$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c70dbfee-845c-3917-bfbd-449bc42023fa.roa File: c70dbfee-845c-3917-bfbd-449bc42023fa.roa (raw, json) Hash identifier: 1I9tKyPspL0DlT9SfawETvIk6Cz1II6VH1P9lCr27E4= Subject key identifier: 99:A4:E5:82:58:24:13:15:75:59:30:10:A4:A5:33:20:BB:AB:E9:FE Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBCD272EA04AD999546900 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c70dbfee-845c-3917-bfbd-449bc42023fa.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 199.91.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cd:27:2e:a0:4a:d9:99:54:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=24beeab4-52b3-41a1-86b3-815a7974480e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:3f:cc:fe:15:80:57:0f:ae:2e:4b:95:c0: 1d:7c:57:d2:95:da:66:1c:5d:c7:94:49:dd:07:99: 16:0c:ce:b4:41:dc:8c:ea:56:7a:08:9e:cd:1f:fd: 87:32:00:55:ad:25:0e:4c:60:5c:a4:7a:0d:c9:65: ef:be:b3:dc:d8:ae:e4:a7:89:3d:ca:65:0c:cc:82: 37:e2:a7:64:fe:be:67:57:2c:b7:dd:9a:d4:e4:2d: 01:6c:00:8d:3d:76:e6:d9:aa:0e:dc:cc:94:00:f6: 78:5f:f1:6c:80:e9:bb:79:e9:f7:31:1a:ec:5b:4b: 25:95:ec:7f:54:9c:75:77:2b:17:0f:c3:eb:58:d8: ba:9b:45:94:a1:1d:d4:3a:58:4e:98:92:8a:44:42: f7:7c:ae:1c:05:0f:29:47:57:29:da:3e:eb:d7:2e: 12:0f:1b:6d:d7:1e:5a:c2:ae:2f:f4:0e:60:4b:bc: 08:55:5c:49:5b:c1:c6:56:d0:e8:17:00:9b:6f:92: c3:9c:11:da:d9:56:69:0b:a0:51:a2:ad:2a:27:cb: c2:0f:37:05:59:fc:7a:41:72:ef:9e:5a:3e:d2:13: ca:6a:aa:6b:1c:5d:d0:45:10:41:7f:bd:5e:a9:2d: 29:0d:b1:58:77:81:4e:a8:e1:f7:bf:c4:17:81:22: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A4:E5:82:58:24:13:15:75:59:30:10:A4:A5:33:20:BB:AB:E9:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c70dbfee-845c-3917-bfbd-449bc42023fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a0:ca:40:76:64:97:28:18:f6:ba:f1:b0:7b:e3:5f:f4:64: 31:b3:58:13:f8:21:9b:59:0d:3a:3a:ce:6b:dc:63:0f:d7:d7: 5b:0c:9c:c2:3a:e5:17:5a:49:cc:54:c5:5e:1c:45:c6:13:e9: f8:ec:50:b7:f8:37:dd:bb:8e:89:a4:e3:bd:13:d7:35:78:05: 2e:7e:81:08:03:5a:e4:13:d4:c1:c8:b0:ba:ba:d4:99:8c:f0: 89:46:dd:c2:91:c2:6b:5a:ce:81:77:60:69:0e:80:02:25:5c: 86:ee:7c:39:d1:4e:74:c6:20:89:6a:7a:83:f8:91:17:31:5f: a9:e8:4b:6b:c0:15:a1:06:53:6b:25:7e:9b:16:db:2b:84:e6: 6d:b7:b6:5c:e1:ee:38:e5:c9:11:75:59:32:a7:4d:c3:2b:46: e1:44:e4:bb:32:63:2d:1a:b1:fc:e1:59:37:12:5e:ac:78:9f: 57:2d:f3:6d:91:80:f8:5d:b9:df:1c:5f:23:8b:c8:9e:18:42: d0:75:e8:f8:9d:b6:88:72:e1:ff:e3:bd:39:11:bb:ee:be:bc: a1:f9:9f:f6:d1:6d:f2:26:b0:30:5e:4c:91:2d:11:8d:4c:8a: 30:41:d2:43:87:b3:19:0f:59:05:40:02:ff:7d:0f:14:8b:60: a5:ba:85:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey80nLqBK2ZlUaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MjRiZWVhYjQtNTJiMy00MWExLTg2YjMtODE1YTc5NzQ0ODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI8/zP4VgFcPri5LlcAdfFfSldpmHF3HlEnd B5kWDM60QdyM6lZ6CJ7NH/2HMgBVrSUOTGBcpHoNyWXvvrPc2K7kp4k9ymUMzII3 4qdk/r5nVyy33ZrU5C0BbACNPXbm2aoO3MyUAPZ4X/FsgOm7een3MRrsW0sllex/ VJx1dysXD8PrWNi6m0WUoR3UOlhOmJKKREL3fK4cBQ8pR1cp2j7r1y4SDxtt1x5a wq4v9A5gS7wIVVxJW8HGVtDoFwCbb5LDnBHa2VZpC6BRoq0qJ8vCDzcFWfx6QXLv nlo+0hPKaqprHF3QRRBBf71eqS0pDbFYd4FOqOH3v8QXgSJkdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmk5YJYJBMVdVkwEKSlMyC7q+n+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzcwZGJmZWUtODQ1Yy0z OTE3LWJmYmQtNDQ5YmM0MjAyM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGgykB2ZJcoGPa68bB741/0ZDGzWBP4IZtZDTo6zmvcYw/X11sMnMI6 5RdaScxUxV4cRcYT6fjsULf4N927jomk470T1zV4BS5+gQgDWuQT1MHIsLq61JmM 8IlG3cKRwmtazoF3YGkOgAIlXIbufDnRTnTGIIlqeoP4kRcxX6noS2vAFaEGU2sl fpsW2yuE5m23tlzh7jjlyRF1WTKnTcMrRuFE5LsyYy0asfzhWTcSXqx4n1ct822R gPhdud8cXyOLyJ4YQtB16Pidtohy4f/jvTkRu+6+vKH5n/bRbfImsDBeTJEtEY1M ijBB0kOHsxkPWQVAAv99DxSLYKW6hSA= -----END CERTIFICATE-----Generated at Sat Aug 23 22:12:14 2025 by rpki-client