$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa File: c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa (raw, json) Hash identifier: yJ/IH6ydEOuglNUbTVtLH5YB9Md7X4iefHYszm3LBdc= Subject key identifier: 1E:37:F9:F9:37:10:5D:52:99:86:7E:74:86:A3:36:E3:E9:86:5C:E4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584B92DCF944F1394232F60B8EC0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16839 IP address blocks: 149.96.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f9:44:f1:39:42:32:f6:0b:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=77c56df1-a4fb-42f5-b35b-5f82eedde172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8f:0f:a2:fa:29:23:48:0f:10:16:c9:69:da: f2:5e:6f:e4:f5:f7:76:bf:a4:e7:2d:fa:a9:1d:70: 8f:71:99:40:e2:e0:13:fa:3c:6a:34:f9:d6:cd:31: 94:ca:71:e2:09:36:39:17:ee:88:63:99:6b:24:70: 3e:48:1c:0d:e2:c3:b9:34:83:4d:d7:71:10:93:3e: 9d:ac:a8:72:ca:6c:de:50:7b:2f:7d:9b:eb:22:60: 0c:46:f1:8a:88:2f:43:54:d0:29:60:cb:24:7f:bc: 6e:77:3c:b3:58:f5:19:e4:7e:57:87:41:34:0f:b6: bd:60:04:e2:85:25:de:04:fd:b2:e9:a5:23:ae:0c: ed:57:b4:1c:73:a1:af:06:8e:65:60:04:e7:4d:8c: 88:a9:ed:cf:c0:b5:a4:7a:c5:7a:ee:e8:b2:37:31: 5c:f6:76:f0:53:17:7f:c6:d6:63:f5:0c:0b:47:04: 70:18:a2:e0:8f:e5:65:82:19:2f:b3:80:47:c1:3d: 37:ec:5e:d4:d3:9f:fa:c4:7f:07:a5:a4:74:b9:77: cd:de:c1:47:e3:fa:ec:1e:be:d0:e6:34:49:0e:69: 99:78:26:f3:c4:2a:75:79:b0:cb:52:e1:58:f1:09: 2d:9b:3c:31:5f:79:d1:63:14:9b:97:1b:d4:af:d0: b1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:37:F9:F9:37:10:5D:52:99:86:7E:74:86:A3:36:E3:E9:86:5C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:49:a8:1e:b7:1b:4f:df:40:dd:82:e7:11:35:5b:8d:2a:22: 8a:f6:3d:b2:e5:aa:33:31:61:5f:51:96:d5:9e:d7:ad:06:6f: 57:a9:95:7a:cd:8e:25:82:fc:23:84:04:0f:1f:21:1b:f9:8d: 4a:f9:dc:68:80:4d:0b:5f:f4:48:e6:4f:8c:c0:24:5b:1b:52: 7e:33:1f:99:4f:1f:43:f9:be:0b:b6:b0:46:58:61:6c:a5:35: 25:75:fc:da:db:b5:47:59:dd:af:99:ab:ab:85:23:c3:25:17: 63:d5:07:f7:bb:00:af:7c:48:da:ed:ce:5e:25:94:3b:fe:1d: ed:8e:91:2d:f8:33:ac:d7:73:c9:26:73:c7:dc:6d:21:0e:d0: d0:45:57:58:60:c4:a8:31:26:4f:27:df:42:9a:d7:1f:4d:3b: a3:44:7f:3e:dd:7f:78:88:7f:f3:bf:fe:1f:49:d9:0c:3f:f1: bb:67:fb:a9:29:f6:38:74:dd:d4:c5:b9:bc:b9:e7:c5:6a:19: ec:17:44:ff:4f:58:60:0c:58:7d:79:81:2d:bf:0a:33:75:d6: 5a:5c:24:d9:3d:9b:78:88:cd:63:da:98:d1:f4:3e:98:ee:21: 3d:16:7e:c2:a4:e2:83:8d:9c:ed:2a:fc:d2:6a:22:f0:33:fe: ae:42:03:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PlE8TlCMvYLjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NzdjNTZkZjEtYTRmYi00MmY1LWIzNWItNWY4MmVlZGRlMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho8PovopI0gPEBbJadryXm/k9fd2v6TnLfqp HXCPcZlA4uAT+jxqNPnWzTGUynHiCTY5F+6IY5lrJHA+SBwN4sO5NINN13EQkz6d rKhyymzeUHsvfZvrImAMRvGKiC9DVNApYMskf7xudzyzWPUZ5H5Xh0E0D7a9YATi hSXeBP2y6aUjrgztV7Qcc6GvBo5lYATnTYyIqe3PwLWkesV67uiyNzFc9nbwUxd/ xtZj9QwLRwRwGKLgj+Vlghkvs4BHwT037F7U05/6xH8HpaR0uXfN3sFH4/rsHr7Q 5jRJDmmZeCbzxCp1ebDLUuFY8QktmzwxX3nRYxSblxvUr9CxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB43+fk3EF1SmYZ+dIajNuPphlzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzFkYTJlNzEtZGZhNi0z ZDA5LWJjMTctOTNhMGE3ZTczMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJJqB63G0/fQN2C5xE1W40qIor2PbLlqjMxYV9RltWe160Gb1eplXrN jiWC/COEBA8fIRv5jUr53GiATQtf9EjmT4zAJFsbUn4zH5lPH0P5vgu2sEZYYWyl NSV1/NrbtUdZ3a+Zq6uFI8MlF2PVB/e7AK98SNrtzl4llDv+He2OkS34M6zXc8km c8fcbSEO0NBFV1hgxKgxJk8n30Ka1x9NO6NEfz7df3iIf/O//h9J2Qw/8btn+6kp 9jh03dTFuby558VqGewXRP9PWGAMWH15gS2/CjN11lpcJNk9m3iIzWPamNH0Ppju IT0WfsKk4oONnO0q/NJqIvAz/q5CAx4= -----END CERTIFICATE-----Generated at Sun Nov 2 22:51:45 2025 by rpki-client