$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa File: d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa (raw, json) Hash identifier: vZL0dyub2O5K3UNh66RTV5BD0p9C6LsHbtPOlSkToZg= Subject key identifier: 07:27:EF:E4:59:42:18:11:2D:3C:CC:6A:98:F0:FE:FD:B2:4D:B0:B5 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC58FC29B88AB3A8BD600 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 149.96.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c5:8f:c2:9b:88:ab:3a:8b:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=538f045e-38e8-407e-b9c2-95418b76c7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:02:b4:1b:78:b2:e4:17:3b:21:51:ae:c7: ee:3f:51:b9:eb:56:b0:b5:76:36:f1:40:24:95:c1: da:b5:26:73:67:3b:7a:98:01:a6:56:66:6b:11:b9: 3c:d4:e2:f4:ad:81:14:9c:90:07:22:e5:8b:3e:7c: b2:96:48:2c:82:78:ba:fc:70:f9:02:f4:42:38:54: 11:02:b1:8b:ed:86:2f:cb:ff:0d:17:e5:7a:34:25: 34:0d:d3:18:0f:4a:9a:02:27:56:30:dc:17:56:db: 08:df:60:40:d6:9b:d1:b7:2f:81:d7:38:3a:41:4b: d3:13:2a:b1:d0:eb:95:d1:06:f5:a8:4d:71:b8:4a: 99:de:34:fa:a1:a7:1f:26:81:ab:07:71:db:df:2d: 0b:c7:c7:50:0b:dc:be:68:67:f8:82:a2:d8:40:e5: 9f:ab:0f:39:3e:54:97:45:d0:25:af:55:81:73:55: 0c:34:6e:dc:55:03:4d:9a:6b:18:26:e0:85:8a:05: 79:12:f4:ab:bb:ee:06:4b:78:e8:d7:14:3f:75:c7: 06:6d:be:ac:f1:ea:e0:71:9e:8f:7d:2d:b9:af:03: d5:52:d9:69:66:ae:6c:65:8e:ea:d3:a0:5f:b2:53: 7c:d2:1e:51:ac:db:7c:8c:c4:da:0e:a2:28:8f:c0: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:27:EF:E4:59:42:18:11:2D:3C:CC:6A:98:F0:FE:FD:B2:4D:B0:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:dc:ed:54:6b:bb:a3:36:01:18:92:af:e3:10:b5:5e:11:be: f6:a0:ff:a8:a2:3e:23:e1:13:e0:6a:c4:57:b0:c4:c7:78:c1: 5e:66:af:8e:28:29:b1:28:64:93:23:49:30:e3:15:71:a1:7b: 55:d3:b6:86:2a:3e:f5:19:6b:1f:d2:7d:89:92:57:ff:ec:ba: 35:fe:8c:68:36:9a:e7:25:4a:07:6a:35:2f:36:e3:77:c3:6a: 73:2e:ea:d4:f1:0b:1f:e9:df:93:a8:26:74:66:7a:99:f1:ab: 56:52:dd:70:64:9e:57:c1:dc:b4:6c:30:51:c6:78:c9:65:4d: 89:13:0c:34:6e:61:93:fe:39:aa:d4:fb:90:15:3e:ef:9e:e5: 66:be:21:7f:33:b1:cd:c9:1b:cd:93:17:8b:1e:53:ee:c6:4a: de:5d:d0:32:80:cb:0d:a3:91:7e:6b:eb:96:d9:f5:27:56:c6: 9d:98:58:11:41:bb:eb:eb:8e:81:3d:dc:0c:72:5a:dd:a8:38: d6:08:f4:46:36:e5:a2:b1:5b:bb:9b:b8:35:e7:d7:79:31:a3: 8d:9c:55:91:fd:a2:1d:c3:f9:fa:2a:87:c5:a3:47:df:57:87: 6a:e1:07:a4:34:c5:38:5a:fc:fa:4e:ed:09:67:9e:57:c1:3b: 3a:c6:7a:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8WPwpuIqzqL1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NTM4ZjA0NWUtMzhlOC00MDdlLWI5YzItOTU0MThiNzZjN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VMCtBt4suQXOyFRrsfuP1G561awtXY28UAk lcHatSZzZzt6mAGmVmZrEbk81OL0rYEUnJAHIuWLPnyylkgsgni6/HD5AvRCOFQR ArGL7YYvy/8NF+V6NCU0DdMYD0qaAidWMNwXVtsI32BA1pvRty+B1zg6QUvTEyqx 0OuV0Qb1qE1xuEqZ3jT6oacfJoGrB3Hb3y0Lx8dQC9y+aGf4gqLYQOWfqw85PlSX RdAlr1WBc1UMNG7cVQNNmmsYJuCFigV5EvSru+4GS3jo1xQ/dccGbb6s8ergcZ6P fS25rwPVUtlpZq5sZY7q06BfslN80h5RrNt8jMTaDqIoj8DUNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcn7+RZQhgRLTzMapjw/v2yTbC1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZDJiYWIxZjgtMjVjYS0z ZDA3LWFlOWItOGY4NWM0YzVhYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPc7VRru6M2ARiSr+MQtV4Rvvag/6iiPiPhE+BqxFewxMd4wV5mr44o KbEoZJMjSTDjFXGhe1XTtoYqPvUZax/SfYmSV//sujX+jGg2muclSgdqNS8243fD anMu6tTxCx/p35OoJnRmepnxq1ZS3XBknlfB3LRsMFHGeMllTYkTDDRuYZP+OarU +5AVPu+e5Wa+IX8zsc3JG82TF4seU+7GSt5d0DKAyw2jkX5r65bZ9SdWxp2YWBFB u+vrjoE93AxyWt2oONYI9EY25aKxW7ubuDXn13kxo42cVZH9oh3D+foqh8WjR99X h2rhB6Q0xTha/PpO7QlnnlfBOzrGehg= -----END CERTIFICATE-----Generated at Sat Aug 23 22:02:55 2025 by rpki-client