$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa File: 9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa (raw, json) Hash identifier: OpBJHYM7TgxLVTkpWzGQzNurL1mpNkJYT/OpL4IZupI= Subject key identifier: A4:CD:78:D9:EF:6C:24:BC:89:A4:47:87:71:A0:B4:41:96:F9:45:28 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC5B6CD462FA33E405880 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 149.96.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c5:b6:cd:46:2f:a3:3e:40:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=2a719c3f-bfdb-43be-a238-d48c01874ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:18:b8:e1:dc:82:69:10:28:af:e9:cf:e2: f8:13:ae:fc:38:96:34:76:78:c8:1f:ea:2e:7b:c6: 91:57:81:bc:00:25:51:d8:81:ac:f3:ea:c9:bf:6e: 30:a5:16:cf:85:5f:f2:6c:49:17:b3:7e:1a:a6:ea: dc:4f:41:23:76:e8:17:a5:04:cc:ef:01:d2:a1:18: 2e:84:f8:ce:76:50:16:e9:a4:a9:d1:63:04:4f:21: 6a:f9:00:94:c8:7c:7e:7b:43:67:68:80:7a:0b:a0: ff:c1:f3:ed:b0:5c:14:05:9b:ef:82:1a:32:48:46: fd:08:35:6d:5d:32:1b:0b:de:51:22:81:94:c2:8a: de:09:6e:09:50:be:4d:ab:38:29:61:9d:89:f1:3a: 7b:13:70:5b:44:43:2d:77:6c:06:64:c9:a9:0d:01: 70:53:f8:11:8d:70:e2:66:8a:23:4e:f1:e2:c7:bb: 24:4c:04:d2:9a:bb:57:a8:e0:e0:ea:47:19:c9:db: cd:69:c9:b7:78:ae:f0:3c:78:48:3d:d0:9f:bd:59: 1f:dd:99:24:be:8c:dd:42:78:13:d4:cb:17:5c:16: ec:c6:27:24:81:ea:11:b1:4e:a6:8a:fd:30:23:38: 26:67:41:e5:ea:c7:e6:6c:6c:7a:d9:0b:ac:65:a0: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CD:78:D9:EF:6C:24:BC:89:A4:47:87:71:A0:B4:41:96:F9:45:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:68:19:d9:8f:aa:8c:e8:1c:69:62:a5:41:27:a7:d3:5a:5b: 5d:9d:60:cd:45:ab:df:6f:a2:dc:90:1d:2b:5b:f1:e5:52:2d: eb:91:60:f2:54:ac:fc:5f:5a:74:17:b3:df:d6:ab:76:81:34: f9:6d:92:ae:d0:25:8c:19:8f:60:d0:4e:52:b8:a8:23:48:f5: 8a:ea:40:82:6c:6d:fb:df:3a:2c:b0:41:31:88:97:73:8e:99: 04:96:b9:bb:cc:17:60:25:e4:9a:48:7a:e4:25:fd:3f:22:ef: 86:e7:3b:a0:b0:74:03:e6:c8:19:d0:9a:20:09:10:e8:af:4e: 4a:a9:9e:f9:cf:a4:33:aa:cc:15:81:5b:f2:5e:c6:a7:c1:4b: 8f:f1:f4:78:0e:6f:f7:26:e7:7d:09:16:75:d2:3c:a6:8a:ef: 34:1c:2c:8d:cd:69:c4:b8:e4:dc:fc:46:84:8c:d6:aa:91:bb: 6c:55:aa:7c:89:11:a0:08:33:0c:93:e1:f6:c3:b4:31:8a:15: 82:09:99:7e:59:7f:44:d4:45:d8:12:2c:d2:d9:3a:bd:4b:73: 0c:b2:6d:ce:f6:7f:2f:39:66:4c:9f:36:66:3a:04:31:48:72: df:67:3c:71:df:e5:22:2e:0e:ca:4b:2a:60:6a:d1:6a:e3:58: 7d:38:f5:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8W2zUYvoz5AWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MmE3MTljM2YtYmZkYi00M2JlLWEyMzgtZDQ4YzAxODc0ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxEYuOHcgmkQKK/pz+L4E678OJY0dnjIH+ou e8aRV4G8ACVR2IGs8+rJv24wpRbPhV/ybEkXs34apurcT0EjdugXpQTM7wHSoRgu hPjOdlAW6aSp0WMETyFq+QCUyHx+e0NnaIB6C6D/wfPtsFwUBZvvghoySEb9CDVt XTIbC95RIoGUworeCW4JUL5NqzgpYZ2J8Tp7E3BbREMtd2wGZMmpDQFwU/gRjXDi ZoojTvHix7skTATSmrtXqODg6kcZydvNacm3eK7wPHhIPdCfvVkf3ZkkvozdQngT 1MsXXBbsxickgeoRsU6miv0wIzgmZ0Hl6sfmbGx62QusZaDeewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTNeNnvbCS8iaRHh3GgtEGW+UUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOWMzZWY5YzAtMDMwYi0z OGE3LTkzY2MtYzAwYzY5ODVkZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRoGdmPqozoHGlipUEnp9NaW12dYM1Fq99votyQHStb8eVSLeuRYPJU rPxfWnQXs9/Wq3aBNPltkq7QJYwZj2DQTlK4qCNI9YrqQIJsbfvfOiywQTGIl3OO mQSWubvMF2Al5JpIeuQl/T8i74bnO6CwdAPmyBnQmiAJEOivTkqpnvnPpDOqzBWB W/JexqfBS4/x9HgOb/cm530JFnXSPKaK7zQcLI3NacS45Nz8RoSM1qqRu2xVqnyJ EaAIMwyT4fbDtDGKFYIJmX5Zf0TURdgSLNLZOr1Lcwyybc72fy85ZkyfNmY6BDFI ct9nPHHf5SIuDspLKmBq0WrjWH049dA= -----END CERTIFICATE-----Generated at Sat Aug 23 22:09:54 2025 by rpki-client