$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa File: 249c943d-b89a-3ace-b703-d24eed8a0e72.roa (raw, json) Hash identifier: QodaAMk3vCydCF3PRJAp19rHY2gB33MxlOhg0E5vcEY= Subject key identifier: C2:C1:2B:2A:6D:22:C4:9C:EE:C3:8B:65:99:73:39:1D:2B:5C:31:33 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5B1D0316A5E4B09B79780 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b1:d0:31:6a:5e:4b:09:b7:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=8bb22ec9-db0e-447d-8f24-1c10b8ec294f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:61:ce:b1:67:2e:bf:19:c9:ac:d3:f1:e2: e6:45:84:55:76:c5:cd:e5:3c:1e:bd:78:b7:4d:aa: ff:08:17:a4:a0:50:a8:89:cc:ed:87:57:d8:83:4e: 99:17:f1:12:59:b9:b6:76:a3:ca:25:bb:81:a0:dd: fb:97:e1:ff:0e:4c:7c:24:ca:ee:3b:b3:f7:1d:67: c4:f2:55:b3:6c:fa:67:13:fc:a1:74:52:af:11:95: f1:49:41:95:6b:06:56:7a:1e:d9:23:a5:85:b9:b5: 1f:01:93:20:f1:50:1d:6a:64:e6:d6:db:83:35:d9: aa:fd:f4:72:ef:02:3c:87:1d:e1:ce:d5:16:ca:71: ed:92:7f:34:06:f7:1b:14:92:d0:bb:6a:f2:15:e2: 25:2e:3e:b7:60:92:1d:aa:ee:45:7c:08:60:21:29: 9d:c8:84:1a:f8:6e:15:bc:6c:11:74:3a:f9:54:3c: e3:88:b0:0c:fb:77:84:c1:5f:59:ef:4e:d3:b3:19: 8e:54:d3:f0:ee:ae:bc:28:28:eb:84:f9:fd:49:d3: 41:db:6c:6d:c2:1b:0d:25:a1:5f:47:a2:5c:d6:6f: 76:f9:8c:e5:b2:2a:83:54:b3:4d:e4:68:e6:30:c9: 0b:aa:43:24:7a:fd:ef:9d:60:ce:26:76:26:44:f0: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C1:2B:2A:6D:22:C4:9C:EE:C3:8B:65:99:73:39:1D:2B:5C:31:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9b:dd:1a:5a:21:2a:3b:7f:c7:95:bf:19:db:e8:24:49:f6: f1:49:3c:a8:3b:12:6c:75:04:57:7b:fe:bb:a6:66:8b:78:64: 6b:18:55:30:62:ec:f2:65:6a:36:28:f3:ee:da:cd:d2:53:81: ea:0d:09:b6:86:18:24:5d:91:00:31:b2:4a:45:fe:a4:db:2e: 14:5d:09:2b:a1:4c:84:3f:4d:d3:f4:cd:34:3a:b4:14:94:f9: 40:1e:27:cb:1a:12:39:c4:73:84:45:8d:c5:c9:20:3d:34:93: b8:23:a6:6e:87:0b:6b:ec:d0:58:ca:d9:6c:68:f3:4e:0a:8f: 1d:55:9c:85:40:df:b7:fe:c8:5f:a5:79:06:e7:c3:6d:4f:d6: 75:8e:dc:1e:3c:f7:9b:e5:f8:75:62:47:4d:68:3a:49:8d:58: f5:91:37:26:47:0c:16:27:e6:ec:8b:3f:67:80:ee:47:8f:31: 3e:8f:bf:0c:6c:84:75:cf:b0:16:fc:93:b2:a5:4d:65:cc:96: 41:9a:9a:6e:5c:fc:da:0f:c6:2e:43:50:dd:42:a0:0b:48:0f: 6b:fb:c4:d1:74:c9:99:59:6e:cc:51:68:eb:55:fd:d4:0a:b1: 6f:88:b4:e5:b6:08:1d:33:c7:09:fa:48:bf:91:6b:f4:60:84: 6f:a4:e1:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbHQMWpeSwm3l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk OGJiMjJlYzktZGIwZS00NDdkLThmMjQtMWMxMGI4ZWMyOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMVhzrFnLr8ZyazT8eLmRYRVdsXN5TwevXi3 Tar/CBekoFCoiczth1fYg06ZF/ESWbm2dqPKJbuBoN37l+H/Dkx8JMruO7P3HWfE 8lWzbPpnE/yhdFKvEZXxSUGVawZWeh7ZI6WFubUfAZMg8VAdamTm1tuDNdmq/fRy 7wI8hx3hztUWynHtkn80BvcbFJLQu2ryFeIlLj63YJIdqu5FfAhgISmdyIQa+G4V vGwRdDr5VDzjiLAM+3eEwV9Z707TsxmOVNPw7q68KCjrhPn9SdNB22xtwhsNJaFf R6Jc1m92+YzlsiqDVLNN5GjmMMkLqkMkev3vnWDOJnYmRPDF2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLBKyptIsSc7sOLZZlzOR0rXDEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMjQ5Yzk0M2QtYjg5YS0z YWNlLWI3MDMtZDI0ZWVkOGEwZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmb3RpaISo7f8eVvxnb6CRJ9vFJPKg7Emx1BFd7/rumZot4ZGsYVTBi 7PJlajYo8+7azdJTgeoNCbaGGCRdkQAxskpF/qTbLhRdCSuhTIQ/TdP0zTQ6tBSU +UAeJ8saEjnEc4RFjcXJID00k7gjpm6HC2vs0FjK2Wxo804Kjx1VnIVA37f+yF+l eQbnw21P1nWO3B4895vl+HViR01oOkmNWPWRNyZHDBYn5uyLP2eA7kePMT6Pvwxs hHXPsBb8k7KlTWXMlkGamm5c/NoPxi5DUN1CoAtID2v7xNF0yZlZbsxRaOtV/dQK sW+ItOW2CB0zxwn6SL+Ra/RghG+k4f0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:34:15 2025 by rpki-client