$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/89cb74d1-7e77-329d-a801-eadfe71b0df2.roa File: 89cb74d1-7e77-329d-a801-eadfe71b0df2.roa (raw, json) Hash identifier: t+yv0ZT8wMi1/cgCqzwV/WlohP8E+AH7zX7kjoGJiU8= Subject key identifier: C2:B6:91:2F:EF:E9:C5:2C:99:44:70:34:0D:4C:A7:41:79:5A:06:FB Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07BEB6527A27D076B9F980 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/89cb74d1-7e77-329d-a801-eadfe71b0df2.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 141.193.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:be:b6:52:7a:27:d0:76:b9:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=e1cdd1df-39c1-4bd8-8e5e-d07d49d99f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:a9:c9:d1:3b:cd:1f:9b:14:ce:bc:b6:38: df:b7:b4:09:5f:cb:86:e6:18:9f:8b:87:ec:b0:6a: a4:92:3b:33:b7:28:5b:b7:be:92:4f:5a:b9:6f:8e: b3:dd:e1:7f:94:89:dd:d2:2f:fb:79:43:62:46:02: 7b:b4:6f:5d:d0:3f:5e:5c:be:b2:51:d9:9e:90:7a: 2e:dc:3c:6e:5c:44:b2:9d:c8:1f:b8:04:4c:18:ca: f2:20:16:d7:7e:10:d1:04:ca:7f:e6:70:b4:9a:42: 12:a7:c1:45:27:3c:07:4e:e6:89:ec:70:b8:57:34: ba:e5:69:c6:19:c4:66:0a:04:de:fa:4e:d0:e1:cd: d1:4d:93:4c:d6:a0:be:fa:14:17:96:67:32:9c:1e: 2c:38:43:17:2d:1c:c4:0c:2d:cb:08:fc:49:8f:50: 28:a5:de:a7:e5:5b:fd:b6:cd:90:4b:ee:a7:e7:f5: 05:b5:83:5a:1c:60:60:eb:c8:fe:27:f1:44:3a:c1: 8a:2f:58:d9:7a:09:c4:dd:02:41:6a:cf:e6:d2:ae: 47:39:80:b5:84:0d:10:9b:75:74:ca:5b:ff:94:e5: 22:4e:41:55:b8:65:bf:3d:9a:e5:45:1c:92:20:a1: 22:9c:e1:2d:9a:05:75:81:94:fe:b8:c0:cc:9e:f5: b1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B6:91:2F:EF:E9:C5:2C:99:44:70:34:0D:4C:A7:41:79:5A:06:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/89cb74d1-7e77-329d-a801-eadfe71b0df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 141.193.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4e:49:7a:29:74:99:b6:85:8d:83:e4:8d:dd:91:f1:44:46: b2:cd:32:f4:e6:75:4b:51:71:b2:ad:b2:9d:ef:44:67:b7:12: 61:2b:dc:04:28:59:a1:f6:87:89:8c:8d:c6:e8:a9:21:f5:2d: 01:8c:dd:88:d3:63:01:72:e1:72:f9:dd:21:1e:8d:ff:f7:a8: 04:90:91:ae:81:a1:aa:e5:23:5c:ec:db:de:08:02:c7:c8:b3: 33:a7:36:1c:75:8f:22:1e:3f:72:e5:80:87:9d:8b:aa:26:7d: 35:08:d1:8f:15:a8:3e:49:14:54:f5:00:4d:d1:cc:78:f5:a9: 8e:2d:19:f1:8c:98:a5:6f:7c:9f:a4:f2:8b:15:c8:43:d3:7c: a2:8a:b2:49:37:87:cc:d0:1e:dc:8b:d7:0d:b5:e6:66:35:30: 2a:8b:0b:a0:a3:cd:46:45:be:09:de:f3:e9:a3:d9:9f:ec:c8: 45:90:a1:2a:8f:04:4a:2b:dd:7a:59:25:40:76:6b:17:e2:83: 6c:d8:e4:cc:dd:b3:e9:13:21:0f:f2:77:30:50:ee:6c:c5:ca: 93:63:78:bd:06:5f:57:59:67:54:93:b8:df:07:d5:74:33:66: dd:63:67:7c:65:18:39:17:eb:01:12:85:62:d8:bc:0d:bd:3b: 26:25:26:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB762Unon0Ha5+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTFjZGQxZGYtMzljMS00YmQ4LThlNWUtZDA3ZDQ5ZDk5ZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHapydE7zR+bFM68tjjft7QJX8uG5hifi4fs sGqkkjsztyhbt76ST1q5b46z3eF/lInd0i/7eUNiRgJ7tG9d0D9eXL6yUdmekHou 3DxuXESyncgfuARMGMryIBbXfhDRBMp/5nC0mkISp8FFJzwHTuaJ7HC4VzS65WnG GcRmCgTe+k7Q4c3RTZNM1qC++hQXlmcynB4sOEMXLRzEDC3LCPxJj1Aopd6n5Vv9 ts2QS+6n5/UFtYNaHGBg68j+J/FEOsGKL1jZegnE3QJBas/m0q5HOYC1hA0Qm3V0 ylv/lOUiTkFVuGW/PZrlRRySIKEinOEtmgV1gZT+uMDMnvWxZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK2kS/v6cUsmURwNA1Mp0F5Wgb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvODljYjc0ZDEtN2U3Ny0z MjlkLWE4MDEtZWFkZmU3MWIwZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChOSXopdJm2hY2D5I3dkfFERrLNMvTmdUtRcbKtsp3vRGe3EmEr3AQo WaH2h4mMjcboqSH1LQGM3YjTYwFy4XL53SEejf/3qASQka6BoarlI1zs294IAsfI szOnNhx1jyIeP3LlgIedi6omfTUI0Y8VqD5JFFT1AE3RzHj1qY4tGfGMmKVvfJ+k 8osVyEPTfKKKskk3h8zQHtyL1w215mY1MCqLC6CjzUZFvgne8+mj2Z/syEWQoSqP BEor3XpZJUB2axfig2zY5Mzds+kTIQ/ydzBQ7mzFypNjeL0GX1dZZ1STuN8H1XQz Zt1jZ3xlGDkX6wEShWLYvA29OyYlJj4= -----END CERTIFICATE-----Generated at Mon Nov 3 08:46:49 2025 by rpki-client