$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa File: 53da01e2-4fd1-3726-8525-261dfe0ace4c.roa (raw, json) Hash identifier: rKv56t1F0p5K5gi5uFomJ/CS4JKmoMQdsJEhGxh9+44= Subject key identifier: D6:B9:18:1F:04:5F:00:BF:42:50:81:35:D9:9E:A0:7F:63:4C:17:B7 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584B92DCF0C242E10DAFA5D1A580 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f0:c2:42:e1:0d:af:a5:d1:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=8ea2cdd7-9adc-4194-b96e-cbb4306eb3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:55:8e:4c:69:d9:21:11:bd:7d:0d:3b:10:94: 79:87:85:e7:a6:09:1e:2d:d0:01:33:f7:0d:97:83: c7:94:10:ed:65:54:ab:bb:ec:3c:d2:c0:68:d7:5c: 38:d7:6a:ad:8a:0f:70:80:f7:6e:91:c2:d1:cd:1b: a5:54:ba:85:fe:af:68:af:49:eb:a0:61:26:1d:2c: 9d:dd:74:48:46:b4:9e:c6:79:7c:80:28:5e:88:00: 0b:9a:dd:15:cb:15:1b:62:8c:c0:1c:50:70:9f:b5: 82:5c:60:d4:ef:04:16:b3:c5:c7:74:87:5c:db:67: 8c:76:46:f6:6d:8d:bf:12:11:d7:c7:89:a7:58:36: cb:45:ee:8a:77:e3:fc:40:ce:41:ee:6f:6d:10:d2: 95:ee:55:94:28:18:fa:e7:8a:1c:da:93:74:86:8a: e2:f1:74:7d:20:ce:8f:ef:ca:db:0d:6f:89:c6:fe: cc:73:9d:5c:87:9a:dd:be:9d:3e:7e:71:1b:42:23: 83:60:10:95:13:91:50:16:44:6e:d9:91:01:32:b5: d6:85:ac:b5:2d:af:2b:d2:16:96:44:f4:e1:0e:ce: 78:13:2d:01:99:10:38:34:62:99:02:98:7b:36:4f: 87:aa:3b:f4:62:42:cc:a8:99:1a:17:27:78:6f:b0: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B9:18:1F:04:5F:00:BF:42:50:81:35:D9:9E:A0:7F:63:4C:17:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a5:6f:61:7a:2f:73:10:4e:95:36:ca:70:de:be:0d:96:42: ba:ae:4a:9d:df:ab:04:0e:a0:19:41:5f:b5:5c:c5:5f:96:d5: 0d:ac:2c:53:fc:60:e7:02:4a:4f:39:ac:a0:24:61:0b:69:1a: d8:cb:f9:18:81:ef:c1:ed:0f:76:73:fc:f1:4b:17:47:18:c4: 1d:72:85:80:f0:c7:01:ec:a0:af:82:13:2a:fe:c0:63:7b:2e: c2:7a:8d:5e:9e:74:14:5c:ff:ff:ce:9f:cf:91:02:95:97:1c: f1:c7:d1:1b:91:4e:ad:3e:ec:7a:fa:63:cf:0a:7e:d9:5e:87: 50:0f:24:5b:5b:2d:42:de:0a:ad:64:bd:46:bc:a6:f4:7e:a0: 57:8c:1b:f7:63:75:85:f3:c4:1e:f5:29:d1:e5:a0:b4:41:a8: e7:94:85:7e:e9:f9:3b:6a:12:22:9b:5a:e3:cf:4a:1a:d8:04: 28:f8:12:16:d6:12:05:95:6f:48:3f:1e:41:77:02:8c:59:51: aa:28:54:7f:f3:f9:40:2d:a3:e8:dd:bd:62:a7:6f:3b:11:8f: 1e:ba:bb:d6:a2:b4:79:a9:ff:2f:17:a2:1a:38:b1:4b:57:41: cd:3d:14:9f:98:a4:aa:d9:c4:0c:c3:6c:45:9b:ff:0c:d3:ae: 8c:ae:69:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PDCQuENr6XRpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OGVhMmNkZDctOWFkYy00MTk0LWI5NmUtY2JiNDMwNmViM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilWOTGnZIRG9fQ07EJR5h4XnpgkeLdABM/cN l4PHlBDtZVSru+w80sBo11w412qtig9wgPdukcLRzRulVLqF/q9or0nroGEmHSyd 3XRIRrSexnl8gCheiAALmt0VyxUbYozAHFBwn7WCXGDU7wQWs8XHdIdc22eMdkb2 bY2/EhHXx4mnWDbLRe6Kd+P8QM5B7m9tENKV7lWUKBj654oc2pN0hori8XR9IM6P 78rbDW+Jxv7Mc51ch5rdvp0+fnEbQiODYBCVE5FQFkRu2ZEBMrXWhay1La8r0haW RPThDs54Ey0BmRA4NGKZAph7Nk+Hqjv0YkLMqJkaFyd4b7Bo2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNa5GB8EXwC/QlCBNdmeoH9jTBe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTNkYTAxZTItNGZkMS0z NzI2LTg1MjUtMjYxZGZlMGFjZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWlb2F6L3MQTpU2ynDevg2WQrquSp3fqwQOoBlBX7VcxV+W1Q2sLFP8 YOcCSk85rKAkYQtpGtjL+RiB78HtD3Zz/PFLF0cYxB1yhYDwxwHsoK+CEyr+wGN7 LsJ6jV6edBRc///On8+RApWXHPHH0RuRTq0+7Hr6Y88Kftleh1APJFtbLULeCq1k vUa8pvR+oFeMG/djdYXzxB71KdHloLRBqOeUhX7p+TtqEiKbWuPPShrYBCj4EhbW EgWVb0g/HkF3AoxZUaooVH/z+UAto+jdvWKnbzsRjx66u9aitHmp/y8Xoho4sUtX Qc09FJ+YpKrZxAzDbEWb/wzTroyuaXc= -----END CERTIFICATE-----Generated at Sun Nov 2 22:54:52 2025 by rpki-client