$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89c3b158-def6-36c7-9480-3da3625c7cee.roa File: 89c3b158-def6-36c7-9480-3da3625c7cee.roa (raw, json) Hash identifier: P5fckehWWe5s8dRwYkj1oH04jQTr0AzOKK+K2QZhHMA= Subject key identifier: 9A:6A:38:9F:F2:86:FF:D6:51:5A:DB:E6:D9:FF:2E:22:B9:C8:45:B6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584BB45D4622344AA4F9DD794780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89c3b158-def6-36c7-9480-3da3625c7cee.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 396982 IP address blocks: 136.117.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:46:22:34:4a:a4:f9:dd:79:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=c627802d-135f-4a80-a7ba-93dce100e9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:36:31:e5:1c:eb:e8:56:76:12:ed:0b:a1:b0: 69:e3:e7:21:39:51:04:e6:d3:c2:bd:a9:28:b4:58: a9:2d:52:9c:a5:3f:d6:e9:20:aa:87:2c:b6:9a:b2: cd:85:d6:16:07:72:2d:9f:3e:6f:41:d1:d7:72:f2: 07:a0:d4:65:40:75:10:b1:28:53:c7:ff:34:f9:18: 4c:ab:c8:03:ff:cb:1f:30:1e:be:e6:a5:9c:d5:ec: 39:5e:29:14:e3:75:3b:c0:83:05:ef:d6:e1:06:53: 31:c8:51:34:52:49:0d:48:39:a9:cb:e6:cb:c6:48: 76:19:02:1f:dd:8f:05:96:af:d3:f6:80:94:f7:ff: 3c:0e:c3:32:85:75:61:4e:37:1a:4f:ca:c3:6c:2c: 99:4b:e1:a6:28:64:95:c1:60:75:d1:33:62:a2:73: ae:ff:32:e1:55:a2:f3:75:0b:07:5b:9e:30:d3:be: 9b:20:1e:ab:05:a0:d0:a3:8e:b1:d2:a7:78:28:79: 3f:f2:1c:33:b5:a1:15:9c:f4:8d:0a:29:18:7f:49: 6d:14:62:fd:f1:f3:31:38:ec:59:b3:7d:5a:eb:61: c9:de:f7:3e:0f:80:8d:cc:df:96:46:5a:46:4d:ef: 2c:e6:62:a5:f6:d5:31:f9:af:78:b6:92:07:91:b7: d7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6A:38:9F:F2:86:FF:D6:51:5A:DB:E6:D9:FF:2E:22:B9:C8:45:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89c3b158-def6-36c7-9480-3da3625c7cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.117.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:02:1c:2f:bb:26:54:d8:b8:37:36:68:e1:15:51:f2:1c:32: 86:4d:89:4a:05:73:a1:b0:8b:5a:58:16:51:6e:00:60:a9:a2: 27:1b:af:99:c1:27:2b:64:32:b5:d9:8d:db:9f:20:6c:73:67: b6:dc:97:ee:d9:3c:5e:19:5c:2b:7f:84:6b:0d:8a:ee:86:52: 35:7d:40:33:2a:c6:85:96:2e:e8:e7:af:fc:1d:fd:4a:37:fe: b8:2e:11:ff:a1:0f:9a:30:1a:05:99:a5:bb:bf:51:27:2f:b9: 16:13:5e:22:c1:1c:18:29:67:f1:b8:cf:85:bd:24:60:19:de: 01:45:56:e4:1e:a9:a2:a0:3d:ca:af:8b:ec:d7:95:8f:23:13: 6a:aa:38:17:60:25:6a:ad:74:46:38:0e:97:dc:04:c5:14:03: d5:94:a3:7a:64:bd:31:a6:c6:cb:33:a6:76:0a:8a:dc:0b:82: 2d:f8:7a:b1:4d:83:b9:d5:f8:d6:4a:f7:fb:68:a4:a6:b0:56: 85:9d:b7:37:06:49:ed:c1:81:91:2e:ab:c4:5c:e8:9b:a5:e0: c2:ad:55:e0:92:66:61:61:90:54:05:cc:50:5f:f5:a4:2f:d8: 92:f3:fb:1a:70:2b:2b:96:fe:20:61:30:0b:82:d1:00:04:6c: 51:52:52:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUYiNEqk+d15R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YzYyNzgwMmQtMTM1Zi00YTgwLWE3YmEtOTNkY2UxMDBlOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zYx5Rzr6FZ2Eu0LobBp4+chOVEE5tPCvako tFipLVKcpT/W6SCqhyy2mrLNhdYWB3Itnz5vQdHXcvIHoNRlQHUQsShTx/80+RhM q8gD/8sfMB6+5qWc1ew5XikU43U7wIMF79bhBlMxyFE0UkkNSDmpy+bLxkh2GQIf 3Y8Flq/T9oCU9/88DsMyhXVhTjcaT8rDbCyZS+GmKGSVwWB10TNionOu/zLhVaLz dQsHW54w076bIB6rBaDQo46x0qd4KHk/8hwztaEVnPSNCikYf0ltFGL98fMxOOxZ s31a62HJ3vc+D4CNzN+WRlpGTe8s5mKl9tUx+a94tpIHkbfXQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpqOJ/yhv/WUVrb5tn/LiK5yEW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODljM2IxNTgtZGVmNi0z NmM3LTk0ODAtM2RhMzYyNWM3Y2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiHWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4CHC+7JlTYuDc2aOEVUfIcMoZNiUoFc6Gwi1pYFlFuAGCpoicbr5nB JytkMrXZjdufIGxzZ7bcl+7ZPF4ZXCt/hGsNiu6GUjV9QDMqxoWWLujnr/wd/Uo3 /rguEf+hD5owGgWZpbu/UScvuRYTXiLBHBgpZ/G4z4W9JGAZ3gFFVuQeqaKgPcqv i+zXlY8jE2qqOBdgJWqtdEY4DpfcBMUUA9WUo3pkvTGmxsszpnYKitwLgi34erFN g7nV+NZK9/topKawVoWdtzcGSe3BgZEuq8Rc6Jul4MKtVeCSZmFhkFQFzFBf9aQv 2JLz+xpwKyuW/iBhMAuC0QAEbFFSUpU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:16 2025 by rpki-client