$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa File: 906e2291-613d-339e-8038-3e70422ca33a.roa (raw, json) Hash identifier: LVNEiTiOXKmV8D045uMTwJlN/WEJnopXqNcALI8vgAw= Subject key identifier: 72:21:56:08:14:04:CC:AF:C7:A4:33:15:E2:77:74:F8:96:CA:65:F8 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBCCEE4414DB534B150180 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 149.96.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cc:ee:44:14:db:53:4b:15:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=4ed2ade1-0971-47dd-b1a4-cf2d0c082243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:75:26:70:11:77:c9:fd:4e:df:00:51:df: 25:7b:2f:18:8e:24:03:d5:68:ec:5f:e2:cd:87:ea: 0d:65:ed:cd:83:ca:b3:75:cf:a2:01:b8:92:fd:e0: 24:ac:4a:23:d9:19:c9:2b:0a:91:59:cb:a0:e0:61: 1f:95:21:08:c6:d3:b9:23:4f:44:26:45:2f:9b:d7: 5c:92:da:d3:d6:ba:44:a2:50:1f:51:41:61:19:27: 45:d2:ab:d8:58:64:f6:c6:d2:fc:3e:1d:d9:e4:39: 87:a6:ba:d2:84:61:f1:3b:8c:26:0f:0b:65:0e:0b: 2b:43:8b:5a:05:f9:15:61:c8:74:e0:39:12:14:1b: 15:15:a9:52:44:35:77:20:ac:18:69:38:00:e5:22: fd:e9:5e:f2:d5:9d:7d:53:79:9e:dd:49:90:fb:58: ea:05:69:5c:c6:e5:b9:3b:93:8b:0c:43:65:13:0b: ba:d5:74:7d:2e:89:16:00:c6:8c:7c:29:7d:05:8c: 18:95:d2:97:0f:c0:36:e8:93:4b:30:bd:26:9b:67: 0d:2f:4c:1a:1c:2b:d8:93:c0:c7:ef:ad:63:ee:51: 8b:be:62:a6:85:7b:a2:65:a9:0d:82:54:73:8d:37: a0:65:27:c5:68:9b:a5:8e:d7:ec:44:ef:38:ff:95: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:21:56:08:14:04:CC:AF:C7:A4:33:15:E2:77:74:F8:96:CA:65:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:a6:ae:63:84:8d:d5:57:e6:03:06:6e:e6:cd:1b:f9:15:bf: f3:80:e9:af:2e:9c:cc:39:ce:17:6a:8b:fd:a4:37:0b:7d:24: 29:5d:8c:7e:4c:7a:f8:3c:29:6b:8e:8a:e4:e7:1c:59:36:42: 73:d1:5c:61:d1:97:12:16:a8:56:bb:b8:07:52:c7:f2:79:fe: ed:e8:29:c4:19:13:c7:1a:5c:7e:f8:6d:0c:21:97:0f:0d:98: 31:09:6e:44:f9:07:f5:12:ee:95:83:9e:43:45:73:59:e4:9e: cd:d1:e8:b9:04:d6:9e:68:96:94:0d:cf:34:fa:4f:d3:a0:71: c3:3a:76:d7:73:67:21:4e:7e:f7:be:ac:77:b5:52:20:43:06: 99:8a:b4:65:94:ed:7b:f5:4c:55:18:f5:cf:dc:1a:1a:df:5c: 02:04:30:87:cb:f7:71:e8:8e:f1:27:c6:21:bb:da:59:a2:77: 65:9c:7f:09:ad:67:24:bb:75:db:c7:88:31:f8:ef:0a:10:fa: 83:93:79:2b:51:49:34:54:03:2e:ed:0e:cd:33:a4:d6:dd:58: 23:1b:8f:07:dd:d6:d0:83:53:f0:f9:20:ea:89:35:c7:6f:3c: 64:96:0b:ce:ed:22:62:99:78:e9:6e:f2:35:70:0a:2d:43:e2: e6:43:8d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8zuRBTbU0sVAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NGVkMmFkZTEtMDk3MS00N2RkLWIxYTQtY2YyZDBjMDgyMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou91JnARd8n9Tt8AUd8ley8YjiQD1WjsX+LN h+oNZe3Ng8qzdc+iAbiS/eAkrEoj2RnJKwqRWcug4GEflSEIxtO5I09EJkUvm9dc ktrT1rpEolAfUUFhGSdF0qvYWGT2xtL8Ph3Z5DmHprrShGHxO4wmDwtlDgsrQ4ta BfkVYch04DkSFBsVFalSRDV3IKwYaTgA5SL96V7y1Z19U3me3UmQ+1jqBWlcxuW5 O5OLDENlEwu61XR9LokWAMaMfCl9BYwYldKXD8A26JNLML0mm2cNL0waHCvYk8DH 761j7lGLvmKmhXuiZakNglRzjTegZSfFaJuljtfsRO84/5VkywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIhVggUBMyvx6QzFeJ3dPiWymX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTA2ZTIyOTEtNjEzZC0z MzllLTgwMzgtM2U3MDQyMmNhMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSmrmOEjdVX5gMGbubNG/kVv/OA6a8unMw5zhdqi/2kNwt9JCldjH5M evg8KWuOiuTnHFk2QnPRXGHRlxIWqFa7uAdSx/J5/u3oKcQZE8caXH74bQwhlw8N mDEJbkT5B/US7pWDnkNFc1nkns3R6LkE1p5olpQNzzT6T9OgccM6dtdzZyFOfve+ rHe1UiBDBpmKtGWU7Xv1TFUY9c/cGhrfXAIEMIfL93HojvEnxiG72lmid2Wcfwmt ZyS7ddvHiDH47woQ+oOTeStRSTRUAy7tDs0zpNbdWCMbjwfd1tCDU/D5IOqJNcdv PGSWC87tImKZeOlu8jVwCi1D4uZDjXc= -----END CERTIFICATE-----Generated at Sat Aug 23 23:49:31 2025 by rpki-client