$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/1baebdf9-c73a-3b30-890f-367325e218ba.roa File: 1baebdf9-c73a-3b30-890f-367325e218ba.roa (raw, json) Hash identifier: YlWi86agCyP9ycz95chETjw4dol75qJFpWp+CTqT/TU= Subject key identifier: FD:EF:78:F0:C1:BF:02:91:7A:46:68:EC:70:04:4F:61:ED:E6:CD:E9 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584AE89135F2F211DB0D2F46FE80 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/1baebdf9-c73a-3b30-890f-367325e218ba.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 108.179.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:35:f2:f2:11:db:0d:2f:46:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=719d49bb-1d25-44e1-bba9-22ab917f9dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:e3:f6:79:44:4a:36:51:fb:6b:5b:ed:a6: 66:00:0b:4e:20:3d:96:e9:bc:56:de:60:04:f7:80: 8d:a6:dc:15:ca:3a:0a:3f:d4:f5:67:a5:9a:c1:66: 39:b6:6f:d3:a4:bd:50:ca:52:26:89:b3:d4:78:fd: 8f:0d:7b:e6:0f:51:65:f0:0f:fc:13:94:c6:13:f3: bd:05:26:4f:e4:dd:3b:53:8d:98:54:56:f8:43:a1: fe:26:53:d9:f2:b9:28:93:2e:5b:a1:ec:31:06:a9: a3:b4:53:20:2d:6b:40:35:d7:1a:aa:14:cf:fd:08: cf:e5:d0:ff:44:ff:a8:36:80:e4:7f:0a:6d:39:d0: c7:44:67:31:0d:7d:a2:c0:8a:78:1f:b9:6c:fc:21: 40:e4:1d:cb:66:79:25:53:5e:04:5a:9f:88:a7:fe: 8a:47:7a:58:a1:5b:26:aa:96:d4:be:fb:2f:15:6b: f5:2d:c3:43:03:ab:61:9c:39:60:b8:3e:bf:c1:c6: b4:41:bd:82:04:5c:cb:71:5a:86:e1:4f:17:c8:c8: 66:84:9a:5c:0d:2d:b4:dd:c6:f5:f0:e4:a6:ab:33: ad:16:cc:b1:22:6e:c8:11:c2:17:9e:89:40:29:5c: fd:9f:1e:d1:b8:4d:96:25:61:4f:07:ad:9a:f9:ab: f3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EF:78:F0:C1:BF:02:91:7A:46:68:EC:70:04:4F:61:ED:E6:CD:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/1baebdf9-c73a-3b30-890f-367325e218ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 108.179.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c3:de:33:54:1f:9e:6a:f3:b5:f9:33:3b:a8:7c:e5:e0:33: 9b:59:9a:4f:dc:52:43:50:ad:f6:a2:7a:4c:ef:a8:54:ca:b1: 83:e4:53:ba:48:7e:44:a0:83:27:39:24:a1:ad:48:29:38:0d: 55:60:1e:48:a7:6a:51:21:c4:56:cb:da:f7:ea:7d:47:a0:41: 02:6c:c3:98:1f:d1:74:54:11:b7:f4:2d:e1:64:cc:19:e4:07: 73:ce:29:10:22:55:fe:00:82:f6:8d:42:2b:76:c9:f0:5c:c1: c6:0e:65:eb:dd:9a:2d:38:47:cf:0d:b9:08:20:74:5b:b2:d7: 9a:26:83:e5:69:86:a6:63:92:77:ce:cf:e9:5f:66:6c:8d:9a: 72:c6:02:9c:59:26:99:59:bd:53:fd:66:3b:10:04:67:bf:ad: 51:77:a4:0d:52:60:04:fe:ec:ce:72:44:18:d3:2b:95:d3:43: 41:e0:5a:46:43:6a:30:e2:5b:eb:e0:3e:ee:bb:40:bb:b0:09: 05:8c:ab:71:7b:3b:65:32:1c:eb:e3:c5:2a:3a:4b:11:a4:9d: 8d:ab:c9:b8:9d:86:77:63:56:51:11:f5:1d:37:f7:1c:44:6d: 0b:96:60:db:b1:97:65:c4:37:7d:b2:9c:4e:30:b6:43:bd:36: 7c:71:6b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTXy8hHbDS9G/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NzE5ZDQ5YmItMWQyNS00NGUxLWJiYTktMjJhYjkxN2Y5ZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGLj9nlESjZR+2tb7aZmAAtOID2W6bxW3mAE 94CNptwVyjoKP9T1Z6WawWY5tm/TpL1QylImibPUeP2PDXvmD1Fl8A/8E5TGE/O9 BSZP5N07U42YVFb4Q6H+JlPZ8rkoky5boewxBqmjtFMgLWtANdcaqhTP/QjP5dD/ RP+oNoDkfwptOdDHRGcxDX2iwIp4H7ls/CFA5B3LZnklU14EWp+Ip/6KR3pYoVsm qpbUvvsvFWv1LcNDA6thnDlguD6/wca0Qb2CBFzLcVqG4U8XyMhmhJpcDS203cb1 8OSmqzOtFsyxIm7IEcIXnolAKVz9nx7RuE2WJWFPB62a+avzLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3vePDBvwKRekZo7HAET2Ht5s3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMWJhZWJkZjktYzczYS0z YjMwLTg5MGYtMzY3MzI1ZTIxOGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHD3jNUH55q87X5MzuofOXgM5tZmk/cUkNQrfaiekzvqFTKsYPkU7pI fkSggyc5JKGtSCk4DVVgHkinalEhxFbL2vfqfUegQQJsw5gf0XRUEbf0LeFkzBnk B3POKRAiVf4AgvaNQit2yfBcwcYOZevdmi04R88NuQggdFuy15omg+VphqZjknfO z+lfZmyNmnLGApxZJplZvVP9ZjsQBGe/rVF3pA1SYAT+7M5yRBjTK5XTQ0HgWkZD ajDiW+vgPu67QLuwCQWMq3F7O2UyHOvjxSo6SxGknY2rybidhndjVlER9R039xxE bQuWYNuxl2XEN32ynE4wtkO9Nnxxa2E= -----END CERTIFICATE-----Generated at Sat Aug 23 10:20:29 2025 by rpki-client