$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa File: bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa (raw, json) Hash identifier: aQIvWGwD/F1CBvp5z6W9SMMSJC1gjtMIXsbaPz/K/wc= Subject key identifier: 16:3B:FA:52:A6:80:CA:BE:CE:A8:FA:C5:BB:F7:73:CD:3A:E6:76:37 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5B160874DB1C308308480 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b1:60:87:4d:b1:c3:08:30:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=9bb3dd5e-9218-406f-b844-011c10202d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a2:0e:c8:22:3b:62:85:22:a3:4e:8e:96:d5: de:97:eb:59:f1:f9:bf:a8:19:8c:53:33:8e:f4:47: dc:7c:c6:87:45:e8:5e:77:22:3f:bf:71:30:da:5a: 5f:b1:dc:6f:25:c1:17:6f:4f:83:6f:58:e4:64:cb: 9d:d2:de:3e:06:f9:af:22:ec:9c:cc:e4:b0:e1:0e: ea:1b:75:0e:d8:cc:3c:3c:c6:c5:56:eb:bb:b4:18: 88:48:6f:58:4e:31:72:16:0f:bb:e7:d0:f6:10:93: c2:5b:30:fb:72:9c:82:6a:94:7f:4a:85:dd:85:8d: 60:fe:0e:37:34:64:5c:27:f5:07:5c:e5:59:12:4f: 77:4e:de:bf:c3:cb:22:1f:bb:cc:37:97:c2:ad:13: 49:56:75:30:65:11:2f:fd:1c:14:02:56:c5:2c:eb: e7:43:58:fe:87:d9:93:56:c7:5f:c3:57:a8:83:80: dd:bf:2e:07:f1:78:94:3a:33:45:c2:96:8e:ed:19: 1e:dd:b7:0a:86:0a:e7:d0:92:46:43:c2:c7:df:a6: 29:3e:6d:5c:3e:d3:28:67:17:a7:b8:c4:34:0d:b1: 17:3b:e3:af:90:d6:e0:df:9e:0d:34:be:3e:07:00: 17:f9:e1:d0:05:05:69:7a:c3:77:58:e6:11:06:82: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3B:FA:52:A6:80:CA:BE:CE:A8:FA:C5:BB:F7:73:CD:3A:E6:76:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:dc:2b:03:f0:09:9e:67:ca:2c:1f:dc:89:bf:04:c0:97:ac: 5f:9f:f5:c2:90:3a:87:6c:de:e2:72:c5:fd:fe:94:fc:60:be: 13:db:51:dd:64:3d:52:69:e6:1d:40:c4:7f:e9:f4:66:7d:a2: c2:19:7a:f4:a9:4c:b0:d2:87:1c:71:a6:c3:72:42:2a:fb:34: 52:64:6b:1c:40:1d:fd:3f:a8:ae:b9:d1:00:11:1c:88:58:ee: 62:dd:39:fa:b8:b5:e6:25:97:0f:ef:b8:0b:de:19:2e:3d:b7: 50:35:b7:48:df:70:2a:88:8e:47:41:61:c1:ab:5c:4d:86:b4: c4:ad:a8:0d:cc:f6:1b:0f:9a:d5:15:71:81:e3:57:9f:13:70: 54:51:ad:d0:99:bd:3a:16:b9:6a:f6:68:dd:c6:e3:65:e1:fd: 5a:fc:28:7c:81:e0:75:d1:14:11:fa:89:20:4b:f9:ea:8a:3e: e8:64:8c:8d:6a:ec:7d:b0:cc:e4:3c:d5:99:e4:0f:35:95:70: 01:3b:f6:89:9f:43:a2:0d:1d:5f:c5:31:32:47:5e:fe:96:22: b2:78:7c:4c:65:ff:e1:e5:9f:be:e3:18:ee:a5:cf:79:32:8b: 87:af:3a:83:31:d0:c5:5f:36:1f:d5:4f:78:5a:7e:9d:6f:c9: bc:c9:78:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbFgh02xwwgwhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk OWJiM2RkNWUtOTIxOC00MDZmLWI4NDQtMDExYzEwMjAyZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKIOyCI7YoUio06OltXel+tZ8fm/qBmMUzOO 9EfcfMaHRehedyI/v3Ew2lpfsdxvJcEXb0+Db1jkZMud0t4+BvmvIuyczOSw4Q7q G3UO2Mw8PMbFVuu7tBiISG9YTjFyFg+759D2EJPCWzD7cpyCapR/SoXdhY1g/g43 NGRcJ/UHXOVZEk93Tt6/w8siH7vMN5fCrRNJVnUwZREv/RwUAlbFLOvnQ1j+h9mT Vsdfw1eog4Ddvy4H8XiUOjNFwpaO7Rke3bcKhgrn0JJGQ8LH36YpPm1cPtMoZxen uMQ0DbEXO+OvkNbg354NNL4+BwAX+eHQBQVpesN3WOYRBoJ5QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY7+lKmgMq+zqj6xbv3c8065nY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYmRhYjg0NjktOGNiNS0z ZmRmLTlmNDktZWNjNTZjZWQyMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPcKwPwCZ5nyiwf3Im/BMCXrF+f9cKQOods3uJyxf3+lPxgvhPbUd1k PVJp5h1AxH/p9GZ9osIZevSpTLDShxxxpsNyQir7NFJkaxxAHf0/qK650QARHIhY 7mLdOfq4teYllw/vuAveGS49t1A1t0jfcCqIjkdBYcGrXE2GtMStqA3M9hsPmtUV cYHjV58TcFRRrdCZvToWuWr2aN3G42Xh/Vr8KHyB4HXRFBH6iSBL+eqKPuhkjI1q 7H2wzOQ81ZnkDzWVcAE79omfQ6INHV/FMTJHXv6WIrJ4fExl/+Hln77jGO6lz3ky i4evOoMx0MVfNh/VT3hafp1vybzJeDw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:44 2025 by rpki-client