$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa File: ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa (raw, json) Hash identifier: N70didMIU0oH9uoylTweYWgc0DAJbyERriOhkUTxbHk= Subject key identifier: 1C:62:49:8E:17:3A:1E:5F:82:61:C4:73:E7:0E:0A:11:70:C9:B9:1D Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584B92DCFA0193D6A9AF1E89D100 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:fa:01:93:d6:a9:af:1e:89:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=875fa479-8544-4c89-bee5-1058011ff819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:35:2d:b7:61:c9:c6:b2:1a:82:83:0b:8f:87: f4:d5:62:53:9f:bd:8b:48:d2:8e:29:ee:4d:6a:c6: 6e:ae:d7:2c:9a:2c:c9:38:4c:38:90:5b:f2:09:f1: e6:2d:09:df:dd:66:49:0b:60:0d:23:da:11:91:ca: 2f:26:27:c5:e0:4c:19:6b:c0:77:a8:25:7b:51:bd: a6:af:d2:d2:14:4a:eb:b9:4d:28:82:a9:e5:fe:12: ca:b8:75:32:d9:e6:e6:70:5f:35:fe:21:fd:ed:9d: 3b:ca:3f:b1:ce:6e:cd:8b:e0:7b:1e:cf:fe:37:fa: 91:d2:3b:87:3d:61:ff:c5:5b:d7:78:7d:8a:a5:c0: 2f:64:86:0e:b0:02:78:20:17:0c:51:96:09:10:64: 9e:5b:05:dd:6c:ec:d1:ab:da:be:72:67:73:e7:ad: c7:b9:bb:4d:29:d5:ff:65:e4:d7:b9:33:29:e7:f3: 29:75:af:7c:5f:1c:f7:8b:32:e1:c2:d7:79:cb:80: 64:c2:3d:9c:a4:db:4c:b3:b6:37:4f:c5:f4:c3:c6: 81:26:a6:7f:ec:30:bd:97:34:de:95:a6:fb:63:19: 84:b1:db:c6:35:e8:9d:b4:9a:91:0d:dc:bc:7e:73: 98:aa:31:2e:37:d1:2b:8e:57:76:24:28:ad:4a:f2: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:62:49:8E:17:3A:1E:5F:82:61:C4:73:E7:0E:0A:11:70:C9:B9:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1a:26:95:a7:12:bd:d2:c9:8e:76:07:ce:8c:9a:5c:4d:6b: f5:ba:e8:06:7b:eb:b4:5d:04:dc:47:7b:53:84:39:84:8c:63: 97:40:99:26:9f:0d:58:94:ff:ac:d8:af:e9:c0:c8:0a:a2:9e: 87:c8:6a:5a:94:00:fa:ee:2c:50:05:e0:a8:7a:3f:18:20:a5: 18:99:c0:47:11:d8:de:d3:1b:b7:98:d8:80:88:85:3d:00:d6: 1e:e2:d8:44:de:60:6b:c9:d4:af:67:75:b3:b9:8c:69:a6:c4: 0b:02:d9:16:01:d7:0d:51:5a:b5:6c:f4:6b:33:92:07:85:96: d9:e6:64:cf:20:e9:c2:91:80:a1:b0:77:37:5f:92:ed:4b:b3: b9:17:a9:f7:fa:d8:ff:4b:f9:37:4c:7a:82:2a:d7:a8:e4:02: a0:d8:92:b4:ef:9d:d1:03:40:6b:f8:86:f9:4c:45:ab:a5:53: 7e:ba:23:5d:f8:60:e6:81:1c:5b:4e:bf:59:be:8e:b4:4a:a8: e9:c7:93:29:a1:fa:26:b3:97:27:bf:5c:1a:50:76:2a:50:fc: ac:38:17:41:17:69:88:a2:a1:2c:75:2b:8b:a8:f8:0e:01:53: 7b:a7:90:66:c7:72:ff:72:c9:13:43:23:ea:a9:e6:a4:75:c2: 36:1d:7d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PoBk9aprx6J0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ODc1ZmE0NzktODU0NC00Yzg5LWJlZTUtMTA1ODAxMWZmODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzUtt2HJxrIagoMLj4f01WJTn72LSNKOKe5N asZurtcsmizJOEw4kFvyCfHmLQnf3WZJC2ANI9oRkcovJifF4EwZa8B3qCV7Ub2m r9LSFErruU0ogqnl/hLKuHUy2ebmcF81/iH97Z07yj+xzm7Ni+B7Hs/+N/qR0juH PWH/xVvXeH2KpcAvZIYOsAJ4IBcMUZYJEGSeWwXdbOzRq9q+cmdz563HubtNKdX/ ZeTXuTMp5/Mpda98Xxz3izLhwtd5y4Bkwj2cpNtMs7Y3T8X0w8aBJqZ/7DC9lzTe lab7YxmEsdvGNeidtJqRDdy8fnOYqjEuN9Erjld2JCitSvKLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxiSY4XOh5fgmHEc+cOChFwybkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZWEwNmEwMDctYTFmMC0z OGM4LWJiZWItMmI3OGRiZDZiNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgaJpWnEr3SyY52B86MmlxNa/W66AZ767RdBNxHe1OEOYSMY5dAmSaf DViU/6zYr+nAyAqinofIalqUAPruLFAF4Kh6PxggpRiZwEcR2N7TG7eY2ICIhT0A 1h7i2ETeYGvJ1K9ndbO5jGmmxAsC2RYB1w1RWrVs9GszkgeFltnmZM8g6cKRgKGw dzdfku1Ls7kXqff62P9L+TdMeoIq16jkAqDYkrTvndEDQGv4hvlMRaulU366I134 YOaBHFtOv1m+jrRKqOnHkymh+iazlye/XBpQdipQ/Kw4F0EXaYiioSx1K4uo+A4B U3unkGbHcv9yyRNDI+qp5qR1wjYdfRE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:32:16 2025 by rpki-client