$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa File: bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa (raw, json) Hash identifier: eHjFza+Pbw8iJsMRJtnfhxvWJ2VcjMAVjICs5aH4SHk= Subject key identifier: 91:9E:1F:B9:5F:63:13:95:2E:B6:6A:46:81:A0:66:79:08:83:D2:1F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584B92DCF08A6C1BD8223DB75700 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f0:8a:6c:1b:d8:22:3d:b7:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=fdbac289-fb25-4231-aaf1-07fde728e0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fd:4d:dd:e5:03:1f:85:9d:f3:87:59:a9:fa: e3:44:d9:5c:ea:77:8a:e7:0b:52:a5:7a:34:15:0c: 0b:08:2e:7d:96:4e:65:2e:18:3d:55:02:24:c7:be: c8:ec:da:fb:9f:7d:55:e6:b1:42:bb:f1:b0:74:68: 56:ad:27:df:11:78:bb:28:c1:bf:51:06:a6:f4:14: a0:7e:3f:d6:c1:bb:3d:ff:5e:d1:11:59:07:e3:10: 12:58:49:cf:83:d4:4d:15:37:ff:f5:54:37:61:9a: 7b:56:5d:97:fe:84:a0:fe:f6:f7:84:4c:64:bb:1d: ca:1c:6c:4a:3f:c8:92:76:7b:a9:1f:51:cd:03:ee: c0:1e:94:0c:78:04:34:17:4c:31:d1:a9:8e:aa:9a: a6:f1:70:90:76:bf:a4:5e:c0:27:72:7a:cc:db:75: 20:d9:ad:dd:c1:2e:5f:f6:62:a4:2e:82:f6:e8:4a: 09:2e:6b:a1:3b:7f:e9:be:4d:cb:fe:b9:ad:d6:9b: 18:03:79:f6:d2:f1:39:8e:7e:04:ee:39:3a:97:25: 44:bf:6c:f8:6f:49:96:b8:f0:e7:c8:32:cd:e0:d0: bd:82:65:68:d9:48:4f:25:5b:ad:4a:b9:c6:26:a8: 1c:87:b9:6c:d9:2d:b7:84:97:47:84:89:a1:77:b2: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9E:1F:B9:5F:63:13:95:2E:B6:6A:46:81:A0:66:79:08:83:D2:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1c:ae:4a:ae:f2:cf:21:0c:7f:8e:48:5e:58:b9:55:86:cc: fa:f3:65:64:1c:b3:00:69:6a:2c:21:1e:d3:e3:89:5e:fb:3e: 1f:70:85:5b:57:81:19:f7:f9:22:ef:ba:10:cf:db:a9:13:3b: cb:62:37:44:6c:2b:4c:e5:04:1c:d6:fd:0b:75:50:80:06:c1: 6a:84:6c:6f:f6:b7:75:94:59:29:ce:38:1f:df:d0:a8:60:7c: 9a:9e:05:31:23:66:a3:30:d3:57:4f:ff:3d:31:a4:45:80:f0: 2b:61:5e:52:f9:53:b3:23:7b:86:d1:91:cf:75:1f:aa:f6:2d: 23:5e:70:1f:a6:65:31:55:d8:ac:3b:a5:1c:ca:05:ff:b1:02: 07:18:75:a5:17:86:3a:ef:62:5a:e1:56:23:4c:cf:66:e1:5c: 59:2e:a8:c2:9f:07:f2:07:88:7e:22:86:2a:9a:90:1a:f0:dc: 54:c7:dc:d4:10:c2:b2:c1:64:7e:ce:3c:8e:f8:f2:3b:95:63: 59:b1:1f:e4:e9:f9:78:79:c4:43:b5:87:31:d2:fb:86:2f:10: 5f:04:99:6f:64:97:6b:32:eb:69:ea:dc:cc:ad:25:53:ec:6a: b8:b8:0b:d5:b5:57:e6:cc:56:44:e6:8c:07:84:cf:8b:a5:97: c2:a4:89:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PCKbBvYIj23VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZmRiYWMyODktZmIyNS00MjMxLWFhZjEtMDdmZGU3MjhlMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/1N3eUDH4Wd84dZqfrjRNlc6neK5wtSpXo0 FQwLCC59lk5lLhg9VQIkx77I7Nr7n31V5rFCu/GwdGhWrSffEXi7KMG/UQam9BSg fj/Wwbs9/17REVkH4xASWEnPg9RNFTf/9VQ3YZp7Vl2X/oSg/vb3hExkux3KHGxK P8iSdnupH1HNA+7AHpQMeAQ0F0wx0amOqpqm8XCQdr+kXsAncnrM23Ug2a3dwS5f 9mKkLoL26EoJLmuhO3/pvk3L/rmt1psYA3n20vE5jn4E7jk6lyVEv2z4b0mWuPDn yDLN4NC9gmVo2UhPJVutSrnGJqgch7ls2S23hJdHhImhd7JM4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGeH7lfYxOVLrZqRoGgZnkIg9IfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYmMwYTRjMDMtYmExMi0z NjQ2LWEwNzUtYTlhOTYzMGFmZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMcrkqu8s8hDH+OSF5YuVWGzPrzZWQcswBpaiwhHtPjiV77Ph9whVtX gRn3+SLvuhDP26kTO8tiN0RsK0zlBBzW/Qt1UIAGwWqEbG/2t3WUWSnOOB/f0Khg fJqeBTEjZqMw01dP/z0xpEWA8CthXlL5U7Mje4bRkc91H6r2LSNecB+mZTFV2Kw7 pRzKBf+xAgcYdaUXhjrvYlrhViNMz2bhXFkuqMKfB/IHiH4ihiqakBrw3FTH3NQQ wrLBZH7OPI748juVY1mxH+Tp+Xh5xEO1hzHS+4YvEF8EmW9kl2sy62nq3MytJVPs ari4C9W1V+bMVkTmjAeEz4ull8Kkiac= -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:21 2025 by rpki-client