$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa File: 7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa (raw, json) Hash identifier: 2WFT+rQc1DwSPXliG7bKJcWtTd0AgoJpTa7DB4xRECU= Subject key identifier: 47:D0:54:88:C3:70:D3:C9:39:7A:3A:99:6B:AB:9C:51:DA:19:88:E1 Certificate issuer: /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec Certificate serial: 010D0C9F4328584BAA97A270EEBF274AAB738E20 Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 7018 IP address blocks: 141.195.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a2:70:ee:bf:27:4a:ab:73:8e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=a31e239f-e1f6-4fd5-a70d-d982373bc79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:c0:66:46:df:1f:47:32:47:58:81:6b:59: 73:8f:16:47:3e:99:03:dd:18:32:02:c2:63:2a:3c: 8a:68:f6:47:d8:97:25:1c:38:2f:e2:90:43:0d:e2: 11:62:d3:fa:d4:1e:d8:84:3a:aa:81:65:ad:77:2b: f8:7c:4a:af:20:b8:01:94:13:16:9d:db:dc:fd:e0: f3:03:0c:23:b7:84:0a:19:ae:ee:ad:0e:b9:ce:e8: b2:5f:0b:32:71:0e:ec:f4:d1:5e:a6:b5:5d:26:74: 1f:80:59:ab:ff:dc:8b:93:fd:5f:56:0c:6e:28:dd: ed:e6:30:37:37:1c:20:dc:4f:c1:ef:22:04:5e:66: d1:a2:2b:40:c9:70:a4:ec:16:7b:2b:74:bc:17:e8: a5:67:b2:aa:5a:1a:72:3b:5a:c8:c4:44:35:8d:90: af:b7:7c:7c:df:33:3d:2e:bf:62:65:40:75:7d:d6: a1:79:b5:d4:77:f1:fa:75:5e:67:c3:37:f1:67:49: b2:a6:6d:a7:2f:47:f4:ec:a5:91:a1:dc:57:fb:09: 7c:e4:f2:bb:27:15:b0:c1:89:cb:79:81:66:48:8b: f0:e2:7d:db:1c:1c:2a:8b:dc:24:eb:b2:ba:e9:f1: a0:1c:eb:47:31:e6:40:33:8b:4b:6a:74:4f:5e:56: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D0:54:88:C3:70:D3:C9:39:7A:3A:99:6B:AB:9C:51:DA:19:88:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl X509v3 Authority Key Identifier: keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer sbgp-ipAddrBlock: critical IPv4: 141.195.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:02:17:91:4c:75:24:49:4a:cd:f7:80:77:2a:5d:b4:63:f7: a6:e4:f9:ad:7b:60:6c:ce:eb:c8:67:e2:e1:c6:9c:67:60:63: 6c:5f:56:9e:e6:a7:3e:3d:31:18:ad:ea:48:f5:23:73:cb:09: bb:58:5d:ae:b4:6e:d1:67:e8:3a:90:9b:ec:48:56:5d:17:a0: 7e:15:8c:ec:71:96:39:f9:5f:dd:b6:a8:30:43:7e:32:9e:9b: c5:3d:2b:25:94:26:23:fc:2a:01:50:6f:0f:14:d3:2f:a2:4b: e9:c5:5b:a9:5b:a0:83:49:11:1e:d0:a1:84:b8:07:d4:01:85: d6:d3:d6:c5:07:f9:05:36:e6:ee:76:d4:6e:10:c0:1d:6c:73: 2e:69:b8:e1:a4:c7:91:a6:74:4b:8c:2f:65:3c:17:fc:fb:88: 47:40:3e:3e:fc:7d:57:fe:a4:06:4b:d1:3e:db:e0:44:3a:b0: 96:74:03:42:eb:5f:42:df:db:2e:b8:88:56:1c:48:77:90:83: 21:23:c2:49:84:95:19:86:9a:9f:22:ce:c9:be:a8:7c:a0:63: cb:e1:2f:17:07:cb:00:ae:aa:91:c9:8c:7b:33:dd:e9:13:d1: d6:ee:28:f9:3d:f3:df:b8:80:32:35:8e:be:05:1f:83:99:66: 50:9e:1a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6Jw7r8nSqtzjiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYy OWVjMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YTMxZTIzOWYtZTFmNi00ZmQ1LWE3MGQtZDk4MjM3M2JjNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF3AZkbfH0cyR1iBa1lzjxZHPpkD3RgyAsJj KjyKaPZH2JclHDgv4pBDDeIRYtP61B7YhDqqgWWtdyv4fEqvILgBlBMWndvc/eDz Awwjt4QKGa7urQ65zuiyXwsycQ7s9NFeprVdJnQfgFmr/9yLk/1fVgxuKN3t5jA3 Nxwg3E/B7yIEXmbRoitAyXCk7BZ7K3S8F+ilZ7KqWhpyO1rIxEQ1jZCvt3x83zM9 Lr9iZUB1fdahebXUd/H6dV5nwzfxZ0mypm2nL0f07KWRodxX+wl85PK7JxWwwYnL eYFmSIvw4n3bHBwqi9wk67K66fGgHOtHMeZAM4tLanRPXlY7jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfQVIjDcNPJOXo6mWurnFHaGYjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWU5 MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvN2M2OGYxZWUtNzlmZi0z MGFhLWIwZTgtZTkwZmIwYWYzZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFlOTE5MjgtMzVjZi00NmVkLWJm ODctOTJkOWJmZDYyOWVjLzhhZTkxOTI4LTM1Y2YtNDZlZC1iZjg3LTkyZDliZmQ2 MjllYy5jcmwwHwYDVR0jBBgwFoAU2TQRwLPFpEBlZAHjBJjcizLXl+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5 YmZkNjI5ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEECF5FMdSRJSs33gHcqXbRj96bk+a17YGzO68hn4uHGnGdgY2xfVp7m pz49MRit6kj1I3PLCbtYXa60btFn6DqQm+xIVl0XoH4VjOxxljn5X922qDBDfjKe m8U9KyWUJiP8KgFQbw8U0y+iS+nFW6lboINJER7QoYS4B9QBhdbT1sUH+QU25u52 1G4QwB1scy5puOGkx5GmdEuML2U8F/z7iEdAPj78fVf+pAZL0T7b4EQ6sJZ0A0Lr X0Lf2y64iFYcSHeQgyEjwkmElRmGmp8izsm+qHygY8vhLxcHywCuqpHJjHsz3ekT 0dbuKPk989+4gDI1jr4FH4OZZlCeGg8= -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:55 2025 by rpki-client