$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa File: 7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa (raw, json) Hash identifier: Ou5E3aMPbgPmQRKFPkXqD2uzo0SI7PmnQPIP0vBTNIg= Subject key identifier: 7C:19:66:DA:8E:49:F7:E2:47:AC:62:81:20:34:EE:11:38:93:02:63 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBCD1439B35DE9817B4B00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 199.91.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cd:14:39:b3:5d:e9:81:7b:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=92b51aa2-db69-4dd1-8238-250496da9239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8b:6a:b5:b2:5e:39:c7:ad:8c:62:ed:4f:e2: c2:f3:8d:e8:fd:8d:84:d2:5b:6f:c9:0d:4e:83:d7: cd:ac:d4:c3:71:11:c4:13:8c:aa:03:7b:2e:88:e2: dc:df:b6:51:12:77:72:ba:6e:c8:c3:da:c7:77:0a: f3:e8:f3:17:47:0c:3c:bd:e8:20:3d:02:86:b2:2d: 5a:34:3a:b0:a3:39:df:de:8c:b4:ec:ce:4b:7c:88: 09:44:8b:35:f5:22:37:c0:93:e2:f3:33:58:cc:a3: 48:8e:3c:f0:51:59:ba:77:a3:ba:46:c0:33:ec:90: 15:ec:f4:b1:3c:9a:3a:fc:7a:82:9e:28:a8:47:09: ff:6e:82:1f:ce:31:97:70:64:7a:b7:26:ff:e8:ac: 53:3b:eb:d7:08:62:92:0f:93:42:6f:78:92:38:f8: 75:3a:fd:43:e8:a6:c1:e3:0d:c9:cc:7a:76:39:6d: 20:e9:2b:3d:cf:d6:1f:c8:76:30:3b:d1:26:ca:fc: ea:6a:9d:ed:54:4e:b9:30:6d:81:a9:d8:0a:79:64: 42:0a:67:71:8c:35:15:1b:c6:34:25:1c:5a:28:a3: eb:30:94:06:f0:4f:2d:83:83:2a:fd:92:1c:48:f3: 48:07:eb:10:1c:16:84:d2:d6:e4:f9:bc:0c:72:bd: 1b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:19:66:DA:8E:49:F7:E2:47:AC:62:81:20:34:EE:11:38:93:02:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:42:91:e6:c0:66:e0:3d:94:2b:1f:f2:0a:93:34:eb:fb:fa: 76:8e:13:e4:9c:98:cb:b3:cd:74:98:ee:49:78:29:b2:01:b0: c8:4f:d9:7f:c4:43:ed:b8:88:ac:01:93:f4:7b:38:ee:15:59: cf:ea:53:55:ff:95:f9:de:97:bf:14:6d:51:c2:01:b6:d4:a1: fa:c0:11:99:3a:a1:0c:5f:1d:7b:8d:41:49:b8:12:2b:f7:1b: 50:b8:63:9e:52:fe:f5:09:c5:8a:56:ad:3a:ed:d5:49:83:1b: 84:de:4c:bb:76:ed:c8:cf:59:26:28:71:96:9d:9e:0d:e3:dc: bd:fa:58:c5:cc:d4:93:d5:c9:75:b5:71:6f:7b:a1:f1:f4:fb: 38:19:36:f4:55:2f:37:b3:19:fe:ef:a9:7c:f8:44:5f:bf:31: 9c:fe:87:56:65:a9:87:73:83:b8:bf:68:e2:14:ac:6c:fd:d4: 6a:b4:d7:d7:e8:6d:5b:44:b6:ad:57:f3:cf:14:04:e7:f7:41: 57:8b:80:a6:78:fb:e3:dc:16:fc:9f:52:e8:f8:fc:68:79:b0: 3c:ef:58:d9:eb:9c:fb:87:2a:34:ed:52:0b:42:47:d2:d3:c4: e6:28:22:85:a9:71:c1:e5:0e:37:67:05:eb:94:78:ad:8b:d7: 1f:cf:cd:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey80UObNd6YF7SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk OTJiNTFhYTItZGI2OS00ZGQxLTgyMzgtMjUwNDk2ZGE5MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4tqtbJeOcetjGLtT+LC843o/Y2E0ltvyQ1O g9fNrNTDcRHEE4yqA3suiOLc37ZREndyum7Iw9rHdwrz6PMXRww8veggPQKGsi1a NDqwoznf3oy07M5LfIgJRIs19SI3wJPi8zNYzKNIjjzwUVm6d6O6RsAz7JAV7PSx PJo6/HqCniioRwn/boIfzjGXcGR6tyb/6KxTO+vXCGKSD5NCb3iSOPh1Ov1D6KbB 4w3JzHp2OW0g6Ss9z9YfyHYwO9Emyvzqap3tVE65MG2BqdgKeWRCCmdxjDUVG8Y0 JRxaKKPrMJQG8E8tg4Mq/ZIcSPNIB+sQHBaE0tbk+bwMcr0blwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwZZtqOSffiR6xigSA07hE4kwJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2FiNTlkOTUtMjhiZi0z ZjNkLThmYzItMzZiNmNlZmE4ZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpCkebAZuA9lCsf8gqTNOv7+naOE+ScmMuzzXSY7kl4KbIBsMhP2X/E Q+24iKwBk/R7OO4VWc/qU1X/lfnel78UbVHCAbbUofrAEZk6oQxfHXuNQUm4Eiv3 G1C4Y55S/vUJxYpWrTrt1UmDG4TeTLt27cjPWSYocZadng3j3L36WMXM1JPVyXW1 cW97ofH0+zgZNvRVLzezGf7vqXz4RF+/MZz+h1ZlqYdzg7i/aOIUrGz91Gq019fo bVtEtq1X888UBOf3QVeLgKZ4++PcFvyfUuj4/Gh5sDzvWNnrnPuHKjTtUgtCR9LT xOYoIoWpccHlDjdnBeuUeK2L1x/Pzck= -----END CERTIFICATE-----Generated at Sat Aug 23 22:11:47 2025 by rpki-client