$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01501f71-b377-378b-b0a2-7d61f5b73039.roa File: 01501f71-b377-378b-b0a2-7d61f5b73039.roa (raw, json) Hash identifier: O/zFyEA8uvUvcEyspY++9+WjjyZ1s7VxX/U5BKrvZqw= Subject key identifier: 2B:C1:C7:A8:49:04:24:E7:FD:B0:75:74:DD:21:E2:03:5A:37:BA:75 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26E5AA91248B71CEDD10C780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01501f71-b377-378b-b0a2-7d61f5b73039.roa Signing time: Wed 10 Sep 2025 20:51:10 +0000 ROA not before: Wed 10 Sep 2025 20:51:10 +0000 ROA not after: Tue 09 Dec 2025 21:51:10 +0000 asID: 54253 IP address blocks: 194.195.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:e5:aa:91:24:8b:71:ce:dd:10:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 20:51:10 2025 GMT Not After : Dec 9 21:51:10 2025 GMT Subject: CN=2d95c697-132c-4a1e-96bf-48599ce41744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:0b:90:d2:28:f9:06:0e:60:64:8b:de:4e: 0e:d8:df:a6:bb:c4:f6:22:08:75:5b:aa:6b:6f:51: bb:30:81:34:a7:c1:01:a6:1c:b2:32:e7:36:44:2d: 42:4c:1c:78:89:ac:58:fb:60:4a:57:93:39:eb:b3: b4:ac:df:0a:ea:d3:f5:d2:9d:57:06:54:29:bc:e6: 35:21:0a:18:a7:1b:10:69:27:78:d5:20:cb:a7:5e: 36:0c:89:26:d0:48:b9:cc:95:e0:e4:12:14:d7:62: 68:84:7d:e8:e6:1c:14:a7:b7:ab:52:66:75:8c:06: e7:ee:60:03:a5:bf:2f:b2:90:5f:a2:df:a6:c1:3f: a4:13:eb:5d:3d:61:13:f9:14:47:f9:c8:4e:84:0d: a0:48:d7:de:24:17:bf:44:c7:6e:86:49:bd:c2:fe: c7:1b:97:1f:74:02:78:bc:1a:b1:ab:be:9b:66:4b: d1:23:29:75:65:71:ca:cc:02:4d:15:86:90:aa:35: f1:ac:d2:18:bd:f2:77:f8:11:50:1b:3e:2a:63:66: d3:04:f9:cd:b8:76:f5:63:02:dc:4f:fc:64:3a:99: 60:77:5b:7b:16:4b:18:df:16:83:8e:1c:f2:b5:8b: 32:1c:20:9a:e6:7d:f8:58:db:69:f0:d4:8f:28:e6: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C1:C7:A8:49:04:24:E7:FD:B0:75:74:DD:21:E2:03:5A:37:BA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/01501f71-b377-378b-b0a2-7d61f5b73039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 194.195.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1f:b6:c1:df:87:65:ab:9e:53:a0:56:a1:54:b5:b9:32:46: 2b:1c:47:c8:47:31:72:ca:b5:d3:d3:15:f6:ce:28:45:33:ad: b8:94:32:04:4c:59:a4:53:88:86:21:5a:ef:bb:0e:dc:43:b6: 40:50:97:b0:f9:19:dd:1c:95:88:e6:18:74:bd:ed:de:92:59: a7:15:7e:07:05:20:61:63:56:91:d1:d3:f7:ba:aa:cc:36:89: 98:de:e4:06:55:33:b7:f0:57:3f:fd:25:40:fc:20:56:62:18: f2:1a:cb:5c:65:c2:22:2f:c1:47:cb:0b:93:3d:b8:4a:7b:71: 2b:a1:e1:25:1d:01:60:dc:83:80:7b:82:80:2d:f6:d3:62:d5: fe:96:bf:9c:86:b4:cb:aa:0d:6a:5a:71:b6:3e:a0:19:2c:ee: 08:00:df:c3:71:50:ca:56:2a:de:12:78:70:cb:80:2c:55:b8: ed:13:a5:66:2c:ac:66:0e:3f:06:63:f4:b7:ba:24:15:08:3e: 8b:19:3b:ed:39:ae:9b:86:51:44:7e:73:b7:32:5c:34:ea:7e: fc:4d:c2:92:52:93:33:78:8f:44:a1:83:c5:ab:8e:32:64:c1: 93:d7:14:2c:29:aa:56:cc:e4:16:fe:89:69:3c:8a:30:f2:8b: 49:f0:7e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsm5aqRJItxzt0Qx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIwNTExMFoXDTI1MTIwOTIxNTExMFowLzEtMCsGA1UEAxMk MmQ5NWM2OTctMTMyYy00YTFlLTk2YmYtNDg1OTljZTQxNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS0LkNIo+QYOYGSL3k4O2N+mu8T2Igh1W6pr b1G7MIE0p8EBphyyMuc2RC1CTBx4iaxY+2BKV5M567O0rN8K6tP10p1XBlQpvOY1 IQoYpxsQaSd41SDLp142DIkm0Ei5zJXg5BIU12JohH3o5hwUp7erUmZ1jAbn7mAD pb8vspBfot+mwT+kE+tdPWET+RRH+chOhA2gSNfeJBe/RMduhkm9wv7HG5cfdAJ4 vBqxq76bZkvRIyl1ZXHKzAJNFYaQqjXxrNIYvfJ3+BFQGz4qY2bTBPnNuHb1YwLc T/xkOplgd1t7FksY3xaDjhzytYsyHCCa5n34WNtp8NSPKObQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvBx6hJBCTn/bB1dN0h4gNaN7p1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDE1MDFmNzEtYjM3Ny0z NzhiLWIwYTItN2Q2MWY1YjczMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwsPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAftsHfh2WrnlOgVqFUtbkyRiscR8hHMXLKtdPTFfbOKEUzrbiUMgRM WaRTiIYhWu+7DtxDtkBQl7D5Gd0clYjmGHS97d6SWacVfgcFIGFjVpHR0/e6qsw2 iZje5AZVM7fwVz/9JUD8IFZiGPIay1xlwiIvwUfLC5M9uEp7cSuh4SUdAWDcg4B7 goAt9tNi1f6Wv5yGtMuqDWpacbY+oBks7ggA38NxUMpWKt4SeHDLgCxVuO0TpWYs rGYOPwZj9Le6JBUIPosZO+05rpuGUUR+c7cyXDTqfvxNwpJSkzN4j0Shg8WrjjJk wZPXFCwpqlbM5Bb+iWk8ijDyi0nwfhk= -----END CERTIFICATE-----Generated at Thu Oct 9 03:14:02 2025 by rpki-client