$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ddf39dc7-a720-3335-9c78-530950b34ba7.roa File: ddf39dc7-a720-3335-9c78-530950b34ba7.roa (raw, json) Hash identifier: YiqVI6HNLPPk93JbPmGu+LOt+uRhq5zEiTKjZqbHIwk= Subject key identifier: 28:C5:9C:9C:F4:5B:4B:FB:00:72:69:66:70:49:F1:E2:3A:ED:26:CD Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5ABE83EF510F63B6A0920 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ddf39dc7-a720-3335-9c78-530950b34ba7.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 199.91.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ab:e8:3e:f5:10:f6:3b:6a:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=078f38d2-4d46-4dac-925d-b8f238c45d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a4:cd:ca:28:cd:fa:60:3c:04:f8:d6:2e:20: e9:3d:83:02:d3:7e:a3:1a:bd:59:1d:d8:20:1a:59: 13:14:69:c3:f5:48:3f:70:c9:61:1f:e7:81:cb:96: fe:e0:3c:7f:bf:f4:06:42:53:5f:d2:d2:2c:ce:d7: 98:18:c9:5d:fa:c3:c6:b4:af:e4:7f:d7:e7:28:5c: 40:48:60:f2:05:26:f1:8b:f1:50:47:06:b0:b8:22: cf:5d:33:d0:cd:50:1c:f3:43:8d:b5:84:59:55:67: 81:bf:6f:89:36:13:bc:b5:1e:86:a8:87:30:cb:d4: 08:2f:88:7f:1e:0e:97:53:13:b9:1d:e5:db:b4:98: 2c:c6:36:a9:17:33:bd:2e:de:14:e0:35:12:74:0c: 03:89:1f:7b:48:88:ff:01:a0:2b:d5:19:6b:76:95: 23:10:2a:53:c6:6d:a9:63:db:92:1a:dd:a0:a7:31: 6e:06:31:ab:26:cb:ef:ee:87:5e:93:a2:f1:d1:6b: 62:58:ef:b1:74:83:ef:35:34:14:9d:78:9e:42:11: a5:49:7a:fc:57:53:d0:3a:2c:75:ea:ec:ea:b6:b8: b4:a0:2b:32:9d:4d:a3:b8:04:d0:e8:4a:5a:d8:df: 78:6a:4c:2d:85:5e:e6:a0:0a:45:62:e4:a8:e0:12: f9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C5:9C:9C:F4:5B:4B:FB:00:72:69:66:70:49:F1:E2:3A:ED:26:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ddf39dc7-a720-3335-9c78-530950b34ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b6:0d:66:ad:e6:92:e6:9d:73:4b:95:34:75:59:38:d2:f3: e9:c9:6e:f8:29:e2:23:d8:50:e4:51:12:24:55:7d:3b:f5:50: 25:d9:77:55:25:af:4f:a0:3e:a5:a2:a9:78:c2:4d:ed:3c:a4: 31:21:88:d8:37:d3:2f:f0:02:06:67:bb:25:a3:33:b2:da:e4: 31:ad:58:3c:3a:48:f7:57:b4:10:4b:68:8b:df:4a:f2:53:a4: 0d:25:c5:42:81:22:0b:70:af:ce:e0:91:ca:30:27:ef:c6:5d: 31:49:b9:14:98:bd:e3:97:69:13:e3:0d:60:d5:31:ca:5b:8f: 66:2e:0c:cc:65:1c:62:04:f4:a2:14:68:0a:87:54:25:f0:ed: 00:7b:40:68:5d:fb:98:d6:da:5a:89:b5:8b:2b:b3:28:e7:31: c9:a5:01:02:47:39:6c:27:a1:50:a4:04:bc:6d:9b:7a:1a:49: e0:c9:e3:cc:04:b7:5c:92:eb:64:4d:bc:91:c1:a9:ca:3c:89: c2:f4:d2:01:83:9b:34:a6:56:a7:40:02:68:27:a3:38:74:86: 56:d4:f7:1d:dd:57:38:ff:ab:e6:fb:72:ad:af:4c:4a:4d:94: 95:35:c0:f2:f7:46:ef:e0:ff:65:4c:b8:2c:1c:17:3c:4e:7e: 05:e5:42:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pavoPvUQ9jtqCSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MDc4ZjM4ZDItNGQ0Ni00ZGFjLTkyNWQtYjhmMjM4YzQ1ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKTNyijN+mA8BPjWLiDpPYMC036jGr1ZHdgg GlkTFGnD9Ug/cMlhH+eBy5b+4Dx/v/QGQlNf0tIszteYGMld+sPGtK/kf9fnKFxA SGDyBSbxi/FQRwawuCLPXTPQzVAc80ONtYRZVWeBv2+JNhO8tR6GqIcwy9QIL4h/ Hg6XUxO5HeXbtJgsxjapFzO9Lt4U4DUSdAwDiR97SIj/AaAr1RlrdpUjECpTxm2p Y9uSGt2gpzFuBjGrJsvv7odek6Lx0WtiWO+xdIPvNTQUnXieQhGlSXr8V1PQOix1 6uzqtri0oCsynU2juATQ6Epa2N94akwthV7moApFYuSo4BL5gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjFnJz0W0v7AHJpZnBJ8eI67SbNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZGRmMzlkYzctYTcyMC0z MzM1LTljNzgtNTMwOTUwYjM0YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe2DWat5pLmnXNLlTR1WTjS8+nJbvgp4iPYUORREiRVfTv1UCXZd1Ul r0+gPqWiqXjCTe08pDEhiNg30y/wAgZnuyWjM7La5DGtWDw6SPdXtBBLaIvfSvJT pA0lxUKBIgtwr87gkcowJ+/GXTFJuRSYveOXaRPjDWDVMcpbj2YuDMxlHGIE9KIU aAqHVCXw7QB7QGhd+5jW2lqJtYsrsyjnMcmlAQJHOWwnoVCkBLxtm3oaSeDJ48wE t1yS62RNvJHBqco8icL00gGDmzSmVqdAAmgnozh0hlbU9x3dVzj/q+b7cq2vTEpN lJU1wPL3Ru/g/2VMuCwcFzxOfgXlQlg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:04:11 2025 by rpki-client