$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa File: 78a77a9f-d1ee-3657-8456-265177e16059.roa (raw, json) Hash identifier: j0FD6O/9WXuRGADl23+qXxZuhD7i4OgGUyWIohOuFWU= Subject key identifier: 3A:D7:D2:C2:E1:BD:11:E7:0D:99:FD:3E:CE:C8:3D:FC:23:06:B0:3D Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5B17407E5ED0116A72F80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b1:74:07:e5:ed:01:16:a7:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=1ea0b61d-cee8-4a4f-8cd4-3642b9aa2143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7f:1d:27:49:2a:00:08:7e:38:e3:d4:2d:bf: 9d:05:58:e3:81:34:9d:57:a1:1f:dd:4f:e0:0e:7d: d6:5e:23:24:44:c7:bb:c6:91:66:27:79:92:89:90: 82:15:f1:7a:fd:93:06:27:52:8b:5b:4e:50:91:57: 33:f6:c2:b5:72:f7:f4:1d:b7:79:c9:07:19:fd:5d: 8e:16:34:9e:b8:02:0f:ad:fb:1b:4a:b1:4f:15:27: 90:92:3b:c6:a0:58:d7:4b:52:9c:23:50:19:9f:71: 9b:dd:14:f4:ed:c9:33:8e:e5:cf:08:3a:1e:93:50: 3b:bd:22:dc:52:24:3d:c5:5a:10:7f:30:13:9a:6e: 4a:11:30:9a:b5:27:f5:a7:ef:4d:8c:24:1c:4c:f1: 73:97:47:50:49:fd:e8:b0:30:0b:2e:b9:1f:f7:d7: 61:07:02:ea:89:e3:b0:b9:1f:c0:fa:53:e2:6a:02: ab:c0:5b:7e:5d:06:2f:15:71:b1:af:fa:27:e4:ee: 6d:c5:86:92:f2:f8:20:8f:4f:90:08:47:5c:76:71: 91:e6:2b:2a:73:30:0c:8a:0c:b5:71:0f:b7:4c:10: df:a0:af:60:4c:09:45:39:a0:3e:d1:86:43:36:21: 4d:39:22:26:80:2a:83:6a:18:af:78:b4:91:81:00: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D7:D2:C2:E1:BD:11:E7:0D:99:FD:3E:CE:C8:3D:FC:23:06:B0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:dc:73:e2:d7:53:a8:ff:f0:76:02:bd:78:c9:98:66:b5:b4: 30:c1:54:dc:c0:f6:6d:ad:2e:b7:aa:81:58:0d:49:94:5f:3a: 1f:da:e1:09:42:11:47:a6:02:b6:eb:d5:da:c1:ff:98:05:65: 00:4e:d2:a1:10:05:cc:0e:1c:86:fc:ee:9e:af:05:ef:48:f6: b3:49:6e:dc:61:3b:41:c8:c2:ef:30:6c:49:30:c7:e9:85:de: 77:10:90:b8:bc:86:02:65:fd:49:00:5e:f8:a1:78:7d:18:56: a5:28:3d:a4:da:f3:c5:cb:bd:ac:ea:4b:11:1e:f6:ee:6c:d1: 83:5a:20:79:24:9b:15:47:c3:66:f1:71:39:ac:2a:22:21:42: f3:bb:22:3f:9b:27:e7:39:a8:33:f0:94:49:22:f3:a6:11:c6: 05:02:e5:74:13:aa:b9:1f:65:7b:c7:df:5b:e9:e1:36:8f:a5: 1d:1a:d3:aa:c3:7e:45:58:ac:38:b5:42:c1:4d:ab:10:1c:88: e1:e1:b2:46:05:27:b8:3f:96:8b:05:f2:b1:f9:96:37:f1:4e: 85:0d:46:b7:47:06:94:19:20:b5:f3:e6:cf:af:a6:3b:5e:81: 65:dd:d1:05:27:a0:16:96:af:53:28:f9:3e:fa:31:09:93:76: 7f:03:12:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbF0B+XtARanL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MWVhMGI2MWQtY2VlOC00YTRmLThjZDQtMzY0MmI5YWEyMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH8dJ0kqAAh+OOPULb+dBVjjgTSdV6Ef3U/g Dn3WXiMkRMe7xpFmJ3mSiZCCFfF6/ZMGJ1KLW05QkVcz9sK1cvf0Hbd5yQcZ/V2O FjSeuAIPrfsbSrFPFSeQkjvGoFjXS1KcI1AZn3Gb3RT07ckzjuXPCDoek1A7vSLc UiQ9xVoQfzATmm5KETCatSf1p+9NjCQcTPFzl0dQSf3osDALLrkf99dhBwLqieOw uR/A+lPiagKrwFt+XQYvFXGxr/on5O5txYaS8vggj0+QCEdcdnGR5isqczAMigy1 cQ+3TBDfoK9gTAlFOaA+0YZDNiFNOSImgCqDahiveLSRgQBaEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrX0sLhvRHnDZn9Ps7IPfwjBrA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzhhNzdhOWYtZDFlZS0z NjU3LTg0NTYtMjY1MTc3ZTE2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWADMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3cc+LXU6j/8HYCvXjJmGa1tDDBVNzA9m2tLreqgVgNSZRfOh/a4QlC EUemArbr1drB/5gFZQBO0qEQBcwOHIb87p6vBe9I9rNJbtxhO0HIwu8wbEkwx+mF 3ncQkLi8hgJl/UkAXviheH0YVqUoPaTa88XLvazqSxEe9u5s0YNaIHkkmxVHw2bx cTmsKiIhQvO7Ij+bJ+c5qDPwlEki86YRxgUC5XQTqrkfZXvH31vp4TaPpR0a06rD fkVYrDi1QsFNqxAciOHhskYFJ7g/losF8rH5ljfxToUNRrdHBpQZILXz5s+vpjte gWXd0QUnoBaWr1Mo+T76MQmTdn8DEoU= -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:03 2025 by rpki-client