$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa File: 706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa (raw, json) Hash identifier: zFZh/98EBV3zy+9HF+cyLvDd+XWnwo5YwC/Rl+d1o5U= Subject key identifier: 29:C6:93:5C:A1:17:9F:AB:C3:44:B3:B6:5C:C4:48:6B:D9:C1:84:43 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC68E02B6AFD102E59180 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 199.91.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c6:8e:02:b6:af:d1:02:e5:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=36c5ca77-193d-49db-9340-d0733394edec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:06:50:b0:cc:9d:89:78:7b:5c:19:ca:d2: fa:e6:33:e5:b0:0b:5b:ac:3c:19:9c:87:d7:e5:7f: 21:68:f2:52:ae:56:80:93:22:7e:11:e0:48:9d:c3: 55:c7:c0:82:62:cb:29:b2:41:88:ad:64:79:31:f8: 93:3b:b2:51:49:a2:3f:16:cb:ac:87:e2:2e:8d:32: 48:42:a7:d0:9a:1c:53:a5:10:8b:b6:18:1e:ab:5e: 50:c1:a1:6c:47:8f:f5:ce:a2:08:c1:fc:e5:9e:71: 33:85:ab:ea:44:2d:37:9c:69:45:44:75:b6:73:72: db:d2:5a:ac:1e:af:51:6e:08:38:86:b9:b9:b3:7e: 6b:6a:c1:8c:99:2e:1f:39:e6:6f:7c:b7:9c:0c:e0: 63:15:7b:b8:e9:69:41:86:77:33:07:31:49:42:72: aa:ec:a2:83:58:21:7c:c0:7b:6d:67:e7:42:25:54: 64:49:20:82:8a:7b:a3:a2:51:a5:1e:e4:61:e0:f3: 2b:fc:4b:c2:84:f4:e4:39:ac:98:a9:3d:fa:01:14: 63:84:89:aa:25:99:06:b8:f2:df:50:c4:cf:46:e4: 5a:66:04:73:0e:01:c0:1d:a1:0a:d9:b8:07:5f:91: 57:5f:bc:17:b8:a9:3e:ef:bc:26:4f:be:18:eb:0b: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C6:93:5C:A1:17:9F:AB:C3:44:B3:B6:5C:C4:48:6B:D9:C1:84:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a9:6c:6c:37:1c:dd:b8:7b:fa:e3:1f:f8:bb:4f:a0:07:70: 48:49:9e:8f:bf:f4:0a:99:9c:b7:a2:37:32:36:d4:5e:ae:51: 8e:66:5f:b2:d0:da:a8:1b:40:e6:c6:87:8e:55:07:60:f9:53: c8:9a:d0:46:29:55:43:e9:42:41:14:e9:26:37:f9:f0:60:36: 0d:90:8a:69:a4:f7:9c:1e:b6:8a:95:7c:07:5b:fd:bc:d2:95: d8:d1:51:50:34:40:83:32:25:c3:02:82:b8:58:69:ac:b9:57: fc:d9:f1:76:78:26:c8:63:04:9c:01:dc:c1:0e:1d:2c:14:80: f4:98:55:07:6b:fe:23:43:d8:bc:29:ed:98:3b:1d:99:c5:17: b8:01:07:f2:38:fd:66:eb:f5:4f:0c:ec:ec:89:9c:c0:79:8a: f7:29:a1:e5:0b:93:45:b4:2b:e8:01:be:3b:6f:d0:72:ba:f1: 84:49:c8:e1:b7:67:40:d3:23:31:db:dd:c0:6e:94:b8:bf:c1: de:97:93:d3:2d:96:fe:1d:d3:62:96:e1:4c:1b:18:2a:5f:c0: 01:43:50:81:01:fd:c7:28:70:75:96:11:e4:5b:43:14:aa:e3: fb:6c:e4:2e:28:4e:43:69:7e:ea:fb:8c:8c:c2:33:f9:1b:f1: c8:2e:06:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8aOArav0QLlkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MzZjNWNhNzctMTkzZC00OWRiLTkzNDAtZDA3MzMzOTRlZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsUGULDMnYl4e1wZytL65jPlsAtbrDwZnIfX 5X8haPJSrlaAkyJ+EeBIncNVx8CCYsspskGIrWR5MfiTO7JRSaI/Fsush+IujTJI QqfQmhxTpRCLthgeq15QwaFsR4/1zqIIwfzlnnEzhavqRC03nGlFRHW2c3Lb0lqs Hq9Rbgg4hrm5s35rasGMmS4fOeZvfLecDOBjFXu46WlBhnczBzFJQnKq7KKDWCF8 wHttZ+dCJVRkSSCCinujolGlHuRh4PMr/EvChPTkOayYqT36ARRjhImqJZkGuPLf UMTPRuRaZgRzDgHAHaEK2bgHX5FXX7wXuKk+77wmT74Y6wuV1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnGk1yhF5+rw0SztlzESGvZwYRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzA2ZmFjMzctM2UyZS0z MjlmLTk0ZjYtMWM1M2FjYzZlNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJapbGw3HN24e/rjH/i7T6AHcEhJno+/9AqZnLeiNzI21F6uUY5mX7LQ 2qgbQObGh45VB2D5U8ia0EYpVUPpQkEU6SY3+fBgNg2Qimmk95wetoqVfAdb/bzS ldjRUVA0QIMyJcMCgrhYaay5V/zZ8XZ4JshjBJwB3MEOHSwUgPSYVQdr/iND2Lwp 7Zg7HZnFF7gBB/I4/Wbr9U8M7OyJnMB5ivcpoeULk0W0K+gBvjtv0HK68YRJyOG3 Z0DTIzHb3cBulLi/wd6Xk9Mtlv4d02KW4UwbGCpfwAFDUIEB/ccocHWWEeRbQxSq 4/ts5C4oTkNpfur7jIzCM/kb8cguBh8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:09:06 2025 by rpki-client