$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa File: 1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa (raw, json) Hash identifier: 6s8kJOMbkKg1w9YLy0BzLBCkoTeqK27BH9rA2WoTBz4= Subject key identifier: 2E:FE:4B:0B:4D:55:3B:8E:DC:BC:A2:9A:99:69:1F:24:13:E8:C7:6A Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC5F524426CAE1B313780 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 149.96.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c5:f5:24:42:6c:ae:1b:31:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=c6e7fced-4dc4-475d-aad6-f6d7fc2bcc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f4:58:24:6e:00:ad:0a:74:f7:11:84:09:50: 91:d2:c5:ce:e7:80:95:86:79:20:dd:e6:a6:e8:e5: c1:9f:6f:08:11:47:81:e8:72:25:ab:06:3d:17:25: 74:24:c8:ef:3d:e7:7a:ff:cb:7a:4f:3a:ae:41:65: 59:27:bc:17:bc:d4:48:cc:eb:f1:1b:e3:2b:cd:18: 36:0f:5d:39:f8:3f:28:ff:a9:f7:24:da:28:b5:fb: 7e:25:1c:d5:3a:84:73:49:57:7e:5f:5d:0b:55:85: e0:88:6a:04:bb:a1:79:16:89:f3:f6:b2:bb:f7:74: b5:4e:ae:6d:84:03:57:d4:f0:d0:ed:02:19:5c:a8: 71:ee:68:08:9c:cf:e9:91:7c:bd:71:d6:ad:73:2e: b3:bd:f5:62:24:55:2a:4c:7c:5a:c9:14:db:cc:c2: 80:9a:38:b2:2d:36:b5:42:b8:d4:3b:84:15:81:3e: bc:34:61:b6:be:83:bd:cd:57:d8:75:d2:a9:b5:0a: d8:32:88:13:65:52:90:89:69:02:7b:b9:72:ea:7e: 94:ef:19:bb:57:aa:a0:9d:4a:2c:1a:c4:9f:2b:4c: 14:ec:ac:9b:18:8e:06:66:5d:72:78:29:ae:c8:4b: 0e:7c:ae:d5:f9:81:c3:06:6b:53:af:02:65:b4:fe: 3a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FE:4B:0B:4D:55:3B:8E:DC:BC:A2:9A:99:69:1F:24:13:E8:C7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a8:66:1d:4f:e8:9c:da:4c:63:61:25:69:f3:ee:e4:8c:6b: c8:1c:ff:f2:14:77:75:67:c7:3c:32:e5:7c:28:bc:7f:03:4d: 07:f9:2a:69:b8:75:67:ce:10:35:fc:a7:41:65:3f:e0:63:9c: 25:0a:d1:b5:11:c8:ee:d3:08:60:9d:71:98:5c:e3:0e:2a:bd: 13:2e:a7:f5:b2:c4:88:c9:81:f6:57:6b:b7:50:f9:88:d4:60: b6:22:18:d5:c8:85:3c:4c:81:17:d9:1e:17:c1:6d:8d:36:51: 59:f5:68:4a:65:17:30:db:96:52:ae:9c:ef:ac:93:5e:cd:f5: b6:a6:37:98:14:07:2f:d5:ad:f8:4b:1f:43:50:e5:ba:ce:fc: 4e:92:e3:07:7e:28:9b:55:d1:9e:c4:c5:79:a2:37:b6:35:7f: 54:e6:84:bb:1e:e0:5c:2f:ce:cb:7e:38:7a:72:f4:d3:64:4f: 21:42:66:32:d2:70:39:f7:66:06:d4:f4:c4:46:ad:4b:8c:ce: 77:2a:96:29:7b:66:f1:a8:63:ac:37:7d:58:5f:9d:19:0c:1f: 51:f9:56:93:05:a4:66:56:a5:78:15:68:ae:30:c9:9c:15:37: 0d:ff:6e:a2:57:5b:29:3c:c4:49:df:e2:b8:dd:ae:37:48:bc: 10:4f:97:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8X1JEJsrhsxN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YzZlN2ZjZWQtNGRjNC00NzVkLWFhZDYtZjZkN2ZjMmJjYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/RYJG4ArQp09xGECVCR0sXO54CVhnkg3eam 6OXBn28IEUeB6HIlqwY9FyV0JMjvPed6/8t6TzquQWVZJ7wXvNRIzOvxG+MrzRg2 D105+D8o/6n3JNootft+JRzVOoRzSVd+X10LVYXgiGoEu6F5Fonz9rK793S1Tq5t hANX1PDQ7QIZXKhx7mgInM/pkXy9cdatcy6zvfViJFUqTHxayRTbzMKAmjiyLTa1 QrjUO4QVgT68NGG2voO9zVfYddKptQrYMogTZVKQiWkCe7ly6n6U7xm7V6qgnUos GsSfK0wU7KybGI4GZl1yeCmuyEsOfK7V+YHDBmtTrwJltP46kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7+SwtNVTuO3LyimplpHyQT6MdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMTM0MWZmOGUtMzY5Zi0z ZGIxLThlNDktZjdiOTg2NjZjOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOoZh1P6JzaTGNhJWnz7uSMa8gc//IUd3Vnxzwy5XwovH8DTQf5Kmm4 dWfOEDX8p0FlP+BjnCUK0bURyO7TCGCdcZhc4w4qvRMup/WyxIjJgfZXa7dQ+YjU YLYiGNXIhTxMgRfZHhfBbY02UVn1aEplFzDbllKunO+sk17N9bamN5gUBy/VrfhL H0NQ5brO/E6S4wd+KJtV0Z7ExXmiN7Y1f1TmhLse4Fwvzst+OHpy9NNkTyFCZjLS cDn3ZgbU9MRGrUuMzncqlil7ZvGoY6w3fVhfnRkMH1H5VpMFpGZWpXgVaK4wyZwV Nw3/bqJXWyk8xEnf4rjdrjdIvBBPl78= -----END CERTIFICATE-----Generated at Sat Aug 23 22:09:28 2025 by rpki-client