$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa File: 706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa (raw, json) Hash identifier: CVgeAwsrEcwveg63i89ma592lgYbwkI28iMu2OG+yUU= Subject key identifier: FE:46:9D:32:C7:4A:EB:0D:F6:23:52:30:A4:CA:6D:43:BB:E7:6D:84 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AC0DA74C0BFFF9E512E0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 199.91.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ac:0d:a7:4c:0b:ff:f9:e5:12:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=4cf26ef9-4125-4897-b03a-2d102267443a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:00:77:bb:89:3b:76:94:ab:5d:e1:ef:a4:ad: 40:6b:c0:b7:4e:10:f5:ac:1e:70:15:18:80:17:3a: a7:34:4d:43:67:9d:64:8a:c3:41:f9:ab:36:fb:d2: 2a:c0:ea:44:90:26:58:7a:a2:d8:54:e3:e0:80:77: da:39:5e:c3:b3:54:71:66:39:18:6a:e0:28:71:2a: 9f:2a:f6:da:7f:1a:e1:be:52:21:4d:3e:75:bd:34: 01:e7:30:25:6c:ba:8c:0a:a2:27:93:d1:81:67:36: 26:d5:ae:b3:81:8f:89:e4:23:a4:d6:7b:c2:fa:6d: 16:85:ac:6a:d6:36:80:d1:f7:88:35:a7:08:f9:a4: 83:68:46:d5:80:5b:d0:b8:ed:92:b9:81:85:84:82: 74:a3:1f:f1:b7:18:f7:be:3b:1b:1a:88:18:1e:5d: 68:58:54:0b:80:75:7e:c9:04:5a:f3:ec:b7:74:22: a5:08:5b:3b:52:b9:1a:8a:53:26:e2:5d:9f:83:48: 51:47:9e:26:86:f4:f4:46:08:14:4b:9c:98:34:56: b0:5b:52:f2:2a:5d:33:a9:be:c3:80:7d:74:2f:c6: 3e:3c:b7:48:98:3b:7f:6e:49:92:1f:00:60:48:f2: d5:1d:ae:e4:c6:c9:c8:4f:70:92:ed:71:ef:b1:d0: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:46:9D:32:C7:4A:EB:0D:F6:23:52:30:A4:CA:6D:43:BB:E7:6D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:55:74:fb:89:4e:bb:04:c5:1e:f5:a1:25:15:f4:6e:94:07: 32:d8:26:71:dd:58:00:e8:9b:b3:08:28:7b:3b:cd:66:af:da: 39:1c:fa:1e:4e:85:dc:ed:cc:f9:e1:67:7a:4e:49:1e:d9:f9: f9:8f:df:f5:d9:12:bb:95:54:55:50:74:06:e7:b4:75:a0:a7: b3:05:10:b9:be:c0:61:9e:17:cd:f3:71:5a:7f:d1:c4:90:ee: 7b:3f:79:f7:9f:46:db:d3:c8:31:8d:fc:14:c4:a9:6e:ed:95: ac:02:80:6f:f6:57:2b:01:f4:06:ed:51:e6:fd:21:f4:7f:17: 1a:12:ac:19:65:77:d8:81:13:f4:61:7f:55:51:81:89:a0:5d: bf:19:b7:4f:b4:71:c4:5a:71:f5:46:50:6a:68:93:45:bb:9f: 4f:43:05:b7:60:a8:ab:03:5f:1b:bf:fb:b1:7b:36:83:4b:75: 83:32:11:b4:d1:83:7f:ba:8c:4f:dd:71:c1:52:a7:40:2d:ee: 6f:37:77:18:56:c5:c7:a3:97:56:60:76:8e:c7:e0:26:29:bd: e5:7e:8d:66:d8:11:83:ef:59:2c:0e:8a:3c:07:42:e3:7b:b2: 14:60:1e:bb:78:53:20:91:63:c8:bf:16:11:75:78:ba:b3:38: da:e7:2f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pawNp0wL//nlEuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NGNmMjZlZjktNDEyNS00ODk3LWIwM2EtMmQxMDIyNjc0NDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggB3u4k7dpSrXeHvpK1Aa8C3ThD1rB5wFRiA FzqnNE1DZ51kisNB+as2+9IqwOpEkCZYeqLYVOPggHfaOV7Ds1RxZjkYauAocSqf KvbafxrhvlIhTT51vTQB5zAlbLqMCqInk9GBZzYm1a6zgY+J5COk1nvC+m0Whaxq 1jaA0feINacI+aSDaEbVgFvQuO2SuYGFhIJ0ox/xtxj3vjsbGogYHl1oWFQLgHV+ yQRa8+y3dCKlCFs7UrkailMm4l2fg0hRR54mhvT0RggUS5yYNFawW1LyKl0zqb7D gH10L8Y+PLdImDt/bkmSHwBgSPLVHa7kxsnIT3CS7XHvsdD4YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5GnTLHSusN9iNSMKTKbUO7522EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzA2ZmFjMzctM2UyZS0z MjlmLTk0ZjYtMWM1M2FjYzZlNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFVdPuJTrsExR71oSUV9G6UBzLYJnHdWADom7MIKHs7zWav2jkc+h5O hdztzPnhZ3pOSR7Z+fmP3/XZEruVVFVQdAbntHWgp7MFELm+wGGeF83zcVp/0cSQ 7ns/efefRtvTyDGN/BTEqW7tlawCgG/2VysB9AbtUeb9IfR/FxoSrBlld9iBE/Rh f1VRgYmgXb8Zt0+0ccRacfVGUGpok0W7n09DBbdgqKsDXxu/+7F7NoNLdYMyEbTR g3+6jE/dccFSp0At7m83dxhWxcejl1Zgdo7H4CYpveV+jWbYEYPvWSwOijwHQuN7 shRgHrt4UyCRY8i/FhF1eLqzONrnL/w= -----END CERTIFICATE-----Generated at Wed Nov 5 17:35:02 2025 by rpki-client