$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa File: 7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa (raw, json) Hash identifier: HvUgCACL7g0azlZL/vOr1lc0+Z5OzYCIY1GQNwUffZ0= Subject key identifier: 8E:02:FC:57:9A:2E:99:EF:C9:DC:6C:D2:03:39:B0:B4:47:2D:D5:1F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBCD01C7FE6AF1339F0200 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 199.91.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cd:01:c7:fe:6a:f1:33:9f:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=898d4eb2-fbed-4317-9ddc-3c34de55c388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:fb:d8:33:61:04:e1:f8:4e:34:1d:40:53: ec:f2:45:f7:b2:05:21:f7:ae:f8:f9:e7:49:05:fc: 65:9d:46:ea:11:65:7d:08:af:9b:c8:03:5d:5f:6f: c7:34:93:82:bd:cc:fa:a2:a9:6c:9e:23:df:42:c1: e7:dd:d0:f2:33:4b:2f:fb:8b:7e:83:fd:a7:f2:47: fd:47:a9:0e:2f:da:b5:8b:42:93:a2:74:2e:1c:ce: 17:f8:2b:22:82:03:d5:f0:3f:71:93:c8:60:d4:23: 25:56:b6:07:eb:79:d0:c2:6c:6a:06:de:d9:7b:40: b6:15:46:e2:ab:0c:ea:3c:59:9c:e1:8f:32:ac:30: a2:10:26:fa:22:d7:db:fd:01:c8:50:e1:65:51:ca: 0e:bc:7a:78:46:2d:4b:fb:0d:27:c1:0e:5d:c9:29: a5:8a:da:ad:e1:e9:66:5e:eb:13:af:d5:dd:79:b5: bc:4a:76:98:3a:90:de:20:9e:4d:91:1b:30:2b:b6: 62:d8:cf:73:08:0b:56:90:37:50:b7:a8:50:19:58: e9:f0:43:09:e4:32:45:96:3f:00:c1:60:76:93:e4: 3d:3f:c7:65:58:ae:a0:b5:db:9b:b7:e5:f5:10:08: 1d:9d:8b:da:e0:54:dd:d2:0d:30:1f:65:f3:a1:f6: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:02:FC:57:9A:2E:99:EF:C9:DC:6C:D2:03:39:B0:B4:47:2D:D5:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fb:1c:14:df:a2:b6:c4:ee:0a:40:42:57:3d:30:65:22:d5: 92:49:d2:2d:c6:43:1e:b1:73:62:be:87:29:04:c2:a7:7b:4f: e7:fe:1b:03:4a:67:19:c1:57:98:33:fe:17:af:2e:e2:d4:a2: 8d:b0:12:db:96:dd:48:99:ad:fa:6b:91:ec:8f:58:bc:e1:5e: 00:8b:d6:0d:9e:bf:af:12:1f:a2:bb:5d:36:a9:59:7a:0e:5e: 4b:f9:b6:c6:8f:17:33:44:0b:a0:ad:ca:c5:40:6f:03:f7:47: 05:60:d9:3b:0f:69:5a:6e:9d:82:3a:7c:2a:13:6d:e1:81:ef: 26:11:b0:7a:ff:c1:95:4c:2e:e3:51:35:9c:e1:ca:12:97:e6: ec:de:73:2a:5f:af:ec:f6:f2:77:6f:f4:bb:49:5a:3b:7d:47: 4d:2f:6b:c3:6f:fb:0e:63:d2:db:76:58:f5:c4:6e:30:1d:82: 8e:c3:e6:68:d5:41:c3:6c:a1:49:82:e5:9c:cb:10:0d:bb:e7: 95:93:a4:06:b0:c5:d0:85:84:85:c4:a1:24:64:8e:76:62:87: 14:d6:1d:5d:47:04:59:9c:e2:1c:c2:41:99:30:46:8c:fe:c0: b5:43:d7:75:43:5c:0c:bf:4a:8d:12:3e:78:ba:7b:d0:b9:4d: 54:1b:da:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey80Bx/5q8TOfAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ODk4ZDRlYjItZmJlZC00MzE3LTlkZGMtM2MzNGRlNTVjMzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBf72DNhBOH4TjQdQFPs8kX3sgUh9674+edJ BfxlnUbqEWV9CK+byANdX2/HNJOCvcz6oqlsniPfQsHn3dDyM0sv+4t+g/2n8kf9 R6kOL9q1i0KTonQuHM4X+CsiggPV8D9xk8hg1CMlVrYH63nQwmxqBt7Ze0C2FUbi qwzqPFmc4Y8yrDCiECb6Itfb/QHIUOFlUcoOvHp4Ri1L+w0nwQ5dySmlitqt4elm XusTr9XdebW8SnaYOpDeIJ5NkRswK7Zi2M9zCAtWkDdQt6hQGVjp8EMJ5DJFlj8A wWB2k+Q9P8dlWK6gtdubt+X1EAgdnYva4FTd0g0wH2XzofaC1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4C/FeaLpnvydxs0gM5sLRHLdUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2RmZmVkOGMtYjg3MC0z OTcwLWI1NDAtMGZhM2E0YWI0MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB77HBTforbE7gpAQlc9MGUi1ZJJ0i3GQx6xc2K+hykEwqd7T+f+GwNK ZxnBV5gz/hevLuLUoo2wEtuW3UiZrfprkeyPWLzhXgCL1g2ev68SH6K7XTapWXoO Xkv5tsaPFzNEC6CtysVAbwP3RwVg2TsPaVpunYI6fCoTbeGB7yYRsHr/wZVMLuNR NZzhyhKX5uzecypfr+z28ndv9LtJWjt9R00va8Nv+w5j0tt2WPXEbjAdgo7D5mjV QcNsoUmC5ZzLEA2755WTpAawxdCFhIXEoSRkjnZihxTWHV1HBFmc4hzCQZkwRoz+ wLVD13VDXAy/So0SPni6e9C5TVQb2mk= -----END CERTIFICATE-----Generated at Sun Nov 2 22:56:46 2025 by rpki-client