$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa File: ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa (raw, json) Hash identifier: xc34gSjex5C/sNUVJW2gQ1NxLh/9oOqS4WVoPiRwK5U= Subject key identifier: D0:DE:EC:2B:AC:0D:DD:6D:AA:BA:60:A3:28:77:44:30:0B:30:E2:CF Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584AEDC28536A382AD0EFFB32280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa Signing time: Thu 21 Aug 2025 09:39:17 +0000 ROA not before: Thu 21 Aug 2025 09:39:17 +0000 ROA not after: Wed 19 Nov 2025 10:39:17 +0000 asID: 16839 IP address blocks: 149.96.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:c2:85:36:a3:82:ad:0e:ff:b3:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 21 09:39:17 2025 GMT Not After : Nov 19 10:39:17 2025 GMT Subject: CN=098d47d3-5803-4c5f-9fce-d2fc6a774c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:93:96:5c:2b:b0:76:33:5c:23:5f:0d:c4:b2: 9b:51:79:e4:39:e0:d5:8c:7b:fc:61:41:74:eb:14: da:5a:03:4a:ab:52:52:7a:88:58:c4:a3:2b:df:44: 6b:21:8f:9c:ff:78:ce:6f:7a:ff:fb:95:4a:80:3f: 34:a3:11:09:c2:d3:78:dd:a7:a4:c8:b5:d6:14:4d: ab:94:ee:26:2d:08:b4:61:eb:09:5b:32:64:6f:b7: 31:7a:ef:83:01:4d:bf:a1:ed:a6:99:a4:a8:3f:ca: 5c:4b:7d:d4:4d:71:9a:c0:f3:8c:49:a0:8e:47:48: 19:57:49:17:b3:e6:05:1a:82:5c:6e:aa:a9:0a:6c: 7c:b4:ee:f3:1b:26:6a:04:b6:83:99:1e:c7:a1:5e: 2e:63:07:4f:05:c8:c8:98:0b:f3:25:b4:ad:f5:8c: d0:e7:49:8d:2d:6f:9e:48:36:1c:44:98:8f:31:6e: 0a:a4:9a:51:3f:2f:0f:5d:1a:35:da:f4:0b:77:e6: 9a:bb:d7:da:c2:d6:47:e3:b6:35:5d:5f:e3:53:2f: 61:fc:2d:57:2f:92:c0:3b:d4:e8:29:ea:f5:f9:8a: d8:40:79:60:b8:02:84:49:07:fa:4f:72:90:5b:0e: af:f1:34:24:b8:93:00:56:1a:d0:18:0c:00:7a:57: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DE:EC:2B:AC:0D:DD:6D:AA:BA:60:A3:28:77:44:30:0B:30:E2:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f2:52:ca:87:dc:a7:89:77:f9:9b:b7:60:6f:a5:4c:fa:0b: 71:06:61:01:0c:ea:8c:cc:99:e3:8e:ed:47:e8:a0:92:32:93: 6a:dd:92:61:31:c8:61:b6:4f:2f:ed:13:12:61:bc:b8:ac:12: 4d:53:9c:c6:49:48:11:d3:15:89:c4:5e:cb:d2:da:b8:81:48: bf:23:01:55:3f:0e:14:1f:99:e5:78:95:32:1e:8b:76:4f:40: 86:da:f9:7d:f2:da:6f:0d:0d:62:c4:2d:1e:2c:2d:5a:a5:0e: f7:ba:db:4d:2b:a3:87:6b:08:34:07:bc:05:25:cb:75:7a:fa: b3:5b:1e:85:90:de:77:1f:f1:65:9b:4a:40:5b:ca:aa:81:42: e3:4f:b1:3f:87:69:49:6c:f1:d0:03:42:89:92:bf:c5:5a:c2: 68:75:a8:c0:46:42:7c:6e:f2:4c:e8:fb:80:74:0d:6f:dd:bd: d7:b4:58:12:fe:fe:fa:3b:18:d9:e7:1e:af:bc:1a:c9:ca:e4: 0d:e4:c4:3c:d7:82:ad:96:c2:53:55:40:9b:09:b5:27:c5:82: 00:2c:cc:a6:83:d4:56:5f:4c:23:23:5e:94:9d:e2:0e:f6:60: c6:71:7f:6b:a8:b4:70:ac:a6:57:03:37:51:d6:0e:d6:26:b6: 9d:c5:d8:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErtwoU2o4KtDv+zIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgyMTA5MzkxN1oXDTI1MTExOTEwMzkxN1owLzEtMCsGA1UEAxMk MDk4ZDQ3ZDMtNTgwMy00YzVmLTlmY2UtZDJmYzZhNzc0YzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JOWXCuwdjNcI18NxLKbUXnkOeDVjHv8YUF0 6xTaWgNKq1JSeohYxKMr30RrIY+c/3jOb3r/+5VKgD80oxEJwtN43aekyLXWFE2r lO4mLQi0YesJWzJkb7cxeu+DAU2/oe2mmaSoP8pcS33UTXGawPOMSaCOR0gZV0kX s+YFGoJcbqqpCmx8tO7zGyZqBLaDmR7HoV4uYwdPBcjImAvzJbSt9YzQ50mNLW+e SDYcRJiPMW4KpJpRPy8PXRo12vQLd+aau9fawtZH47Y1XV/jUy9h/C1XL5LAO9To Ker1+YrYQHlguAKESQf6T3KQWw6v8TQkuJMAVhrQGAwAelcnQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDe7CusDd1tqrpgoyh3RDALMOLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2EzMzAxZmYtY2VkNC0z ODcwLWJlMjYtODllMmNkZTVhMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvyUsqH3KeJd/mbt2BvpUz6C3EGYQEM6ozMmeOO7UfooJIyk2rdkmEx yGG2Ty/tExJhvLisEk1TnMZJSBHTFYnEXsvS2riBSL8jAVU/DhQfmeV4lTIei3ZP QIba+X3y2m8NDWLELR4sLVqlDve6200ro4drCDQHvAUly3V6+rNbHoWQ3ncf8WWb SkBbyqqBQuNPsT+HaUls8dADQomSv8Vawmh1qMBGQnxu8kzo+4B0DW/dvde0WBL+ /vo7GNnnHq+8GsnK5A3kxDzXgq2WwlNVQJsJtSfFggAszKaD1FZfTCMjXpSd4g72 YMZxf2uotHCsplcDN1HWDtYmtp3F2Bw= -----END CERTIFICATE-----Generated at Sat Aug 23 22:12:07 2025 by rpki-client