$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/9e825783-6f8d-35fa-85f1-7ad5fa5740ac.roa File: 9e825783-6f8d-35fa-85f1-7ad5fa5740ac.roa (raw, json) Hash identifier: flENM/X1ukP5OLSuhzcqziJ6S08ILhlHmSckd+rhXds= Subject key identifier: 9D:BC:40:51:F9:97:CE:63:62:32:AA:71:EF:14:86:5B:CE:DA:1D:E7 Certificate issuer: /CN=13f95d00-e723-4d02-a4d7-88fe5200506c Certificate serial: 010D0C9F4328584BBF3694F9A1DFEE20F0FC74C0 Authority key identifier: A6:7D:68:B8:9B:31:85:E4:CE:33:14:66:7C:8E:62:5A:9B:00:6E:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/9e825783-6f8d-35fa-85f1-7ad5fa5740ac.roa Signing time: Tue 04 Nov 2025 10:17:04 +0000 ROA not before: Tue 04 Nov 2025 10:17:04 +0000 ROA not after: Mon 02 Feb 2026 10:17:04 +0000 asID: 153595 IP address blocks: 192.193.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/13f95d00-e723-4d02-a4d7-88fe5200506c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/13f95d00-e723-4d02-a4d7-88fe5200506c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:36:94:f9:a1:df:ee:20:f0:fc:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13f95d00-e723-4d02-a4d7-88fe5200506c Validity Not Before: Nov 4 10:17:04 2025 GMT Not After : Feb 2 10:17:04 2026 GMT Subject: CN=bc40bc84-ae8f-4ce8-8edf-d84bbc295843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:b5:55:38:ef:26:9b:fa:fa:86:6a:f3:6b: 2d:91:a2:64:11:18:d6:c4:a1:3c:3a:92:f4:25:19: 2e:7f:de:b6:28:6f:64:6b:89:f9:22:a1:a3:9f:de: f5:e3:80:99:83:cf:26:d5:d6:37:34:d9:cc:d8:42: b7:55:e5:9b:2c:f6:25:d9:d0:89:d3:20:65:ca:68: d1:14:e7:87:a9:54:d6:ed:52:3f:f6:41:14:9c:50: d0:68:b1:60:db:2d:45:21:3c:13:dc:1c:af:91:14: be:af:ce:a5:aa:12:05:56:e3:05:18:47:e5:b8:34: 2b:aa:4e:6e:c5:c0:85:e5:6c:a8:2a:e3:0b:6c:fa: ae:71:6a:01:11:1f:c2:40:8c:79:03:f8:f8:c4:67: 8e:8c:89:9a:d3:4b:6e:b0:6f:da:c0:23:7e:3f:79: 95:9f:7d:59:5e:ef:bc:ec:be:a4:65:a0:63:04:07: 0d:b1:97:98:40:ae:87:f1:5d:91:ab:62:da:8f:81: 4e:f2:4d:59:27:1b:8e:7c:b9:14:ea:d6:f1:d3:97: ab:7f:5d:6a:1b:4f:4f:c2:d6:64:5e:df:ce:fb:70: 15:69:36:1b:b6:34:c0:56:1e:7c:f6:4a:81:61:1f: 90:ff:6f:8b:d5:43:6c:25:f5:0e:c8:92:88:22:a7: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BC:40:51:F9:97:CE:63:62:32:AA:71:EF:14:86:5B:CE:DA:1D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/9e825783-6f8d-35fa-85f1-7ad5fa5740ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/13f95d00-e723-4d02-a4d7-88fe5200506c.crl X509v3 Authority Key Identifier: keyid:A6:7D:68:B8:9B:31:85:E4:CE:33:14:66:7C:8E:62:5A:9B:00:6E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c.cer sbgp-ipAddrBlock: critical IPv4: 192.193.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:00:b5:21:50:19:f5:ad:3b:50:9d:f5:40:d0:0b:a1:52:1f: d9:a1:cb:d4:b2:4e:3f:5c:cf:5f:8b:a5:40:17:85:5e:5f:be: cd:da:8f:cd:cf:ec:17:5a:0c:5d:94:20:17:41:73:ce:4b:80: 4b:7b:5a:67:4e:4d:4b:ca:d6:45:a5:06:c4:5d:d7:74:67:ca: 26:ca:8b:71:82:80:3b:2b:2c:34:f7:0f:88:d3:45:e3:d6:54: fa:c5:81:7c:ee:ee:91:46:a3:73:75:d4:ad:58:4a:69:42:0c: 8a:32:33:74:7b:f5:39:ab:8e:6a:61:f9:ed:d5:af:44:04:fc: a0:cb:94:8e:52:ac:de:25:20:0b:84:b1:6a:15:fa:23:43:cd: cd:3d:af:d3:c7:2d:b5:29:61:cd:f7:2c:5d:33:6e:ba:6c:66: 43:ab:ac:0c:f8:9c:96:51:31:78:18:c0:bf:74:e0:5e:2c:44: c1:75:2e:2f:37:68:d4:50:7d:06:f2:3c:88:0a:99:3f:1c:8b: fb:da:f6:f6:70:0b:99:88:87:b6:af:ae:65:78:bd:2f:03:1b: 73:eb:f7:74:3a:8d:9f:35:04:af:2a:64:8f:99:a9:00:51:3a: eb:f1:e7:cf:80:2b:e8:43:d0:60:42:44:35:69:5f:9d:84:31: 55:f9:10:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/NpT5od/uIPD8dMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmOTVkMDAtZTcyMy00ZDAyLWE0ZDctODhmZTUyMDA1 MDZjMB4XDTI1MTEwNDEwMTcwNFoXDTI2MDIwMjEwMTcwNFowLzEtMCsGA1UEAxMk YmM0MGJjODQtYWU4Zi00Y2U4LThlZGYtZDg0YmJjMjk1ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTu1VTjvJpv6+oZq82stkaJkERjWxKE8OpL0 JRkuf962KG9ka4n5IqGjn97144CZg88m1dY3NNnM2EK3VeWbLPYl2dCJ0yBlymjR FOeHqVTW7VI/9kEUnFDQaLFg2y1FITwT3ByvkRS+r86lqhIFVuMFGEfluDQrqk5u xcCF5WyoKuMLbPqucWoBER/CQIx5A/j4xGeOjIma00tusG/awCN+P3mVn31ZXu+8 7L6kZaBjBAcNsZeYQK6H8V2Rq2Laj4FO8k1ZJxuOfLkU6tbx05erf11qG09PwtZk Xt/O+3AVaTYbtjTAVh589kqBYR+Q/2+L1UNsJfUOyJKIIqdnhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ28QFH5l85jYjKqce8UhlvO2h3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xM2Y5 NWQwMC1lNzIzLTRkMDItYTRkNy04OGZlNTIwMDUwNmMvOWU4MjU3ODMtNmY4ZC0z NWZhLTg1ZjEtN2FkNWZhNTc0MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTNmOTVkMDAtZTcyMy00ZDAyLWE0 ZDctODhmZTUyMDA1MDZjLzEzZjk1ZDAwLWU3MjMtNGQwMi1hNGQ3LTg4ZmU1MjAw NTA2Yy5jcmwwHwYDVR0jBBgwFoAUpn1ouJsxheTOMxRmfI5iWpsAbgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xM2Y5NWQwMC1lNzIzLTRkMDItYTRkNy04OGZl NTIwMDUwNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMF7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0AtSFQGfWtO1Cd9UDQC6FSH9mhy9SyTj9cz1+LpUAXhV5fvs3aj83P 7BdaDF2UIBdBc85LgEt7WmdOTUvK1kWlBsRd13RnyibKi3GCgDsrLDT3D4jTRePW VPrFgXzu7pFGo3N11K1YSmlCDIoyM3R79Tmrjmph+e3Vr0QE/KDLlI5SrN4lIAuE sWoV+iNDzc09r9PHLbUpYc33LF0zbrpsZkOrrAz4nJZRMXgYwL904F4sRMF1Li83 aNRQfQbyPIgKmT8ci/va9vZwC5mIh7avrmV4vS8DG3Pr93Q6jZ81BK8qZI+ZqQBR Ouvx58+AK+hD0GBCRDVpX52EMVX5EBM= -----END CERTIFICATE-----Generated at Wed Nov 5 14:17:34 2025 by rpki-client