$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa File: cbb47c14-2799-3b64-87d8-2264da5e3862.roa (raw, json) Hash identifier: mRqz1n71vBXAskQR81xWBwSecmHaIC+X4ZP/wRrJ2rs= Subject key identifier: 03:1C:C4:E1:88:80:1A:1D:50:87:E8:64:4E:33:1B:33:C0:90:3A:64 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584B92DCF96945CA956A67B38280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f9:69:45:ca:95:6a:67:b3:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=c15fae66-2ab4-4549-84e5-9d61cb9dc387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:08:8c:47:2c:9e:1b:d6:ce:0c:69:76:7f:83: 28:f0:b7:fd:16:a3:64:b1:fb:b1:30:b6:0c:97:67: ec:a1:d9:eb:0e:e8:ed:02:fe:a0:41:5b:64:d4:75: d1:02:f3:e0:20:7d:e3:78:e9:01:f9:76:0f:9c:50: ac:13:5e:33:df:99:d9:0e:44:5c:44:3b:84:30:56: db:79:88:8c:8d:b7:5c:25:85:a3:1a:2f:da:a7:cc: 0f:12:53:cc:14:0a:44:49:e4:99:ac:a1:8c:33:0e: 49:39:40:59:03:42:2a:c4:da:36:3b:99:af:b6:04: 96:60:6d:6c:c1:a4:3c:65:42:45:fe:57:de:b1:59: 2a:1d:49:50:1f:2f:7b:04:52:f1:ae:be:63:c4:d2: 2c:57:c2:70:f9:5c:c1:72:bd:41:23:9f:a5:d3:d7: 32:57:94:8d:03:63:47:77:7a:ac:44:94:75:9b:e6: 1d:6c:7f:43:9b:90:fe:20:e2:0e:9d:c8:39:7c:af: 1a:12:7b:ce:9c:7e:b4:6c:ab:60:40:48:7d:0c:7c: 4b:bf:18:d9:4b:27:a9:98:50:ae:c7:fe:a3:94:d3: 75:01:80:cf:e1:ef:3b:ca:fb:93:59:8a:80:35:87: 5c:62:27:43:93:a9:7f:54:ae:8a:fb:c2:b5:c0:ac: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1C:C4:E1:88:80:1A:1D:50:87:E8:64:4E:33:1B:33:C0:90:3A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b5:32:dc:e1:15:c9:3a:aa:cb:9c:aa:69:4c:e7:7f:62:01: 84:d2:4b:fd:b3:58:13:8c:df:eb:5b:2d:d3:bf:63:6d:3b:79: ed:d5:f7:f1:e8:42:e7:2a:ba:13:1b:0f:80:e8:45:b5:1c:0c: 9a:19:9e:10:68:44:30:27:18:7e:c6:bb:59:1d:55:26:f4:e0: 9f:0c:e1:78:76:99:f8:20:bd:f8:6c:66:94:03:4d:2a:a4:a2: 4c:04:9f:bf:4e:42:1c:80:ba:3f:6f:f0:46:fb:75:c1:6f:65: 8c:ad:ca:69:75:bd:81:19:b0:5c:67:2a:1b:47:27:2a:85:94: 58:d1:6c:ff:f9:63:f6:18:b9:b8:ba:d4:f7:c3:87:f2:59:b3: ac:9c:e6:35:d6:1f:fc:a0:43:46:22:41:d8:27:27:97:23:fc: 1f:d2:92:62:91:8d:fb:d3:ef:f6:94:fa:b9:e7:45:a9:ca:76: e8:4b:b0:92:20:77:2b:72:44:71:ed:fa:92:6b:99:ea:93:dc: e8:d0:6b:86:52:dc:ea:1b:c2:52:7b:80:1b:a2:a2:28:a3:43: e0:04:57:78:da:1b:29:db:0d:ad:f2:25:23:78:6a:2c:35:01: e9:6c:23:65:91:13:06:36:76:86:d4:bb:1c:d5:c7:37:65:3a: de:3a:dd:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PlpRcqVamezgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YzE1ZmFlNjYtMmFiNC00NTQ5LTg0ZTUtOWQ2MWNiOWRjMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwiMRyyeG9bODGl2f4Mo8Lf9FqNksfuxMLYM l2fsodnrDujtAv6gQVtk1HXRAvPgIH3jeOkB+XYPnFCsE14z35nZDkRcRDuEMFbb eYiMjbdcJYWjGi/ap8wPElPMFApESeSZrKGMMw5JOUBZA0IqxNo2O5mvtgSWYG1s waQ8ZUJF/lfesVkqHUlQHy97BFLxrr5jxNIsV8Jw+VzBcr1BI5+l09cyV5SNA2NH d3qsRJR1m+YdbH9Dm5D+IOIOncg5fK8aEnvOnH60bKtgQEh9DHxLvxjZSyepmFCu x/6jlNN1AYDP4e87yvuTWYqANYdcYidDk6l/VK6K+8K1wKwXbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMcxOGIgBodUIfoZE4zGzPAkDpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JiNDdjMTQtMjc5OS0z YjY0LTg3ZDgtMjI2NGRhNWUzODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm1MtzhFck6qsucqmlM539iAYTSS/2zWBOM3+tbLdO/Y207ee3V9/Ho QucquhMbD4DoRbUcDJoZnhBoRDAnGH7Gu1kdVSb04J8M4Xh2mfggvfhsZpQDTSqk okwEn79OQhyAuj9v8Eb7dcFvZYytyml1vYEZsFxnKhtHJyqFlFjRbP/5Y/YYubi6 1PfDh/JZs6yc5jXWH/ygQ0YiQdgnJ5cj/B/SkmKRjfvT7/aU+rnnRanKduhLsJIg dytyRHHt+pJrmeqT3OjQa4ZS3OobwlJ7gBuioiijQ+AEV3jaGynbDa3yJSN4aiw1 AelsI2WREwY2dobUuxzVxzdlOt463SQ= -----END CERTIFICATE-----Generated at Mon Oct 20 04:41:06 2025 by rpki-client