$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa File: 48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa (raw, json) Hash identifier: xNI8JviCVDAq852a4GYp+1CbQp5zMyQFAHRNIRCSg+E= Subject key identifier: A4:92:0D:57:21:A7:11:A7:6F:6A:A1:03:71:3A:48:67:2E:B0:D8:CB Certificate issuer: /CN=9251b7c9-cc55-4637-b464-be2f1813b4c2 Certificate serial: 010D0C9F4328584BBFA5A6F9B26C573DA34932E0 Authority key identifier: 00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 8075 IP address blocks: 195.85.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a6:f9:b2:6c:57:3d:a3:49:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9251b7c9-cc55-4637-b464-be2f1813b4c2 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=622e24c2-ba0b-4780-b2ec-67c71c0af771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:29:56:c8:87:96:27:6e:4b:0c:85:dd:23: bd:23:0d:4b:da:c7:c5:fb:50:ab:c0:38:d5:98:73: 81:1c:59:a6:d6:49:18:ce:96:ff:d7:5c:a9:24:5c: 8f:94:8c:92:3b:c6:27:33:98:48:df:ac:7a:f5:bf: 69:1c:b2:4b:89:7d:ce:a1:0b:ca:6c:e9:56:e9:68: 18:3c:09:53:d0:33:11:43:94:22:02:89:1e:96:5f: 29:71:8a:c2:0d:69:f4:26:89:4f:09:f7:6b:96:53: b4:c4:70:ce:d9:36:1a:9d:3b:0b:92:97:17:b1:fa: 9e:60:ca:7f:26:76:7e:87:9e:de:ea:94:e3:e6:5c: f0:4c:38:bd:b3:16:42:18:68:1b:8f:86:24:4a:27: 84:8e:8e:79:6c:7c:f0:ee:87:70:98:57:81:db:c3: 47:d6:d4:a6:c5:90:23:c1:5f:15:8c:7f:17:ce:a3: d0:48:05:a3:d1:0e:fa:5e:7e:6d:70:8f:09:f8:40: 9e:98:55:f7:51:aa:05:ce:53:60:a4:20:85:e7:cd: 25:05:0c:3f:34:69:fd:78:9e:ba:8f:72:68:ea:9c: ac:f3:0f:ef:1a:f9:42:d8:07:1f:fc:eb:8e:40:2a: 5b:27:0a:da:27:9f:96:51:69:83:5f:c3:3a:5c:41: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:92:0D:57:21:A7:11:A7:6F:6A:A1:03:71:3A:48:67:2E:B0:D8:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.crl X509v3 Authority Key Identifier: keyid:00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer sbgp-ipAddrBlock: critical IPv4: 195.85.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:73:4a:8b:71:8f:a1:9f:8e:5c:01:ed:4c:fc:da:63:61:6f: 17:68:fe:e3:53:4f:18:b1:9f:ce:07:04:8d:e3:98:df:ef:ef: 85:7c:f3:9c:43:4b:b8:76:09:2b:50:8b:9d:ba:0b:14:82:99: 74:9f:c0:79:d9:2a:0d:bf:ad:e5:1c:30:5a:c8:85:05:a6:c5: 25:68:ee:c3:c1:50:f2:a6:12:a3:57:57:59:85:29:f2:ac:34: 89:58:46:72:54:c4:f8:13:81:fc:6c:24:f8:da:51:d4:16:f2: 99:7a:d2:04:9b:52:65:f7:93:08:66:6b:09:dd:65:19:23:68: 24:90:f1:1b:eb:a6:ec:14:83:82:07:fa:07:3c:b0:a8:ad:ed: 29:89:c5:54:ba:19:fe:0a:c7:a3:79:27:04:f2:dd:c1:fa:e6: 94:ed:72:78:99:2b:bd:f5:72:d8:8e:a5:36:1d:ce:ef:34:03: 84:d0:15:e8:63:95:75:ff:b3:49:4f:69:a7:35:52:4f:3f:ef: 60:82:29:9d:9f:da:5a:7e:18:3c:71:b9:65:df:d1:af:73:c3: c3:c0:b9:3b:51:35:ef:fd:87:e3:28:75:41:b5:03:ec:c9:6e: c7:cf:b1:35:d3:0f:1a:29:67:bd:10:eb:1f:01:5a:87:f7:3f: 13:4f:cd:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pab5smxXPaNJMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI1MWI3YzktY2M1NS00NjM3LWI0NjQtYmUyZjE4MTNi NGMyMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NjIyZTI0YzItYmEwYi00NzgwLWIyZWMtNjdjNzFjMGFmNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEwpVsiHliduSwyF3SO9Iw1L2sfF+1CrwDjV mHOBHFmm1kkYzpb/11ypJFyPlIySO8YnM5hI36x69b9pHLJLiX3OoQvKbOlW6WgY PAlT0DMRQ5QiAokell8pcYrCDWn0JolPCfdrllO0xHDO2TYanTsLkpcXsfqeYMp/ JnZ+h57e6pTj5lzwTDi9sxZCGGgbj4YkSieEjo55bHzw7odwmFeB28NH1tSmxZAj wV8VjH8XzqPQSAWj0Q76Xn5tcI8J+ECemFX3UaoFzlNgpCCF580lBQw/NGn9eJ66 j3Jo6pys8w/vGvlC2Acf/OuOQCpbJwraJ5+WUWmDX8M6XEEXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSSDVchpxGnb2qhA3E6SGcusNjLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MjUx YjdjOS1jYzU1LTQ2MzctYjQ2NC1iZTJmMTgxM2I0YzIvNDhmMGYxMzAtNTkxMC0z ZWMzLWE4M2EtZjFlYzljNTdiMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTI1MWI3YzktY2M1NS00NjM3LWI0 NjQtYmUyZjE4MTNiNGMyLzkyNTFiN2M5LWNjNTUtNDYzNy1iNDY0LWJlMmYxODEz YjRjMi5jcmwwHwYDVR0jBBgwFoAUACM3wv9QJgAv/XRYZAvPT5D4MkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MjUxYjdjOS1jYzU1LTQ2MzctYjQ2NC1iZTJm MTgxM2I0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpzSotxj6GfjlwB7Uz82mNhbxdo/uNTTxixn84HBI3jmN/v74V885xD S7h2CStQi526CxSCmXSfwHnZKg2/reUcMFrIhQWmxSVo7sPBUPKmEqNXV1mFKfKs NIlYRnJUxPgTgfxsJPjaUdQW8pl60gSbUmX3kwhmawndZRkjaCSQ8RvrpuwUg4IH +gc8sKit7SmJxVS6Gf4Kx6N5JwTy3cH65pTtcniZK731ctiOpTYdzu80A4TQFehj lXX/s0lPaac1Uk8/72CCKZ2f2lp+GDxxuWXf0a9zw8PAuTtRNe/9h+ModUG1A+zJ bsfPsTXTDxopZ70Q6x8BWof3PxNPzUQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:34 2025 by rpki-client