$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/90cfd75a-03e8-3bf2-be07-d7214ee8b073.roa File: 90cfd75a-03e8-3bf2-be07-d7214ee8b073.roa (raw, json) Hash identifier: 8uLyPME6F59ZKUzKvTY+hv+4l/sjIsJyNsCg6E4pDZo= Subject key identifier: 39:49:10:59:D1:0C:4E:EA:AF:AC:A6:BB:97:13:95:94:8F:73:77:57 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584AF6868E0F9DF36B774E81BF00 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/90cfd75a-03e8-3bf2-be07-d7214ee8b073.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8011 IP address blocks: 89.192.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:8e:0f:9d:f3:6b:77:4e:81:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=d4341086-1c68-4814-b303-64828f546050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:9f:e2:1a:5c:2c:e7:dc:1f:a2:57:d6:17: 7a:bc:e4:ab:27:05:26:0c:d8:f0:79:ae:4e:75:ae: ca:d6:51:63:8a:a1:0c:18:c0:6b:cd:b8:fc:50:16: 9d:b0:84:86:3e:ad:a8:0b:77:b8:c1:34:b3:d6:ef: 95:03:ec:4c:12:86:aa:be:00:8f:64:30:4e:c0:1a: 68:a2:a3:2a:91:ba:b3:42:99:f3:2e:eb:8a:d4:cd: 87:db:26:90:5d:4d:5c:87:42:82:3d:b1:26:94:3f: c9:c7:f2:1c:f6:25:22:d7:40:56:2b:e5:03:9a:65: 99:88:c7:16:66:49:4e:2d:8d:e6:2e:b2:b0:c8:f0: 4d:99:3c:66:33:0b:7b:19:98:4c:f8:a5:fa:a8:00: f4:5d:83:80:a4:0d:6a:da:4b:f7:53:0a:34:bb:44: 51:e8:28:98:e3:89:4d:68:50:c0:f9:79:59:75:43: 80:15:07:86:ee:59:3c:85:b7:2b:ba:49:86:35:e4: 3d:cc:54:de:b8:b6:48:75:76:a0:7f:09:a4:14:e3: bb:58:81:85:b6:ce:e6:83:db:1f:3e:ce:90:cb:03: 0f:5f:7d:a8:be:fa:a7:8c:7e:cd:80:0c:66:32:3f: cb:57:d0:c0:61:49:93:fe:04:71:4a:69:7d:59:36: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:49:10:59:D1:0C:4E:EA:AF:AC:A6:BB:97:13:95:94:8F:73:77:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/90cfd75a-03e8-3bf2-be07-d7214ee8b073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 89.192.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c6:f5:49:a8:a3:57:d6:08:59:c7:5f:58:49:8c:fe:1a:f9: ec:db:0f:1e:67:d6:72:e4:d9:6c:5e:f8:bc:8c:5e:cb:e2:bb: f5:63:a4:b0:23:8c:f8:f7:c2:96:7a:ca:1f:77:48:d8:e7:93: a1:ed:87:f3:4a:2d:8a:e9:c3:59:4f:c9:bc:5a:3a:b9:cf:99: 8d:03:db:cc:24:08:1c:1a:4d:69:a6:3d:2a:7e:b7:57:ca:de: ab:54:ab:d0:99:88:b5:b2:57:ae:e5:b1:5d:e1:7c:1d:77:59: 13:51:f0:69:21:14:c8:06:80:99:d0:87:5c:55:e4:b3:5a:e3: e4:b8:d8:61:18:05:4b:1b:5c:a4:a7:db:55:3c:7d:48:ea:ec: 9c:eb:84:aa:ff:ae:ba:1f:31:94:ea:45:5d:3f:d4:9b:22:5d: 71:c9:21:79:4d:97:b0:32:db:64:30:6e:3c:44:7b:52:c3:e8: 18:4a:47:8d:84:dd:f3:aa:b0:e2:c2:37:4d:75:9f:42:cf:24: 40:91:15:3f:37:da:8a:43:a5:ee:4b:2f:6f:64:4a:f7:fe:d1: ec:2f:a0:17:0a:4c:d8:ad:a0:f0:a4:ab:36:b9:25:b0:e6:09: 01:cb:30:2a:03:0f:f2:e1:fb:dd:cd:f8:fd:10:f3:e9:69:23: 28:25:6f:e5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEr2ho4PnfNrd06BvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZDQzNDEwODYtMWM2OC00ODE0LWIzMDMtNjQ4MjhmNTQ2MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsyf4hpcLOfcH6JX1hd6vOSrJwUmDNjwea5O da7K1lFjiqEMGMBrzbj8UBadsISGPq2oC3e4wTSz1u+VA+xMEoaqvgCPZDBOwBpo oqMqkbqzQpnzLuuK1M2H2yaQXU1ch0KCPbEmlD/Jx/Ic9iUi10BWK+UDmmWZiMcW ZklOLY3mLrKwyPBNmTxmMwt7GZhM+KX6qAD0XYOApA1q2kv3Uwo0u0RR6CiY44lN aFDA+XlZdUOAFQeG7lk8hbcrukmGNeQ9zFTeuLZIdXagfwmkFOO7WIGFts7mg9sf Ps6QywMPX32ovvqnjH7NgAxmMj/LV9DAYUmT/gRxSml9WTaFowIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDlJEFnRDE7qr6ymu5cTlZSPc3dXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvOTBjZmQ3NWEtMDNlOC0z YmYyLWJlMDctZDcyMTRlZThiMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCWcAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARsb1SaijV9YIWcdfWEmM/hr57NsPHmfWcuTZbF74vIxey+K79WOksCOM +PfClnrKH3dI2OeToe2H80otiunDWU/JvFo6uc+ZjQPbzCQIHBpNaaY9Kn63V8re q1Sr0JmItbJXruWxXeF8HXdZE1HwaSEUyAaAmdCHXFXks1rj5LjYYRgFSxtcpKfb VTx9SOrsnOuEqv+uuh8xlOpFXT/UmyJdcckheU2XsDLbZDBuPER7UsPoGEpHjYTd 86qw4sI3TXWfQs8kQJEVPzfaikOl7ksvb2RK9/7R7C+gFwpM2K2g8KSrNrklsOYJ AcswKgMP8uH73c34/RDz6WkjKCVv5Q== -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:39 2025 by rpki-client