFmS33r EPXa3y/jGAJwT8OZL6rgSlCqjP4T4AtaxEge6HM2ZpJ/PpNScQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMN9MDJFhgKEGMWNhDUgx+OFTPJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDdiMDJkNzUtNTlkYS0z NGRkLWI0ZGYtMWQzMTlmNDNhMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlWDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLDge0ypAj2Rygek8/PVDKxUcJZ/F6I4dEP0vJ7fXCI6MaGpjeLkQyp 9IMv4qBDUAexrMOxRTN2Dj9clLlJaBcpml1DGkWQQjpUxZ1vTe/fNqLrufSMLkZp sumlgLzTSVWcCsdpMB6NEz47x80MkPRzrQIRD1h7hO3Eere0NnNmoc4DLRNgAqcK 8quWchcQgqH33CYM1iO3cPmugCEOeQWyEuGmlZJoPbonfuwj2965Hz9HfvV0OKg3 Qh5F6em1bb52Sh65POkg+DLwPqwqKS9LNahjAoRrGcLWFtUUDMvj+6jcT4PbXeb4 G5pWd5eMysAmWLhku2/zEJPxBXh9vkA= -----END CERTIFICATE-----Generated at Tue Sep 9 07:58:38 2025 by rpki-client