$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/be4e27a4-68d9-3512-b3d8-871a5da67a78.roa File: be4e27a4-68d9-3512-b3d8-871a5da67a78.roa (raw, json) Hash identifier: MDOajIE+iQ+89XIEUtxONnk8T1tSZt0neNFSf0vaAKY= Subject key identifier: E1:6A:0E:66:2E:76:E5:8E:98:A7:0C:FA:08:AF:B1:12:FD:48:A1:FA Certificate issuer: /CN=7ede7b70-d745-425d-975b-bb0eb6368430 Certificate serial: 010D0C9F4328584BA39D05ABC60B28C08E223A80 Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/be4e27a4-68d9-3512-b3d8-871a5da67a78.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 22697 IP address blocks: 141.193.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:05:ab:c6:0b:28:c0:8e:22:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=7b96bf90-9ec5-42d8-a8f4-056e4881d92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ed:7e:0f:31:6a:0a:99:63:fa:cd:55:f3:03: c2:97:0e:d0:ee:f0:2b:bf:e4:7c:ef:1b:1b:10:47: d5:39:72:19:d7:29:b3:68:f5:42:4d:5d:aa:9b:db: 2e:21:de:63:36:35:1f:10:de:4b:bf:85:28:96:57: 41:9f:b4:36:b3:e0:94:1d:f6:0c:5b:d4:11:75:8e: 41:57:30:6c:df:3a:6f:a0:de:56:c0:d8:64:98:5b: b2:00:cd:39:60:d4:9a:f7:67:1f:69:2b:2c:2b:4f: 55:d8:63:c4:b2:32:80:13:c7:7f:a1:2d:49:2a:6a: 03:6a:58:f2:11:5b:e4:06:82:e6:fc:90:95:11:95: 65:45:54:2e:53:c8:91:c5:46:72:37:79:42:07:89: e1:c8:0d:41:61:8d:f7:82:da:d3:4c:12:48:a4:e8: a7:a0:ac:c5:2e:ae:81:1b:17:a6:33:05:a3:21:85: 10:89:f9:e3:2f:59:f1:be:c8:d8:5a:50:81:7b:80: 56:13:e7:ac:a5:e9:ac:05:e2:28:8a:89:0b:42:ad: 24:48:43:9d:64:9c:fa:45:d8:2a:95:6d:75:3c:ca: 63:eb:9e:c7:02:2b:a8:dd:16:59:78:60:03:df:07: b5:76:7a:b2:84:44:82:f6:1c:2b:c8:5d:2e:74:3d: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6A:0E:66:2E:76:E5:8E:98:A7:0C:FA:08:AF:B1:12:FD:48:A1:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/be4e27a4-68d9-3512-b3d8-871a5da67a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl X509v3 Authority Key Identifier: keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer sbgp-ipAddrBlock: critical IPv4: 141.193.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cd:81:25:67:af:6a:10:45:5b:50:b7:21:ab:ad:11:40:fc: 8e:35:18:a3:8c:30:78:27:c0:32:1c:66:81:ef:12:13:ac:94: 51:ea:1d:54:f9:42:42:d0:20:8b:58:06:7c:28:e0:55:7d:43: d2:02:b6:ad:b5:9c:b8:27:23:8f:20:c6:49:9c:82:a2:61:0c: 9d:84:97:61:96:0b:43:59:9a:a3:91:50:17:4a:7d:c2:1f:53: 34:e4:a3:9b:35:da:45:ba:e2:5b:f3:a9:82:94:f0:00:4f:1c: 6a:6c:f9:31:8f:e4:93:10:c2:d3:0c:b5:e2:b2:7b:d4:00:70: fa:3b:41:7c:98:f6:13:22:ef:0f:bd:5a:4a:97:ae:1c:4e:89: 25:79:97:3d:a2:30:62:51:e8:3a:6f:ca:00:63:b7:b5:b6:72: 45:96:18:47:ab:80:fd:b5:35:3f:3c:79:db:cc:04:c4:53:b4: 4f:e7:52:e6:9e:fc:c6:bd:1e:65:d8:8c:3e:48:e5:5d:a8:53: 22:07:3b:7e:9f:3a:9a:39:07:c9:d4:72:14:b4:eb:f9:16:f8: 31:0b:d0:32:68:5f:d0:79:af:d9:c4:dc:3f:f6:c5:98:cc:9e: e4:c7:be:66:7b:bf:9f:43:0b:43:31:07:20:d4:54:bb:58:76: 26:1d:01:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQWrxgsowI4iOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4 NDMwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk N2I5NmJmOTAtOWVjNS00MmQ4LWE4ZjQtMDU2ZTQ4ODFkOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu1+DzFqCplj+s1V8wPClw7Q7vArv+R87xsb EEfVOXIZ1ymzaPVCTV2qm9suId5jNjUfEN5Lv4UolldBn7Q2s+CUHfYMW9QRdY5B VzBs3zpvoN5WwNhkmFuyAM05YNSa92cfaSssK09V2GPEsjKAE8d/oS1JKmoDaljy EVvkBoLm/JCVEZVlRVQuU8iRxUZyN3lCB4nhyA1BYY33gtrTTBJIpOinoKzFLq6B GxemMwWjIYUQifnjL1nxvsjYWlCBe4BWE+espemsBeIoiokLQq0kSEOdZJz6Rdgq lW11PMpj657HAiuo3RZZeGAD3we1dnqyhESC9hwryF0udD1GnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFqDmYuduWOmKcM+givsRL9SKH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRl N2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvYmU0ZTI3YTQtNjhkOS0z NTEyLWIzZDgtODcxYTVkYTY3YTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2VkZTdiNzAtZDc0NS00MjVkLTk3 NWItYmIwZWI2MzY4NDMwLzdlZGU3YjcwLWQ3NDUtNDI1ZC05NzViLWJiMGViNjM2 ODQzMC5jcmwwHwYDVR0jBBgwFoAUQm/5Jh3Xg3bHmZYIdEhEiRGXyggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBl YjYzNjg0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPNgSVnr2oQRVtQtyGrrRFA/I41GKOMMHgnwDIcZoHvEhOslFHqHVT5 QkLQIItYBnwo4FV9Q9ICtq21nLgnI48gxkmcgqJhDJ2El2GWC0NZmqORUBdKfcIf UzTko5s12kW64lvzqYKU8ABPHGps+TGP5JMQwtMMteKye9QAcPo7QXyY9hMi7w+9 WkqXrhxOiSV5lz2iMGJR6DpvygBjt7W2ckWWGEergP21NT88edvMBMRTtE/nUuae /Ma9HmXYjD5I5V2oUyIHO36fOpo5B8nUchS06/kW+DEL0DJoX9B5r9nE3D/2xZjM nuTHvmZ7v59DC0MxByDUVLtYdiYdATg= -----END CERTIFICATE-----Generated at Wed Nov 5 18:06:06 2025 by rpki-client