$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa File: bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa (raw, json) Hash identifier: O5nHX9RemFSNYZNBmP6ykTSKucKIUlJ67YVrO2sHsDI= Subject key identifier: 01:97:F4:3F:9C:D2:B8:3A:85:08:3D:6C:05:A2:19:E4:4F:81:EE:66 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBCC45A5FAF3B88AFB4920 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 149.96.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cc:45:a5:fa:f3:b8:8a:fb:49:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=4946efc5-e3e2-4f68-9d04-2ce0ee992a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:10:87:1e:ab:4f:bd:ec:10:43:30:ad:b8: de:36:a7:2c:d7:fc:2b:4b:c0:bb:4f:17:df:1d:de: 6d:31:c9:a5:cd:77:ce:86:35:cc:50:a7:50:9b:9b: 62:f8:95:44:08:bb:5b:5c:98:36:74:19:39:b1:09: 98:3c:39:f0:91:57:0d:08:f3:23:3e:48:c2:63:ab: 23:60:b9:48:a6:21:c7:36:a4:59:0c:fa:55:82:ce: bc:a3:64:e1:8e:3a:95:77:e9:3a:a3:34:be:11:78: 10:2c:8d:1c:f5:7c:f0:8c:d4:f5:50:6f:81:f1:49: ec:9f:3a:52:4f:5b:05:93:c9:7b:e5:b2:10:f7:6a: e1:ed:31:bc:8d:e1:8f:ad:f2:d3:9d:15:e1:33:2f: a7:bc:8d:12:d9:94:42:5c:c0:29:c5:b9:ea:ad:c7: 31:fc:75:f8:c4:74:f3:d7:f9:1d:ae:db:50:c3:4f: 5a:03:dc:e6:23:c2:c6:d3:0b:b3:39:dd:52:49:ab: 79:a0:0b:1c:58:60:f8:a9:f2:46:4c:51:b1:ac:fd: 55:ca:66:ba:21:07:16:e2:bb:38:02:3a:23:e0:df: cc:ee:05:8d:85:53:e6:b7:de:3b:65:e1:1a:5c:82: ad:1e:4c:53:43:83:a4:1d:c2:3c:c4:fb:9f:04:3f: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:97:F4:3F:9C:D2:B8:3A:85:08:3D:6C:05:A2:19:E4:4F:81:EE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4a:fd:05:20:85:b2:b0:6f:ac:37:43:6c:bb:28:fb:c5:89: 09:7c:7b:89:90:d0:2f:b4:a2:76:3d:7c:62:9b:1f:de:c0:a1: 0b:8d:4b:a4:ab:c5:30:e2:bc:0e:e1:70:da:29:52:a5:57:64: 06:70:41:3b:c5:0a:50:02:98:98:85:24:ba:e9:52:97:7b:98: fa:00:e3:1b:0a:17:ee:cf:64:b8:d7:53:5f:94:02:60:0f:b0: de:b5:03:2d:75:40:02:9a:bf:c4:7c:bc:13:05:54:7b:ef:06: d5:d9:d2:e9:7e:89:47:bb:3f:c2:14:4c:4e:a3:31:55:82:7d: 90:9b:6f:96:a4:5a:65:8c:0b:10:4e:b9:93:0c:6c:73:f5:80: fb:db:d3:f3:11:96:6f:5e:e0:6d:68:9b:db:88:9a:50:44:4e: 19:06:da:f5:96:b0:5c:0e:fc:81:cd:c8:12:4a:8b:c0:fc:de: 3e:a2:12:6b:c6:64:e1:d9:38:f3:50:60:df:94:de:f9:4d:e7: 36:bd:39:80:45:d5:62:e3:34:fe:74:68:f9:48:b2:76:65:07: cb:11:fa:74:3d:fd:fc:be:66:55:08:8d:08:6e:b4:29:f6:d2: a4:d2:d3:6d:52:61:bf:ec:cf:51:dc:01:96:69:78:69:b9:bb: 3a:86:b5:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8xFpfrzuIr7SSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NDk0NmVmYzUtZTNlMi00ZjY4LTlkMDQtMmNlMGVlOTkyYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9QQhx6rT73sEEMwrbjeNqcs1/wrS8C7Txff Hd5tMcmlzXfOhjXMUKdQm5ti+JVECLtbXJg2dBk5sQmYPDnwkVcNCPMjPkjCY6sj YLlIpiHHNqRZDPpVgs68o2ThjjqVd+k6ozS+EXgQLI0c9XzwjNT1UG+B8UnsnzpS T1sFk8l75bIQ92rh7TG8jeGPrfLTnRXhMy+nvI0S2ZRCXMApxbnqrccx/HX4xHTz 1/kdrttQw09aA9zmI8LG0wuzOd1SSat5oAscWGD4qfJGTFGxrP1Vyma6IQcW4rs4 Ajoj4N/M7gWNhVPmt947ZeEaXIKtHkxTQ4OkHcI8xPufBD+E/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGX9D+c0rg6hQg9bAWiGeRPge5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYmRhYjg0NjktOGNiNS0z ZmRmLTlmNDktZWNjNTZjZWQyMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpK/QUghbKwb6w3Q2y7KPvFiQl8e4mQ0C+0onY9fGKbH97AoQuNS6Sr xTDivA7hcNopUqVXZAZwQTvFClACmJiFJLrpUpd7mPoA4xsKF+7PZLjXU1+UAmAP sN61Ay11QAKav8R8vBMFVHvvBtXZ0ul+iUe7P8IUTE6jMVWCfZCbb5akWmWMCxBO uZMMbHP1gPvb0/MRlm9e4G1om9uImlBEThkG2vWWsFwO/IHNyBJKi8D83j6iEmvG ZOHZOPNQYN+U3vlN5za9OYBF1WLjNP50aPlIsnZlB8sR+nQ9/fy+ZlUIjQhutCn2 0qTS021SYb/sz1HcAZZpeGm5uzqGtb8= -----END CERTIFICATE-----Generated at Sun Nov 2 22:56:46 2025 by rpki-client