$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/58b61c4f-d981-3cb0-9bb1-db7fe9ab93cc.roa File: 58b61c4f-d981-3cb0-9bb1-db7fe9ab93cc.roa (raw, json) Hash identifier: A1M4/rxicsB1VMkLeJ49Prh2PPYOytgYbe/hGqGfohk= Subject key identifier: 98:AB:6B:4D:79:52:FE:4F:99:CA:2A:0E:C2:7F:FD:85:CB:D6:B2:96 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AAC387FD48724B9DD540 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/58b61c4f-d981-3cb0-9bb1-db7fe9ab93cc.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:aa:c3:87:fd:48:72:4b:9d:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=f8de7fbf-14e6-46fb-8761-f8ef82c1b042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:b2:e8:55:05:d7:36:75:19:b5:5f:b4:82: 57:37:1f:4f:9a:39:8f:73:91:3c:b9:0f:9c:bf:fa: 63:78:d2:92:96:48:47:bf:ef:ab:60:0a:79:ab:b2: c1:df:55:91:0e:4e:d9:07:6e:61:16:5c:a9:8a:96: 86:43:95:e0:9b:62:4a:0a:59:ed:8f:b6:54:00:27: db:0b:cc:19:a1:0d:66:3f:e2:22:e5:6a:cc:bf:ba: d9:4e:c5:ca:5c:a8:51:17:14:ee:3f:2c:c1:a1:5f: d8:0c:3e:ac:4e:4d:97:3d:bf:0e:0d:21:8a:11:e5: 14:9b:20:d5:0e:08:11:87:ed:5d:4f:37:4c:03:16: f6:e5:5b:18:86:07:b3:d6:5b:b9:8d:e0:6b:aa:bf: 1b:e1:9b:bf:eb:e3:5a:5a:d3:76:fb:c1:53:31:cd: 48:d9:88:e7:73:37:c3:d2:5e:83:3e:b5:0c:6f:37: 7e:86:f1:2c:79:24:cd:ae:14:c9:5c:15:ba:12:e4: e0:db:44:2d:9a:15:7f:5f:59:54:94:bd:2d:94:1c: 24:70:75:f5:ab:f7:79:3f:4c:9c:eb:ef:4e:67:a5: 2d:3d:78:3c:bf:9c:46:c2:68:8a:e0:e8:01:12:3c: bc:fb:3b:ae:f8:65:f7:fa:83:2f:fc:fc:46:ee:a6: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AB:6B:4D:79:52:FE:4F:99:CA:2A:0E:C2:7F:FD:85:CB:D6:B2:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/58b61c4f-d981-3cb0-9bb1-db7fe9ab93cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:43:c7:55:88:79:44:18:01:15:f0:6e:1f:f1:9b:50:39:bf: 50:ea:06:06:c4:87:51:01:6a:69:f6:94:b0:bb:44:e0:0d:d3: 9f:2f:a8:c6:f3:8f:fc:e9:58:27:90:1e:2e:3a:f7:b2:1f:19: dc:7a:1b:4d:85:53:a1:dd:06:33:fd:b7:e2:11:a6:11:33:c0: c8:8f:f9:cc:0f:7d:60:d3:98:b7:8a:fc:04:38:ed:09:c9:d5: c7:ee:01:da:80:91:46:43:9a:07:80:27:42:71:d7:77:cf:9b: a3:ee:5b:2c:2d:fa:56:44:0c:dd:a4:cf:34:f6:57:70:4a:6a: 65:a6:61:1d:9f:8c:c4:3d:9e:eb:71:42:0b:3b:62:3b:5f:7f: 87:ff:6a:ed:48:db:d9:40:79:6a:3a:c8:ce:ba:7c:9c:99:71: 89:5c:88:62:70:cc:3d:e0:65:4c:b2:f5:7c:00:78:b5:51:19: 91:27:6f:96:52:16:89:52:be:47:4e:a1:5c:c0:21:81:ae:0c: 31:ba:da:64:3e:82:3f:ab:54:a8:b8:e2:3d:f9:2d:c2:42:9b: 5e:5c:39:d6:14:96:6c:c7:8b:1f:1e:f7:28:7c:ef:29:c9:40: 4d:cd:ea:3e:95:32:5a:5a:37:c9:60:e9:ef:c0:0d:b2:a8:9e: 3d:50:00:0d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEu/parDh/1Ickud1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZjhkZTdmYmYtMTRlNi00NmZiLTg3NjEtZjhlZjgyYzFiMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gCy6FUF1zZ1GbVftIJXNx9PmjmPc5E8uQ+c v/pjeNKSlkhHv++rYAp5q7LB31WRDk7ZB25hFlypipaGQ5Xgm2JKClntj7ZUACfb C8wZoQ1mP+Ii5WrMv7rZTsXKXKhRFxTuPyzBoV/YDD6sTk2XPb8ODSGKEeUUmyDV DggRh+1dTzdMAxb25VsYhgez1lu5jeBrqr8b4Zu/6+NaWtN2+8FTMc1I2YjnczfD 0l6DPrUMbzd+hvEseSTNrhTJXBW6EuTg20QtmhV/X1lUlL0tlBwkcHX1q/d5P0yc 6+9OZ6UtPXg8v5xGwmiK4OgBEjy8+zuu+GX3+oMv/PxG7qYy2wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJira015Uv5PmcoqDsJ//YXL1rKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNThiNjFjNGYtZDk4MS0z Y2IwLTliYjEtZGI3ZmU5YWI5M2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlWAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAI0PHVYh5RBgBFfBuH/GbUDm/UOoGBsSHUQFqafaUsLtE4A3Tny+oxvOP /OlYJ5AeLjr3sh8Z3HobTYVTod0GM/234hGmETPAyI/5zA99YNOYt4r8BDjtCcnV x+4B2oCRRkOaB4AnQnHXd8+bo+5bLC36VkQM3aTPNPZXcEpqZaZhHZ+MxD2e63FC CztiO19/h/9q7Ujb2UB5ajrIzrp8nJlxiVyIYnDMPeBlTLL1fAB4tVEZkSdvllIW iVK+R06hXMAhga4MMbraZD6CP6tUqLjiPfktwkKbXlw51hSWbMeLHx73KHzvKclA Tc3qPpUyWlo3yWDp78ANsqiePVAADQ== -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:03 2025 by rpki-client