$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/37d7038c-57b5-3c54-ad4c-e8c16b376796.roa File: 37d7038c-57b5-3c54-ad4c-e8c16b376796.roa (raw, json) Hash identifier: htIOo40zPO1ad+rlHvCMe1WR62WJ/8NzcvAxYfkifvc= Subject key identifier: BB:AA:B6:D8:C9:9C:84:EE:93:AB:40:E9:B3:00:A6:F0:FD:8B:54:5E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC65851E7DD2C438DAA80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/37d7038c-57b5-3c54-ad4c-e8c16b376796.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 199.91.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c6:58:51:e7:dd:2c:43:8d:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=44b5a62d-5898-4a8e-b3be-e741571e4bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:b1:a2:1c:50:e1:e5:25:db:f6:a1:5b:7f: 64:71:ea:b0:63:76:42:af:76:76:de:bc:79:29:85: a2:d9:96:57:1d:65:73:96:19:af:98:26:3b:17:63: 28:26:92:72:5e:5d:ca:30:86:23:c7:8e:40:1c:03: 9d:f3:da:a2:c0:90:0e:a6:f3:7f:d2:73:c2:7b:35: 3d:c5:ac:1f:e6:3a:0e:e1:11:b2:7b:b0:84:2c:f0: 3e:48:79:2e:7e:40:41:eb:2f:38:93:71:c2:b3:d2: db:91:db:df:e9:1d:e6:c3:92:23:08:8f:27:14:30: ff:30:3f:cd:01:82:10:59:01:a7:dc:41:79:7e:dd: d7:bf:a9:ea:af:2a:de:b8:4e:4e:4c:80:46:2d:a6: 06:db:89:61:13:1b:07:d0:3f:94:0f:57:f0:d9:9c: 22:2f:36:e3:f1:58:8d:c5:ce:a5:f2:34:79:7b:de: c4:4f:41:ae:20:0f:cb:d9:4a:74:bb:f8:3a:ea:c0: f7:df:d9:e0:6a:f0:e3:70:0b:56:b8:fe:68:53:bc: c5:b1:83:e0:e4:b0:b6:c9:33:14:0f:95:72:ae:ea: fa:a7:20:bb:ee:03:54:b1:6c:11:d3:59:c1:36:04: b8:91:7c:a7:2a:b2:de:a0:e7:f1:5c:15:1b:4e:25: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:B6:D8:C9:9C:84:EE:93:AB:40:E9:B3:00:A6:F0:FD:8B:54:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/37d7038c-57b5-3c54-ad4c-e8c16b376796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bf:ef:e5:32:a2:ce:7a:97:30:aa:4a:2d:cb:7d:07:9e:e9: dd:cd:89:1a:7d:5e:02:00:4d:12:ee:00:b4:8b:45:6a:cc:4d: 97:7d:6f:34:38:f8:a8:6a:1b:66:88:fd:e0:53:db:97:02:48: fd:01:e9:43:dd:69:46:03:1c:b6:8b:f3:b9:51:07:0f:6e:bd: fd:c2:b5:be:ec:0a:9c:e2:4b:39:e1:7e:d6:57:e2:57:59:e5: a3:55:0c:da:f0:fc:6d:43:22:3e:60:4f:8d:fd:5e:dc:58:d8: 70:30:f4:6d:d7:a0:d5:67:ef:a2:c5:a7:09:be:b3:99:05:05: 1c:4b:c1:51:ef:c7:de:b0:56:24:89:75:3e:e3:e8:04:0e:c6: 2e:97:36:31:db:c8:a2:7c:84:6c:a9:e0:ad:a6:90:62:e7:41: 12:dd:3a:2c:d6:ff:4b:46:c4:29:e3:79:aa:af:aa:47:04:94: 72:b1:90:d1:e6:1a:89:c6:ca:31:89:ef:4b:f6:88:28:97:fb: ee:53:20:d9:f0:1a:c1:83:1e:96:69:ba:49:b9:73:2b:89:0c: 6d:a1:95:6e:fd:69:77:e2:89:97:b6:57:13:53:79:99:48:b5: 43:b7:2f:77:05:f9:6a:67:ae:3c:34:4a:a3:4c:f9:7b:95:99: 7a:9f:54:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8ZYUefdLEONqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NDRiNWE2MmQtNTg5OC00YThlLWIzYmUtZTc0MTU3MWU0YmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ixohxQ4eUl2/ahW39kceqwY3ZCr3Z23rx5 KYWi2ZZXHWVzlhmvmCY7F2MoJpJyXl3KMIYjx45AHAOd89qiwJAOpvN/0nPCezU9 xawf5joO4RGye7CELPA+SHkufkBB6y84k3HCs9Lbkdvf6R3mw5IjCI8nFDD/MD/N AYIQWQGn3EF5ft3Xv6nqryreuE5OTIBGLaYG24lhExsH0D+UD1fw2ZwiLzbj8ViN xc6l8jR5e97ET0GuIA/L2Up0u/g66sD339ngavDjcAtWuP5oU7zFsYPg5LC2yTMU D5Vyrur6pyC77gNUsWwR01nBNgS4kXynKrLeoOfxXBUbTiXXLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuqttjJnITuk6tA6bMApvD9i1ReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMzdkNzAzOGMtNTdiNS0z YzU0LWFkNGMtZThjMTZiMzc2Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS/7+Uyos56lzCqSi3LfQee6d3NiRp9XgIATRLuALSLRWrMTZd9bzQ4 +KhqG2aI/eBT25cCSP0B6UPdaUYDHLaL87lRBw9uvf3Ctb7sCpziSznhftZX4ldZ 5aNVDNrw/G1DIj5gT439XtxY2HAw9G3XoNVn76LFpwm+s5kFBRxLwVHvx96wViSJ dT7j6AQOxi6XNjHbyKJ8hGyp4K2mkGLnQRLdOizW/0tGxCnjeaqvqkcElHKxkNHm GonGyjGJ70v2iCiX++5TINnwGsGDHpZpukm5cyuJDG2hlW79aXfiiZe2VxNTeZlI tUO3L3cF+Wpnrjw0SqNM+XuVmXqfVCk= -----END CERTIFICATE-----Generated at Sat Aug 23 22:02:25 2025 by rpki-client