$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/436bb959-c752-3693-8050-3b420f947125.roa File: 436bb959-c752-3693-8050-3b420f947125.roa (raw, json) Hash identifier: ApDZiXWW4xDHVAy02N0W+TkJ2PavSzvSbFQLsU+6vQk= Subject key identifier: C3:AB:8A:B3:ED:C5:D4:D5:1A:82:49:BC:3A:7F:68:52:EC:92:92:5D Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584B2A2C38766184D17183A84B90 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/436bb959-c752-3693-8050-3b420f947125.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 141.193.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:38:76:61:84:d1:71:83:a8:4b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=1ffc1926-93dd-4874-89e7-c115366b9bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b5:dc:2a:4c:1e:43:d2:e0:fd:fa:f4:6c:01: 7d:17:35:86:8b:42:f9:18:df:07:cb:c0:3d:78:47: c8:26:1a:b4:95:76:ba:97:a6:03:a0:ad:ea:c6:25: ce:b2:cc:d7:c5:f3:0a:32:26:d4:a4:94:80:11:58: 2d:4e:ad:55:21:da:bd:7c:93:d8:9a:67:a8:c8:aa: 97:54:40:08:ea:7e:6f:79:4f:09:8d:7c:6f:b6:21: 26:78:5a:4d:10:6e:cd:d2:2a:a8:8e:7a:e1:b1:9e: 37:b0:c6:6d:6c:48:8d:44:43:07:cd:fb:0f:2e:bd: a2:4c:e6:52:4c:d5:b8:72:4a:a3:31:b3:99:c6:77: 68:8d:8f:dc:a8:4e:ba:a9:05:12:76:e1:3d:65:ec: 4b:2f:14:64:ba:f6:5f:af:c5:f7:7c:a9:38:42:30: b1:06:10:b1:c0:4b:05:32:b2:a6:cb:0c:1c:67:fe: d0:9b:ba:fd:1c:fd:61:a7:87:66:7f:23:8b:9f:f5: 5c:c9:20:41:36:ba:84:aa:23:4b:ee:dd:79:b4:54: d8:ad:2b:72:b3:0b:5b:e7:9b:1f:3b:63:fc:7c:42: 2a:63:af:c8:0a:4e:c1:6e:f3:c2:9e:ef:04:7b:e7: ad:34:40:79:10:ec:a6:d9:de:4b:02:83:b3:df:30: 48:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AB:8A:B3:ED:C5:D4:D5:1A:82:49:BC:3A:7F:68:52:EC:92:92:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/436bb959-c752-3693-8050-3b420f947125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 141.193.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:58:29:7f:60:9b:96:2f:c0:41:48:b4:c0:60:d7:99:91:40: 1d:c0:99:ec:a6:01:b4:67:43:8a:bd:58:0a:6e:48:26:e1:96: 65:db:cd:d7:01:f2:f2:86:62:ca:92:24:ec:85:5c:fd:86:b5: 61:bb:9f:2d:60:5e:02:d7:cf:f1:3e:77:98:84:36:58:69:d9: 27:25:cd:3b:23:7c:fd:f1:81:06:16:9d:76:88:8a:73:21:fd: 80:af:de:08:3b:fa:2c:28:48:4c:59:9a:84:ad:8d:e3:ff:9c: 15:23:35:55:65:5b:d9:89:50:3f:b2:c7:9e:de:1d:12:37:3c: 59:c8:b9:7f:23:a0:7d:e8:55:a5:f6:bc:15:5b:06:8b:cd:04: 9c:ab:ae:8a:10:94:52:21:73:d5:79:7b:86:13:5d:7d:51:07: e7:a5:8a:8d:a3:cd:7e:7d:f5:80:5d:c1:96:91:ab:e4:50:d5: 3d:17:e0:9b:3e:6f:26:6a:b4:e3:c0:b7:b8:01:90:93:60:d8: c4:71:66:d2:7a:91:99:51:4d:8e:b6:ca:ed:3a:39:10:f2:4f: fa:9a:6c:dd:a8:73:8e:3c:18:e2:17:8c:fd:03:f2:8b:3f:83: 17:02:87:42:d3:b5:e8:c7:09:2b:e6:af:5b:1b:78:e5:0c:4b: d0:63:e3:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDh2YYTRcYOoS5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MWZmYzE5MjYtOTNkZC00ODc0LTg5ZTctYzExNTM2NmI5YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLXcKkweQ9Lg/fr0bAF9FzWGi0L5GN8Hy8A9 eEfIJhq0lXa6l6YDoK3qxiXOsszXxfMKMibUpJSAEVgtTq1VIdq9fJPYmmeoyKqX VEAI6n5veU8JjXxvtiEmeFpNEG7N0iqojnrhsZ43sMZtbEiNREMHzfsPLr2iTOZS TNW4ckqjMbOZxndojY/cqE66qQUSduE9ZexLLxRkuvZfr8X3fKk4QjCxBhCxwEsF MrKmywwcZ/7Qm7r9HP1hp4dmfyOLn/VcySBBNrqEqiNL7t15tFTYrStyswtb55sf O2P8fEIqY6/ICk7BbvPCnu8Ee+etNEB5EOym2d5LAoOz3zBIaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOrirPtxdTVGoJJvDp/aFLskpJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvNDM2YmI5NTktYzc1Mi0z NjkzLTgwNTAtM2I0MjBmOTQ3MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVYKX9gm5YvwEFItMBg15mRQB3AmeymAbRnQ4q9WApuSCbhlmXbzdcB 8vKGYsqSJOyFXP2GtWG7ny1gXgLXz/E+d5iENlhp2SclzTsjfP3xgQYWnXaIinMh /YCv3gg7+iwoSExZmoStjeP/nBUjNVVlW9mJUD+yx57eHRI3PFnIuX8joH3oVaX2 vBVbBovNBJyrrooQlFIhc9V5e4YTXX1RB+elio2jzX599YBdwZaRq+RQ1T0X4Js+ byZqtOPAt7gBkJNg2MRxZtJ6kZlRTY62yu06ORDyT/qabN2oc448GOIXjP0D8os/ gxcCh0LTtejHCSvmr1sbeOUMS9Bj40k= -----END CERTIFICATE-----Generated at Mon Oct 20 16:24:49 2025 by rpki-client