$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa File: 7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa (raw, json) Hash identifier: 1XGOdfB754lK4drMGZZranH93mYxVU5KMfBVMQ+EIag= Subject key identifier: 1C:EB:A4:D2:C0:BA:4F:E8:C5:BB:0B:FA:20:4C:C9:95:5D:FE:FE:A4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5B2184405C2A6C3C07440 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 199.91.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b2:18:44:05:c2:a6:c3:c0:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=cf0b9836-9fb8-4f15-9395-d6d2eec725b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:d9:14:84:62:7c:e4:cb:bf:d7:35:10:d1: 52:1c:fd:0b:5f:be:2d:12:ad:49:0d:c4:69:82:1d: 03:70:c5:92:3d:a9:eb:b9:d2:a0:2d:11:cc:ca:ff: 77:f6:a4:d6:18:4a:7f:75:9e:e0:43:00:36:02:f3: c2:65:78:75:2a:57:34:2c:7a:0f:23:b5:94:60:4a: 22:dd:b1:fa:f3:cc:9f:f0:4e:9d:a6:4d:f4:4b:cb: 69:9b:23:9d:7c:c8:59:c9:38:42:dc:11:2e:54:6c: 74:bd:78:23:06:41:76:15:a2:6b:f5:8d:fb:40:c4: 01:66:cb:d2:92:78:ad:09:dd:cd:07:16:7e:52:ee: 2a:97:35:fb:f6:46:55:a4:0d:43:29:20:b8:81:43: 38:55:e4:7b:d4:f5:ba:bc:5d:ae:f2:13:4c:bd:be: df:f3:07:ec:7e:e1:7d:a6:98:7d:3d:74:66:2a:9a: 6b:b6:ad:d6:ba:bd:bc:98:65:dc:72:02:06:db:99: f9:85:54:64:77:c2:69:e2:7b:0a:24:2d:87:c2:4c: 40:96:0c:c1:4c:79:3c:2e:ec:64:5e:74:ad:62:67: 8f:06:2e:01:80:33:92:56:00:21:11:89:ee:aa:c6: 90:98:5d:7e:90:94:39:75:fe:e2:b4:ba:2f:05:2d: cc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EB:A4:D2:C0:BA:4F:E8:C5:BB:0B:FA:20:4C:C9:95:5D:FE:FE:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fd:6e:a5:ef:95:7a:c0:08:7d:f4:d5:12:f2:60:ac:50:e1: 8c:c5:9c:ca:db:71:8c:1f:f1:77:14:22:f0:3e:84:3e:87:e4: c5:84:56:38:85:ff:38:23:7c:1d:21:04:ff:c1:56:fe:12:64: ec:60:f6:76:cf:f2:0d:d7:d9:64:a2:ca:c9:7a:74:13:1a:2b: d3:2a:5e:8e:92:9f:5b:39:47:35:6c:aa:0b:76:7c:ea:1c:b0: d3:fb:53:7b:32:22:b4:06:36:b0:a0:07:c6:2c:2a:8c:03:5a: 23:34:51:0b:53:46:3c:f1:67:ad:97:98:23:cd:a9:db:da:88: 19:b4:47:80:82:f6:1d:58:c1:13:f5:37:e0:c2:32:e4:9d:37: f5:87:83:22:2d:0f:cf:8c:62:8f:11:92:e4:f0:b6:4e:e7:63: 22:bc:35:b3:1f:73:17:35:ac:a5:65:86:7f:12:74:2b:51:30: 07:45:25:cd:71:da:d1:34:3a:75:0a:dd:9b:34:48:79:ba:57: 0f:c3:99:8c:7c:fd:53:3c:58:ab:72:bd:c8:f6:96:f9:b1:af: 87:ab:75:10:24:46:c3:3b:fa:3d:a3:8d:21:01:90:5b:14:2f: ec:17:de:eb:99:fd:c6:14:dc:c7:fc:0d:06:2a:09:a2:a2:16: ec:2e:70:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbIYRAXCpsPAdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk Y2YwYjk4MzYtOWZiOC00ZjE1LTkzOTUtZDZkMmVlYzcyNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdPZFIRifOTLv9c1ENFSHP0LX74tEq1JDcRp gh0DcMWSPanrudKgLRHMyv939qTWGEp/dZ7gQwA2AvPCZXh1Klc0LHoPI7WUYEoi 3bH688yf8E6dpk30S8tpmyOdfMhZyThC3BEuVGx0vXgjBkF2FaJr9Y37QMQBZsvS knitCd3NBxZ+Uu4qlzX79kZVpA1DKSC4gUM4VeR71PW6vF2u8hNMvb7f8wfsfuF9 pph9PXRmKpprtq3Wur28mGXccgIG25n5hVRkd8Jp4nsKJC2HwkxAlgzBTHk8Luxk XnStYmePBi4BgDOSVgAhEYnuqsaQmF1+kJQ5df7itLovBS3M4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzrpNLAuk/oxbsL+iBMyZVd/v6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2RmZmVkOGMtYjg3MC0z OTcwLWI1NDAtMGZhM2E0YWI0MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv9bqXvlXrACH301RLyYKxQ4YzFnMrbcYwf8XcUIvA+hD6H5MWEVjiF /zgjfB0hBP/BVv4SZOxg9nbP8g3X2WSiysl6dBMaK9MqXo6Sn1s5RzVsqgt2fOoc sNP7U3syIrQGNrCgB8YsKowDWiM0UQtTRjzxZ62XmCPNqdvaiBm0R4CC9h1YwRP1 N+DCMuSdN/WHgyItD8+MYo8RkuTwtk7nYyK8NbMfcxc1rKVlhn8SdCtRMAdFJc1x 2tE0OnUK3Zs0SHm6Vw/DmYx8/VM8WKtyvcj2lvmxr4erdRAkRsM7+j2jjSEBkFsU L+wX3uuZ/cYU3Mf8DQYqCaKiFuwucG0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:32:33 2025 by rpki-client