$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9518e633-5724-3214-b266-4c6475dfdc3e.roa File: 9518e633-5724-3214-b266-4c6475dfdc3e.roa (raw, json) Hash identifier: bS81yGmBgGJADPcvUUoxTaYgQsWwcO7YWgCydROAgP8= Subject key identifier: A3:08:2E:A7:AB:DF:70:8B:64:36:A5:F9:AE:FB:8D:5D:F3:AE:10:3F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AAD67FBA690FF3C35A80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9518e633-5724-3214-b266-4c6475dfdc3e.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:aa:d6:7f:ba:69:0f:f3:c3:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=2e4c892b-b5eb-46ed-814a-62d3241bdfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:08:10:e9:3e:f9:18:3a:73:b8:6d:a4:4e:ea: 5b:20:99:08:50:25:23:37:f3:91:4c:ba:57:f9:ae: 2e:ce:e4:f8:1d:90:83:60:39:bc:e2:55:a6:77:35: ac:eb:d9:9d:f1:c3:04:26:f0:d9:24:19:79:de:51: 38:78:af:48:f7:89:e0:7f:a2:3e:0d:fc:8f:23:2c: 09:c1:0e:86:ee:fd:36:88:17:01:51:22:21:e9:b0: 2b:e4:ee:c0:0b:e7:d7:57:62:91:27:5c:ca:03:a8: 80:02:0d:30:58:64:0b:25:67:67:a7:3b:63:10:0f: ac:09:9c:f2:57:9c:b0:9b:1d:38:20:7a:17:db:0c: c9:b5:8c:fe:1a:3d:17:1f:76:a3:cc:a6:dc:47:a7: 42:3e:84:2f:f3:ac:d2:87:fc:70:d9:9e:e2:38:b5: a4:bd:ed:e0:e4:a7:e5:45:26:5f:28:76:54:c8:c5: 18:bf:cb:f3:fa:fe:c5:f8:d9:6c:95:b6:03:98:a1: bc:c9:32:2f:3e:3f:2a:34:9b:96:87:8d:ef:45:6f: d0:00:4e:00:aa:9d:22:04:53:bf:68:52:5d:e6:ea: b0:f5:fd:d3:c1:ed:31:53:b4:74:06:32:1c:c3:f9: e6:c7:b7:74:8e:a3:63:41:d7:98:39:77:f9:ab:28: ed:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:08:2E:A7:AB:DF:70:8B:64:36:A5:F9:AE:FB:8D:5D:F3:AE:10:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9518e633-5724-3214-b266-4c6475dfdc3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2e:2e:1a:36:55:74:12:90:66:e6:81:db:27:79:2f:40:06: 51:c6:01:ba:91:1d:b9:7a:9c:aa:d5:f4:55:5d:3f:0d:d6:9c: 0f:a3:56:2b:71:30:2c:52:74:d3:d3:c3:e6:87:65:f1:ff:56: 53:5e:3f:30:e0:71:fe:71:b1:bb:61:45:f7:c8:19:e2:da:ae: 52:08:64:eb:f4:37:40:d6:75:b2:69:09:48:75:39:07:dd:81: 52:07:36:5d:57:89:d2:55:5d:f1:da:43:88:39:2f:b4:3a:bb: d9:f9:4e:0c:f0:3d:0c:1b:0d:52:b7:24:bf:97:d4:0a:62:3a: 58:ed:0c:4e:ea:58:8a:90:78:9a:98:41:fe:ad:32:d1:86:a2: 54:6d:17:12:40:8f:52:37:a3:22:b5:19:89:f8:b0:1d:bf:06: af:66:83:89:ef:6b:09:53:d0:dc:54:1d:a5:08:ed:1f:08:eb: e7:ee:7d:91:d9:cf:fd:72:8d:3f:0f:60:48:8f:f7:2f:2e:23: b1:06:6d:d5:d0:01:2f:51:28:05:94:96:96:21:92:fd:80:c5: 24:92:dc:2b:4b:1c:99:d3:65:a6:6d:fc:c1:83:a7:6b:4c:4d: 9b:b8:f7:30:5f:c4:ea:cd:7f:af:61:6b:4c:09:69:65:95:c5: 26:d2:16:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/parWf7ppD/PDWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MmU0Yzg5MmItYjVlYi00NmVkLTgxNGEtNjJkMzI0MWJkZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiggQ6T75GDpzuG2kTupbIJkIUCUjN/ORTLpX +a4uzuT4HZCDYDm84lWmdzWs69md8cMEJvDZJBl53lE4eK9I94ngf6I+DfyPIywJ wQ6G7v02iBcBUSIh6bAr5O7AC+fXV2KRJ1zKA6iAAg0wWGQLJWdnpztjEA+sCZzy V5ywmx04IHoX2wzJtYz+Gj0XH3ajzKbcR6dCPoQv86zSh/xw2Z7iOLWkve3g5Kfl RSZfKHZUyMUYv8vz+v7F+NlslbYDmKG8yTIvPj8qNJuWh43vRW/QAE4Aqp0iBFO/ aFJd5uqw9f3Twe0xU7R0BjIcw/nmx7d0jqNjQdeYOXf5qyjtXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMILqer33CLZDal+a77jV3zrhA/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTUxOGU2MzMtNTcyNC0z MjE0LWIyNjYtNGM2NDc1ZGZkYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkuLho2VXQSkGbmgdsneS9ABlHGAbqRHbl6nKrV9FVdPw3WnA+jVitx MCxSdNPTw+aHZfH/VlNePzDgcf5xsbthRffIGeLarlIIZOv0N0DWdbJpCUh1OQfd gVIHNl1XidJVXfHaQ4g5L7Q6u9n5TgzwPQwbDVK3JL+X1ApiOljtDE7qWIqQeJqY Qf6tMtGGolRtFxJAj1I3oyK1GYn4sB2/Bq9mg4nvawlT0NxUHaUI7R8I6+fufZHZ z/1yjT8PYEiP9y8uI7EGbdXQAS9RKAWUlpYhkv2AxSSS3CtLHJnTZaZt/MGDp2tM TZu49zBfxOrNf69ha0wJaWWVxSbSFn4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:20 2025 by rpki-client