$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa File: 89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa (raw, json) Hash identifier: eDJS3UbQVjut5x40zkfX49uzwz9lBZ7aZBmTlcAZQhE= Subject key identifier: 21:D4:7B:8B:6B:29:19:90:24:32:DF:C0:15:98:1C:B1:A9:7C:82:87 Certificate issuer: /CN=7b430551-8bf9-4310-8a7f-b2233e29affd Certificate serial: 010D0C9F4328584B80B76AAC86037999BC91C680 Authority key identifier: 6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 17456 IP address blocks: 199.127.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:6a:ac:86:03:79:99:bc:91:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b430551-8bf9-4310-8a7f-b2233e29affd Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=137791c8-bcd2-4a49-a8ad-904b15f17eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0a:b7:ed:c1:0a:0c:38:1d:7d:c7:4d:c4:d3: 9a:39:84:d0:e1:16:08:77:88:6e:d5:4d:b8:34:42: b3:46:67:76:b6:86:2c:ec:6f:6a:da:23:a8:c8:6b: 6a:39:ba:5e:76:51:94:75:dd:03:c7:e6:2e:95:d4: 47:15:b2:ad:79:73:a5:a4:ac:ed:fe:65:4e:d3:ed: c8:c5:2c:7b:87:36:84:ba:c0:78:a6:b7:fe:07:98: 31:4b:38:48:48:d4:e3:fc:0a:b9:d9:6b:57:98:79: c0:44:74:98:74:29:db:32:d7:22:70:5e:96:b0:c4: a3:e3:19:07:07:cf:92:44:dc:c8:90:b0:08:e3:e5: 37:7b:33:51:d3:60:61:c4:a9:06:b5:39:bc:d2:24: 81:40:68:e7:95:b6:a6:ad:f0:11:a6:a2:3c:7a:8a: ac:01:bb:d7:08:30:e3:62:f8:ef:9c:a6:6d:26:ae: d0:2e:9a:22:8d:96:b7:bb:8d:59:da:94:28:c5:a3: 8a:ad:f0:a3:58:32:da:84:48:03:eb:83:7c:98:a4: ac:a6:15:92:4d:6b:9f:dc:05:33:fd:03:77:6f:a9: fc:52:99:39:69:86:f9:69:75:37:d6:e4:bc:16:ad: 7a:1b:a1:21:11:26:f3:06:71:03:be:6f:a2:a2:8f: ac:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D4:7B:8B:6B:29:19:90:24:32:DF:C0:15:98:1C:B1:A9:7C:82:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl X509v3 Authority Key Identifier: keyid:6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer sbgp-ipAddrBlock: critical IPv4: 199.127.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:74:a3:29:55:97:7d:7d:68:e1:b1:06:79:a8:f0:b2:dc:a5: 9f:a0:9b:09:68:0c:df:35:7b:97:3e:f4:50:f3:95:ba:9a:62: b8:0f:a3:87:09:c9:f5:16:8c:69:38:98:89:f7:f0:f1:e8:82: 8a:8d:e8:1f:d2:2b:df:d7:3f:d1:1d:b9:ae:01:f7:30:aa:57: 76:06:66:68:ea:85:a0:b4:78:b1:c3:1e:e9:66:1a:a8:8e:6c: e6:4d:53:a0:ad:f7:8a:ba:cc:3b:e6:e2:2b:c7:bd:60:0c:f3: 45:b5:22:5a:b5:4c:44:9b:08:fe:77:06:8c:a5:4b:52:fc:80: 3a:ef:a4:2a:31:ff:24:3a:49:7f:d2:7f:01:8f:59:06:8c:d7: 15:f6:3a:f4:b3:df:0a:e1:28:78:10:10:86:fa:d6:72:6f:3b: ac:73:58:f8:9f:06:95:44:e0:9a:34:69:79:d6:09:f1:84:f5: 8d:97:b5:3a:9f:d6:ef:88:55:51:44:3f:e2:56:5d:99:87:60: 72:96:e6:96:f5:4b:9a:fb:d7:76:3f:3b:01:52:0f:0e:1e:b9: 9f:9b:c3:f6:7c:a3:d5:4e:db:42:60:b2:1d:ba:a3:93:fb:e4: 26:c1:a0:c2:c1:c7:ee:69:b7:4f:0d:d2:91:43:26:62:f4:8c: 8d:21:2f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2qshgN5mbyRxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I0MzA1NTEtOGJmOS00MzEwLThhN2YtYjIyMzNlMjlh ZmZkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MTM3NzkxYzgtYmNkMi00YTQ5LWE4YWQtOTA0YjE1ZjE3ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQq37cEKDDgdfcdNxNOaOYTQ4RYId4hu1U24 NEKzRmd2toYs7G9q2iOoyGtqObpedlGUdd0Dx+YuldRHFbKteXOlpKzt/mVO0+3I xSx7hzaEusB4prf+B5gxSzhISNTj/Aq52WtXmHnARHSYdCnbMtcicF6WsMSj4xkH B8+SRNzIkLAI4+U3ezNR02BhxKkGtTm80iSBQGjnlbamrfARpqI8eoqsAbvXCDDj YvjvnKZtJq7QLpoijZa3u41Z2pQoxaOKrfCjWDLahEgD64N8mKSsphWSTWuf3AUz /QN3b6n8Upk5aYb5aXU31uS8Fq16G6EhESbzBnEDvm+ioo+szQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHUe4trKRmQJDLfwBWYHLGpfIKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YjQz MDU1MS04YmY5LTQzMTAtOGE3Zi1iMjIzM2UyOWFmZmQvODljZTY4ODYtNWEzYy0z ZTFiLWE4ZTctMjExOTc3MDg5YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2I0MzA1NTEtOGJmOS00MzEwLThh N2YtYjIyMzNlMjlhZmZkLzdiNDMwNTUxLThiZjktNDMxMC04YTdmLWIyMjMzZTI5 YWZmZC5jcmwwHwYDVR0jBBgwFoAUbr7Zho9mxgc1b6ez51AXjdgifCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YjQzMDU1MS04YmY5LTQzMTAtOGE3Zi1iMjIz M2UyOWFmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR0oylVl319aOGxBnmo8LLcpZ+gmwloDN81e5c+9FDzlbqaYrgPo4cJ yfUWjGk4mIn38PHogoqN6B/SK9/XP9Edua4B9zCqV3YGZmjqhaC0eLHDHulmGqiO bOZNU6Ct94q6zDvm4ivHvWAM80W1Ilq1TESbCP53BoylS1L8gDrvpCox/yQ6SX/S fwGPWQaM1xX2OvSz3wrhKHgQEIb61nJvO6xzWPifBpVE4Jo0aXnWCfGE9Y2XtTqf 1u+IVVFEP+JWXZmHYHKW5pb1S5r713Y/OwFSDw4euZ+bw/Z8o9VO20Jgsh26o5P7 5CbBoMLBx+5pt08N0pFDJmL0jI0hL5c= -----END CERTIFICATE-----Generated at Tue Oct 21 02:31:05 2025 by rpki-client