$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ddf39dc7-a720-3335-9c78-530950b34ba7.roa File: ddf39dc7-a720-3335-9c78-530950b34ba7.roa (raw, json) Hash identifier: D+/pH4EqIs8EwqAqtZBmEnsqOvfHkWaHNBj1FEZR4Hs= Subject key identifier: C3:F1:1F:2D:B5:81:96:DC:44:4B:34:BE:F3:DE:B6:16:F1:7A:15:F8 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC66CEF654C4C0C995600 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ddf39dc7-a720-3335-9c78-530950b34ba7.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 199.91.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c6:6c:ef:65:4c:4c:0c:99:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=b26a6841-0bb3-48df-8c90-007debabf372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:10:ac:32:46:fb:5c:d4:f2:24:2b:f8:41: 76:a4:08:5c:10:10:42:79:34:a6:05:28:66:bd:57: 30:2f:dd:76:ef:6c:b3:06:30:ad:ac:01:8c:d5:f3: d3:8f:54:c5:10:a8:7e:6f:2a:f3:81:17:27:4d:5f: b9:73:33:58:f0:4c:ab:7e:c2:de:d6:38:7a:34:74: 79:c6:47:3f:cf:55:d8:b2:70:8f:4b:fb:7d:67:3d: d9:0b:0e:e6:cc:fd:a1:d6:4c:09:2b:83:9f:d0:ee: 3c:c4:50:d4:8d:96:7f:c4:a1:4b:55:33:c4:07:06: a0:ec:43:2e:3b:79:a7:0c:a7:5d:8f:54:1a:de:e5: 39:fe:2b:ac:e1:dd:9c:64:1b:82:7a:61:9b:5d:a8: 9a:17:f1:3f:5c:c7:7c:5f:63:0e:75:c1:25:91:b2: a4:23:8c:e7:cf:0e:29:06:01:47:a3:75:63:5b:bc: 2d:ee:9a:4a:ce:ec:9b:2d:1e:11:0b:fd:cd:4b:13: dd:3c:72:57:ba:c1:ee:38:3e:d8:42:c1:bc:ac:2d: b4:60:25:36:47:d3:d3:84:e1:31:21:5c:d5:ec:1e: b6:c9:54:64:28:5a:8b:16:21:6c:8b:4c:af:c4:b0: 36:61:a5:5d:2d:b2:54:a0:82:e2:fd:f7:4d:0a:36: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F1:1F:2D:B5:81:96:DC:44:4B:34:BE:F3:DE:B6:16:F1:7A:15:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ddf39dc7-a720-3335-9c78-530950b34ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b7:4d:e3:46:69:f0:6c:39:76:6c:80:3a:0c:c9:06:70:50: f0:e7:5a:23:d5:8b:80:3c:b5:74:36:4a:0a:48:34:21:cd:df: ab:5d:73:89:18:05:74:cc:72:dd:3b:ab:80:ee:90:2f:d8:16: 71:d8:bb:26:5f:33:63:7c:01:df:0b:42:c9:4e:0c:69:06:4f: 5d:9b:08:ae:da:74:76:02:bf:c2:f7:29:0f:d3:e3:00:0a:20: 66:e9:64:fe:1e:19:70:0d:ff:17:53:08:5e:01:e4:1c:d2:f6: a9:01:31:f4:f3:db:55:40:15:3c:f3:39:59:59:48:21:92:60: ab:25:d6:c8:9a:99:cd:3d:2f:7d:73:06:80:cd:fe:e9:ff:d2: 58:33:c6:d2:17:bd:ef:7b:f4:04:07:f2:61:8f:d8:d3:ba:e7: 8d:9b:16:a0:96:9c:54:cf:25:e2:bc:79:77:65:cf:64:fd:0b: 55:b1:53:97:1a:72:4b:30:1c:ab:ba:19:3c:c0:d4:ae:f1:6d: 46:f3:53:e0:d4:79:10:56:26:a8:78:09:e2:2f:9f:15:6d:6e: 4e:7e:fb:15:ac:88:ed:f0:35:82:41:f0:0d:9b:ef:bd:67:bc: d9:db:33:9f:46:ea:d5:57:bb:ee:56:26:74:7e:f9:56:97:73: ef:9f:1b:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8Zs72VMTAyZVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YjI2YTY4NDEtMGJiMy00OGRmLThjOTAtMDA3ZGViYWJmMzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobEQrDJG+1zU8iQr+EF2pAhcEBBCeTSmBShm vVcwL91272yzBjCtrAGM1fPTj1TFEKh+byrzgRcnTV+5czNY8EyrfsLe1jh6NHR5 xkc/z1XYsnCPS/t9Zz3ZCw7mzP2h1kwJK4Of0O48xFDUjZZ/xKFLVTPEBwag7EMu O3mnDKddj1Qa3uU5/ius4d2cZBuCemGbXaiaF/E/XMd8X2MOdcElkbKkI4znzw4p BgFHo3VjW7wt7ppKzuybLR4RC/3NSxPdPHJXusHuOD7YQsG8rC20YCU2R9PThOEx IVzV7B62yVRkKFqLFiFsi0yvxLA2YaVdLbJUoILi/fdNCjZZWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPxHy21gZbcREs0vvPethbxehX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZGRmMzlkYzctYTcyMC0z MzM1LTljNzgtNTMwOTUwYjM0YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe3TeNGafBsOXZsgDoMyQZwUPDnWiPVi4A8tXQ2SgpINCHN36tdc4kY BXTMct07q4DukC/YFnHYuyZfM2N8Ad8LQslODGkGT12bCK7adHYCv8L3KQ/T4wAK IGbpZP4eGXAN/xdTCF4B5BzS9qkBMfTz21VAFTzzOVlZSCGSYKsl1siamc09L31z BoDN/un/0lgzxtIXve979AQH8mGP2NO6542bFqCWnFTPJeK8eXdlz2T9C1WxU5ca ckswHKu6GTzA1K7xbUbzU+DUeRBWJqh4CeIvnxVtbk5++xWsiO3wNYJB8A2b771n vNnbM59G6tVXu+5WJnR++VaXc++fG/U= -----END CERTIFICATE-----Generated at Sun Nov 2 22:54:19 2025 by rpki-client