$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa File: 3ccc2b69-3869-30a1-8033-735bd84893f6.roa (raw, json) Hash identifier: ABWfhmJkXHAdr7AKuF/PAAeCGB7yfX/7Zp6ZR5nBMy4= Subject key identifier: 0F:72:89:E1:DC:E5:A0:11:61:9C:91:06:C1:E0:E0:06:78:13:52:DD Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC6C884640ABC5F73E0E0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 199.91.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c6:c8:84:64:0a:bc:5f:73:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=423a8ad8-54af-4579-9e09-174e37f9d6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:4d:0e:8e:18:df:72:25:e1:93:a1:c6:3b: d5:6e:ad:22:f7:72:07:01:97:de:6e:44:48:df:52: d6:c8:e4:fd:f4:86:ce:30:ec:ea:99:1d:48:fa:c6: dd:96:85:3c:67:cd:22:39:3c:0e:aa:f4:97:51:03: 33:36:60:4e:ab:79:cf:47:81:aa:5f:4b:12:23:98: 52:81:49:3d:58:bb:37:09:42:3f:b7:0d:83:3c:08: cb:69:1c:78:a9:aa:36:bf:00:2f:b2:6f:3d:be:3e: cb:dd:22:aa:68:a3:ac:4d:68:4b:58:c4:4c:34:2f: 06:1d:87:cf:4d:da:6d:0d:b5:6d:a1:06:16:fd:28: b6:a4:80:63:92:22:19:58:19:b5:22:bb:a0:1f:c8: 9e:e5:27:ee:8e:4f:d9:82:a5:a8:f2:85:1f:2c:e1: 63:7c:7d:70:0c:7e:1a:20:c7:47:2e:a0:8b:2f:63: 44:03:52:31:17:aa:b6:3d:be:2e:5f:82:1d:72:5d: 07:4b:f1:57:55:d4:db:7b:b5:6f:e1:0f:1a:29:86: 45:2d:2d:08:ee:d6:4f:79:f7:e5:de:34:62:b8:4c: c6:72:e8:ef:39:df:1d:6b:87:20:3d:23:24:1f:4c: 8a:79:82:da:44:f5:ab:08:2a:e9:f4:99:cd:80:4d: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:72:89:E1:DC:E5:A0:11:61:9C:91:06:C1:E0:E0:06:78:13:52:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:e0:86:37:10:bd:21:86:9e:bf:e4:90:38:a6:bd:d8:7a:55: a7:d3:02:c6:09:fe:66:1c:c0:61:59:be:7e:7c:3f:86:96:05: 95:d9:d4:15:0d:de:1f:c5:5f:b5:8b:f5:0d:23:20:7b:a2:c3: d7:cc:3d:ad:0b:1b:f4:70:48:7e:ff:20:b5:3a:17:45:50:a1: fb:9d:21:c6:2a:dc:43:e9:f8:34:b8:94:75:e2:cc:85:34:f4: 07:93:bf:e4:8d:3a:2c:54:31:87:6e:75:ca:7e:f6:a0:34:e6: 97:f2:12:f6:93:19:ef:db:6c:14:31:91:4f:9c:18:a0:8a:68: 99:fc:0f:63:be:86:43:50:12:01:fe:6a:53:ac:c3:29:d0:3e: 3c:18:ac:b4:e6:eb:37:5d:f4:cc:8d:29:9f:34:f6:31:ee:f1: 79:92:57:29:46:9f:db:30:ed:c4:28:e4:52:fe:6d:61:6c:96: 7c:ea:74:cd:3b:98:74:b2:f0:7f:c8:89:55:40:e8:3d:b0:1c: 39:52:30:4a:1b:ec:40:9f:36:fa:8f:87:5f:e4:28:06:6a:9a: 2f:18:8e:49:6c:07:a6:ca:9c:75:67:a4:df:25:5f:56:56:c6: db:f6:cc:75:fd:13:84:68:1d:fc:72:39:db:57:d1:51:47:57: 54:be:b5:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8bIhGQKvF9z4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NDIzYThhZDgtNTRhZi00NTc5LTllMDktMTc0ZTM3ZjlkNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtflNDo4Y33Il4ZOhxjvVbq0i93IHAZfebkRI 31LWyOT99IbOMOzqmR1I+sbdloU8Z80iOTwOqvSXUQMzNmBOq3nPR4GqX0sSI5hS gUk9WLs3CUI/tw2DPAjLaRx4qao2vwAvsm89vj7L3SKqaKOsTWhLWMRMNC8GHYfP TdptDbVtoQYW/Si2pIBjkiIZWBm1IrugH8ie5Sfujk/ZgqWo8oUfLOFjfH1wDH4a IMdHLqCLL2NEA1IxF6q2Pb4uX4Idcl0HS/FXVdTbe7Vv4Q8aKYZFLS0I7tZPeffl 3jRiuEzGcujvOd8da4cgPSMkH0yKeYLaRPWrCCrp9JnNgE1czwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9yieHc5aARYZyRBsHg4AZ4E1LdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvM2NjYzJiNjktMzg2OS0z MGExLTgwMzMtNzM1YmQ4NDg5M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfghjcQvSGGnr/kkDimvdh6VafTAsYJ/mYcwGFZvn58P4aWBZXZ1BUN 3h/FX7WL9Q0jIHuiw9fMPa0LG/RwSH7/ILU6F0VQofudIcYq3EPp+DS4lHXizIU0 9AeTv+SNOixUMYdudcp+9qA05pfyEvaTGe/bbBQxkU+cGKCKaJn8D2O+hkNQEgH+ alOswynQPjwYrLTm6zdd9MyNKZ809jHu8XmSVylGn9sw7cQo5FL+bWFslnzqdM07 mHSy8H/IiVVA6D2wHDlSMEob7ECfNvqPh1/kKAZqmi8YjklsB6bKnHVnpN8lX1ZW xtv2zHX9E4RoHfxyOdtX0VFHV1S+tbs= -----END CERTIFICATE-----Generated at Sat Aug 23 22:04:53 2025 by rpki-client