$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa File: f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa (raw, json) Hash identifier: D+2Q/QffkgK+8e6xZM8UrjT33MWxaiuDm2P5sRvcATc= Subject key identifier: 05:04:80:CC:25:33:20:2D:A2:01:E3:9B:C7:98:AA:B9:64:A7:52:E1 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AB8ECB42A96A5ABAE250 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ab:8e:cb:42:a9:6a:5a:ba:e2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=2204f042-7a5a-4a97-bff7-a5d3d4026b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:c6:a6:01:bf:92:a4:7e:ec:f8:ad:04:85: 41:5b:26:05:e2:6a:20:6e:65:6d:d6:d8:db:72:f4: 76:6b:cb:10:2b:9d:00:86:f3:de:71:37:15:cc:7b: 0e:b4:5d:00:55:80:2c:ea:b3:5b:4e:a0:89:92:6e: 90:ed:5f:dc:55:21:93:f3:9f:f2:e4:86:60:3b:df: 49:77:da:5b:84:27:8c:d4:ed:e2:4d:e3:b8:01:b6: 46:4f:bb:7d:7d:21:51:fc:f0:14:36:16:35:ad:98: fb:f8:5e:52:de:d6:8f:e3:7b:3d:92:fc:0d:d1:55: 7c:a5:8d:ff:29:7d:9f:37:9d:4a:7b:54:96:03:68: 06:23:fc:e8:ac:90:a2:06:3a:25:f7:fa:f7:50:d4: 27:19:23:6b:74:ca:41:06:5c:62:34:5f:91:66:00: f4:cd:d0:33:14:d4:b2:2d:29:e2:06:ac:a4:f0:42: f2:90:9b:f6:d1:64:1c:7f:1e:7f:d4:77:fa:73:6f: dc:a6:d1:c1:ba:8a:45:d7:cf:10:04:13:9b:35:30: e5:61:8c:1b:3d:a0:10:bd:68:22:2a:6e:bc:9c:74: 38:71:24:31:a4:65:b2:b8:2e:df:9b:1c:cd:57:31: b0:65:16:2e:37:98:a4:de:67:fd:90:89:7c:d2:1a: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:04:80:CC:25:33:20:2D:A2:01:E3:9B:C7:98:AA:B9:64:A7:52:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:4a:66:4c:cc:4e:57:4c:ba:64:c7:74:09:29:0b:8d:eb:9c: 09:9b:be:13:78:29:34:34:ad:93:11:1f:18:93:1c:b0:6f:1d: 36:ef:f3:cd:5f:cc:f5:1e:d9:18:c1:d6:37:05:a0:a1:65:ee: 0e:c2:0e:6e:29:8f:e7:df:55:f2:78:0c:b9:f8:4e:ae:fb:13: 5b:7b:88:63:17:42:7e:95:15:d1:3f:8f:5c:69:af:fa:79:a2: 9b:5d:f5:fc:93:f6:cd:51:a7:77:ab:30:f7:a3:c1:d5:df:17: 09:72:87:09:0f:05:df:3e:8f:1f:52:09:e4:e9:8c:db:60:e5: f2:55:79:20:3f:6e:91:48:64:07:2c:02:ce:a4:c4:b6:0c:65: 73:72:3e:42:29:24:cf:be:59:fe:b6:c6:5b:4b:a1:30:44:5b: ce:f0:7c:e8:aa:2b:8f:aa:3e:28:f3:5a:7d:ac:e1:81:0f:b9: 9e:94:74:ec:ab:5a:8e:e8:15:e8:29:ff:6e:8f:6f:94:cb:ab: ca:59:13:03:f0:cf:30:a3:5c:35:14:4a:53:e0:51:19:45:32: 74:f3:fc:50:fc:d3:8d:d0:40:fd:1f:c5:a5:95:b6:60:b7:52: 01:cc:04:2f:e0:ee:05:1c:e7:4b:6b:fb:57:00:3f:0f:c3:bf: cb:64:f2:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pauOy0Kpalq64lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MjIwNGYwNDItN2E1YS00YTk3LWJmZjctYTVkM2Q0MDI2YjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2HGpgG/kqR+7PitBIVBWyYF4mogbmVt1tjb cvR2a8sQK50AhvPecTcVzHsOtF0AVYAs6rNbTqCJkm6Q7V/cVSGT85/y5IZgO99J d9pbhCeM1O3iTeO4AbZGT7t9fSFR/PAUNhY1rZj7+F5S3taP43s9kvwN0VV8pY3/ KX2fN51Ke1SWA2gGI/zorJCiBjol9/r3UNQnGSNrdMpBBlxiNF+RZgD0zdAzFNSy LSniBqyk8ELykJv20WQcfx5/1Hf6c2/cptHBuopF188QBBObNTDlYYwbPaAQvWgi Km68nHQ4cSQxpGWyuC7fmxzNVzGwZRYuN5ik3mf9kIl80hraXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUEgMwlMyAtogHjm8eYqrlkp1LhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjg1YTY3OTUtYjFmOS0z OTI5LWIyZmItYWUzNjNjZGZmMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFKZkzMTldMumTHdAkpC43rnAmbvhN4KTQ0rZMRHxiTHLBvHTbv881f zPUe2RjB1jcFoKFl7g7CDm4pj+ffVfJ4DLn4Tq77E1t7iGMXQn6VFdE/j1xpr/p5 optd9fyT9s1Rp3erMPejwdXfFwlyhwkPBd8+jx9SCeTpjNtg5fJVeSA/bpFIZAcs As6kxLYMZXNyPkIpJM++Wf62xltLoTBEW87wfOiqK4+qPijzWn2s4YEPuZ6UdOyr Wo7oFegp/26Pb5TLq8pZEwPwzzCjXDUUSlPgURlFMnTz/FD8043QQP0fxaWVtmC3 UgHMBC/g7gUc50tr+1cAPw/Dv8tk8uA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:20:10 2025 by rpki-client