$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa File: 72ff3015-9382-36f0-b469-eaf2cf7cea67.roa (raw, json) Hash identifier: xOVP5fSkpWAWCWENGXp2xshvgSOudPQP8CT9EWTptcU= Subject key identifier: 49:D5:03:91:AF:21:60:55:B7:93:64:DF:0D:F4:AA:25:DF:CA:8B:74 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AC1F02F33C3FCEC4F780 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 199.91.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ac:1f:02:f3:3c:3f:ce:c4:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=a8b394c8-62de-4bd1-b863-1d8d68a5a4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:ee:9e:b9:73:15:63:4a:57:23:1d:ad:56: 49:8c:ac:cf:11:98:fd:c0:86:59:61:56:f6:33:2f: 34:c1:3e:5c:10:b9:0b:e8:90:61:df:c6:81:ac:86: 21:4b:3b:03:45:15:e0:c6:8f:a6:44:b9:89:24:85: ab:5a:45:57:48:69:96:26:0e:88:77:25:5e:8a:9d: 19:e2:66:66:b0:9e:d0:8a:8b:db:99:d9:cf:cf:0b: 05:99:ce:28:a8:9e:18:97:52:b5:e1:ce:37:d0:ad: 36:5e:db:49:e7:3e:9a:f7:29:39:89:09:16:62:e6: 27:6f:05:c8:81:61:fa:41:2b:27:08:23:af:80:8e: 5f:ca:3a:71:3b:5a:3d:06:bc:21:72:22:2c:b9:64: 92:e1:2f:44:7e:26:84:f0:5a:2d:19:23:8b:c5:bb: 00:ec:f1:5a:8e:50:65:e0:c9:e0:59:da:50:2d:b6: 33:97:62:50:45:d1:60:e3:46:05:d4:7e:ff:ef:2a: b5:4e:76:df:bd:92:d2:a5:dc:f7:b8:2c:42:d6:46: 5b:a4:d5:9d:99:4c:58:ea:38:20:3a:a0:95:18:8b: db:2f:8e:f8:19:a5:a0:3a:73:0c:68:26:b0:f1:50: 25:00:1f:8d:3b:0e:9a:fc:49:df:45:7f:ef:e7:23: 45:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D5:03:91:AF:21:60:55:B7:93:64:DF:0D:F4:AA:25:DF:CA:8B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:14:05:35:47:73:c3:93:c6:2c:ec:a9:61:30:8d:2f:be:f0: 6b:f3:2c:28:b1:a9:49:2d:b3:3d:a3:e8:02:e5:e4:d2:d8:c0: 82:82:84:f6:7e:e8:59:ff:ab:57:bb:2b:50:e2:60:9f:4f:3a: b3:86:e4:8b:f1:8d:a0:fd:16:55:dc:38:d9:a4:98:ed:82:3f: 36:f2:de:34:09:51:f4:6e:58:62:bf:35:b6:da:10:58:29:3f: 8b:06:43:7e:0b:65:5a:24:3f:8e:58:0a:97:16:4c:f8:8f:8b: 1b:e3:46:36:36:11:79:17:a4:e3:a7:9c:f4:35:6d:6b:40:47: 43:5f:21:9a:44:dd:45:d8:70:f2:6a:1f:20:81:da:c7:6f:e8: 09:03:fe:4d:51:12:f7:69:e9:34:f2:0a:d0:9c:1a:a5:2e:b1: c5:06:3b:70:a8:4a:a9:4f:2b:d9:d5:98:f4:63:14:ef:9c:a1: 44:fa:36:2e:3d:18:8d:11:87:a3:45:e2:3b:00:ba:75:17:58: a4:f4:42:be:50:0b:11:48:8f:c0:98:08:ee:3c:06:08:94:5a: 25:22:31:90:87:29:20:89:33:d8:9e:22:47:da:04:23:94:81: 27:b4:29:e0:e4:da:0e:6f:1b:83:ae:3e:f8:cb:d6:72:d6:8b: 9b:7e:55:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pawfAvM8P87E94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YThiMzk0YzgtNjJkZS00YmQxLWI4NjMtMWQ4ZDY4YTVhNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCrunrlzFWNKVyMdrVZJjKzPEZj9wIZZYVb2 My80wT5cELkL6JBh38aBrIYhSzsDRRXgxo+mRLmJJIWrWkVXSGmWJg6IdyVeip0Z 4mZmsJ7QiovbmdnPzwsFmc4oqJ4Yl1K14c430K02XttJ5z6a9yk5iQkWYuYnbwXI gWH6QSsnCCOvgI5fyjpxO1o9BrwhciIsuWSS4S9EfiaE8FotGSOLxbsA7PFajlBl 4MngWdpQLbYzl2JQRdFg40YF1H7/7yq1TnbfvZLSpdz3uCxC1kZbpNWdmUxY6jgg OqCVGIvbL474GaWgOnMMaCaw8VAlAB+NOw6a/EnfRX/v5yNFlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnVA5GvIWBVt5Nk3w30qiXfyot0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzJmZjMwMTUtOTM4Mi0z NmYwLWI0NjktZWFmMmNmN2NlYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMUBTVHc8OTxizsqWEwjS++8GvzLCixqUktsz2j6ALl5NLYwIKChPZ+ 6Fn/q1e7K1DiYJ9POrOG5IvxjaD9FlXcONmkmO2CPzby3jQJUfRuWGK/NbbaEFgp P4sGQ34LZVokP45YCpcWTPiPixvjRjY2EXkXpOOnnPQ1bWtAR0NfIZpE3UXYcPJq HyCB2sdv6AkD/k1REvdp6TTyCtCcGqUuscUGO3CoSqlPK9nVmPRjFO+coUT6Ni49 GI0Rh6NF4jsAunUXWKT0Qr5QCxFIj8CYCO48BgiUWiUiMZCHKSCJM9ieIkfaBCOU gSe0KeDk2g5vG4OuPvjL1nLWi5t+VeI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:35:50 2025 by rpki-client