$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b8fda7c2-f22d-3c08-9f2f-4b2b55577875.roa File: b8fda7c2-f22d-3c08-9f2f-4b2b55577875.roa (raw, json) Hash identifier: l+nWBZxNTTp+Vz5e2+MFGD/5SUq90rGNTS8GUpDWZhk= Subject key identifier: F7:95:6E:52:06:E2:6E:5E:8A:7C:A2:AF:6D:E2:F8:58:80:93:52:70 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5B1867A8E31E06A9A1400 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b8fda7c2-f22d-3c08-9f2f-4b2b55577875.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b1:86:7a:8e:31:e0:6a:9a:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=5ae1b318-4830-4919-ae5b-becea2332213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:f4:e6:59:2a:2d:77:cb:6c:af:c8:33:21: 59:d1:c6:05:72:6f:f7:b6:1f:c4:90:05:ba:3f:c9: 63:3a:e5:9c:66:4f:ff:86:25:89:54:0f:ef:fd:d5: 85:97:a9:d2:c6:0b:50:72:53:ec:b2:ec:83:1e:cb: a1:e3:86:ea:23:7b:c8:a4:33:c8:c9:2e:f9:4e:23: 15:aa:78:25:30:5f:93:fb:a1:da:a8:ed:52:c6:83: 95:d7:b3:c4:d2:1b:21:8b:38:4e:01:1c:8c:3d:ac: 27:9f:22:9c:4a:3a:a1:8d:70:e1:cf:04:8a:b1:a5: 86:25:d4:ab:76:24:f0:5b:77:40:c6:a6:ce:9a:59: 7f:8e:ab:ae:52:75:7c:f9:d1:ff:f7:25:ee:9a:d9: b3:93:e8:21:45:13:dd:5a:36:59:72:59:fa:dd:47: 5c:1f:84:29:01:7f:18:4b:f4:b0:12:ea:57:39:c5: 5f:e4:4e:18:3b:35:c4:30:4b:0e:00:5c:1d:18:59: 65:c4:e2:ae:d9:bb:c4:47:a6:b2:33:22:b1:58:d0: b0:33:d1:d0:aa:05:37:d0:ca:a3:a4:4b:09:3b:27: ac:4d:e5:60:aa:95:34:0f:c2:db:20:4f:e2:d7:df: 96:4f:c9:b3:22:8a:dc:91:7b:03:10:24:73:da:4f: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:95:6E:52:06:E2:6E:5E:8A:7C:A2:AF:6D:E2:F8:58:80:93:52:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b8fda7c2-f22d-3c08-9f2f-4b2b55577875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a6:2e:5d:94:6a:1b:cf:dd:af:98:e2:b4:95:8d:9e:2f:a6: 9e:f8:2f:6c:29:ba:94:46:0a:f5:bc:4e:85:7e:92:3d:b3:6d: 8a:1a:27:ec:96:00:13:58:7f:3c:57:b3:46:a1:c4:88:c5:c6: 29:35:ed:aa:11:19:55:5a:f5:a4:34:00:c2:82:02:48:e5:c9: a0:55:29:b5:a5:29:bb:a4:03:1a:09:48:e0:3e:c0:cd:bc:00: d0:b5:98:85:bb:c8:80:3b:e3:e1:cf:49:c2:78:55:c6:6d:28: 05:a3:60:bc:b8:b9:49:77:3c:1b:2d:42:83:2d:c8:5a:74:67: 8b:ec:c3:7a:f9:45:68:06:4b:11:5b:ba:28:9c:5b:b9:b6:d0: c6:c8:08:78:e4:fd:f5:7c:31:45:d8:be:33:6f:f6:cd:8b:3d: 8f:43:1b:00:86:f0:56:03:02:30:af:e1:df:26:00:e1:8a:9e: 3d:30:ed:31:a3:cb:30:97:f3:24:38:f3:30:95:7f:65:c1:d9: d0:34:de:32:57:2d:17:19:b4:ee:53:e4:1d:77:7c:c3:3f:2b: 3b:fc:d9:b2:80:59:23:48:c7:94:4f:77:a9:eb:f8:eb:a7:a7: 84:83:65:53:a6:5c:73:59:c6:b1:96:48:6c:38:4c:ca:c0:6e: a8:91:d3:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbGGeo4x4GqaFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NWFlMWIzMTgtNDgzMC00OTE5LWFlNWItYmVjZWEyMzMyMjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju705lkqLXfLbK/IMyFZ0cYFcm/3th/EkAW6 P8ljOuWcZk//hiWJVA/v/dWFl6nSxgtQclPssuyDHsuh44bqI3vIpDPIyS75TiMV qnglMF+T+6HaqO1SxoOV17PE0hshizhOARyMPawnnyKcSjqhjXDhzwSKsaWGJdSr diTwW3dAxqbOmll/jquuUnV8+dH/9yXumtmzk+ghRRPdWjZZcln63UdcH4QpAX8Y S/SwEupXOcVf5E4YOzXEMEsOAFwdGFllxOKu2bvER6ayMyKxWNCwM9HQqgU30Mqj pEsJOyesTeVgqpU0D8LbIE/i19+WT8mzIorckXsDECRz2k/n1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeVblIG4m5einyir23i+FiAk1JwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYjhmZGE3YzItZjIyZC0z YzA4LTlmMmYtNGIyYjU1NTc3ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGmLl2UahvP3a+Y4rSVjZ4vpp74L2wpupRGCvW8ToV+kj2zbYoaJ+yW ABNYfzxXs0ahxIjFxik17aoRGVVa9aQ0AMKCAkjlyaBVKbWlKbukAxoJSOA+wM28 ANC1mIW7yIA74+HPScJ4VcZtKAWjYLy4uUl3PBstQoMtyFp0Z4vsw3r5RWgGSxFb uiicW7m20MbICHjk/fV8MUXYvjNv9s2LPY9DGwCG8FYDAjCv4d8mAOGKnj0w7TGj yzCX8yQ48zCVf2XB2dA03jJXLRcZtO5T5B13fMM/Kzv82bKAWSNIx5RPd6nr+Oun p4SDZVOmXHNZxrGWSGw4TMrAbqiR0zo= -----END CERTIFICATE-----Generated at Wed Nov 5 16:35:22 2025 by rpki-client