$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa File: 0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa (raw, json) Hash identifier: NCsgRmL+ePAhTSpGxyz39iB3bKAFx8L/s6ScYX/TfAY= Subject key identifier: 8C:64:11:8D:59:CE:28:41:56:9F:A5:81:95:8B:96:27:BE:B7:D5:AC Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC6314D07A7F4FF940980 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 199.91.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c6:31:4d:07:a7:f4:ff:94:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=a51f4b1c-6821-4fea-a73e-c20ab793f152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:9e:5b:05:e5:c9:f4:f7:34:84:76:10:6e: 1f:ba:90:e4:a6:1f:1e:a3:0e:34:bf:3c:47:e6:fd: 5e:cf:b7:77:18:70:f1:ad:26:83:28:81:31:83:db: a2:7f:df:82:64:2d:d0:ff:50:5e:01:fc:2e:cd:f2: 01:48:87:47:95:b6:11:6b:2f:9e:81:30:83:26:6f: 10:9a:b2:19:74:8e:3f:5a:c8:86:96:83:e8:87:50: 0a:9c:d6:23:c3:e2:9d:33:ae:3a:15:0e:a7:8c:6e: 40:0d:83:1b:c4:2a:de:60:56:8e:29:03:2e:c7:ee: 1f:10:31:bb:0c:2f:98:8e:83:c7:e8:62:3c:be:10: e1:80:fc:ea:af:14:e2:32:24:d3:aa:17:b3:42:e9: f7:6f:a7:17:cb:fc:bf:93:84:f2:0d:f4:08:c0:0b: 3b:99:60:ef:8a:b6:75:8c:7b:73:f9:ee:02:77:c1: cd:90:a1:fa:8e:63:8b:da:e4:11:e3:3e:7f:f4:bf: b5:45:fd:1a:ca:b4:ed:02:9a:45:94:93:04:75:d4: e2:c2:4b:47:d5:a4:b3:d4:0e:8a:9b:8f:5b:0e:f4: 17:00:ff:03:f3:0b:6f:c8:f8:e2:4e:4d:bb:dc:63: 9c:64:26:ae:de:d8:60:12:2b:be:64:df:b5:49:1e: 20:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:64:11:8D:59:CE:28:41:56:9F:A5:81:95:8B:96:27:BE:B7:D5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:73:08:38:f3:a4:4b:fe:78:af:3d:f9:be:23:7f:7b:03:b7: 6f:e9:56:56:d2:c8:f4:7a:6b:8f:f5:80:40:15:50:7c:3c:15: 17:b1:1f:c1:fc:e9:11:57:8c:f3:56:6f:85:14:b5:74:41:34: 8a:e0:40:21:8e:06:45:d3:45:e6:50:2f:22:c8:82:ff:44:01: 15:70:dc:92:30:bf:0b:b7:23:e7:9d:ae:3e:54:78:1d:b2:b2: fc:b3:f3:ea:35:fc:07:8a:7c:db:5d:c7:21:51:73:4e:07:ef: 8d:fa:85:00:eb:4f:c4:ae:06:12:6c:62:ab:be:8a:14:29:02: 27:d8:74:30:d4:43:57:75:07:90:b8:6c:f1:bb:a2:38:3d:29: 52:c3:52:5e:80:52:e9:02:be:c8:c2:32:f7:76:da:54:27:ed: 5f:7c:ea:ed:3c:d3:87:17:98:68:2a:61:a9:1a:69:05:1c:a6: 8a:9f:c3:b1:3a:59:20:e7:7f:a9:6f:34:60:51:b5:28:5b:8a: 4e:84:f8:54:62:58:81:1d:5f:3e:05:fb:51:9d:bc:8f:c4:80: fb:42:40:e4:ad:ad:3c:8d:46:48:ab:ae:9e:2c:7e:b8:80:22: d0:ad:90:e5:05:7d:31:a5:43:56:68:cf:c8:5b:18:29:41:83: 59:06:56:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8YxTQen9P+UCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YTUxZjRiMWMtNjgyMS00ZmVhLWE3M2UtYzIwYWI3OTNmMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkOeWwXlyfT3NIR2EG4fupDkph8eow40vzxH 5v1ez7d3GHDxrSaDKIExg9uif9+CZC3Q/1BeAfwuzfIBSIdHlbYRay+egTCDJm8Q mrIZdI4/WsiGloPoh1AKnNYjw+KdM646FQ6njG5ADYMbxCreYFaOKQMux+4fEDG7 DC+YjoPH6GI8vhDhgPzqrxTiMiTTqhezQun3b6cXy/y/k4TyDfQIwAs7mWDvirZ1 jHtz+e4Cd8HNkKH6jmOL2uQR4z5/9L+1Rf0ayrTtAppFlJMEddTiwktH1aSz1A6K m49bDvQXAP8D8wtvyPjiTk273GOcZCau3thgEiu+ZN+1SR4gMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxkEY1ZzihBVp+lgZWLlie+t9WsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGFkMDRlOTctNTFlZi0z OWIyLWE5MGUtNzk4ZjhlNDVjNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlzCDjzpEv+eK89+b4jf3sDt2/pVlbSyPR6a4/1gEAVUHw8FRexH8H8 6RFXjPNWb4UUtXRBNIrgQCGOBkXTReZQLyLIgv9EARVw3JIwvwu3I+edrj5UeB2y svyz8+o1/AeKfNtdxyFRc04H7436hQDrT8SuBhJsYqu+ihQpAifYdDDUQ1d1B5C4 bPG7ojg9KVLDUl6AUukCvsjCMvd22lQn7V986u0804cXmGgqYakaaQUcpoqfw7E6 WSDnf6lvNGBRtShbik6E+FRiWIEdXz4F+1GdvI/EgPtCQOStrTyNRkirrp4sfriA ItCtkOUFfTGlQ1Zoz8hbGClBg1kGVsU= -----END CERTIFICATE-----Generated at Sat Aug 23 23:48:38 2025 by rpki-client