$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa File: 86f9e25e-c248-3933-9ce8-4e4b4097a657.roa (raw, json) Hash identifier: LPxaf4VXVJ4wOKiQbPtEGMqxTkBHwuwxAJuoUYYoiic= Subject key identifier: AE:8C:40:FB:63:C0:0A:18:6D:25:AD:F4:F7:91:94:4E:1A:3D:64:52 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584BA5023EB336BB7E1F12BD970A Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 3359 IP address blocks: 142.244.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3e:b3:36:bb:7e:1f:12:bd:97:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=180967cf-b9f6-47ea-a082-a5fdc02a9477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:b6:51:c1:89:24:7b:5c:23:9a:50:0e:b2: 7e:65:5a:42:aa:63:3d:2e:7d:00:cd:b6:6e:b7:20: f4:4d:75:6b:71:c6:81:fd:d2:f6:81:61:47:5e:e0: 5f:bb:f5:28:08:67:60:d9:2b:5b:37:09:c6:66:b8: 6d:4e:40:4f:24:a3:3f:82:5b:2a:3a:26:bd:87:93: ba:1c:10:40:b2:ae:59:72:8b:34:80:1d:32:f9:6f: 38:a8:67:57:63:a0:5a:17:86:27:62:e2:e2:5d:f6: 92:b4:14:82:04:e2:16:94:09:ed:8c:87:10:66:ab: 4e:79:4b:b3:25:cb:b9:b4:dc:60:8e:91:17:26:b5: 0a:53:73:91:be:6f:aa:ef:e8:2c:c9:97:c4:d6:51: 54:65:ed:db:b6:49:6b:35:fb:a7:57:dd:40:42:ed: 24:42:95:80:9b:71:6c:39:90:d0:44:0c:69:1b:bb: cb:da:2e:75:eb:f6:25:ef:7d:81:31:25:98:4b:dc: 15:f0:ce:49:c0:09:60:26:48:5b:95:a8:b1:2d:bb: 93:30:85:12:cc:80:5d:49:f1:36:61:ce:1a:f8:57: af:d6:1f:bc:a2:94:1c:8d:7f:32:3a:48:1c:11:8c: 57:6e:4b:5d:30:c2:d3:4b:12:ae:11:1b:53:9c:ac: 5f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8C:40:FB:63:C0:0A:18:6D:25:AD:F4:F7:91:94:4E:1A:3D:64:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 142.244.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f0:e5:a9:4d:88:db:fb:54:1c:7c:6c:8c:dd:33:a4:47:06: a2:d1:76:b4:d3:62:49:b7:48:1f:95:d6:96:f1:ef:d3:31:d0: 55:07:c9:d5:e3:77:20:5d:6e:9b:71:60:ea:79:cd:b8:c7:70: c0:5f:c7:a6:a0:86:5d:ca:d2:3c:5f:7a:57:82:87:8e:c6:0d: 7a:d1:9d:4a:74:4e:e4:97:63:65:60:60:2e:a0:0d:1f:d6:7e: 3d:5c:05:5d:0a:c8:f5:2c:b8:13:1a:70:0d:1a:96:05:f5:16: 3a:5a:2d:31:8a:7e:97:b7:99:ec:ab:71:6f:19:eb:0b:24:21: 45:59:38:85:66:af:dc:ad:d0:7c:be:ed:54:03:f1:d4:59:49: a3:32:fa:d3:56:02:c5:98:c4:a6:5c:eb:0a:d4:84:34:5e:67: 27:c9:f1:99:4f:e5:bd:b6:fa:4b:30:ff:92:b7:a0:98:7a:ed: c1:58:c0:ac:ca:db:c8:95:3f:52:8a:60:8a:04:f8:7c:60:8a: e7:17:d5:b1:00:52:41:98:d9:4c:e0:11:80:84:39:f3:a2:8e: 21:22:df:5e:1c:cf:14:14:c2:7d:47:d1:64:b9:0d:d8:78:53: bb:08:a5:21:eb:5b:92:4d:91:3d:dc:a8:31:50:32:a9:d3:6d: 1d:9e:85:3f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEulAj6zNrt+HxK9lwowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk MTgwOTY3Y2YtYjlmNi00N2VhLWEwODItYTVmZGMwMmE5NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt62UcGJJHtcI5pQDrJ+ZVpCqmM9Ln0AzbZu tyD0TXVrccaB/dL2gWFHXuBfu/UoCGdg2StbNwnGZrhtTkBPJKM/glsqOia9h5O6 HBBAsq5Zcos0gB0y+W84qGdXY6BaF4YnYuLiXfaStBSCBOIWlAntjIcQZqtOeUuz Jcu5tNxgjpEXJrUKU3ORvm+q7+gsyZfE1lFUZe3btklrNfunV91AQu0kQpWAm3Fs OZDQRAxpG7vL2i516/Yl732BMSWYS9wV8M5JwAlgJkhblaixLbuTMIUSzIBdSfE2 Yc4a+Fev1h+8opQcjX8yOkgcEYxXbktdMMLTSxKuERtTnKxfIQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFK6MQPtjwAoYbSWt9PeRlE4aPWRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODZmOWUyNWUtYzI0OC0z OTMzLTljZTgtNGU0YjQwOTdhNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjvQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXfDlqU2I2/tUHHxsjN0zpEcGotF2tNNiSbdIH5XWlvHv0zHQVQfJ1eN3 IF1um3Fg6nnNuMdwwF/HpqCGXcrSPF96V4KHjsYNetGdSnRO5JdjZWBgLqANH9Z+ PVwFXQrI9Sy4ExpwDRqWBfUWOlotMYp+l7eZ7KtxbxnrCyQhRVk4hWav3K3QfL7t VAPx1FlJozL601YCxZjEplzrCtSENF5nJ8nxmU/lvbb6SzD/kregmHrtwVjArMrb yJU/UopgigT4fGCK5xfVsQBSQZjZTOARgIQ586KOISLfXhzPFBTCfUfRZLkN2HhT uwilIetbkk2RPdyoMVAyqdNtHZ6FPw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:18 2025 by rpki-client