$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa File: af6fa4e3-42aa-3436-a412-9f9c477db93d.roa (raw, json) Hash identifier: D+fP8XNW1E1EE2JkNO7EcI1HN0pdedhL9ElUqBDCAYw= Subject key identifier: 21:44:29:ED:1F:91:21:31:4B:2D:93:04:43:F7:6E:8E:24:52:93:6E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AB220DDC4E94C8216B1D25C80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16839 IP address blocks: 199.91.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:dd:c4:e9:4c:82:16:b1:d2:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=aa234a91-a01e-42eb-bf05-2858397cc05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:c4:fe:af:55:17:75:d5:a3:a9:65:18:3a: 42:a9:95:74:da:d8:63:f0:e0:fc:ee:b0:78:0c:a6: 27:6f:61:ce:fb:89:2f:f1:04:73:71:9d:65:39:7f: 6f:e0:ae:94:91:31:ec:f6:84:9e:91:3c:66:05:51: 55:aa:4f:77:d8:5f:7d:03:e7:20:cb:60:4d:25:2a: b4:59:3d:da:32:40:f0:d5:b0:cc:b2:f6:99:6a:83: 9d:83:84:58:cf:ea:cc:f8:e7:14:57:1d:f2:9d:30: 18:7c:6a:4f:dd:5e:af:db:4a:da:2c:70:33:6a:58: c3:b0:fb:25:84:06:1f:3d:ab:17:7f:e4:02:09:e2: c8:e7:fd:85:1f:fe:93:14:0d:06:85:c2:61:68:f3: d4:dd:24:1a:2b:a4:9a:6e:e0:64:b6:fb:a5:f2:56: 82:c4:cc:c9:aa:40:3f:03:5e:bf:52:31:e6:92:e1: 82:dd:4e:06:61:c5:27:dc:d1:e8:1c:cf:4d:1d:33: d1:fd:a1:ac:df:60:8b:90:2e:cd:f6:ea:f5:07:df: b7:0a:1f:ea:39:93:fa:2a:ca:38:86:c8:82:b9:6a: 82:11:ae:ae:a3:82:46:50:f3:25:28:8a:91:e1:e4: 0e:7b:8b:41:a7:f7:43:4a:64:42:1b:19:4a:8d:d0: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:44:29:ED:1F:91:21:31:4B:2D:93:04:43:F7:6E:8E:24:52:93:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:0c:68:9e:e6:df:39:59:36:79:42:30:00:aa:57:10:fa:e8: 93:d4:23:a9:86:82:59:4a:19:ba:19:26:6c:84:d7:08:94:8e: 7b:5d:a9:ab:24:c1:e3:ce:80:3a:a3:4e:b3:6d:f7:fe:04:e5: 50:04:42:6d:d7:20:08:8a:18:3a:9c:7b:5e:7a:ab:42:a6:c9: 7e:7c:41:68:37:16:b4:07:2d:6d:19:2e:56:9e:b0:3d:fe:c6: 1f:5c:53:b1:3d:e2:69:87:54:be:4e:eb:ba:07:3c:ca:80:4b: 45:85:e9:34:86:22:cd:34:6a:22:73:94:98:e3:44:48:3f:1b: 6a:62:c2:6f:47:3e:2e:ce:c2:5f:76:61:fa:9d:82:25:95:07: d9:d1:88:34:54:31:33:2f:af:97:b0:15:59:07:1c:d0:f5:47: 5f:37:2c:5e:2f:da:5e:86:0c:01:e8:c7:b1:93:ce:4a:c9:96: 84:d3:48:17:e5:2a:90:ad:96:b8:06:ab:7d:91:06:d3:06:50: d1:80:05:43:71:6a:61:b2:ba:db:a5:c3:c3:00:3d:bb:e4:b8: 5f:cc:dd:49:36:b4:03:63:6f:4e:5e:6d:3a:a9:99:e4:c7:60: 20:77:6e:73:17:3c:ed:b7:be:ca:a1:d4:47:17:c1:8b:cf:8a: 7a:dc:0e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN3E6UyCFrHSXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWEyMzRhOTEtYTAxZS00MmViLWJmMDUtMjg1ODM5N2NjMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7jE/q9VF3XVo6llGDpCqZV02thj8OD87rB4 DKYnb2HO+4kv8QRzcZ1lOX9v4K6UkTHs9oSekTxmBVFVqk932F99A+cgy2BNJSq0 WT3aMkDw1bDMsvaZaoOdg4RYz+rM+OcUVx3ynTAYfGpP3V6v20raLHAzaljDsPsl hAYfPasXf+QCCeLI5/2FH/6TFA0GhcJhaPPU3SQaK6SabuBktvul8laCxMzJqkA/ A16/UjHmkuGC3U4GYcUn3NHoHM9NHTPR/aGs32CLkC7N9ur1B9+3Ch/qOZP6Kso4 hsiCuWqCEa6uo4JGUPMlKIqR4eQOe4tBp/dDSmRCGxlKjdB1LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFEKe0fkSExSy2TBEP3bo4kUpNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYWY2ZmE0ZTMtNDJhYS0z NDM2LWE0MTItOWY5YzQ3N2RiOTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMMaJ7m3zlZNnlCMACqVxD66JPUI6mGgllKGboZJmyE1wiUjntdqask wePOgDqjTrNt9/4E5VAEQm3XIAiKGDqce156q0KmyX58QWg3FrQHLW0ZLlaesD3+ xh9cU7E94mmHVL5O67oHPMqAS0WF6TSGIs00aiJzlJjjREg/G2piwm9HPi7Owl92 YfqdgiWVB9nRiDRUMTMvr5ewFVkHHND1R183LF4v2l6GDAHox7GTzkrJloTTSBfl KpCtlrgGq32RBtMGUNGABUNxamGyutulw8MAPbvkuF/M3Uk2tANjb05ebTqpmeTH YCB3bnMXPO23vsqh1EcXwYvPinrcDoY= -----END CERTIFICATE-----Generated at Sun Aug 24 01:34:02 2025 by rpki-client