$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa File: fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa (raw, json) Hash identifier: j5yZRfSyBvNseldOEafsSRUhba9aGxi9uObPs+p7FRg= Subject key identifier: 3E:D0:28:FD:51:28:F6:AA:93:09:8A:1C:72:87:C3:E2:3F:66:75:08 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AAE7D6F0E9F52ECB3E00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:aa:e7:d6:f0:e9:f5:2e:cb:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=b1b48d1f-aee2-4443-b775-3704838ed169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:af:43:03:16:6c:26:07:fa:7c:c9:64:e2: c8:fe:b8:5f:49:49:f7:34:a4:66:f8:0d:06:5a:25: 98:85:bd:cc:4d:6f:1e:f0:3c:16:28:5f:a1:84:db: d8:4f:ce:c2:e5:69:e7:3e:0f:af:e4:31:4c:64:0d: ce:86:e4:21:02:8c:47:2f:11:f8:44:3f:a8:1d:c7: 38:b0:06:e1:cc:79:66:9e:72:9d:fb:f2:79:9e:f1: cc:ef:64:60:8f:4a:05:70:15:3d:35:4c:4b:99:b6: 84:30:1f:e8:ee:c6:f2:6a:2f:9e:11:61:13:f3:06: 63:d8:b1:24:cf:a3:35:e5:03:9c:d0:57:02:58:75: e5:99:b3:4f:34:ba:1f:0e:c6:cb:72:ae:41:97:14: 34:2c:57:04:5a:fd:ce:af:09:71:e5:b6:fc:ea:7b: ad:ed:74:74:db:21:33:8d:55:19:fe:08:a7:a7:2a: 40:a9:63:57:be:50:c5:7c:a1:7a:1a:72:08:96:06: 8e:b0:da:9e:80:6f:6a:41:0d:5b:b0:3c:4b:9f:e2: ce:ea:19:d1:01:26:8e:6a:7c:af:db:37:d4:8b:33: 3e:05:d8:47:5d:e1:65:53:37:dc:77:42:51:c8:2e: d4:ac:a7:42:fe:59:32:da:6c:4f:53:16:eb:6c:65: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D0:28:FD:51:28:F6:AA:93:09:8A:1C:72:87:C3:E2:3F:66:75:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9b:91:33:91:cc:55:b3:53:f8:68:e9:0a:ae:2d:61:fb:d8: 38:c4:2f:22:87:b7:31:51:da:94:3c:b2:33:fd:5a:71:20:86: cc:0b:00:2c:c9:58:4c:21:f7:ab:e9:5b:44:be:2a:22:5f:2c: c8:bc:cc:3a:69:b1:33:13:f7:ea:71:c6:4e:7b:41:94:06:64: 37:77:e1:f8:28:8c:4b:f3:37:a2:87:ec:aa:a3:55:03:c4:88: 86:10:9a:75:36:e7:18:5b:5f:40:96:7b:08:45:60:a2:6b:72: e9:4a:1e:4c:b7:a2:a3:e9:18:59:84:10:e5:b3:0e:f7:4c:6f: e2:da:9f:09:2f:0e:fb:fe:5e:71:17:75:30:75:74:5d:d8:4b: d1:43:34:da:b0:30:1d:fa:52:13:cb:bc:9e:fa:60:33:a5:8b: f0:6c:15:68:89:b7:6b:ac:8a:4a:d2:6c:60:b3:4a:65:07:dc: 7b:c6:dc:9d:2e:c7:24:29:42:6d:19:b6:f7:21:44:03:cb:4f: 08:7e:fa:15:32:58:c2:6a:34:6f:b0:ee:30:7a:a0:b7:83:32: f0:ba:1b:58:7c:c5:53:59:21:34:8b:ae:7f:49:d1:69:0e:1b: b1:f0:af:fd:f6:a0:86:c1:10:6f:0f:db:90:6a:e5:4d:d1:53: ef:e5:24:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/parn1vDp9S7LPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YjFiNDhkMWYtYWVlMi00NDQzLWI3NzUtMzcwNDgzOGVkMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgWvQwMWbCYH+nzJZOLI/rhfSUn3NKRm+A0G WiWYhb3MTW8e8DwWKF+hhNvYT87C5WnnPg+v5DFMZA3OhuQhAoxHLxH4RD+oHcc4 sAbhzHlmnnKd+/J5nvHM72Rgj0oFcBU9NUxLmbaEMB/o7sbyai+eEWET8wZj2LEk z6M15QOc0FcCWHXlmbNPNLofDsbLcq5BlxQ0LFcEWv3Orwlx5bb86nut7XR02yEz jVUZ/ginpypAqWNXvlDFfKF6GnIIlgaOsNqegG9qQQ1bsDxLn+LO6hnRASaOanyv 2zfUizM+BdhHXeFlUzfcd0JRyC7UrKdC/lky2mxPUxbrbGXmowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7QKP1RKPaqkwmKHHKHw+I/ZnUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZmRkMGNmYjctNjNlMy0z YzQxLThmMWQtNDUyYWY5NDllNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKbkTORzFWzU/ho6QquLWH72DjELyKHtzFR2pQ8sjP9WnEghswLACzJ WEwh96vpW0S+KiJfLMi8zDppsTMT9+pxxk57QZQGZDd34fgojEvzN6KH7KqjVQPE iIYQmnU25xhbX0CWewhFYKJrculKHky3oqPpGFmEEOWzDvdMb+LanwkvDvv+XnEX dTB1dF3YS9FDNNqwMB36UhPLvJ76YDOli/BsFWiJt2usikrSbGCzSmUH3HvG3J0u xyQpQm0ZtvchRAPLTwh++hUyWMJqNG+w7jB6oLeDMvC6G1h8xVNZITSLrn9J0WkO G7Hwr/32oIbBEG8P25Bq5U3RU+/lJGI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:13 2025 by rpki-client