$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa File: 73276284-ecac-36ab-a7aa-14e8474f7c9c.roa (raw, json) Hash identifier: DG4yk9JxCDCqceAd6Cb27JGnkG/SLx1sa5/tBwSIhUw= Subject key identifier: 3C:E4:A3:A9:CB:E4:87:60:DA:E2:50:17:01:E0:D7:B8:57:8E:85:73 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584B92DCF9DE6285C6739C807900 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f9:de:62:85:c6:73:9c:80:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=23477c60-9439-4b08-bd80-1721b155ba3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:df:0a:bd:20:ac:0e:d8:e0:6c:fa:48:23:d3: 7a:9f:dd:39:cd:1b:9b:11:12:1d:21:48:ab:41:1f: 22:85:49:95:66:42:b2:a4:f9:74:00:a7:cd:7c:6c: bf:d1:04:70:57:0a:88:96:77:c1:0c:a9:c6:ea:27: 17:74:39:d0:d0:ac:28:15:94:b5:05:11:6f:cf:6c: 0a:53:27:ac:f7:41:a4:a4:d9:3e:04:a0:93:83:a3: 9d:9e:dd:d5:7a:42:56:6c:93:37:6e:51:26:00:7c: b5:1b:1b:7b:9b:de:8f:79:71:b8:35:e3:ac:97:82: 2c:73:2a:50:8d:d3:e5:09:ac:de:0a:13:0a:05:c2: d6:ee:31:88:06:30:63:66:f4:af:c6:e4:62:4d:33: 47:90:eb:9a:67:81:39:ef:02:18:ff:2a:2c:53:1d: 2f:bc:e7:2b:d5:97:f5:1e:87:c8:5d:b0:ba:51:25: 18:05:86:03:ca:eb:53:69:b5:d2:6f:86:3f:9d:77: 83:38:82:73:0f:df:be:84:4f:9f:71:10:8f:78:f0: ac:37:c5:79:bd:8c:f8:70:24:e6:97:1b:a0:73:3b: 2c:0e:da:8e:4c:bf:d6:95:f9:04:97:6a:33:ba:e8: 2b:0d:15:7d:0a:96:22:b0:ae:21:7c:f4:1a:68:cb: 9e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E4:A3:A9:CB:E4:87:60:DA:E2:50:17:01:E0:D7:B8:57:8E:85:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b9:25:30:72:ad:87:94:40:19:82:d5:20:d5:ac:d2:13:10: 4e:65:2c:7a:eb:ec:76:5f:36:a5:cf:f2:73:71:82:50:ff:e3: 0f:1a:44:a8:85:f9:5d:ea:71:24:90:50:12:00:d5:e5:8b:fd: 22:15:f0:8d:10:91:e5:52:93:8f:40:58:29:4d:7a:1f:74:e2: bd:3a:e9:3a:ab:73:06:f6:d1:ca:db:0f:2d:4f:2e:86:1d:18: 29:1d:26:f6:ed:9a:6f:18:eb:d0:c6:41:a4:5a:ef:51:64:4a: 9d:68:b4:23:6e:86:be:90:b8:88:87:02:fc:35:0a:aa:c4:91: f3:33:27:b1:12:7d:c6:3e:b0:99:72:fa:dd:06:b1:6f:b4:70: 7c:b4:51:4b:5c:a1:43:85:8d:0d:14:6f:0a:86:bb:ef:61:a5: 7a:00:50:23:88:6f:c2:a3:ae:a2:0b:f7:ab:93:1c:be:37:16: 0c:a8:df:93:94:27:ec:cd:53:2c:ac:73:9c:c9:39:f2:6f:8e: f2:20:f1:b4:d3:be:44:39:bd:b7:4a:db:e9:05:32:67:84:43: 4c:58:30:fd:98:2e:ad:b3:a2:a6:35:a0:e6:d6:92:9e:00:53: cc:60:5d:33:2b:21:75:29:f8:8a:ed:b0:4a:ca:8f:ab:ac:17: a7:ce:37:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PneYoXGc5yAeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MjM0NzdjNjAtOTQzOS00YjA4LWJkODAtMTcyMWIxNTViYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA798KvSCsDtjgbPpII9N6n905zRubERIdIUir QR8ihUmVZkKypPl0AKfNfGy/0QRwVwqIlnfBDKnG6icXdDnQ0KwoFZS1BRFvz2wK Uyes90GkpNk+BKCTg6Odnt3VekJWbJM3blEmAHy1Gxt7m96PeXG4NeOsl4IscypQ jdPlCazeChMKBcLW7jGIBjBjZvSvxuRiTTNHkOuaZ4E57wIY/yosUx0vvOcr1Zf1 HofIXbC6USUYBYYDyutTabXSb4Y/nXeDOIJzD9++hE+fcRCPePCsN8V5vYz4cCTm lxugczssDtqOTL/WlfkEl2ozuugrDRV9CpYisK4hfPQaaMue4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzko6nL5Idg2uJQFwHg17hXjoVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzMyNzYyODQtZWNhYy0z NmFiLWE3YWEtMTRlODQ3NGY3YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALC5JTByrYeUQBmC1SDVrNITEE5lLHrr7HZfNqXP8nNxglD/4w8aRKiF +V3qcSSQUBIA1eWL/SIV8I0QkeVSk49AWClNeh904r066Tqrcwb20crbDy1PLoYd GCkdJvbtmm8Y69DGQaRa71FkSp1otCNuhr6QuIiHAvw1CqrEkfMzJ7ESfcY+sJly +t0GsW+0cHy0UUtcoUOFjQ0UbwqGu+9hpXoAUCOIb8KjrqIL96uTHL43Fgyo35OU J+zNUyysc5zJOfJvjvIg8bTTvkQ5vbdK2+kFMmeEQ0xYMP2YLq2zoqY1oObWkp4A U8xgXTMrIXUp+IrtsErKj6usF6fON2c= -----END CERTIFICATE-----Generated at Mon Oct 20 13:03:00 2025 by rpki-client