$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/813bce22-9dd7-3250-8981-49e0d8bbfd64.roa File: 813bce22-9dd7-3250-8981-49e0d8bbfd64.roa (raw, json) Hash identifier: q3vy+j9QlHOsqginBwIQhMBW3tddM4QkzQRPc3lHF3c= Subject key identifier: 56:B1:11:C9:E3:9E:9A:90:DD:C2:61:34:8A:87:C3:5C:B7:3E:BB:4E Certificate issuer: /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08 Certificate serial: 010D0C9F4328584B875B30ED3BBCF142EC3941C0 Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/813bce22-9dd7-3250-8981-49e0d8bbfd64.roa Signing time: Wed 15 Oct 2025 10:05:34 +0000 ROA not before: Wed 15 Oct 2025 10:05:34 +0000 ROA not after: Tue 13 Jan 2026 11:05:34 +0000 asID: 203963 IP address blocks: 141.195.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:5b:30:ed:3b:bc:f1:42:ec:39:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08 Validity Not Before: Oct 15 10:05:34 2025 GMT Not After : Jan 13 11:05:34 2026 GMT Subject: CN=f1ed3da1-55aa-44b3-ba17-97366bccae90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:2d:c4:35:ac:b6:c4:09:5d:e6:19:a8:0a: 95:4a:28:58:c8:0e:47:90:a7:d1:0f:1d:8a:0b:05: f1:b6:0b:eb:16:9d:1f:23:b5:80:83:c9:8d:2d:cb: d0:3f:6b:54:ae:48:2e:5c:81:d3:9a:4d:63:fb:cc: 94:12:36:27:6f:7c:1c:07:11:44:17:0f:c3:41:6e: 2c:df:c2:64:cd:77:f3:c3:3f:1b:73:c2:6f:8f:4f: a2:22:c2:8d:42:82:3e:36:f8:19:dd:7d:33:be:52: b5:87:55:99:3c:26:a6:19:ca:5e:d8:d1:4c:57:d9: 9b:63:88:9d:a8:29:2d:00:39:4e:49:67:8a:f7:38: ea:4f:60:18:47:8f:1a:2d:37:72:9e:81:35:c8:9e: 1b:99:db:c0:25:a7:e6:bd:66:02:e6:40:6a:99:ec: 76:f5:0c:2f:15:47:4a:6a:64:73:d5:da:ed:d1:34: aa:7b:14:40:69:0b:1e:5c:2a:d6:06:cb:9a:2b:b6: 58:5c:eb:2b:b6:61:d2:a8:ed:ea:3b:59:30:9a:02: d6:69:61:1a:c1:e8:2a:46:8c:85:56:d2:0f:70:5b: 6c:67:78:f3:26:56:51:5c:95:47:a0:9d:59:79:19: a4:41:56:3f:7e:66:8d:dd:c9:dc:08:e1:27:e1:14: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B1:11:C9:E3:9E:9A:90:DD:C2:61:34:8A:87:C3:5C:B7:3E:BB:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/813bce22-9dd7-3250-8981-49e0d8bbfd64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl X509v3 Authority Key Identifier: keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer sbgp-ipAddrBlock: critical IPv4: 141.195.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:21:8c:00:61:f8:f7:db:c0:02:92:f4:03:63:a0:5e:c9:74: 64:90:3b:f9:bc:8c:7a:b6:11:aa:dd:2a:84:a3:4f:63:2b:8c: 16:a1:b0:a1:74:b7:83:f9:47:2d:6e:c6:a5:33:65:1f:19:a0: 8c:4e:a3:90:49:91:9a:be:36:09:15:82:32:bb:92:3d:29:2c: fa:97:79:ae:e5:83:6d:98:52:4b:6d:e8:88:02:82:6b:7e:f5: 66:fb:1a:eb:71:bc:2e:69:97:21:1f:bb:b7:73:39:59:0a:b5: 1d:65:29:f5:c9:26:f2:19:7a:51:04:0a:63:6c:f1:64:a7:de: dd:91:04:89:ab:8b:77:2a:91:47:fc:a6:9f:90:53:1b:6d:06: 1a:79:07:4b:a1:53:cf:be:b2:bd:a3:b4:4d:a9:50:9b:8a:db: 6e:30:90:0f:3d:c7:7b:9f:e9:5f:b1:b3:1c:cc:2c:2c:56:8a: d0:5c:95:1f:da:5f:b7:8d:6f:53:88:c0:b4:f3:f7:05:7a:2e: c8:45:77:cf:66:5d:4a:25:6a:c3:16:51:6d:3b:38:d9:bb:24: bd:63:52:24:4f:0e:97:90:a1:4a:1a:c0:d1:48:ea:7b:18:87: fa:3c:6f:4e:95:d4:a3:32:c2:39:54:bd:e2:02:f9:fe:f4:b8: c9:18:35:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHWzDtO7zxQuw5QcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1OGIyZDctZGI5MC00ZTE2LWE1NWMtMWRlNjI5ZjJj YTA4MB4XDTI1MTAxNTEwMDUzNFoXDTI2MDExMzExMDUzNFowLzEtMCsGA1UEAxMk ZjFlZDNkYTEtNTVhYS00NGIzLWJhMTctOTczNjZiY2NhZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB0txDWstsQJXeYZqAqVSihYyA5HkKfRDx2K CwXxtgvrFp0fI7WAg8mNLcvQP2tUrkguXIHTmk1j+8yUEjYnb3wcBxFEFw/DQW4s 38JkzXfzwz8bc8Jvj0+iIsKNQoI+NvgZ3X0zvlK1h1WZPCamGcpe2NFMV9mbY4id qCktADlOSWeK9zjqT2AYR48aLTdynoE1yJ4bmdvAJafmvWYC5kBqmex29QwvFUdK amRz1drt0TSqexRAaQseXCrWBsuaK7ZYXOsrtmHSqO3qO1kwmgLWaWEawegqRoyF VtIPcFtsZ3jzJlZRXJVHoJ1ZeRmkQVY/fmaN3cncCOEn4RTfYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaxEcnjnpqQ3cJhNIqHw1y3PrtOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNzU4 YjJkNy1kYjkwLTRlMTYtYTU1Yy0xZGU2MjlmMmNhMDgvODEzYmNlMjItOWRkNy0z MjUwLTg5ODEtNDllMGQ4YmJmZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzc1OGIyZDctZGI5MC00ZTE2LWE1 NWMtMWRlNjI5ZjJjYTA4L2M3NThiMmQ3LWRiOTAtNGUxNi1hNTVjLTFkZTYyOWYy Y2EwOC5jcmwwHwYDVR0jBBgwFoAUDmCzSifD5DV2KMoQViGQ2iXNZdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNzU4YjJkNy1kYjkwLTRlMTYtYTU1Yy0xZGU2 MjlmMmNhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0hjABh+PfbwAKS9ANjoF7JdGSQO/m8jHq2EardKoSjT2MrjBahsKF0 t4P5Ry1uxqUzZR8ZoIxOo5BJkZq+NgkVgjK7kj0pLPqXea7lg22YUktt6IgCgmt+ 9Wb7GutxvC5plyEfu7dzOVkKtR1lKfXJJvIZelEECmNs8WSn3t2RBImri3cqkUf8 pp+QUxttBhp5B0uhU8++sr2jtE2pUJuK224wkA89x3uf6V+xsxzMLCxWitBclR/a X7eNb1OIwLTz9wV6LshFd89mXUolasMWUW07ONm7JL1jUiRPDpeQoUoawNFI6nsY h/o8b06V1KMywjlUveIC+f70uMkYNaM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:12:29 2025 by rpki-client