$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa File: b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa (raw, json) Hash identifier: VjJtfoAhY3XPWfsL/TyNolyqDOK/o/V1uUtkCWmsXYk= Subject key identifier: AD:C5:43:71:58:54:6D:FC:84:A7:5C:DA:29:FC:46:66:A0:E2:3E:3F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5ABA1C945022B4B0D90C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ab:a1:c9:45:02:2b:4b:0d:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=f86c73da-6d26-4957-ae6f-8bb867a39e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:af:77:3f:20:8c:13:5b:72:5b:81:22:65: b6:15:a8:fa:c5:4d:ed:25:c5:02:5e:79:c1:01:93: 7e:4b:c7:90:59:64:85:d0:95:ff:4d:3c:d2:fc:17: bc:34:06:0b:1c:94:df:81:56:57:ca:b1:d8:24:5c: 55:dc:4e:9f:9a:26:24:62:41:55:27:be:70:1a:d5: 5e:9f:28:ea:f8:f0:c9:0b:32:d3:0c:d0:1d:34:40: 99:26:99:84:db:c2:fa:98:b4:f9:4b:20:c6:9c:8d: 8a:1b:d7:f7:16:05:f5:33:5d:ca:59:fd:00:81:e3: a8:6f:7c:55:2d:42:0e:48:5c:55:29:8c:a3:7a:70: 3b:e6:30:f8:2f:28:41:9f:54:74:b9:44:76:b9:b6: 5a:3c:a2:c7:66:f3:8b:b4:d9:b9:01:b2:5e:4b:08: e8:33:0a:c3:bc:59:54:94:6c:a7:d3:ba:26:50:c3: f1:b1:65:bc:f3:b5:95:d9:e1:4d:5e:46:05:47:9d: 15:ba:d7:7f:e1:bf:1d:0c:89:e2:aa:32:9e:2a:bd: 0a:40:73:08:82:11:f5:4a:40:80:da:b8:f2:51:f2: c8:e7:93:6d:8a:9e:f7:07:1b:96:a6:83:f2:41:7c: f3:35:ef:95:8d:8d:32:c6:17:35:f2:00:7c:94:16: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C5:43:71:58:54:6D:FC:84:A7:5C:DA:29:FC:46:66:A0:E2:3E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:3f:dd:6c:a3:a6:51:ee:89:63:1d:5d:d5:17:82:bc:9c:cb: 05:a4:7f:af:7e:bf:ac:1e:92:3d:52:99:54:c9:77:06:0c:28: c2:b9:18:2a:b1:8c:cd:01:85:de:ed:2c:2e:bb:52:e2:39:01: c8:e6:44:a9:59:19:64:44:17:72:12:9d:dd:67:9a:3b:1c:7d: 40:ca:2a:22:17:61:ae:95:36:36:e5:de:9f:7c:55:3d:37:8e: d8:29:0f:51:7b:ea:6c:53:8e:14:8b:89:ce:1d:17:ba:6d:c0: c0:23:9d:b7:ec:28:16:16:a5:ac:15:99:7e:6a:5f:7a:83:ed: ec:7a:0b:5a:35:05:72:a5:7e:f3:bc:9e:fa:5d:3c:3c:62:20: b4:5e:59:de:8a:8c:fa:84:f6:77:bb:e3:6b:41:81:4b:b0:63: 7c:f9:ee:13:f7:8a:de:6f:8f:42:53:18:65:b8:06:6f:ed:4a: 3f:dc:68:5f:96:a1:a4:9f:a5:e4:b4:38:8e:bc:ac:50:5b:b4: 62:60:af:48:c7:dd:f5:28:88:67:f8:14:23:5d:62:3d:c1:06: 3d:55:ce:5f:30:cd:eb:cd:ef:26:d4:0a:71:0d:a4:9f:a6:19: 80:8a:d5:96:dd:97:25:96:90:82:a5:1f:4d:67:f9:9a:4b:9e: 3f:c9:61:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pauhyUUCK0sNkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk Zjg2YzczZGEtNmQyNi00OTU3LWFlNmYtOGJiODY3YTM5ZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF+vdz8gjBNbcluBImW2Faj6xU3tJcUCXnnB AZN+S8eQWWSF0JX/TTzS/Be8NAYLHJTfgVZXyrHYJFxV3E6fmiYkYkFVJ75wGtVe nyjq+PDJCzLTDNAdNECZJpmE28L6mLT5SyDGnI2KG9f3FgX1M13KWf0AgeOob3xV LUIOSFxVKYyjenA75jD4LyhBn1R0uUR2ubZaPKLHZvOLtNm5AbJeSwjoMwrDvFlU lGyn07omUMPxsWW887WV2eFNXkYFR50Vutd/4b8dDIniqjKeKr0KQHMIghH1SkCA 2rjyUfLI55Ntip73BxuWpoPyQXzzNe+VjY0yxhc18gB8lBZdywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3FQ3FYVG38hKdc2in8Rmag4j4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYjFlYjEyNTUtMWExMy0z OTIyLWE0MWYtZWQwNDU5NWI5YWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw/3WyjplHuiWMdXdUXgrycywWkf69+v6wekj1SmVTJdwYMKMK5GCqx jM0Bhd7tLC67UuI5AcjmRKlZGWREF3ISnd1nmjscfUDKKiIXYa6VNjbl3p98VT03 jtgpD1F76mxTjhSLic4dF7ptwMAjnbfsKBYWpawVmX5qX3qD7ex6C1o1BXKlfvO8 nvpdPDxiILReWd6KjPqE9ne742tBgUuwY3z57hP3it5vj0JTGGW4Bm/tSj/caF+W oaSfpeS0OI68rFBbtGJgr0jH3fUoiGf4FCNdYj3BBj1Vzl8wzevN7ybUCnENpJ+m GYCK1ZbdlyWWkIKlH01n+ZpLnj/JYZY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:40 2025 by rpki-client