$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa File: 8095b80c-f559-3348-96e7-8524fb77cdb9.roa (raw, json) Hash identifier: C6HTfln060coc1MtGpba9gwHaH7f5/gQwgclfK+Vp1o= Subject key identifier: 05:02:36:07:F7:6B:B3:2A:99:BF:B0:CC:84:C3:66:EB:FE:BE:81:D1 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AB5554683675388E20C8 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ab:55:54:68:36:75:38:8e:20:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=bc8c765a-1eff-4eb1-a499-02f958e19468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:1f:93:94:80:af:f7:a0:a7:82:6e:68:f0: b4:c7:d4:8e:f8:52:71:2d:13:1d:78:ba:33:7d:ea: c7:09:3d:bb:fd:7e:51:aa:75:a8:b6:f3:8b:2e:9b: 7b:1b:45:82:fc:00:7a:4a:2e:ba:cc:b8:00:da:bf: c1:3b:35:ab:a4:7c:62:31:fa:ea:10:6f:17:4c:24: 45:fe:9f:3a:7e:a8:14:76:9c:0f:76:72:af:bc:af: 23:11:97:45:f9:e7:bf:9b:07:86:48:d8:77:30:89: fb:de:c6:ec:67:de:02:ea:36:e0:da:b9:6e:8a:3a: 65:8e:ab:ac:98:bf:c9:ea:61:4f:a9:58:49:44:76: 33:ff:6d:d4:44:6d:f4:8c:bd:6e:1b:15:47:17:9a: a6:f1:3f:dc:cf:db:29:eb:9b:d6:bb:69:48:0d:13: 4d:8e:5d:74:2f:21:c7:f8:b0:d1:cc:1c:c7:12:bc: ba:17:ee:38:19:42:fc:62:57:0f:8f:07:fb:8f:a8: a2:54:c4:48:34:81:43:a2:d8:42:6b:12:44:7d:d5: 83:a4:07:86:fa:ff:0b:c1:35:a4:54:d8:a9:56:0c: db:37:1b:fa:dd:1f:ca:ce:94:4b:5c:21:b0:9a:2a: 29:0a:80:b2:b7:72:18:97:e4:15:f6:aa:39:2d:33: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:02:36:07:F7:6B:B3:2A:99:BF:B0:CC:84:C3:66:EB:FE:BE:81:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:71:de:c7:aa:54:0b:7e:71:cc:c0:c1:ff:b6:98:c7:a4:00: f5:b3:fc:5c:19:eb:52:c0:12:d1:fe:57:12:57:fb:d0:1d:28: ed:be:bd:fb:46:3b:da:39:19:6e:c7:e6:a6:13:59:43:a1:b8: 31:e1:3f:bc:a7:5c:fd:2c:0c:c9:3f:59:03:bb:5e:69:32:1e: 2b:d4:5c:64:c1:5d:bb:fe:9d:66:3b:db:59:14:87:61:8f:6b: ab:a4:84:01:2a:4c:cf:4e:8a:40:8a:ae:cd:63:9b:05:75:c7: e7:28:b6:1b:ce:3c:16:47:0b:a1:8e:60:1c:ff:7b:f8:96:46: eb:17:3b:bf:90:0c:f4:75:49:01:c1:eb:6e:b9:70:db:5e:26: 29:b8:a0:fd:85:97:5e:75:ef:ad:db:67:8b:c5:3c:0f:f1:a2: 80:5a:b1:92:47:66:be:d2:c8:51:d3:34:e6:8b:51:8f:3b:c6: e6:c4:9d:ff:c6:7b:0a:ea:d4:f9:8d:f3:03:14:2a:68:75:8a: a2:ef:07:aa:0c:8c:b6:9a:d8:fe:2b:c6:0c:e4:0f:b2:a2:b1: 73:db:2b:e4:11:c6:b3:6c:c6:84:6d:5e:91:2f:0b:f5:b7:8f: e1:52:71:ab:c5:e4:a8:af:59:7a:b9:ef:ff:59:01:e6:1d:81: d1:d9:a5:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/patVVGg2dTiOIMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YmM4Yzc2NWEtMWVmZi00ZWIxLWE0OTktMDJmOTU4ZTE5NDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprQfk5SAr/egp4JuaPC0x9SO+FJxLRMdeLoz ferHCT27/X5RqnWotvOLLpt7G0WC/AB6Si66zLgA2r/BOzWrpHxiMfrqEG8XTCRF /p86fqgUdpwPdnKvvK8jEZdF+ee/mweGSNh3MIn73sbsZ94C6jbg2rluijpljqus mL/J6mFPqVhJRHYz/23URG30jL1uGxVHF5qm8T/cz9sp65vWu2lIDRNNjl10LyHH +LDRzBzHEry6F+44GUL8YlcPjwf7j6iiVMRINIFDothCaxJEfdWDpAeG+v8LwTWk VNipVgzbNxv63R/KzpRLXCGwmiopCoCyt3IYl+QV9qo5LTNJ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUCNgf3a7Mqmb+wzITDZuv+voHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvODA5NWI4MGMtZjU1OS0z MzQ4LTk2ZTctODUyNGZiNzdjZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVx3seqVAt+cczAwf+2mMekAPWz/FwZ61LAEtH+VxJX+9AdKO2+vftG O9o5GW7H5qYTWUOhuDHhP7ynXP0sDMk/WQO7XmkyHivUXGTBXbv+nWY721kUh2GP a6ukhAEqTM9OikCKrs1jmwV1x+cothvOPBZHC6GOYBz/e/iWRusXO7+QDPR1SQHB 6265cNteJim4oP2Fl151763bZ4vFPA/xooBasZJHZr7SyFHTNOaLUY87xubEnf/G ewrq1PmN8wMUKmh1iqLvB6oMjLaa2P4rxgzkD7KisXPbK+QRxrNsxoRtXpEvC/W3 j+FScavF5KivWXq57/9ZAeYdgdHZpW0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:30 2025 by rpki-client