$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa File: 3ccc2b69-3869-30a1-8033-735bd84893f6.roa (raw, json) Hash identifier: g/MmyAO6wYKvj4g3eQnjz8SgoOLIWreh3TwtUbEFqDg= Subject key identifier: B2:0C:2E:67:03:5C:C9:EA:01:1E:86:6E:EE:52:42:0E:A2:F9:CD:68 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AC43E0A4D9D0251E76C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 199.91.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ac:43:e0:a4:d9:d0:25:1e:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=bc3e2484-7005-42d4-84df-2fada323257f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:6b:82:2c:08:46:1d:98:f8:51:04:37:c0: cd:a3:18:8a:f1:d8:67:a0:d2:2a:60:24:bc:89:ae: 83:df:3f:99:61:54:b4:40:e4:8b:06:32:81:cd:50: 32:c0:3c:a4:1e:d7:0a:60:27:dc:4e:59:1a:01:51: d5:de:b0:ef:5d:26:7c:82:1f:28:d4:c2:1a:32:a7: 61:ec:41:aa:50:d9:e1:a1:37:28:cf:a2:9e:06:62: 1c:29:6d:32:7f:b9:10:6b:6e:97:59:3e:91:2b:e3: 74:32:5b:30:a1:f0:b5:f5:f5:96:57:90:fb:49:9d: 1c:f2:0a:85:41:e2:1d:23:74:7a:05:99:d5:7a:db: d7:ba:6e:00:c7:44:07:72:0c:6d:f7:a0:a0:3d:9c: f8:a1:e5:81:52:c6:a0:a8:a5:43:44:65:b7:c3:65: d6:81:34:e7:21:f0:39:d6:2b:0e:5c:4f:5d:7c:b1: de:7e:8d:8e:15:45:9c:03:62:9d:b0:3f:11:d6:f6: fe:c8:df:61:51:40:7e:c0:36:f9:b2:01:c6:67:7c: 3c:54:9d:bb:0f:0a:a6:85:ea:a2:51:0b:03:35:58: 65:2d:c6:65:bb:9a:37:cd:ce:f8:bf:a7:67:c3:cb: dc:30:d2:2a:64:13:fe:8c:c8:88:84:77:7e:ef:b1: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0C:2E:67:03:5C:C9:EA:01:1E:86:6E:EE:52:42:0E:A2:F9:CD:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:df:a1:fd:6e:01:01:0a:1a:83:f5:e7:1a:4d:b9:3e:cd:a6: ab:6d:90:ed:29:c1:a5:d2:34:bc:a3:43:5b:7f:a7:24:8e:44: 05:58:f3:1b:02:b0:8b:1d:ec:0b:db:b1:e2:ca:4a:91:ac:14: d8:08:ad:fe:2e:c7:dd:b3:9c:2f:03:2e:44:36:a3:02:20:0d: 93:88:b6:41:89:50:89:7a:19:26:7e:60:43:08:d9:14:8f:f5: f5:9c:0e:2b:e5:2a:64:06:e6:98:23:b4:6f:4b:57:e4:53:6d: 5d:cd:49:7d:17:8b:11:1f:5d:51:60:d8:17:2e:06:6a:df:b6: 7e:b3:22:a5:4a:68:eb:3d:62:b6:eb:5c:9e:f4:4a:aa:7c:9b: 3e:22:ce:6a:98:cb:35:f1:01:d6:0c:cf:31:5c:3b:56:ed:2f: 48:49:f0:df:e4:6f:db:54:11:19:30:16:7d:0c:d7:90:23:16: 89:29:cd:1e:47:d5:8f:ba:63:3b:71:ed:6a:fe:d7:9c:e3:c3: 27:fa:06:6b:fc:2e:c1:61:75:a8:c2:40:64:c3:78:73:54:24: 18:91:9e:d2:f1:a2:cb:f6:6d:3b:0c:45:79:c9:ac:fa:07:0f: 10:0e:51:e8:d1:5f:5c:14:fd:25:2f:e9:8c:11:d5:2f:a0:dc: 7d:6e:66:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paxD4KTZ0CUedsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YmMzZTI0ODQtNzAwNS00MmQ0LTg0ZGYtMmZhZGEzMjMyNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb5rgiwIRh2Y+FEEN8DNoxiK8dhnoNIqYCS8 ia6D3z+ZYVS0QOSLBjKBzVAywDykHtcKYCfcTlkaAVHV3rDvXSZ8gh8o1MIaMqdh 7EGqUNnhoTcoz6KeBmIcKW0yf7kQa26XWT6RK+N0MlswofC19fWWV5D7SZ0c8gqF QeIdI3R6BZnVetvXum4Ax0QHcgxt96CgPZz4oeWBUsagqKVDRGW3w2XWgTTnIfA5 1isOXE9dfLHefo2OFUWcA2KdsD8R1vb+yN9hUUB+wDb5sgHGZ3w8VJ27Dwqmheqi UQsDNVhlLcZlu5o3zc74v6dnw8vcMNIqZBP+jMiIhHd+77H/EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIMLmcDXMnqAR6Gbu5SQg6i+c1oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvM2NjYzJiNjktMzg2OS0z MGExLTgwMzMtNzM1YmQ4NDg5M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7fof1uAQEKGoP15xpNuT7NpqttkO0pwaXSNLyjQ1t/pySORAVY8xsC sIsd7AvbseLKSpGsFNgIrf4ux92znC8DLkQ2owIgDZOItkGJUIl6GSZ+YEMI2RSP 9fWcDivlKmQG5pgjtG9LV+RTbV3NSX0XixEfXVFg2BcuBmrftn6zIqVKaOs9Yrbr XJ70Sqp8mz4izmqYyzXxAdYMzzFcO1btL0hJ8N/kb9tUERkwFn0M15AjFokpzR5H 1Y+6Yztx7Wr+15zjwyf6Bmv8LsFhdajCQGTDeHNUJBiRntLxosv2bTsMRXnJrPoH DxAOUejRX1wU/SUv6YwR1S+g3H1uZj0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:16 2025 by rpki-client