$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa File: 0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa (raw, json) Hash identifier: PPQZK2zpa6qRK2h39g3EsI+O18DlDy4nW6/rvlUs/Ko= Subject key identifier: EA:77:44:8D:BB:7C:26:95:63:C4:66:13:1A:87:D1:9E:8D:52:BE:0D Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5ABB0F4000979006BADA0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 199.91.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ab:b0:f4:00:09:79:00:6b:ad:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=880c1b1d-b04e-4e1d-be3a-4c6534d08323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:ea:1f:22:03:b5:c5:86:91:a0:18:73:f2: a6:06:4c:21:9e:70:78:77:78:78:cf:20:11:d8:b2: 64:fe:14:1b:65:3e:e9:2c:89:c0:18:d6:4f:4c:8e: 2c:23:f9:6f:2c:e1:7a:f4:c6:4c:fc:ae:84:79:22: ad:b9:d8:20:62:6e:e8:ba:93:e4:37:49:1b:fb:40: a5:1c:a0:6b:fe:a2:1f:53:e0:84:d5:8e:38:8d:d5: c3:27:c0:8e:e8:89:ce:dc:b5:75:62:3f:28:57:22: 99:f3:5e:4e:7b:23:4b:f2:21:62:22:9d:80:84:79: b5:bf:53:c5:b8:4d:ad:e1:68:18:55:00:ae:25:cb: 1f:c8:c9:fc:f5:37:20:42:ee:e9:57:a7:b5:37:89: 91:c1:f8:87:d1:43:d8:4d:f3:90:e4:4b:e6:24:42: 00:b7:4a:69:be:34:8c:84:5e:0f:b5:88:1e:93:de: c2:78:eb:15:aa:8c:f8:0e:86:fb:d7:8f:60:b5:6e: a9:11:01:38:09:be:7b:e4:18:14:53:4d:0f:af:3c: 2e:6c:1b:eb:bc:15:f7:df:b7:75:c5:ab:c7:d3:a5: fd:e1:a6:44:a3:1f:ce:32:ce:2d:6b:d7:49:ba:10: 75:c7:04:e1:4d:29:16:7d:a8:11:6f:7d:c1:8e:4a: 88:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:77:44:8D:BB:7C:26:95:63:C4:66:13:1A:87:D1:9E:8D:52:BE:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:11:40:03:c8:0e:47:9b:96:ec:db:80:11:6c:2c:58:cc:47: fe:90:fd:38:62:fe:27:91:f1:6a:4b:2a:34:b5:ed:2f:ba:63: 15:c7:e6:e3:a0:b4:37:e4:52:61:c6:e7:60:9e:4f:92:09:ec: 08:24:7f:72:6b:1f:73:f9:5f:2a:51:d8:e9:17:6d:28:be:be: 5c:9e:3c:99:2c:8b:a5:8d:99:fd:df:1b:ae:5d:72:40:e9:8c: 29:e0:b5:4d:2c:1a:2e:d1:67:a6:00:ea:e4:07:9c:30:52:e2: 44:39:87:51:58:88:c9:cd:ad:31:5b:4c:a7:f2:1a:c8:f1:62: 8a:5a:5b:4d:95:f5:a5:a1:cd:60:3d:ab:05:cd:ac:4f:7e:cf: d7:c0:a6:1d:6f:ae:6a:b8:a8:ea:cc:79:e6:0c:e7:7f:da:bc: 17:6d:61:1a:e5:33:cf:d7:f7:a2:8d:79:87:d6:73:2f:c8:8f: 3a:fe:3b:36:4b:48:48:ff:e9:c4:91:d5:4b:2a:12:cb:6c:10: c0:46:70:a4:a9:8a:62:59:09:6d:b1:32:10:e8:4e:13:e7:c2: 53:53:a6:14:e4:df:75:05:eb:c7:89:36:a5:09:8f:bf:b8:5e: 01:9c:a2:98:db:bc:eb:90:9e:89:4c:e4:d4:94:9f:42:ee:72: 5a:4f:85:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pauw9AAJeQBrraAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ODgwYzFiMWQtYjA0ZS00ZTFkLWJlM2EtNGM2NTM0ZDA4MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquTqHyIDtcWGkaAYc/KmBkwhnnB4d3h4zyAR 2LJk/hQbZT7pLInAGNZPTI4sI/lvLOF69MZM/K6EeSKtudggYm7oupPkN0kb+0Cl HKBr/qIfU+CE1Y44jdXDJ8CO6InO3LV1Yj8oVyKZ815OeyNL8iFiIp2AhHm1v1PF uE2t4WgYVQCuJcsfyMn89TcgQu7pV6e1N4mRwfiH0UPYTfOQ5EvmJEIAt0ppvjSM hF4PtYgek97CeOsVqoz4Dob7149gtW6pEQE4Cb575BgUU00PrzwubBvrvBX337d1 xavH06X94aZEox/OMs4ta9dJuhB1xwThTSkWfagRb33BjkqIPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp3RI27fCaVY8RmExqH0Z6NUr4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGFkMDRlOTctNTFlZi0z OWIyLWE5MGUtNzk4ZjhlNDVjNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIRQAPIDkebluzbgBFsLFjMR/6Q/Thi/ieR8WpLKjS17S+6YxXH5uOg tDfkUmHG52CeT5IJ7Agkf3JrH3P5XypR2OkXbSi+vlyePJksi6WNmf3fG65dckDp jCngtU0sGi7RZ6YA6uQHnDBS4kQ5h1FYiMnNrTFbTKfyGsjxYopaW02V9aWhzWA9 qwXNrE9+z9fAph1vrmq4qOrMeeYM53/avBdtYRrlM8/X96KNeYfWcy/Ijzr+OzZL SEj/6cSR1UsqEstsEMBGcKSpimJZCW2xMhDoThPnwlNTphTk33UF68eJNqUJj7+4 XgGcopjbvOuQnolM5NSUn0LuclpPhcc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:20:52 2025 by rpki-client