$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa File: e820c2de-4153-3772-8779-b9ed95316688.roa (raw, json) Hash identifier: csyXkQVZPWWT1B2pO1f4bPFt91E7A7TQTfgaxLNKY9w= Subject key identifier: 25:96:28:7D:FC:47:A2:5A:04:0F:3E:27:D7:AD:12:BB:E1:5A:5A:58 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584ADECBC67C9FCD2B2FA52D1100 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16839 IP address blocks: 199.91.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c6:7c:9f:cd:2b:2f:a5:2d:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=10b2c4ad-d501-490d-a7f6-b28e88aad484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:8e:c8:43:7a:9f:00:b1:d3:22:f4:27:69: e7:e3:f3:72:f2:b8:2c:9f:b5:c1:5f:7d:81:ed:97: 7f:2d:c5:21:07:79:11:20:ec:19:7b:08:c7:70:35: 48:f7:09:01:3c:26:24:0a:59:68:ff:08:6c:c1:9d: 39:68:14:cf:da:88:0b:fd:a3:fc:1a:48:9e:de:d2: a0:c0:b9:03:33:e5:0f:86:bd:1a:09:fc:7b:c0:a1: e7:fa:5c:3a:4d:f9:bd:69:37:e2:90:f5:bc:c6:80: 35:ba:55:17:05:2c:23:03:15:45:3b:7d:d7:d8:dd: 91:8f:c8:74:1f:64:f9:89:ab:89:68:4b:95:ea:ea: 6b:f3:22:27:20:f5:eb:e8:2c:9e:4c:55:ee:9e:16: 21:c2:c5:ce:74:01:93:5e:6f:94:fc:54:76:ca:82: f6:64:59:47:fa:2b:9f:cb:aa:4e:1e:22:e1:32:87: e9:32:2d:da:bc:02:6c:26:fb:aa:45:d3:c3:c5:1d: ad:2b:05:42:62:d8:1b:39:dd:58:30:73:cb:dc:0e: 50:68:73:5b:74:3e:2b:7c:53:45:4a:55:70:46:cc: 21:53:71:70:80:db:e1:75:e0:6e:dc:a2:4a:78:c7: f4:ce:72:df:58:41:26:b8:43:57:01:89:f4:71:59: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:96:28:7D:FC:47:A2:5A:04:0F:3E:27:D7:AD:12:BB:E1:5A:5A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:59:34:29:1c:c6:82:a9:42:72:66:fe:2d:5c:de:94:58:b8: 23:22:80:d4:5a:ab:01:8a:4e:22:47:c4:99:8c:4d:c6:05:45: 2d:aa:fd:2a:01:32:d4:52:c9:d1:be:0f:07:0f:6a:1c:66:9f: 46:9b:e8:fb:76:10:f2:a3:9a:39:80:01:eb:7f:3c:cf:4a:f2: b1:fc:f2:c1:6f:18:86:0b:12:ae:90:2c:bb:6e:c4:fc:4c:12: f2:62:a4:8c:88:ec:c2:90:a8:16:55:79:39:88:69:d9:74:d3: 47:e5:13:d3:5e:9e:44:dc:a0:74:eb:e1:2e:25:1b:8d:be:ea: 53:9f:29:ca:3d:64:10:8d:df:14:da:1b:aa:5e:08:93:82:a9: e0:74:5f:74:9a:ad:aa:6c:7b:fd:20:31:b5:2a:6d:89:10:53: 92:6e:29:16:65:08:e7:0b:78:45:6a:e5:58:a8:21:57:ee:9b: 07:08:33:a5:d9:5b:e5:2d:8c:e8:52:89:ee:77:12:f0:d6:18: d0:e5:15:31:03:d9:6f:eb:ca:37:9c:5b:90:01:9a:8f:38:90: 10:bd:d0:5e:c7:db:d4:29:bd:f7:4b:db:07:b9:37:fd:69:f1: 9f:14:01:e1:60:d3:dc:7c:f1:4a:1f:bf:be:a8:38:85:1b:2a: b7:aa:ef:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8Z8n80rL6UtEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MTBiMmM0YWQtZDUwMS00OTBkLWE3ZjYtYjI4ZTg4YWFkNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5aOyEN6nwCx0yL0J2nn4/Ny8rgsn7XBX32B 7Zd/LcUhB3kRIOwZewjHcDVI9wkBPCYkCllo/whswZ05aBTP2ogL/aP8Gkie3tKg wLkDM+UPhr0aCfx7wKHn+lw6Tfm9aTfikPW8xoA1ulUXBSwjAxVFO33X2N2Rj8h0 H2T5iauJaEuV6upr8yInIPXr6CyeTFXunhYhwsXOdAGTXm+U/FR2yoL2ZFlH+iuf y6pOHiLhMofpMi3avAJsJvuqRdPDxR2tKwVCYtgbOd1YMHPL3A5QaHNbdD4rfFNF SlVwRswhU3FwgNvhdeBu3KJKeMf0znLfWEEmuENXAYn0cVmUiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWWKH38R6JaBA8+J9etErvhWlpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZTgyMGMyZGUtNDE1My0z NzcyLTg3NzktYjllZDk1MzE2Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlZNCkcxoKpQnJm/i1c3pRYuCMigNRaqwGKTiJHxJmMTcYFRS2q/SoB MtRSydG+DwcPahxmn0ab6Pt2EPKjmjmAAet/PM9K8rH88sFvGIYLEq6QLLtuxPxM EvJipIyI7MKQqBZVeTmIadl000flE9NenkTcoHTr4S4lG42+6lOfKco9ZBCN3xTa G6peCJOCqeB0X3Sarapse/0gMbUqbYkQU5JuKRZlCOcLeEVq5VioIVfumwcIM6XZ W+UtjOhSie53EvDWGNDlFTED2W/ryjecW5ABmo84kBC90F7H29QpvfdL2we5N/1p 8Z8UAeFg09x88Uofv76oOIUbKreq79M= -----END CERTIFICATE-----Generated at Sun Nov 2 22:55:34 2025 by rpki-client