$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa File: 08662a15-e04a-359b-8c07-283ea782a9b0.roa (raw, json) Hash identifier: h+1b/zuuaV/PmQ84fsCDsqWMqG4itkLrVMNpt+ecNkc= Subject key identifier: 55:52:C3:59:FF:A2:D0:90:BC:7C:CD:08:07:B6:65:26:A0:41:7B:E5 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBCCDB4C42571111B6D000 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 149.96.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cc:db:4c:42:57:11:11:b6:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=afdc29b0-7be5-4161-9723-e603a06858ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9e:5b:57:53:62:e5:c4:ae:3d:c6:11:50:10: 5d:79:3a:96:7b:59:1c:01:4a:fc:ae:4b:fb:78:9d: 00:ad:95:ba:34:08:3f:d2:90:e3:e7:02:42:6e:2f: d5:52:b7:8c:7a:ac:bc:eb:9b:ec:42:53:e1:e0:4a: d6:d4:75:7b:b3:0a:f4:65:b7:70:0d:53:0f:80:7e: fb:0a:7b:2e:00:57:85:0b:ca:56:40:1f:f3:ac:01: 23:0f:69:ee:60:89:c6:3c:0f:cc:04:47:2c:20:5a: 1f:3b:3a:a9:f1:cb:d0:4c:5a:e6:82:0f:ae:ac:f8: ff:33:4d:17:17:75:74:2f:aa:27:b7:69:45:f9:62: ca:2e:db:24:07:7c:6c:dc:88:e3:99:1c:9d:07:8a: a6:1f:75:b9:d8:33:e7:ae:98:7d:48:f6:66:cc:23: f1:f9:3d:d0:f8:ca:a8:14:ed:b3:03:d8:70:30:fb: 00:1a:9a:ae:2e:2d:c2:90:2c:76:fc:0f:df:c2:06: 8d:8f:8c:97:1f:e7:07:fc:6f:bf:f4:e4:df:c9:60: 1f:a3:d3:75:eb:34:9e:2f:9f:98:f8:e2:f4:bc:7a: cd:cc:b4:5e:1b:92:4f:57:1e:93:83:a2:b5:07:7a: ee:43:e1:4a:7b:fc:3d:7b:39:d4:31:d7:40:e9:71: eb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:52:C3:59:FF:A2:D0:90:BC:7C:CD:08:07:B6:65:26:A0:41:7B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ea:a7:ed:70:a4:b6:31:c6:ea:cc:03:bb:36:2f:e9:78:eb: 79:67:60:6b:c3:87:09:44:63:68:3f:68:00:94:f0:8c:49:98: 0a:84:46:41:f1:64:3b:26:65:e1:74:98:00:3d:20:ea:0b:f6: c1:0c:f5:d4:51:1a:eb:b0:77:6c:bf:ad:a0:8d:ee:1b:9b:1e: a1:d6:f1:b7:7c:fd:57:5d:20:67:2e:18:9d:63:50:f4:a0:69: 96:e9:2b:70:85:a6:2f:47:a5:c2:a3:fd:6e:7d:22:95:60:d3: 97:65:86:ba:a4:4d:57:02:78:74:11:9f:49:e5:60:6a:f8:18: 67:6c:f0:7a:19:e4:be:d7:9d:85:2a:8e:c4:47:47:84:bf:f1: 99:47:f9:0c:0a:3f:bf:9d:d5:1a:80:39:89:e3:65:78:3e:64: e4:ad:fe:74:0f:99:94:b3:03:0f:99:26:65:a1:0b:b8:a5:04: 43:04:a7:5e:93:4e:ef:0c:26:67:e2:b1:fb:30:65:c7:28:f1: 4c:cb:72:80:17:f7:91:8d:00:1d:fd:9f:93:59:3b:a5:5d:b3: fb:08:c1:aa:ce:70:6c:79:da:e4:e1:2e:35:1a:5c:15:41:f7: 08:ad:36:9b:22:08:be:68:72:52:ae:61:2f:f3:8d:91:2f:dc: f9:e6:0f:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8zbTEJXERG20AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YWZkYzI5YjAtN2JlNS00MTYxLTk3MjMtZTYwM2EwNjg1OGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J5bV1Ni5cSuPcYRUBBdeTqWe1kcAUr8rkv7 eJ0ArZW6NAg/0pDj5wJCbi/VUreMeqy865vsQlPh4ErW1HV7swr0ZbdwDVMPgH77 CnsuAFeFC8pWQB/zrAEjD2nuYInGPA/MBEcsIFofOzqp8cvQTFrmgg+urPj/M00X F3V0L6ont2lF+WLKLtskB3xs3IjjmRydB4qmH3W52DPnrph9SPZmzCPx+T3Q+Mqo FO2zA9hwMPsAGpquLi3CkCx2/A/fwgaNj4yXH+cH/G+/9OTfyWAfo9N16zSeL5+Y +OL0vHrNzLReG5JPVx6Tg6K1B3ruQ+FKe/w9eznUMddA6XHrSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVSw1n/otCQvHzNCAe2ZSagQXvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDg2NjJhMTUtZTA0YS0z NTliLThjMDctMjgzZWE3ODJhOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzqp+1wpLYxxurMA7s2L+l463lnYGvDhwlEY2g/aACU8IxJmAqERkHx ZDsmZeF0mAA9IOoL9sEM9dRRGuuwd2y/raCN7hubHqHW8bd8/VddIGcuGJ1jUPSg aZbpK3CFpi9HpcKj/W59IpVg05dlhrqkTVcCeHQRn0nlYGr4GGds8HoZ5L7XnYUq jsRHR4S/8ZlH+QwKP7+d1RqAOYnjZXg+ZOSt/nQPmZSzAw+ZJmWhC7ilBEMEp16T Tu8MJmfisfswZcco8UzLcoAX95GNAB39n5NZO6Vds/sIwarOcGx52uThLjUaXBVB 9witNpsiCL5oclKuYS/zjZEv3PnmD4M= -----END CERTIFICATE-----Generated at Sat Aug 23 23:48:26 2025 by rpki-client