$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa File: 542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa (raw, json) Hash identifier: 6r92rH82CFY1YzhuWgvJPCDruGjWvZdqiiy295Zj69U= Subject key identifier: CD:17:D2:02:E1:A2:0E:95:33:C3:2D:0F:E8:6F:B7:BF:B3:5E:D4:C1 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584B92DCF90FCEBB94DBF324DD00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f9:0f:ce:bb:94:db:f3:24:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=6bec075e-ef3d-400d-b785-1b2c4f11b45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:16:dd:2e:f1:b9:95:19:43:91:67:de:d8:8d: 46:97:fe:30:51:e4:0c:20:5c:e8:03:92:f5:18:68: 9b:ed:24:68:54:4b:fc:52:5d:f5:17:10:37:ff:cd: c0:5a:5d:42:f9:29:89:56:71:38:5e:a7:9c:f0:57: a9:6e:3b:69:e6:9f:d9:c2:36:9e:dd:71:ec:68:12: 6e:24:ed:ff:11:1a:72:5b:78:67:93:b7:cd:f8:4e: 0b:7f:c5:c2:69:dc:e8:e4:f8:9d:2d:94:48:e6:3f: e4:12:50:b5:06:a0:7f:c2:46:fb:96:71:07:dd:d9: 68:d3:e9:fb:67:6c:5b:43:48:8f:fc:b7:14:71:97: 8c:e1:95:bb:41:40:b9:aa:0e:0f:0d:57:be:35:65: 3f:ca:12:2f:49:5b:94:5d:2b:9b:7e:3f:ca:d2:0d: b7:19:b9:fa:11:6f:08:97:0a:c2:5d:d5:18:5a:fb: 5e:14:88:83:89:0e:ab:2b:60:11:ed:f0:44:e3:c6: e7:ea:a1:57:e6:05:20:ef:9b:9f:02:02:f8:48:d5: aa:77:c6:dd:97:1c:1f:81:14:db:2c:fd:92:bb:64: a3:73:c1:45:a6:12:7a:2c:a2:92:10:94:62:1a:65: 38:fe:d2:c4:66:92:c8:31:87:20:5a:40:05:09:0f: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:17:D2:02:E1:A2:0E:95:33:C3:2D:0F:E8:6F:B7:BF:B3:5E:D4:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7b:91:a4:b6:3f:1c:7a:d1:30:fe:bb:98:cc:e2:d1:73:a1: f2:11:ef:17:10:e5:18:81:5b:60:d1:49:73:43:4c:60:02:50: a4:a5:37:e9:9a:dc:f8:87:f4:c6:b6:1c:b7:a6:47:e8:b6:92: a8:61:53:39:b8:c3:8f:49:0a:24:c4:2c:47:b6:ec:5c:49:f5: 33:ce:98:6c:df:1e:f3:d4:e6:66:e5:4e:a8:d5:e6:bc:30:86: 4b:74:4c:06:68:8e:d0:bf:1a:cc:ed:a2:e9:e3:5e:bc:54:d2: 3b:46:0f:66:06:35:98:f2:62:97:6e:a2:0e:30:f9:73:95:c9: ff:08:ff:c3:2e:78:48:5b:a7:8b:18:c1:36:a1:de:ba:02:1e: 17:42:02:68:08:7c:97:2e:51:86:d7:54:e1:33:a2:39:90:54: b0:91:6c:9d:99:c6:04:15:53:6b:23:51:4b:b1:ea:f4:53:3f: 32:d9:b5:b2:cb:17:06:dc:8f:a2:97:13:a9:f9:9b:2e:27:c4: 2c:63:02:08:6b:42:c8:b6:04:40:6c:38:79:f1:7c:cd:22:e6: 72:49:9d:6d:64:ef:5e:80:99:9e:07:39:19:af:7a:ec:60:c1: eb:93:f4:d5:f7:fe:23:1e:6e:aa:76:bc:58:ab:c1:7a:ac:ca: 7b:4b:aa:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PkPzruU2/Mk3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NmJlYzA3NWUtZWYzZC00MDBkLWI3ODUtMWIyYzRmMTFiNDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixbdLvG5lRlDkWfe2I1Gl/4wUeQMIFzoA5L1 GGib7SRoVEv8Ul31FxA3/83AWl1C+SmJVnE4Xqec8Fepbjtp5p/Zwjae3XHsaBJu JO3/ERpyW3hnk7fN+E4Lf8XCadzo5PidLZRI5j/kElC1BqB/wkb7lnEH3dlo0+n7 Z2xbQ0iP/LcUcZeM4ZW7QUC5qg4PDVe+NWU/yhIvSVuUXSubfj/K0g23Gbn6EW8I lwrCXdUYWvteFIiDiQ6rK2AR7fBE48bn6qFX5gUg75ufAgL4SNWqd8bdlxwfgRTb LP2Su2Sjc8FFphJ6LKKSEJRiGmU4/tLEZpLIMYcgWkAFCQ/s3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0X0gLhog6VM8MtD+hvt7+zXtTBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTQyYjQ2YjUtY2FkZi0z NGQ4LWI3ZTQtMGNlOGY2M2QxOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH57kaS2Pxx60TD+u5jM4tFzofIR7xcQ5RiBW2DRSXNDTGACUKSlN+ma 3PiH9Ma2HLemR+i2kqhhUzm4w49JCiTELEe27FxJ9TPOmGzfHvPU5mblTqjV5rww hkt0TAZojtC/GsztounjXrxU0jtGD2YGNZjyYpduog4w+XOVyf8I/8MueEhbp4sY wTah3roCHhdCAmgIfJcuUYbXVOEzojmQVLCRbJ2ZxgQVU2sjUUux6vRTPzLZtbLL Fwbcj6KXE6n5my4nxCxjAghrQsi2BEBsOHnxfM0i5nJJnW1k716AmZ4HORmveuxg weuT9NX3/iMebqp2vFirwXqsyntLqpk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:23:52 2025 by rpki-client