$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/d43aed7a-207d-3fc7-945a-92ca85a7ac8d.roa File: d43aed7a-207d-3fc7-945a-92ca85a7ac8d.roa (raw, json) Hash identifier: wHEIk6q0aA7x5lST7jTVmrrWZmp1F/2e8w81P4Qgz50= Subject key identifier: 1A:0B:CF:EB:FB:54:88:8E:7A:15:5D:8B:F9:4E:FE:8A:BC:0B:6D:37 Certificate issuer: /CN=1b8f9be3-65c4-421d-a760-278a00443898 Certificate serial: 010D0C9F4328584B2A2C2E20629C32E1197ABF38 Authority key identifier: 7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/d43aed7a-207d-3fc7-945a-92ca85a7ac8d.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 63020 IP address blocks: 141.193.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:2e:20:62:9c:32:e1:19:7a:bf:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b8f9be3-65c4-421d-a760-278a00443898 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=3e6424f9-e836-4eaa-9f16-c386c717c884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:30:40:29:eb:40:77:ab:6f:42:f8:df:d1:bc: eb:f9:75:1a:86:aa:1b:67:69:b6:d9:f0:5e:a7:93: 88:7e:61:33:56:18:1b:75:01:bb:08:f5:87:4a:b6: 31:fe:96:1e:a7:67:89:ba:7e:43:17:3c:79:48:1e: 64:99:95:11:41:a8:6b:e5:82:0f:aa:9a:58:a4:06: 0b:ae:9f:33:5a:a6:bc:d6:63:f5:ba:d4:2b:21:dd: 78:23:e4:fa:1a:4a:0c:a6:19:74:2e:56:64:a1:e9: 02:50:8d:0f:dc:b4:b4:c0:47:78:09:ad:d6:09:56: 3e:e8:d1:55:8c:1d:b3:d8:36:4b:da:50:85:a5:18: a0:da:66:19:35:6a:06:b8:d0:3c:62:70:cc:80:83: c7:1c:af:71:39:f6:0a:6e:8f:49:46:cf:6a:60:7a: a0:5c:8f:5e:84:9b:f3:ae:0d:76:3e:09:0b:05:52: 2d:9d:69:dc:e3:47:55:14:71:b2:c0:00:b7:f9:3f: ed:63:53:bb:64:5e:66:63:5a:3e:0f:df:f2:c2:bf: 70:78:d5:a5:e0:ae:23:b6:45:e2:fe:dd:8d:da:b4: 3f:c1:e5:2f:e0:ac:54:77:fd:30:82:3a:cc:2b:4e: 5b:76:68:89:79:19:16:80:3e:10:fd:03:6c:97:38: 40:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0B:CF:EB:FB:54:88:8E:7A:15:5D:8B:F9:4E:FE:8A:BC:0B:6D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/d43aed7a-207d-3fc7-945a-92ca85a7ac8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.crl X509v3 Authority Key Identifier: keyid:7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer sbgp-ipAddrBlock: critical IPv4: 141.193.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e0:fd:cb:f8:2c:c7:f2:9e:79:df:3a:55:7a:c0:4c:d3:ff: db:b0:6b:9f:bd:51:11:f1:52:0c:ba:2d:7c:c4:cd:54:43:9f: 69:6e:91:df:e6:98:5c:49:5a:57:56:a6:18:a2:40:c0:5e:b7: c2:e5:8d:2b:06:91:0d:82:b3:6f:24:95:54:a9:00:9b:00:44: d4:86:78:ea:f2:ef:ee:b8:a1:f2:c4:91:5c:b0:91:ce:a7:0b: a5:44:cc:76:91:de:ee:f7:67:27:d9:90:03:51:2b:9a:ac:1d: 97:b8:69:0d:da:a3:2a:32:21:89:52:76:45:ac:ba:33:9e:1a: e1:ea:9d:15:ba:95:88:0d:d1:6a:87:c7:e4:ec:be:fc:2b:e6: 6c:d0:8e:c7:5b:9b:be:fd:ae:e5:19:3a:37:08:a9:79:9f:de: de:32:4b:d9:37:94:9c:5d:79:b6:1f:ad:56:d9:9f:35:fb:19: 6d:69:1a:b6:4f:23:15:3e:5b:3c:b5:44:5e:5c:58:22:39:57: 71:db:7d:a2:1b:ff:2e:b9:ef:b8:b9:e8:a1:64:b1:c0:fd:c2: f7:ce:7e:8b:e0:07:c0:a5:83:ba:52:66:0e:99:f2:5f:4e:1b: f2:7a:26:62:46:ad:f8:fd:27:96:bd:4f:ef:be:44:71:3d:0f: e5:00:87:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLC4gYpwy4Rl6vzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI4ZjliZTMtNjVjNC00MjFkLWE3NjAtMjc4YTAwNDQz ODk4MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk M2U2NDI0ZjktZTgzNi00ZWFhLTlmMTYtYzM4NmM3MTdjODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjBAKetAd6tvQvjf0bzr+XUahqobZ2m22fBe p5OIfmEzVhgbdQG7CPWHSrYx/pYep2eJun5DFzx5SB5kmZURQahr5YIPqppYpAYL rp8zWqa81mP1utQrId14I+T6GkoMphl0LlZkoekCUI0P3LS0wEd4Ca3WCVY+6NFV jB2z2DZL2lCFpRig2mYZNWoGuNA8YnDMgIPHHK9xOfYKbo9JRs9qYHqgXI9ehJvz rg12PgkLBVItnWnc40dVFHGywAC3+T/tY1O7ZF5mY1o+D9/ywr9weNWl4K4jtkXi /t2N2rQ/weUv4KxUd/0wgjrMK05bdmiJeRkWgD4Q/QNslzhAmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoLz+v7VIiOehVdi/lO/oq8C203MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjhm OWJlMy02NWM0LTQyMWQtYTc2MC0yNzhhMDA0NDM4OTgvZDQzYWVkN2EtMjA3ZC0z ZmM3LTk0NWEtOTJjYTg1YTdhYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWI4ZjliZTMtNjVjNC00MjFkLWE3 NjAtMjc4YTAwNDQzODk4LzFiOGY5YmUzLTY1YzQtNDIxZC1hNzYwLTI3OGEwMDQ0 Mzg5OC5jcmwwHwYDVR0jBBgwFoAUe/8Ga0q7y+M3pEmAdD6z9wvWxRswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjhmOWJlMy02NWM0LTQyMWQtYTc2MC0yNzhh MDA0NDM4OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcGSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALg/cv4LMfynnnfOlV6wEzT/9uwa5+9URHxUgy6LXzEzVRDn2lukd/m mFxJWldWphiiQMBet8LljSsGkQ2Cs28klVSpAJsARNSGeOry7+64ofLEkVywkc6n C6VEzHaR3u73ZyfZkANRK5qsHZe4aQ3aoyoyIYlSdkWsujOeGuHqnRW6lYgN0WqH x+Tsvvwr5mzQjsdbm779ruUZOjcIqXmf3t4yS9k3lJxdebYfrVbZnzX7GW1pGrZP IxU+Wzy1RF5cWCI5V3HbfaIb/y6577i56KFkscD9wvfOfovgB8Clg7pSZg6Z8l9O G/J6JmJGrfj9J5a9T+++RHE9D+UAh/E= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:46 2025 by rpki-client