$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa File: b672c24e-ac3a-3a73-9369-af3fde4793e9.roa (raw, json) Hash identifier: tojYny65mTd5qhTlBGjk8IYm13J+aYGxfy0hhAUHiDY= Subject key identifier: 58:B8:B8:08:C3:05:14:48:98:CA:B2:7F:48:FD:EC:CE:DD:6D:62:72 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AB097933A1EAC1F9D880 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ab:09:79:33:a1:ea:c1:f9:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=f62dd299-1a3f-4a61-9395-9c1d65e6f9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:92:eb:b9:30:1f:a0:3c:fb:b8:4b:00:3a:87: 54:5e:93:12:2e:69:f8:ae:de:35:9f:fd:56:66:6d: d4:7d:4d:0e:e1:0f:76:73:2a:87:f2:c3:b1:96:a8: ff:e5:3d:28:3d:e2:4c:fb:c2:f3:f3:24:78:c1:20: 18:8a:46:e7:0f:70:cb:fd:58:fc:79:37:cb:9c:0e: 0a:b4:01:bd:09:ba:80:d6:f7:d8:35:ae:d1:59:da: 64:b3:93:ce:a9:e6:08:63:b5:2a:41:9a:40:41:55: 82:35:55:5d:5e:94:70:20:ad:19:33:6d:0d:ef:aa: c2:59:93:77:c9:79:e5:f6:9f:a8:ea:c2:8f:53:39: d1:93:45:02:26:f6:f6:ed:e8:bb:ae:0a:6d:25:b8: 41:30:26:be:14:36:b5:3f:17:62:f6:e7:67:16:36: 73:2b:bc:cc:fb:34:32:b9:db:a6:37:5d:ae:a9:58: 16:36:f5:78:0c:dd:9b:5a:5c:45:2b:fa:22:ce:73: f1:48:2b:54:00:94:a3:a1:02:16:88:a2:ab:6a:62: 7a:d5:28:38:68:00:de:32:43:77:ee:17:94:38:3a: 54:14:1e:82:65:07:5b:1d:ec:b4:5b:1a:21:4b:37: 2a:67:37:f6:35:d3:ec:ea:5b:a6:95:a1:62:b4:42: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B8:B8:08:C3:05:14:48:98:CA:B2:7F:48:FD:EC:CE:DD:6D:62:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:35:77:d6:af:e5:35:4b:aa:3a:61:ad:2c:fb:86:f9:80:0b: 00:55:3f:1a:0d:bb:49:12:8f:00:91:8f:fd:18:4e:62:3d:37: f7:e3:34:8d:29:d2:0a:10:00:f7:f1:b6:f5:75:dc:15:20:af: bd:57:a5:ed:25:df:f5:3f:e4:98:24:f7:65:83:23:4c:5a:69: be:14:09:ad:c0:e0:87:c4:6e:1a:02:17:15:d9:0f:31:ab:00: d2:b9:05:51:39:71:9e:f3:aa:d0:44:b1:37:b1:aa:55:63:74: e7:77:18:ab:42:6e:2b:c2:a7:10:8a:a2:67:00:52:ac:97:04: fa:66:b2:d4:c4:d0:52:a4:8d:c7:9e:6d:da:1d:15:e4:95:ec: 73:cd:98:8c:9b:b8:b0:60:5d:7d:d6:d8:54:19:9d:a2:9f:e9: a0:c2:75:a1:f0:3f:cf:ad:3a:13:d5:91:7f:88:2b:38:d5:60: d9:5c:d9:55:b8:ea:61:b2:48:75:2d:8d:e3:44:8c:60:5a:f6: 76:41:78:8e:c1:fa:91:93:89:e7:37:c6:e2:ef:0a:65:33:eb: 12:9e:37:dd:7b:c5:e0:32:51:0e:26:58:d3:2d:a9:28:b1:a0: be:d5:0c:f6:ba:a0:cd:b6:67:61:6b:c0:a7:ca:16:af:4b:06: 03:5f:c6:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pasJeTOh6sH52IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZjYyZGQyOTktMWEzZi00YTYxLTkzOTUtOWMxZDY1ZTZmOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpLruTAfoDz7uEsAOodUXpMSLmn4rt41n/1W Zm3UfU0O4Q92cyqH8sOxlqj/5T0oPeJM+8Lz8yR4wSAYikbnD3DL/Vj8eTfLnA4K tAG9CbqA1vfYNa7RWdpks5POqeYIY7UqQZpAQVWCNVVdXpRwIK0ZM20N76rCWZN3 yXnl9p+o6sKPUznRk0UCJvb27ei7rgptJbhBMCa+FDa1Pxdi9udnFjZzK7zM+zQy udumN12uqVgWNvV4DN2bWlxFK/oiznPxSCtUAJSjoQIWiKKramJ61Sg4aADeMkN3 7heUODpUFB6CZQdbHey0WxohSzcqZzf2NdPs6lumlaFitEKkoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFi4uAjDBRRImMqyf0j97M7dbWJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYjY3MmMyNGUtYWMzYS0z YTczLTkzNjktYWYzZmRlNDc5M2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo1d9av5TVLqjphrSz7hvmACwBVPxoNu0kSjwCRj/0YTmI9N/fjNI0p 0goQAPfxtvV13BUgr71Xpe0l3/U/5Jgk92WDI0xaab4UCa3A4IfEbhoCFxXZDzGr ANK5BVE5cZ7zqtBEsTexqlVjdOd3GKtCbivCpxCKomcAUqyXBPpmstTE0FKkjcee bdodFeSV7HPNmIybuLBgXX3W2FQZnaKf6aDCdaHwP8+tOhPVkX+IKzjVYNlc2VW4 6mGySHUtjeNEjGBa9nZBeI7B+pGTiec3xuLvCmUz6xKeN917xeAyUQ4mWNMtqSix oL7VDPa6oM22Z2FrwKfKFq9LBgNfxl0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:22 2025 by rpki-client