$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa File: 9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa (raw, json) Hash identifier: FduuK90J1FtL4dY3aonAM6GWXZortKT9I5mNHEDunXo= Subject key identifier: 3B:AF:F7:36:CC:26:E2:3C:14:90:14:DF:6E:87:53:18:38:CB:73:F1 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AB40C2660CF765814180 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ab:40:c2:66:0c:f7:65:81:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=c8a4e5cf-a2cc-4fb5-a3e5-d4500c91704c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:d2:05:cb:76:9a:20:25:26:8f:42:0e:00: be:af:35:f1:de:ae:48:11:ab:ff:ca:9e:a8:36:77: 8d:75:a4:f3:b6:9c:b6:87:8f:62:22:f1:39:cb:5f: 46:cd:cb:64:3e:e4:51:e1:90:16:2e:78:6f:54:73: de:95:93:7c:f6:0c:42:2a:98:56:73:48:0a:e6:0a: b3:de:0e:53:e8:5d:bc:66:e9:1b:88:6a:d5:7c:20: 39:1d:af:d2:6e:dc:5e:c5:9f:eb:4d:a3:04:f1:2c: 13:86:09:9c:37:ba:10:2c:7c:14:45:d8:26:df:6c: 57:38:7b:f5:3b:ea:e9:b8:7e:6a:72:3b:d9:41:80: a1:1a:5f:03:5b:0f:e3:d6:2c:f9:ed:d7:c8:1e:4b: 51:7d:ed:21:4f:0d:a6:2c:9c:98:c7:fa:2c:5c:06: 32:49:83:62:e0:ce:f5:9e:49:18:64:93:a2:79:7b: 00:c9:41:51:98:97:a8:f1:e8:e3:53:ef:ab:32:75: 74:26:4b:47:d0:f7:26:00:7c:7c:73:5a:c6:fa:75: 75:47:5c:64:c7:a7:eb:a7:36:78:93:39:b4:a6:f0: 5d:31:67:91:63:4a:c6:38:1c:4e:82:b1:75:41:f4: 36:30:73:17:e3:7c:25:85:eb:e9:6f:34:18:9f:47: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AF:F7:36:CC:26:E2:3C:14:90:14:DF:6E:87:53:18:38:CB:73:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:6e:69:2d:63:9b:ab:be:bc:7c:fa:95:3c:24:f2:9f:d1:c2: 15:17:5d:92:97:da:63:78:62:fc:95:03:a2:61:a5:57:7d:c7: b8:3f:01:d4:b3:b2:5b:a2:cc:57:ea:7f:60:4f:44:38:48:7c: f0:50:f2:a2:79:40:94:f8:c3:ff:5f:dd:49:51:4b:3d:c8:59: 9e:33:d8:43:8f:c5:95:01:66:7d:c8:10:78:66:c4:02:7c:d2: a8:65:4f:68:d1:28:cb:70:21:ed:cf:fe:b3:75:93:4e:ff:14: 56:22:08:04:ae:78:6e:a2:49:fc:35:34:73:f3:22:43:73:3b: d2:6b:7d:54:06:b0:31:fa:07:f2:77:9b:03:a5:4a:f2:91:5a: 4b:cd:ad:2e:db:b3:5b:8a:c8:59:21:bc:a5:f6:6e:a4:34:4d: bb:c1:e0:63:7f:7b:e3:da:7b:bd:d2:22:01:3f:bf:c6:cc:42: b6:41:57:e6:43:33:bc:ee:48:5c:76:bd:74:f1:2e:0a:8c:27: f6:5b:17:24:c9:25:84:94:89:41:41:13:ba:c7:5a:8b:ca:de: e5:b4:b0:e9:41:9c:a4:7c:8e:e7:70:42:4a:84:6e:ce:b0:6f: 5a:45:41:3e:ee:99:b5:1d:f1:84:86:72:70:cc:36:f1:56:27: 4a:84:36:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/patAwmYM92WBQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YzhhNGU1Y2YtYTJjYy00ZmI1LWEzZTUtZDQ1MDBjOTE3MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEfSBct2miAlJo9CDgC+rzXx3q5IEav/yp6o NneNdaTztpy2h49iIvE5y19GzctkPuRR4ZAWLnhvVHPelZN89gxCKphWc0gK5gqz 3g5T6F28ZukbiGrVfCA5Ha/SbtxexZ/rTaME8SwThgmcN7oQLHwURdgm32xXOHv1 O+rpuH5qcjvZQYChGl8DWw/j1iz57dfIHktRfe0hTw2mLJyYx/osXAYySYNi4M71 nkkYZJOieXsAyUFRmJeo8ejjU++rMnV0JktH0PcmAHx8c1rG+nV1R1xkx6frpzZ4 kzm0pvBdMWeRY0rGOBxOgrF1QfQ2MHMX43wlhevpbzQYn0ct4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuv9zbMJuI8FJAU326HUxg4y3PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOWMzZWY5YzAtMDMwYi0z OGE3LTkzY2MtYzAwYzY5ODVkZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJuaS1jm6u+vHz6lTwk8p/RwhUXXZKX2mN4YvyVA6JhpVd9x7g/AdSz sluizFfqf2BPRDhIfPBQ8qJ5QJT4w/9f3UlRSz3IWZ4z2EOPxZUBZn3IEHhmxAJ8 0qhlT2jRKMtwIe3P/rN1k07/FFYiCASueG6iSfw1NHPzIkNzO9JrfVQGsDH6B/J3 mwOlSvKRWkvNrS7bs1uKyFkhvKX2bqQ0TbvB4GN/e+Pae73SIgE/v8bMQrZBV+ZD M7zuSFx2vXTxLgqMJ/ZbFyTJJYSUiUFBE7rHWovK3uW0sOlBnKR8judwQkqEbs6w b1pFQT7umbUd8YSGcnDMNvFWJ0qENgI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:45 2025 by rpki-client