$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa File: 1bbe69ec-9686-337d-a609-e5cb951dc776.roa (raw, json) Hash identifier: Pc8g2v5cRjHxcDbt1hLJYTTdFusgdeAL2jptAHD0Ohc= Subject key identifier: A9:09:64:63:52:DE:54:00:A7:BB:5C:50:47:EF:6A:4E:E1:7B:9F:A9 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584B92DCF0D539D42487A5B19F80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f0:d5:39:d4:24:87:a5:b1:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=d968c700-8fb1-4230-aa07-ca2341c16eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:de:29:65:c6:cc:a5:05:91:e3:6d:41:16:37: 65:b0:5a:49:a9:11:d4:0e:ad:dd:aa:d2:2f:59:46: ea:d4:f4:9c:6f:a0:fd:13:9c:e5:42:7e:2b:77:84: 2f:80:9b:a0:98:91:9b:34:b3:43:0c:80:e4:8b:27: 2b:bb:91:26:ba:79:43:e8:61:3d:ed:ad:37:44:5c: 47:3b:5d:de:fc:9a:6c:1f:b5:5d:9f:d7:15:68:17: ec:fb:27:37:b3:69:fa:e7:25:8b:0f:4a:3a:b8:68: 6b:80:24:66:8a:44:b3:9d:4c:28:aa:55:02:2b:27: 87:5d:30:56:21:9e:66:ae:7d:8a:dd:9f:fb:4e:12: bb:81:b7:98:fa:5e:77:83:26:d6:03:eb:a7:fd:4a: 1d:d6:14:ce:01:b4:ff:d0:c4:75:87:3b:40:45:a3: 45:9c:cf:ac:ac:e6:98:ee:1d:af:e0:74:3d:6d:0f: 74:aa:3c:06:60:66:3a:44:4f:d1:01:b0:fc:7b:c6: b1:0a:1e:df:89:89:31:95:f4:93:41:82:09:18:20: b4:5d:4a:8f:f4:1f:0c:d6:9c:48:b2:c2:62:0d:e7: 69:66:dd:a8:6f:de:fb:4c:b9:ca:41:de:66:86:15: da:22:69:40:4c:98:fd:0f:e4:8a:55:4e:68:91:58: 60:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:09:64:63:52:DE:54:00:A7:BB:5C:50:47:EF:6A:4E:E1:7B:9F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f3:0c:3a:43:d0:2f:50:f9:4b:3e:26:22:f2:ed:1d:d8:9a: 8f:ee:56:34:ec:21:d9:9e:38:2d:40:68:34:a1:3f:b9:3c:b0: 2a:f8:6a:77:f4:e9:09:b1:60:84:26:bd:07:f2:c3:97:69:1d: c5:98:60:6c:03:ca:8d:76:45:85:92:31:1e:4a:af:74:e5:47: b1:6e:1e:33:aa:66:1f:c2:af:f0:57:d4:12:02:6a:e9:26:c7: 80:84:4f:21:de:5b:3e:8b:0a:5c:a1:90:b2:01:43:f0:3d:e1: db:a9:b5:4e:76:57:e2:74:a3:65:7f:71:ec:00:37:07:72:88: b0:31:22:1c:be:6d:fe:3e:5a:9b:48:f5:ef:94:25:2e:7d:6c: 24:32:91:4b:5e:be:08:ff:31:38:f8:c3:eb:b5:4a:12:f8:27: 16:66:3b:d1:03:ca:6e:aa:b7:e1:60:2a:dc:41:42:eb:36:1a: 01:47:1b:11:c0:f7:84:9a:8f:59:c3:e3:cf:1d:7f:c5:f1:c3: 61:43:e5:76:08:36:58:8f:83:62:b8:0d:d3:34:7e:35:06:23: f6:fa:5c:0d:c1:42:5a:79:84:a3:d2:50:4b:c5:67:16:9d:fa: 6d:5f:3e:e2:ce:f2:51:de:68:03:27:4e:bd:c7:b2:8b:a6:11: 70:7a:77:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PDVOdQkh6Wxn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZDk2OGM3MDAtOGZiMS00MjMwLWFhMDctY2EyMzQxYzE2ZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA694pZcbMpQWR421BFjdlsFpJqRHUDq3dqtIv WUbq1PScb6D9E5zlQn4rd4QvgJugmJGbNLNDDIDkiycru5EmunlD6GE97a03RFxH O13e/JpsH7Vdn9cVaBfs+yc3s2n65yWLD0o6uGhrgCRmikSznUwoqlUCKyeHXTBW IZ5mrn2K3Z/7ThK7gbeY+l53gybWA+un/Uod1hTOAbT/0MR1hztARaNFnM+srOaY 7h2v4HQ9bQ90qjwGYGY6RE/RAbD8e8axCh7fiYkxlfSTQYIJGCC0XUqP9B8M1pxI ssJiDedpZt2ob977TLnKQd5mhhXaImlATJj9D+SKVU5okVhgCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkJZGNS3lQAp7tcUEfvak7he5+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMWJiZTY5ZWMtOTY4Ni0z MzdkLWE2MDktZTVjYjk1MWRjNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/zDDpD0C9Q+Us+JiLy7R3Ymo/uVjTsIdmeOC1AaDShP7k8sCr4anf0 6QmxYIQmvQfyw5dpHcWYYGwDyo12RYWSMR5Kr3TlR7FuHjOqZh/Cr/BX1BICaukm x4CETyHeWz6LClyhkLIBQ/A94duptU52V+J0o2V/cewANwdyiLAxIhy+bf4+WptI 9e+UJS59bCQykUtevgj/MTj4w+u1ShL4JxZmO9EDym6qt+FgKtxBQus2GgFHGxHA 94Saj1nD488df8Xxw2FD5XYINliPg2K4DdM0fjUGI/b6XA3BQlp5hKPSUEvFZxad +m1fPuLO8lHeaAMnTr3HsoumEXB6d9Q= -----END CERTIFICATE-----Generated at Sun Nov 2 22:54:53 2025 by rpki-client