$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa File: 7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa (raw, json) Hash identifier: VftmOQbP90ss/2oAg6d8U7yYT9dHyW6wSd0J8Ybu3Ms= Subject key identifier: 3A:DB:E9:B6:53:79:5E:36:FB:EF:88:1D:FE:7D:F3:8C:88:71:5E:82 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AB2E4E75581589C90200 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ab:2e:4e:75:58:15:89:c9:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=e35f392f-417e-4b58-81d1-c50c1fdb2e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:15:e7:d4:a8:90:06:2f:ba:9f:3c:6c:e1:2d: 2b:fc:d8:7a:2a:b7:80:b1:1b:52:7b:a3:f1:44:1a: c7:eb:52:4b:8e:7c:61:71:10:0d:c8:45:a1:7b:2c: 48:32:78:8a:ea:a5:10:13:e0:88:cb:d6:b4:de:75: 28:fe:c0:43:67:a0:22:ba:3c:33:8c:3f:ac:71:af: 62:b5:8f:46:73:29:66:76:7f:f5:de:35:ab:1b:bb: 38:b9:51:47:54:2e:fe:08:c4:d2:83:33:17:61:54: 10:d7:70:54:aa:38:af:05:d8:1e:c6:35:86:7c:d9: 7e:dd:19:72:f1:c0:1c:f8:61:e4:fd:30:59:10:92: 66:6e:eb:85:cf:ba:fc:35:ca:70:f8:58:08:53:d2: 00:2e:bc:b9:15:90:81:57:3f:30:91:09:2f:a6:c9: da:c7:72:44:45:44:4d:42:e4:22:60:87:9a:e4:f7: 23:b4:af:64:8f:da:97:cd:8e:a8:a7:fa:85:39:75: 50:9b:da:c2:46:5e:07:26:99:69:3d:32:0d:75:34: 8f:74:72:34:b1:03:99:3f:3f:50:0d:46:3e:6d:dc: d1:ac:bb:ac:e8:e9:cc:be:a5:c9:c5:e6:35:f4:25: 94:49:87:70:11:e1:4e:7e:c7:e4:90:96:6e:89:fa: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DB:E9:B6:53:79:5E:36:FB:EF:88:1D:FE:7D:F3:8C:88:71:5E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:df:84:51:ae:6d:36:ce:8f:1b:96:be:18:b0:c9:f2:da:9f: 56:df:83:db:c7:82:15:ed:57:ee:50:92:5f:a4:57:50:77:77: ee:af:fe:27:ab:6c:f0:9a:30:11:e8:39:10:be:49:60:56:2b: 8c:1d:95:8b:70:bb:66:05:86:80:9b:c4:05:a7:84:b3:c9:46: 7f:11:3b:f9:92:2a:04:e8:58:66:24:43:05:9b:ae:99:6e:5f: 4a:63:8d:a1:32:1e:fd:4a:b0:10:a6:09:c2:ba:30:e4:5c:3a: 5f:93:f8:db:77:cc:f1:01:2a:02:ad:c1:5a:59:45:fb:a8:24: 26:f8:0a:38:41:da:04:7d:0a:ee:2e:74:0c:76:1a:cf:b1:1b: fe:71:17:03:e8:c5:18:41:82:19:4c:19:70:be:1f:74:7e:8d: 07:6b:96:49:57:60:1d:31:ce:f4:03:6e:9f:7b:13:14:94:80: 34:e3:09:78:37:5e:74:58:ea:8f:bc:6b:58:fb:53:a4:ca:c1: 4b:8d:68:56:45:39:8f:97:8f:f6:ad:fe:15:79:b2:4b:7b:2b: 9c:e2:da:fe:28:23:5b:a6:9e:19:67:4c:08:8a:13:88:42:12: 5b:54:c4:72:08:87:8f:a3:ec:a0:e6:a5:af:e0:2c:b7:e0:05: 12:ea:49:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pasuTnVYFYnJAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZTM1ZjM5MmYtNDE3ZS00YjU4LTgxZDEtYzUwYzFmZGIyZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRXn1KiQBi+6nzxs4S0r/Nh6KreAsRtSe6Px RBrH61JLjnxhcRANyEWheyxIMniK6qUQE+CIy9a03nUo/sBDZ6AiujwzjD+sca9i tY9Gcylmdn/13jWrG7s4uVFHVC7+CMTSgzMXYVQQ13BUqjivBdgexjWGfNl+3Rly 8cAc+GHk/TBZEJJmbuuFz7r8Ncpw+FgIU9IALry5FZCBVz8wkQkvpsnax3JERURN QuQiYIea5PcjtK9kj9qXzY6op/qFOXVQm9rCRl4HJplpPTINdTSPdHI0sQOZPz9Q DUY+bdzRrLus6OnMvqXJxeY19CWUSYdwEeFOfsfkkJZuifpTZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrb6bZTeV42+++IHf5984yIcV6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2FiYjFlOGYtMTAyMC0z MWU0LWExZDUtNjliYTg4ZTkyNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLfhFGubTbOjxuWvhiwyfLan1bfg9vHghXtV+5Qkl+kV1B3d+6v/ier bPCaMBHoORC+SWBWK4wdlYtwu2YFhoCbxAWnhLPJRn8RO/mSKgToWGYkQwWbrplu X0pjjaEyHv1KsBCmCcK6MORcOl+T+Nt3zPEBKgKtwVpZRfuoJCb4CjhB2gR9Cu4u dAx2Gs+xG/5xFwPoxRhBghlMGXC+H3R+jQdrlklXYB0xzvQDbp97ExSUgDTjCXg3 XnRY6o+8a1j7U6TKwUuNaFZFOY+Xj/at/hV5skt7K5zi2v4oI1umnhlnTAiKE4hC EltUxHIIh4+j7KDmpa/gLLfgBRLqSfc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:09 2025 by rpki-client