$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa File: 249c943d-b89a-3ace-b703-d24eed8a0e72.roa (raw, json) Hash identifier: gHYUI6b7fT1kIdQ9GMLNfKCcQR8iqmKETzO/wlhNcic= Subject key identifier: F1:E9:D8:6D:37:FF:83:4C:B6:36:E8:1B:71:79:EB:56:92:23:3E:D9 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBCCB80DD0DD3DF1554E80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 149.96.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cc:b8:0d:d0:dd:3d:f1:55:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=b7bade92-f84a-4c11-b702-5f5a154ce0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8e:0e:de:88:d0:f3:8b:82:d2:b9:e7:29:48: 9c:a3:f9:b0:fd:b0:c6:44:5d:de:d1:be:11:e0:73: 65:e8:9e:ce:76:58:d1:7e:87:5c:7c:37:86:2d:31: ad:7d:1d:27:2f:64:e4:f6:ba:63:28:ce:a7:01:0a: e8:b1:fc:00:28:2c:2f:6e:5a:b0:50:06:15:60:80: 54:7a:55:20:50:1f:2e:12:c3:b8:d7:b4:d2:55:19: c0:c6:70:f4:7a:f7:30:ab:99:45:58:01:35:eb:c6: 8a:73:f1:90:2e:da:04:03:08:dc:eb:cb:da:20:28: fe:df:d2:7f:96:72:32:5a:df:08:1b:6b:73:a0:3f: 72:25:4d:41:e6:49:3a:25:cd:0a:f7:5e:bf:bd:88: 5b:3d:d1:d9:e1:4d:7d:47:c3:38:e6:89:25:b6:b9: a3:ee:47:95:1c:ca:ca:55:29:71:5e:68:8d:92:b1: f9:72:01:b9:09:a5:28:d4:bc:f6:33:e5:0c:0e:fe: 22:f5:65:2d:bc:08:86:74:86:da:79:93:ed:ea:3b: 47:25:95:30:5a:45:0c:f3:3b:d2:43:98:34:f4:28: d7:f2:75:99:d8:33:52:95:ea:d0:33:46:90:85:a7: 56:63:a5:3e:bb:5f:b7:4c:f4:3d:b8:d5:dc:c7:cc: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E9:D8:6D:37:FF:83:4C:B6:36:E8:1B:71:79:EB:56:92:23:3E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:04:ae:96:3a:8a:69:91:04:99:5f:4e:0a:91:42:82:7c:bc: 4c:c3:15:60:bf:44:77:1f:61:c9:73:2c:b4:ee:34:ce:f6:b9: 23:a1:d0:29:86:e3:b9:af:3e:68:07:71:c8:3b:44:64:79:8d: 91:70:e7:41:bb:e5:87:c3:df:90:85:68:65:ea:30:84:56:f9: 35:da:84:50:ac:19:8f:67:9e:d0:e6:70:dd:5c:dc:e9:93:72: 06:8a:2c:50:9f:17:c7:24:bc:b5:22:1b:83:8d:7c:ed:bc:95: 01:a1:83:f6:06:dc:e6:5b:8a:7a:c0:f6:c1:b4:e5:ff:b2:76: 7e:8c:d8:f3:b7:23:98:39:18:07:2a:50:2b:13:3d:5a:1c:c9: 07:a4:f3:22:da:d9:b1:e1:9d:7e:56:2d:93:e0:cf:4a:74:30: e8:13:2c:f8:c6:14:c7:f1:1b:e9:31:b6:84:ef:fd:b6:4e:d3: a6:5e:aa:38:45:6c:53:24:d8:4e:e0:ab:6b:69:40:40:93:33: 49:66:06:ff:ed:08:e9:d9:f4:b9:64:03:76:89:66:0d:de:33: eb:f8:28:2a:bc:d5:9f:04:66:63:b5:ba:40:2b:cc:d8:86:75: 50:b3:13:8b:0c:10:57:1a:d5:d9:cb:8c:ae:57:d2:05:97:dd: e7:cd:72:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8y4DdDdPfFVToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YjdiYWRlOTItZjg0YS00YzExLWI3MDItNWY1YTE1NGNlMGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI4O3ojQ84uC0rnnKUico/mw/bDGRF3e0b4R 4HNl6J7OdljRfodcfDeGLTGtfR0nL2Tk9rpjKM6nAQrosfwAKCwvblqwUAYVYIBU elUgUB8uEsO417TSVRnAxnD0evcwq5lFWAE168aKc/GQLtoEAwjc68vaICj+39J/ lnIyWt8IG2tzoD9yJU1B5kk6Jc0K916/vYhbPdHZ4U19R8M45okltrmj7keVHMrK VSlxXmiNkrH5cgG5CaUo1Lz2M+UMDv4i9WUtvAiGdIbaeZPt6jtHJZUwWkUM8zvS Q5g09CjX8nWZ2DNSlerQM0aQhadWY6U+u1+3TPQ9uNXcx8z48wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHp2G03/4NMtjboG3F561aSIz7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMjQ5Yzk0M2QtYjg5YS0z YWNlLWI3MDMtZDI0ZWVkOGEwZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAErpY6immRBJlfTgqRQoJ8vEzDFWC/RHcfYclzLLTuNM72uSOh0CmG 47mvPmgHccg7RGR5jZFw50G75YfD35CFaGXqMIRW+TXahFCsGY9nntDmcN1c3OmT cgaKLFCfF8ckvLUiG4ONfO28lQGhg/YG3OZbinrA9sG05f+ydn6M2PO3I5g5GAcq UCsTPVocyQek8yLa2bHhnX5WLZPgz0p0MOgTLPjGFMfxG+kxtoTv/bZO06ZeqjhF bFMk2E7gq2tpQECTM0lmBv/tCOnZ9LlkA3aJZg3eM+v4KCq81Z8EZmO1ukArzNiG dVCzE4sMEFca1dnLjK5X0gWX3efNcvk= -----END CERTIFICATE-----Generated at Sun Nov 2 22:54:51 2025 by rpki-client