$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa File: cbf5d661-caf7-3016-8cfc-b5a540e71195.roa (raw, json) Hash identifier: 8quyaPOeDrxy1QC4SyG7MjkiXi+UNEmuumIMK7+IyM8= Subject key identifier: 15:A5:68:10:D8:73:F8:38:39:E1:83:32:B3:89:97:70:2A:5D:E2:53 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584B92DCF0AF40D0C2F5EB82D4E0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16839 IP address blocks: 199.91.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f0:af:40:d0:c2:f5:eb:82:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=3fbceac4-d3cc-4c28-b590-63fb0836268d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:84:56:e1:bd:f0:5c:41:9b:ce:d5:28:40: 36:f9:ec:76:da:f0:02:a9:9e:46:17:3e:5b:41:de: cb:d5:9d:42:62:3f:2e:aa:ba:cc:13:77:f0:a3:35: 23:38:07:f2:c6:57:53:af:21:61:d1:2e:ad:f2:ea: fb:85:7d:0b:44:a7:b8:b1:fb:b6:51:78:02:7b:d5: 87:74:a6:f2:a6:5d:97:57:ba:90:a3:39:c6:7a:50: 96:25:90:44:3b:72:8d:6b:c2:53:5f:ae:bf:6b:70: 4b:b8:c1:bd:53:2c:7e:22:2b:bb:b0:24:50:85:8c: 2e:99:0b:cf:28:00:d1:30:a8:bf:b4:3c:43:35:7d: 63:b2:f0:86:82:7d:7d:20:13:74:8c:ad:9b:25:ad: e2:1b:38:9f:2b:27:74:fd:94:81:7d:bf:f0:40:5b: 27:02:9d:b5:cb:9a:7e:c6:14:7f:43:48:6c:eb:e0: e7:40:b5:69:0f:e4:92:c6:66:7f:26:3c:0b:da:f1: 65:80:03:3b:51:96:15:2f:ef:b1:83:02:2c:c8:57: 6b:ba:a5:eb:c2:6b:d1:4a:6b:c2:a2:b3:82:74:ad: 50:32:7b:70:a3:af:fc:96:e2:bf:74:5c:03:6a:01: 02:a6:b8:84:73:a6:28:f3:4e:cf:6e:ca:f0:49:95: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A5:68:10:D8:73:F8:38:39:E1:83:32:B3:89:97:70:2A:5D:E2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4d:be:df:f8:5c:18:87:5a:86:e6:25:38:16:e8:8d:5d:dc: 58:b1:71:de:79:7e:51:5a:d6:b2:e9:17:1a:61:3b:b6:19:46: b6:04:f7:53:b6:5b:23:6e:cb:26:ea:c2:0a:07:14:fb:cc:4f: eb:75:eb:f6:d6:84:ee:55:8e:93:6e:88:80:04:15:85:be:a4: ad:22:80:a3:23:6c:8a:b8:7f:13:47:f9:b1:f3:1a:72:86:ca: a9:ae:2e:0a:e1:b5:b1:d4:f6:65:5b:43:28:27:00:9d:3c:90: 2e:d6:39:2d:4c:a3:05:bc:d9:d7:b0:6e:10:18:63:41:e1:c2: 2f:7b:b6:cc:3d:9f:7a:c5:46:49:60:28:b9:c2:91:41:68:5a: 90:07:cc:91:ba:55:4c:fc:55:b2:4d:34:af:a6:51:9c:1c:79: e6:be:f1:27:43:63:b0:08:37:b2:99:48:89:24:dc:60:09:a9: 99:17:4b:bb:3d:fe:9f:11:bc:ed:38:7c:b7:79:26:72:91:b2: 80:b5:8f:db:2c:f3:50:2a:76:1d:93:b9:3c:b5:6f:9f:21:67: 68:76:ff:9a:2f:48:24:8b:99:51:3c:d1:5c:3d:8d:43:21:a0: 58:68:08:2b:06:12:ab:dc:97:12:2d:55:96:c8:d1:27:c6:b6: 0a:10:4e:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PCvQNDC9euC1OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk M2ZiY2VhYzQtZDNjYy00YzI4LWI1OTAtNjNmYjA4MzYyNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcCEVuG98FxBm87VKEA2+ex22vACqZ5GFz5b Qd7L1Z1CYj8uqrrME3fwozUjOAfyxldTryFh0S6t8ur7hX0LRKe4sfu2UXgCe9WH dKbypl2XV7qQoznGelCWJZBEO3KNa8JTX66/a3BLuMG9Uyx+Iiu7sCRQhYwumQvP KADRMKi/tDxDNX1jsvCGgn19IBN0jK2bJa3iGzifKyd0/ZSBfb/wQFsnAp21y5p+ xhR/Q0hs6+DnQLVpD+SSxmZ/JjwL2vFlgAM7UZYVL++xgwIsyFdruqXrwmvRSmvC orOCdK1QMntwo6/8luK/dFwDagECpriEc6Yo807PbsrwSZXSywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWlaBDYc/g4OeGDMrOJl3AqXeJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JmNWQ2NjEtY2FmNy0z MDE2LThjZmMtYjVhNTQwZTcxMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtNvt/4XBiHWobmJTgW6I1d3Fixcd55flFa1rLpFxphO7YZRrYE91O2 WyNuyybqwgoHFPvMT+t16/bWhO5VjpNuiIAEFYW+pK0igKMjbIq4fxNH+bHzGnKG yqmuLgrhtbHU9mVbQygnAJ08kC7WOS1MowW82dewbhAYY0Hhwi97tsw9n3rFRklg KLnCkUFoWpAHzJG6VUz8VbJNNK+mUZwceea+8SdDY7AIN7KZSIkk3GAJqZkXS7s9 /p8RvO04fLd5JnKRsoC1j9ss81Aqdh2TuTy1b58hZ2h2/5ovSCSLmVE80Vw9jUMh oFhoCCsGEqvclxItVZbI0SfGtgoQTtA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:40:20 2025 by rpki-client