$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa File: b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa (raw, json) Hash identifier: 3JekgyUFDR7Kz5rilx1B3AL0X2bBbwdyOXTFm1nu3zQ= Subject key identifier: 66:4D:65:7F:E9:73:DD:7B:EF:CD:55:7E:BA:F5:3B:40:4B:1B:5C:8B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC61C2214E7BCCF0CF460 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 149.96.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c6:1c:22:14:e7:bc:cf:0c:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=090361f0-6204-4c7b-a13f-47eb89e732eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:df:aa:c9:11:f4:ad:7e:35:ba:44:d6:fb:90: 36:ee:df:c0:d2:9a:bd:e9:16:c4:06:2c:fd:b8:e8: 3b:d6:05:73:d3:41:3f:aa:92:1e:ac:c1:24:c3:f1: 72:98:99:5c:9e:d2:7d:62:86:67:39:33:eb:78:b3: 5d:f9:3c:c1:0b:d8:70:68:c6:b6:b9:36:ea:41:f4: 7c:fb:28:ac:06:11:80:d3:3e:0c:2e:b5:09:83:c3: e8:83:31:0b:dd:bb:7a:8e:ad:e4:d6:95:f8:00:ca: 91:77:1e:22:12:f1:97:00:34:15:48:fc:93:55:04: 25:9c:be:21:c8:ba:87:45:eb:2c:70:53:10:15:c6: 3c:9e:9c:08:a2:0e:f5:c3:86:1c:fe:a6:71:93:e1: 3b:f0:5f:6d:6c:bc:61:d3:80:01:97:a9:f7:8d:3d: be:f3:ff:0e:26:4e:ea:22:5b:66:83:6d:97:d4:8d: ad:b7:12:26:c2:16:20:8b:16:b0:2f:3f:ef:89:38: 90:41:af:b1:5b:31:fd:66:18:c4:56:d1:f0:2b:bb: 73:e9:31:fd:81:71:97:d3:f0:5f:1f:87:d4:98:87: 4b:79:b9:42:c5:6c:6e:ce:b2:bf:22:c5:46:2e:08: 24:a2:5c:8f:2f:2a:18:7c:25:38:20:ec:53:9b:1b: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4D:65:7F:E9:73:DD:7B:EF:CD:55:7E:BA:F5:3B:40:4B:1B:5C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:25:4e:00:64:7e:6b:2a:80:fd:ae:8a:fc:46:c6:2a:76:3f: 2a:1a:dc:88:71:77:4f:11:fd:66:09:48:c5:92:de:a7:f0:76: e3:ac:4d:e1:ec:b8:00:fd:c0:44:40:af:f5:8f:84:6c:d9:6e: 74:1d:84:16:ca:ff:1b:e6:25:28:77:03:ad:3c:e0:b7:6f:5e: 3f:d9:0c:99:53:0c:a1:51:d8:0c:c7:da:c3:ef:36:be:0c:81: 31:ec:51:bb:1a:0b:5c:f6:da:70:92:7b:18:43:0c:a5:14:db: bc:e8:59:68:64:a1:63:5e:28:05:bd:a0:b4:e2:f9:5c:29:dd: 03:f8:4d:0c:e8:3f:01:39:53:11:ef:0d:4c:55:cc:5b:ba:3d: a3:d7:54:a9:66:f7:04:43:20:ee:ea:a6:6a:ec:b1:02:1f:4f: a7:3d:7f:3a:55:4a:a3:0d:79:69:d1:7b:5d:e2:d5:bb:36:5b: 4c:35:40:4e:c8:09:27:fe:0b:88:85:2d:50:42:ec:4a:69:2d: 97:67:80:5b:fb:ef:a2:8d:34:15:d8:70:31:20:00:96:f9:d9: 56:c6:a8:d8:b9:fd:59:37:3c:56:ce:11:98:00:b3:c8:b5:66: 0c:3a:99:74:8c:d5:ab:2d:d6:2f:9a:ee:88:45:27:f5:34:ac: ab:a9:f2:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8YcIhTnvM8M9GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MDkwMzYxZjAtNjIwNC00YzdiLWExM2YtNDdlYjg5ZTczMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht+qyRH0rX41ukTW+5A27t/A0pq96RbEBiz9 uOg71gVz00E/qpIerMEkw/FymJlcntJ9YoZnOTPreLNd+TzBC9hwaMa2uTbqQfR8 +yisBhGA0z4MLrUJg8PogzEL3bt6jq3k1pX4AMqRdx4iEvGXADQVSPyTVQQlnL4h yLqHResscFMQFcY8npwIog71w4Yc/qZxk+E78F9tbLxh04ABl6n3jT2+8/8OJk7q Iltmg22X1I2ttxImwhYgixawLz/viTiQQa+xWzH9ZhjEVtHwK7tz6TH9gXGX0/Bf H4fUmIdLeblCxWxuzrK/IsVGLggkolyPLyoYfCU4IOxTmxu7FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZNZX/pc917781Vfrr1O0BLG1yLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYjFlYjEyNTUtMWExMy0z OTIyLWE0MWYtZWQwNDU5NWI5YWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACslTgBkfmsqgP2uivxGxip2Pyoa3Ihxd08R/WYJSMWS3qfwduOsTeHs uAD9wERAr/WPhGzZbnQdhBbK/xvmJSh3A6084LdvXj/ZDJlTDKFR2AzH2sPvNr4M gTHsUbsaC1z22nCSexhDDKUU27zoWWhkoWNeKAW9oLTi+Vwp3QP4TQzoPwE5UxHv DUxVzFu6PaPXVKlm9wRDIO7qpmrssQIfT6c9fzpVSqMNeWnRe13i1bs2W0w1QE7I CSf+C4iFLVBC7EppLZdngFv776KNNBXYcDEgAJb52VbGqNi5/Vk3PFbOEZgAs8i1 Zgw6mXSM1ast1i+a7ohFJ/U0rKup8pE= -----END CERTIFICATE-----Generated at Sat Aug 23 22:02:59 2025 by rpki-client