$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa File: 48a21514-9b84-3789-b983-3138fee23ce0.roa (raw, json) Hash identifier: 3Uxer09KuZ3QQC2fECr9Q+JP51J6B/flwhKoDSSgJCI= Subject key identifier: B5:49:92:EE:CC:99:53:CC:83:C6:2D:2B:92:43:7D:C1:E9:96:0E:71 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584BB88D2088B8044A0FCF798E00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 54994 IP address blocks: 168.235.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:20:88:b8:04:4a:0f:cf:79:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=fc002643-cac4-4dd3-a3ea-05a538431c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:d6:38:e3:fd:c6:e1:75:8d:70:7a:5d:f5: 97:20:9a:43:e9:44:30:11:88:87:10:db:93:93:66: 3a:fb:00:36:08:b7:7b:7f:22:8e:fa:83:a2:88:26: 02:54:6e:47:da:2e:bc:eb:bf:31:20:5d:66:b2:e5: be:b6:f0:ff:f4:38:3d:3b:ea:bc:62:68:8a:46:9d: 70:5c:86:c4:5e:c7:a9:cc:3f:34:8b:da:54:04:81: de:1b:32:78:3f:c5:77:a5:c6:fe:87:57:15:ab:86: 69:8d:0e:32:6f:eb:06:f4:f4:76:9a:a8:06:11:ba: c8:39:d1:9e:d4:57:3b:c5:1f:43:6f:f6:14:57:73: 5e:a9:10:89:fb:d8:5d:66:64:99:fd:52:05:f5:1b: c3:61:19:c4:bf:48:18:de:7c:9c:05:f1:56:a5:23: 3a:3f:d3:97:3e:08:29:12:35:cd:ed:9a:1f:ba:df: e3:6f:5c:c9:86:b5:37:7a:fd:d3:d5:bf:4e:af:ab: ad:16:c0:f1:cd:3b:50:a2:10:73:fe:b7:ff:9f:97: c7:df:73:f7:65:99:f2:da:60:a3:1a:a8:1a:09:fd: 1b:b5:64:e6:f2:35:66:f9:16:22:75:08:e7:d0:ce: bf:13:13:c7:a8:c5:a9:96:aa:16:f2:f4:96:40:4f: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:49:92:EE:CC:99:53:CC:83:C6:2D:2B:92:43:7D:C1:E9:96:0E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 168.235.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:84:ad:75:01:fc:25:62:6e:6c:e9:cb:f0:93:10:7f:5f:38: 9d:dd:58:b2:83:56:96:7e:f8:f9:6e:e1:06:00:37:64:c1:4c: 34:31:73:a1:7f:b2:75:d8:69:4c:6b:19:af:9a:07:82:79:d2: c7:c8:90:e1:29:fb:d2:0c:b8:87:f0:2d:c7:6a:86:04:c4:35: e7:17:e9:79:29:dd:ff:2e:cd:c7:ff:54:dc:6d:a0:0b:87:b5: bb:8b:6b:7e:78:38:ab:ee:51:e9:1d:e8:6f:a4:20:6a:9c:6e: 2c:d5:68:8c:0f:44:a6:fa:a2:62:f5:5c:61:af:5f:e9:b3:c4: 86:a6:f4:7a:07:53:ca:c1:13:2a:40:e8:8f:6f:54:ad:41:8d: 56:cb:a7:3c:f6:2d:ef:b3:5e:a9:47:0c:fb:46:65:d9:64:07: d7:00:0d:47:44:6f:93:8e:3f:82:60:1f:61:fc:64:e7:b9:73: e3:d8:cc:de:29:31:d7:45:7c:9f:10:f5:d6:2d:7f:cc:4b:c0: 52:38:bf:4c:f8:78:07:f8:8e:84:66:c2:71:12:17:1b:c6:81: d9:a6:ea:bf:8e:63:4e:40:e4:b8:59:3e:65:b1:49:ee:9f:d8: 09:18:ce:d1:56:d7:27:89:b3:11:ff:54:4f:d2:6a:2d:5e:e4: 77:3e:ce:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSCIuARKD895jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZmMwMDI2NDMtY2FjNC00ZGQzLWEzZWEtMDVhNTM4NDMxYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw7WOOP9xuF1jXB6XfWXIJpD6UQwEYiHENuT k2Y6+wA2CLd7fyKO+oOiiCYCVG5H2i68678xIF1msuW+tvD/9Dg9O+q8YmiKRp1w XIbEXsepzD80i9pUBIHeGzJ4P8V3pcb+h1cVq4ZpjQ4yb+sG9PR2mqgGEbrIOdGe 1Fc7xR9Db/YUV3NeqRCJ+9hdZmSZ/VIF9RvDYRnEv0gY3nycBfFWpSM6P9OXPggp EjXN7Zofut/jb1zJhrU3ev3T1b9Or6utFsDxzTtQohBz/rf/n5fH33P3ZZny2mCj GqgaCf0btWTm8jVm+RYidQjn0M6/ExPHqMWplqoW8vSWQE+5DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVJku7MmVPMg8YtK5JDfcHplg5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNDhhMjE1MTQtOWI4NC0z Nzg5LWI5ODMtMzEzOGZlZTIzY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6ErXUB/CVibmzpy/CTEH9fOJ3dWLKDVpZ++Plu4QYAN2TBTDQxc6F/ snXYaUxrGa+aB4J50sfIkOEp+9IMuIfwLcdqhgTENecX6Xkp3f8uzcf/VNxtoAuH tbuLa354OKvuUekd6G+kIGqcbizVaIwPRKb6omL1XGGvX+mzxIam9HoHU8rBEypA 6I9vVK1BjVbLpzz2Le+zXqlHDPtGZdlkB9cADUdEb5OOP4JgH2H8ZOe5c+PYzN4p MddFfJ8Q9dYtf8xLwFI4v0z4eAf4joRmwnESFxvGgdmm6r+OY05A5LhZPmWxSe6f 2AkYztFW1yeJsxH/VE/Sai1e5Hc+zj4= -----END CERTIFICATE-----Generated at Wed Nov 5 06:27:38 2025 by rpki-client