$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa File: 02650ceb-0044-3d70-b562-731c5b82412a.roa (raw, json) Hash identifier: LZUmpZ682or4jBVbnXQGP7Nn9PCY3zzwCk5AwFy1YsU= Subject key identifier: 6F:FD:5C:72:EE:BD:76:10:04:23:31:CB:92:71:57:0D:CE:1E:D9:A5 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584B92DCFA373EF0DDF7A79B4120 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:fa:37:3e:f0:dd:f7:a7:9b:41:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=465f9cdf-b429-4276-ab0e-51713579e4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:ca:d5:75:43:f4:2e:4c:fe:91:4e:87:ec: ff:f0:d1:60:4c:37:e8:86:5f:f6:e0:18:24:ef:9a: d6:df:88:45:9a:9f:23:82:95:77:21:14:50:4e:6d: 29:0a:2e:0c:49:4e:2a:d6:f5:0a:01:65:b1:4c:4a: c4:a2:69:9f:42:ba:28:c3:ef:3f:15:16:4c:bd:e0: 05:90:6a:23:83:98:3c:c4:4c:13:36:0a:00:21:12: 2b:e2:cd:93:26:dd:ec:92:b7:fe:6f:5f:0c:bc:a6: 53:36:cc:80:42:45:94:4c:5a:2a:37:41:dd:09:29: 5e:b2:67:14:ea:20:07:ce:29:b7:4b:0b:a7:e2:27: 76:9b:77:ff:57:da:e0:3b:57:18:b6:0c:fc:c9:61: c5:5b:5f:c3:9a:54:8b:18:bc:1b:fd:ae:ae:bd:6d: d9:e0:e1:aa:f7:1b:69:b7:d4:f8:d7:e1:17:21:6f: f8:1f:14:29:72:5f:6a:80:af:48:23:12:34:3a:e3: 43:fc:3d:ce:65:cc:e4:05:4b:6f:46:9e:90:75:49: 33:74:d2:b6:06:ca:da:ce:93:65:5b:70:d4:dd:41: 69:32:df:26:86:03:04:f6:6d:cd:3f:cb:ee:b8:f2: 10:fb:08:8e:61:52:aa:28:d2:54:54:95:23:90:68: 4c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FD:5C:72:EE:BD:76:10:04:23:31:CB:92:71:57:0D:CE:1E:D9:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d9:ea:a9:14:df:97:32:98:d8:58:70:55:aa:5c:1d:fe:a2: 99:54:f5:ed:89:cd:bd:b9:89:3c:2d:4a:a9:95:0f:06:88:1b: 4b:da:0d:b9:d9:9e:f7:13:d5:ed:a8:c5:74:ee:24:fd:69:0f: a9:ba:27:d2:e7:a4:dc:55:dd:6d:66:76:21:78:d7:eb:06:8d: c6:a6:12:c7:b8:97:ac:e4:1c:db:56:7c:34:44:5c:ee:b0:5c: 59:b3:07:99:d6:d8:4c:ab:08:6d:09:db:6d:eb:e6:43:fc:4f: 70:ce:bb:96:36:d8:81:34:24:f4:ad:db:2c:22:0b:ec:27:95: cc:32:3f:34:20:8e:fd:5e:98:5b:35:73:1f:d6:8f:e3:27:af: 5c:16:49:b7:e4:91:e0:88:54:80:22:8c:7d:d7:e9:ce:04:53: 65:38:85:c4:ed:6a:03:71:de:22:d2:2e:07:85:8c:21:73:0b: 52:2c:4e:67:eb:61:81:e3:4a:ab:26:6d:34:25:b6:0b:d5:2f: e6:fe:85:a8:b2:78:36:11:5e:ce:4a:a2:57:a1:46:d4:51:d1: 9d:3a:2e:8f:86:5c:92:9d:8c:3c:1c:55:e0:7c:62:fe:c1:8f: 62:96:1c:e4:84:2d:b0:68:96:13:bb:12:e1:73:2a:f5:70:db: fc:19:6d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Po3PvDd96ebQSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NDY1ZjljZGYtYjQyOS00Mjc2LWFiMGUtNTE3MTM1NzllNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uzK1XVD9C5M/pFOh+z/8NFgTDfohl/24Bgk 75rW34hFmp8jgpV3IRRQTm0pCi4MSU4q1vUKAWWxTErEommfQroow+8/FRZMveAF kGojg5g8xEwTNgoAIRIr4s2TJt3skrf+b18MvKZTNsyAQkWUTFoqN0HdCSlesmcU 6iAHzim3Swun4id2m3f/V9rgO1cYtgz8yWHFW1/DmlSLGLwb/a6uvW3Z4OGq9xtp t9T41+EXIW/4HxQpcl9qgK9IIxI0OuND/D3OZczkBUtvRp6QdUkzdNK2BsrazpNl W3DU3UFpMt8mhgME9m3NP8vuuPIQ+wiOYVKqKNJUVJUjkGhMnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/9XHLuvXYQBCMxy5JxVw3OHtmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDI2NTBjZWItMDA0NC0z ZDcwLWI1NjItNzMxYzViODI0MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHZ6qkU35cymNhYcFWqXB3+oplU9e2Jzb25iTwtSqmVDwaIG0vaDbnZ nvcT1e2oxXTuJP1pD6m6J9LnpNxV3W1mdiF41+sGjcamEse4l6zkHNtWfDREXO6w XFmzB5nW2EyrCG0J223r5kP8T3DOu5Y22IE0JPSt2ywiC+wnlcwyPzQgjv1emFs1 cx/Wj+Mnr1wWSbfkkeCIVIAijH3X6c4EU2U4hcTtagNx3iLSLgeFjCFzC1IsTmfr YYHjSqsmbTQltgvVL+b+haiyeDYRXs5KolehRtRR0Z06Lo+GXJKdjDwcVeB8Yv7B j2KWHOSELbBolhO7EuFzKvVw2/wZbRM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:19 2025 by rpki-client