$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ec8c4e40-cbe0-321f-9077-9fb95f124cb3.roa File: ec8c4e40-cbe0-321f-9077-9fb95f124cb3.roa (raw, json) Hash identifier: i2EdcGbpST5JmvqtXU2DD7nxXrXz6D+MP9t02S8sFyA= Subject key identifier: CA:D8:31:AA:B8:82:95:59:F0:5E:87:58:BC:83:C0:92:21:95:A7:5B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5B1E211AF3C7FA213B400 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ec8c4e40-cbe0-321f-9077-9fb95f124cb3.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b1:e2:11:af:3c:7f:a2:13:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=6773dd5b-52df-4613-a2fc-371696e4d714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:ba:49:dd:0c:bc:dc:2d:99:94:82:b9:52: f3:3b:df:b8:8b:1a:03:3d:7f:f2:20:f1:40:61:50: 81:1e:f6:1b:f2:90:23:a1:58:74:c0:a6:12:09:74: 8a:59:79:2e:6b:f9:d7:0a:10:2f:7b:42:7e:31:f0: 20:3d:6f:61:0a:76:35:f2:6c:41:0f:32:65:ea:d2: 98:79:a9:6d:12:bf:14:1b:c8:f6:77:6b:85:b9:4c: ec:6e:13:96:85:85:b4:4d:06:a9:30:6e:91:80:e4: 76:e2:0f:00:7a:cf:cf:95:c1:d9:d9:a3:4d:a1:6c: 3a:cf:34:d1:cd:2a:aa:f4:21:5d:f0:89:01:93:6a: 2f:d7:39:10:e4:51:95:90:5a:16:69:3c:9a:59:65: 0b:df:74:cd:f2:47:fa:37:0e:81:fe:00:5d:4d:63: f8:ad:97:7a:c4:de:96:c9:e8:9f:dc:d4:e5:d8:8d: 4e:a2:4f:51:c5:04:f8:d4:e3:11:e7:45:1d:07:eb: 49:26:55:73:97:db:11:f6:34:44:00:71:c0:65:d3: ec:bd:fc:43:b7:71:d4:5d:75:a1:15:6f:af:4d:19: 6a:e4:00:44:03:08:1c:4f:5e:70:14:91:51:a0:d8: 2e:f5:e1:53:51:cc:a5:fd:da:58:e7:b2:db:2f:dd: 02:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D8:31:AA:B8:82:95:59:F0:5E:87:58:BC:83:C0:92:21:95:A7:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ec8c4e40-cbe0-321f-9077-9fb95f124cb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c8:4a:b9:f5:9d:d4:bb:84:70:c7:fe:e6:26:c8:14:34:a5: fb:6f:6e:49:7c:92:6e:61:d1:bb:28:50:1b:08:b5:f1:5b:46: 1e:75:47:12:43:0c:a5:aa:2c:ec:80:dd:e0:12:29:37:bd:3d: 27:4d:48:6d:88:47:42:ab:49:35:01:bd:9d:21:1e:40:22:09: 47:f1:c5:38:f4:bd:aa:ff:35:6d:6a:0c:e8:8b:67:f1:22:c1: 3b:16:72:4d:b9:69:80:25:5f:de:77:6c:93:e3:c0:34:93:f4: 47:bf:5b:a7:51:d2:5d:a0:8d:f5:d8:05:7a:92:07:e7:bb:48: e0:e5:85:d0:f3:7c:9e:74:27:e8:36:a8:df:5f:7d:b2:a5:12: 35:d2:66:17:bc:50:69:d6:1b:29:e6:f6:b6:8b:27:ff:fa:4e: c8:b8:e6:ca:34:f9:35:fe:3c:11:21:52:37:03:96:2d:ff:8e: d1:e9:0b:2d:69:5c:4e:e2:9a:c4:e0:39:80:1d:08:b9:7f:e6: 47:3e:c4:21:ba:7e:89:0d:39:d9:44:d3:4b:4d:9c:a3:48:9b: c2:24:58:cf:2c:31:de:37:d9:5e:c0:e2:50:19:eb:4b:31:c3: 39:c9:a1:21:26:a5:80:7e:77:e2:77:67:1a:f2:fb:7c:b5:e5: 28:44:19:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbHiEa88f6ITtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk Njc3M2RkNWItNTJkZi00NjEzLWEyZmMtMzcxNjk2ZTRkNzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyu6Sd0MvNwtmZSCuVLzO9+4ixoDPX/yIPFA YVCBHvYb8pAjoVh0wKYSCXSKWXkua/nXChAve0J+MfAgPW9hCnY18mxBDzJl6tKY ealtEr8UG8j2d2uFuUzsbhOWhYW0TQapMG6RgOR24g8Aes/PlcHZ2aNNoWw6zzTR zSqq9CFd8IkBk2ov1zkQ5FGVkFoWaTyaWWUL33TN8kf6Nw6B/gBdTWP4rZd6xN6W yeif3NTl2I1Ook9RxQT41OMR50UdB+tJJlVzl9sR9jREAHHAZdPsvfxDt3HUXXWh FW+vTRlq5ABEAwgcT15wFJFRoNgu9eFTUcyl/dpY57LbL90CUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrYMaq4gpVZ8F6HWLyDwJIhladbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZWM4YzRlNDAtY2JlMC0z MjFmLTkwNzctOWZiOTVmMTI0Y2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXISrn1ndS7hHDH/uYmyBQ0pftvbkl8km5h0bsoUBsItfFbRh51RxJD DKWqLOyA3eASKTe9PSdNSG2IR0KrSTUBvZ0hHkAiCUfxxTj0var/NW1qDOiLZ/Ei wTsWck25aYAlX953bJPjwDST9Ee/W6dR0l2gjfXYBXqSB+e7SODlhdDzfJ50J+g2 qN9ffbKlEjXSZhe8UGnWGynm9raLJ//6Tsi45so0+TX+PBEhUjcDli3/jtHpCy1p XE7imsTgOYAdCLl/5kc+xCG6fokNOdlE00tNnKNIm8IkWM8sMd432V7A4lAZ60sx wznJoSEmpYB+d+J3Zxry+3y15ShEGSk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:14:59 2025 by rpki-client