$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa File: d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa (raw, json) Hash identifier: oAmW9DW5Gt//D7yX8k1eWrGK21c1H8jUE8u8XqKn7M0= Subject key identifier: EE:71:08:F6:40:4C:BB:10:AC:9B:46:05:48:E0:24:B9:D6:49:FA:17 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AB1CF4B0D46250C6FE20 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ab:1c:f4:b0:d4:62:50:c6:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=cff8414b-90df-4f73-b4ff-ec675cb9c85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f2:b7:0c:17:3b:47:18:34:69:56:98:e7:66: 20:82:ce:40:ea:af:64:39:2f:52:f0:c3:d7:ee:1c: 88:b2:30:72:47:6d:d2:91:0d:fb:1d:35:14:fe:68: 2f:31:57:30:46:ab:15:f2:45:18:30:2f:2f:a2:0f: 16:7b:02:62:55:0c:9a:af:e4:d6:c4:4b:1b:5d:97: e6:c2:b4:04:33:d3:fb:33:b1:b8:d9:d0:cb:29:41: 21:52:64:d5:b6:92:cc:88:db:d5:2d:ad:1c:de:e2: d2:18:c4:84:0b:86:34:af:61:30:94:61:0d:e4:75: 2c:ec:4d:f2:b2:40:44:40:bc:8c:17:3d:e8:8d:a2: 58:21:6b:90:67:ea:ae:4e:0b:2a:42:d0:f7:6f:b4: 1e:ce:8e:81:83:5a:1d:29:6b:29:30:d3:19:dd:f6: fc:75:c6:74:ad:93:b1:09:38:a7:65:7d:37:46:de: 02:c8:78:39:4f:77:3f:df:3c:01:ca:0c:26:fe:1d: 72:3b:9c:8d:d7:9d:92:b1:46:a8:ab:1c:09:a7:c8: bf:d2:85:d5:99:93:f1:cc:61:4c:48:64:88:86:e3: f7:f8:5b:88:47:d2:d5:ee:b3:21:09:62:23:bf:cb: d3:ca:1b:f7:e3:3d:c5:a4:3a:a3:59:af:d6:7b:e1: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:71:08:F6:40:4C:BB:10:AC:9B:46:05:48:E0:24:B9:D6:49:FA:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:5b:06:4e:97:bd:31:bc:5b:8c:93:b2:b9:48:77:9f:2f:9a: df:02:66:70:09:ad:4b:ba:b9:41:9a:59:a6:da:ed:27:12:2f: 5c:89:1b:ed:33:d7:f3:b3:a3:27:a1:4e:28:4d:77:4e:45:e6: 19:fd:d9:a3:06:9f:6d:a9:f3:22:93:86:28:b6:8a:f1:6e:96: 2b:9c:c4:bb:9a:50:df:b4:89:d0:43:30:4a:73:10:44:b7:d2: 8c:16:c0:4c:b8:e1:90:fc:ed:08:4a:fa:eb:86:a4:1c:26:67: 12:9a:89:b5:0d:c1:4a:93:0c:91:15:0b:e0:ea:1b:14:fb:d6: 89:ce:ba:3b:e1:d6:8a:12:b1:f3:8d:b0:e7:91:c0:41:11:96: 4f:36:5a:7d:f2:b8:72:8a:4d:16:8f:2e:fe:3f:3e:a5:0c:72: 47:8f:29:3a:e3:0f:dc:45:61:c3:e1:6c:90:0e:72:c3:7d:00: 32:bb:e4:4b:15:08:63:2d:25:4c:fe:ac:fd:9a:1c:b5:cb:47: 47:7e:52:b1:94:84:80:dc:15:9c:20:6d:f3:b6:f0:90:85:57: 0a:54:8b:6d:77:9b:36:be:68:e8:65:be:b7:53:5c:3b:c7:1b: 87:8e:79:ad:7d:a7:99:26:44:82:79:30:fa:90:32:a3:91:08: 70:fe:ed:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pasc9LDUYlDG/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk Y2ZmODQxNGItOTBkZi00ZjczLWI0ZmYtZWM2NzVjYjljODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfK3DBc7Rxg0aVaY52Yggs5A6q9kOS9S8MPX 7hyIsjByR23SkQ37HTUU/mgvMVcwRqsV8kUYMC8vog8WewJiVQyar+TWxEsbXZfm wrQEM9P7M7G42dDLKUEhUmTVtpLMiNvVLa0c3uLSGMSEC4Y0r2EwlGEN5HUs7E3y skBEQLyMFz3ojaJYIWuQZ+quTgsqQtD3b7Qezo6Bg1odKWspMNMZ3fb8dcZ0rZOx CTinZX03Rt4CyHg5T3c/3zwBygwm/h1yO5yN152SsUaoqxwJp8i/0oXVmZPxzGFM SGSIhuP3+FuIR9LV7rMhCWIjv8vTyhv34z3FpDqjWa/We+HS8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5xCPZATLsQrJtGBUjgJLnWSfoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZDJiYWIxZjgtMjVjYS0z ZDA3LWFlOWItOGY4NWM0YzVhYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlbBk6XvTG8W4yTsrlId58vmt8CZnAJrUu6uUGaWaba7ScSL1yJG+0z 1/OzoyehTihNd05F5hn92aMGn22p8yKThii2ivFuliucxLuaUN+0idBDMEpzEES3 0owWwEy44ZD87QhK+uuGpBwmZxKaibUNwUqTDJEVC+DqGxT71onOujvh1ooSsfON sOeRwEERlk82Wn3yuHKKTRaPLv4/PqUMckePKTrjD9xFYcPhbJAOcsN9ADK75EsV CGMtJUz+rP2aHLXLR0d+UrGUhIDcFZwgbfO28JCFVwpUi213mza+aOhlvrdTXDvH G4eOea19p5kmRIJ5MPqQMqORCHD+7Wg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:15 2025 by rpki-client