$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa File: 08662a15-e04a-359b-8c07-283ea782a9b0.roa (raw, json) Hash identifier: PfiQAkc9dKi1RIOfT5UIfIoA0x6/esZXi5I9HvZhWAY= Subject key identifier: 45:43:63:38:1A:44:CE:13:01:15:AE:75:10:EB:FF:78:E9:71:91:8B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5B1F3F05C8EAC64E403F0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b1:f3:f0:5c:8e:ac:64:e4:03:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=ba36aaf6-24aa-4292-aeef-1bfe136d7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8e:c6:53:75:cd:9c:24:98:55:54:ab:54:42: 0b:c2:7b:57:be:b0:49:e1:0e:ce:0e:37:7d:ab:58: 63:da:bc:fd:24:7d:17:7d:45:27:24:27:4c:6c:db: 6e:44:7a:71:1c:32:03:71:1f:1f:25:e9:3c:e7:8f: b7:d9:b5:67:a4:bf:dc:b6:20:16:ce:3f:06:df:c3: 43:64:41:4b:b6:74:41:3b:f7:fe:09:d2:aa:eb:51: 4d:a5:64:1d:a6:b2:f9:cb:ba:58:aa:26:8e:97:e2: 72:65:75:83:55:0d:87:62:f6:8e:dd:02:0b:45:f2: 9d:98:52:ea:32:d5:0a:ce:86:b5:85:5a:db:6c:d9: 7c:2c:9a:d9:eb:ef:95:8a:1a:4b:88:50:28:03:db: aa:9b:eb:74:09:39:8e:1a:61:fc:3f:13:7b:29:d6: 52:9f:10:88:87:91:24:1f:aa:30:05:dd:76:f1:e0: 7a:21:08:13:6c:ee:07:d7:82:af:31:0d:94:d3:07: 1e:d1:62:a9:bd:c0:9f:9a:89:27:79:72:bb:d4:c8: 6f:0a:6a:84:ef:ae:5f:ba:d6:4d:24:d7:37:d1:70: 04:05:ce:7e:32:bc:21:9e:0c:70:e2:64:12:3e:64: 56:6b:8a:5d:7b:57:a3:24:53:99:97:54:af:50:86: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:43:63:38:1A:44:CE:13:01:15:AE:75:10:EB:FF:78:E9:71:91:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:10:98:28:e7:6f:fe:b2:33:f0:75:0f:07:3b:03:d8:08:cf: 3e:ed:13:d8:5a:bd:f6:10:89:f1:d0:b5:52:da:ef:37:e1:52: b3:67:07:24:0f:75:29:be:2a:67:91:e6:b0:c5:f5:c5:4d:91: f5:0b:60:b0:24:65:fc:cf:4a:44:db:e1:54:b3:cc:76:a9:3d: af:70:d8:2e:db:fb:d7:2a:8c:36:24:dd:f6:1b:01:0a:fa:89: 86:60:f6:cd:0f:03:68:0f:fe:8e:d1:49:90:c1:32:bc:25:25: 9c:ba:50:ff:3e:98:6a:2b:19:61:ed:50:cb:ce:69:40:2f:d3: 73:ad:16:f5:67:c0:69:30:6b:a8:96:7f:6f:4b:4f:e4:23:da: 5f:5b:16:3c:4f:de:88:49:e8:1c:2f:67:80:af:cd:0c:ce:c8: 91:91:19:e6:63:7a:bb:8d:f8:c3:f7:16:e9:b4:8f:cd:da:70: 11:37:c0:b5:b3:4c:78:47:01:ca:38:ff:30:26:76:fd:dd:ab: f5:98:82:04:24:27:ea:8e:ec:0d:7a:34:35:79:43:9f:e3:16: 26:8c:34:59:79:ac:f2:f2:bf:11:35:64:a5:ec:4a:d0:62:09: 6a:37:ec:e6:1d:2e:43:31:dd:06:66:02:4e:d4:4d:5c:d6:11: 2f:7b:b7:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbHz8FyOrGTkA/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YmEzNmFhZjYtMjRhYS00MjkyLWFlZWYtMWJmZTEzNmQ3ZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY7GU3XNnCSYVVSrVEILwntXvrBJ4Q7ODjd9 q1hj2rz9JH0XfUUnJCdMbNtuRHpxHDIDcR8fJek854+32bVnpL/ctiAWzj8G38ND ZEFLtnRBO/f+CdKq61FNpWQdprL5y7pYqiaOl+JyZXWDVQ2HYvaO3QILRfKdmFLq MtUKzoa1hVrbbNl8LJrZ6++VihpLiFAoA9uqm+t0CTmOGmH8PxN7KdZSnxCIh5Ek H6owBd128eB6IQgTbO4H14KvMQ2U0wce0WKpvcCfmokneXK71MhvCmqE765futZN JNc30XAEBc5+Mrwhngxw4mQSPmRWa4pde1ejJFOZl1SvUIaJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVDYzgaRM4TARWudRDr/3jpcZGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDg2NjJhMTUtZTA0YS0z NTliLThjMDctMjgzZWE3ODJhOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoQmCjnb/6yM/B1Dwc7A9gIzz7tE9havfYQifHQtVLa7zfhUrNnByQP dSm+KmeR5rDF9cVNkfULYLAkZfzPSkTb4VSzzHapPa9w2C7b+9cqjDYk3fYbAQr6 iYZg9s0PA2gP/o7RSZDBMrwlJZy6UP8+mGorGWHtUMvOaUAv03OtFvVnwGkwa6iW f29LT+Qj2l9bFjxP3ohJ6BwvZ4CvzQzOyJGRGeZjeruN+MP3Fum0j83acBE3wLWz THhHAco4/zAmdv3dq/WYggQkJ+qO7A16NDV5Q5/jFiaMNFl5rPLyvxE1ZKXsStBi CWo37OYdLkMx3QZmAk7UTVzWES97tws= -----END CERTIFICATE-----Generated at Wed Nov 5 09:20:21 2025 by rpki-client