$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360a8570-a044-3855-b2da-5ae7cac1196b.roa File: 360a8570-a044-3855-b2da-5ae7cac1196b.roa (raw, json) Hash identifier: 5M3P+1JXyL0eAJEuupfGh5LJCzhHezAIeUKdAmLgoeo= Subject key identifier: 0C:4B:0F:1D:3A:3A:8D:08:5F:B2:FD:36:EA:E2:9C:54:4C:43:26:83 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC569C5A64F19D726F7E0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360a8570-a044-3855-b2da-5ae7cac1196b.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 149.96.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c5:69:c5:a6:4f:19:d7:26:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=0d3d79af-be37-493a-a0bd-da6991648554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6f:c6:1d:65:0f:01:6f:d5:93:3e:02:67:79: 65:38:06:1e:24:ee:ef:72:7d:16:69:f0:e8:1f:29: a4:7b:e8:bb:f7:64:5d:3f:c5:1d:e4:19:a2:d0:b1: a5:af:91:89:16:55:f3:d2:c5:f2:87:0e:d2:27:3a: b6:a8:8a:7b:0e:a4:35:6c:62:35:1d:42:62:07:c2: 30:de:ae:19:a8:ba:8b:29:44:d8:d3:40:54:62:0a: cc:13:87:1d:e2:ae:90:b7:93:db:d1:1c:7b:f2:ad: 69:0e:31:7d:f6:f9:e7:f0:70:e5:42:b6:d2:34:a1: 0a:a2:df:e3:f7:6c:d5:a6:78:b2:ba:1c:b3:88:d7: 5b:95:83:81:e9:c2:7b:ae:3d:bc:07:37:f8:dd:0a: 46:b0:6d:cd:7d:eb:0b:26:24:57:51:dc:1b:b7:32: 82:e0:11:43:b9:a7:8d:f3:97:00:5b:06:5b:a2:3b: 41:50:ab:b0:82:01:ac:57:41:86:26:d6:5d:34:ae: 0a:89:65:8e:37:14:d5:7b:cb:96:b9:df:13:e7:5a: ed:28:39:2d:c1:1f:20:7e:d7:61:fe:8d:89:84:74: dd:d4:7b:d4:7c:f6:aa:8f:0f:b9:f0:d0:a8:c2:fb: 68:86:66:bd:6f:ce:73:22:32:d1:ea:8d:bc:0c:66: 9f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4B:0F:1D:3A:3A:8D:08:5F:B2:FD:36:EA:E2:9C:54:4C:43:26:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360a8570-a044-3855-b2da-5ae7cac1196b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c0:30:d5:39:79:09:59:bf:9b:70:86:21:59:56:fe:03:1d: 70:39:de:d4:fe:56:53:b2:ed:2b:1c:fb:5c:86:64:3a:a4:60: c3:6e:c7:be:9f:7d:00:a8:27:f5:4a:4b:25:97:10:aa:9f:f0: 54:bf:a1:cb:77:9f:70:62:21:f6:d8:dc:d8:88:bf:7b:21:12: 24:0d:b4:a4:c4:52:7d:21:a5:5a:fb:bc:01:62:90:9c:73:0e: f9:65:fb:fb:8c:34:36:cc:f8:4b:b5:5d:df:ab:94:4f:d8:3c: 9d:d8:7c:ab:1a:36:81:33:9f:cb:36:51:bd:7a:68:29:d9:6c: e4:fc:fa:32:dc:fe:5e:af:88:8e:3c:b6:eb:af:81:7b:62:d8: fe:8f:85:49:95:11:c3:c4:0d:37:c6:c6:01:e1:ce:81:6c:6e: 15:10:24:97:52:de:b9:95:90:9c:49:cd:07:63:7e:db:c7:d5: b5:78:07:46:23:1e:8e:57:ac:2c:1d:b2:b6:14:9c:42:40:97: 86:b6:86:e0:e1:39:6a:0b:d0:5c:5c:8a:7a:92:08:71:ad:35: 27:25:1d:0d:d3:be:e4:50:50:ad:2d:d0:b7:98:5b:c9:a3:2c: 23:d4:5e:53:49:08:a1:4a:fb:8a:15:20:91:07:95:1a:c9:28: 23:7d:57:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8VpxaZPGdcm9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MGQzZDc5YWYtYmUzNy00OTNhLWEwYmQtZGE2OTkxNjQ4NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW/GHWUPAW/Vkz4CZ3llOAYeJO7vcn0WafDo Hymke+i792RdP8Ud5Bmi0LGlr5GJFlXz0sXyhw7SJzq2qIp7DqQ1bGI1HUJiB8Iw 3q4ZqLqLKUTY00BUYgrME4cd4q6Qt5Pb0Rx78q1pDjF99vnn8HDlQrbSNKEKot/j 92zVpniyuhyziNdblYOB6cJ7rj28Bzf43QpGsG3NfesLJiRXUdwbtzKC4BFDuaeN 85cAWwZbojtBUKuwggGsV0GGJtZdNK4KiWWONxTVe8uWud8T51rtKDktwR8gftdh /o2JhHTd1HvUfPaqjw+58NCowvtohma9b85zIjLR6o28DGafNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxLDx06Oo0IX7L9NurinFRMQyaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMzYwYTg1NzAtYTA0NC0z ODU1LWIyZGEtNWFlN2NhYzExOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrAMNU5eQlZv5twhiFZVv4DHXA53tT+VlOy7Ssc+1yGZDqkYMNux76f fQCoJ/VKSyWXEKqf8FS/oct3n3BiIfbY3NiIv3shEiQNtKTEUn0hpVr7vAFikJxz Dvll+/uMNDbM+Eu1Xd+rlE/YPJ3YfKsaNoEzn8s2Ub16aCnZbOT8+jLc/l6viI48 tuuvgXti2P6PhUmVEcPEDTfGxgHhzoFsbhUQJJdS3rmVkJxJzQdjftvH1bV4B0Yj Ho5XrCwdsrYUnEJAl4a2huDhOWoL0FxcinqSCHGtNSclHQ3TvuRQUK0t0LeYW8mj LCPUXlNJCKFK+4oVIJEHlRrJKCN9V5g= -----END CERTIFICATE-----Generated at Sun Aug 24 02:25:42 2025 by rpki-client