$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa File: 895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa (raw, json) Hash identifier: rQRLbXTi/nFYjg4ihjAOsueFLfQKE5E88Uz1kv0lhLI= Subject key identifier: 4E:71:B8:9A:2F:AD:BA:1B:81:F1:C5:86:6D:04:F9:18:67:8A:78:D8 Certificate issuer: /CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Certificate serial: 010D0C9F4328584BA667A60B8C11D2FE9465D180 Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 394710 IP address blocks: 85.131.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a6:0b:8c:11:d2:fe:94:65:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=ae70748b-09f8-48ee-afb7-010dc46f9430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:6b:e7:1e:7f:a5:bb:2e:af:a4:02:14:70: 26:cb:ac:8e:4f:30:55:ba:64:f3:0e:43:86:c4:32: db:d4:83:bf:6c:a7:13:e5:cf:d6:d8:7a:40:29:4d: b4:df:05:d2:09:57:4a:97:db:9f:d1:4d:8a:80:90: b7:e6:0e:a2:88:e1:3d:d4:17:ac:50:02:ee:b5:f9: c3:a6:2d:f2:ca:3e:c4:71:0b:3c:11:ce:3e:75:c7: f5:8e:3b:bc:34:3f:6a:ce:a4:db:78:d2:00:fc:cf: ed:92:42:22:7c:a2:36:a3:6b:34:92:4b:ad:80:b9: a8:24:a2:32:25:e6:6a:07:99:67:91:62:dd:f2:30: 7d:7a:83:a8:b5:e0:ad:d2:39:94:57:4b:b9:78:84: 1f:71:64:04:97:72:b6:68:a1:38:f7:dc:36:d6:f9: b1:f6:e8:ca:fc:59:e5:76:5e:43:f2:58:99:26:06: 84:b0:5f:91:5b:2a:78:f6:f8:2b:ab:42:f8:c7:65: 38:2e:a3:f7:aa:c9:a1:6f:3b:40:99:3f:6f:5e:b6: 9c:7c:7a:4d:5c:5e:a4:ab:b4:e2:32:24:72:5d:63: 53:06:c5:19:27:25:83:36:cf:8a:fb:e2:3c:c4:47: e3:68:bb:5b:6c:e1:dc:01:83:8d:1f:28:75:69:6d: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:71:B8:9A:2F:AD:BA:1B:81:F1:C5:86:6D:04:F9:18:67:8A:78:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl X509v3 Authority Key Identifier: keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer sbgp-ipAddrBlock: critical IPv4: 85.131.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bc:e1:c7:da:b2:76:34:c7:6b:99:28:81:9d:cb:e5:91:a8: 5f:54:f9:9f:c7:66:02:f4:df:65:8a:3c:ce:58:b3:4c:1b:52: 72:f4:b6:2b:b4:70:91:7c:27:c2:54:e5:72:96:92:e7:94:de: d7:9f:c2:d5:07:5c:65:29:66:81:af:b7:9b:b5:92:4c:e4:6a: 42:a7:e0:53:25:51:c8:26:cd:4a:0e:01:7d:a7:63:c4:29:c2: 6e:e2:08:c6:86:4d:dc:74:2d:c6:20:7a:1a:a3:d6:a6:a2:c2: a4:c6:fa:35:2a:5a:6f:79:1b:b9:34:4e:cc:2b:7a:d7:de:75: 85:c0:50:93:dd:28:ce:cf:7e:c2:a9:47:82:0b:cb:8e:b5:e2: 68:ae:16:01:89:4a:95:00:2d:cb:8c:ad:c5:ae:9c:df:8d:e2: cf:19:5b:09:5c:a2:cd:18:69:81:eb:08:24:af:fa:38:6b:0a: 95:5a:79:48:7b:41:f9:1d:3d:fe:4b:02:dd:8e:8f:d0:40:08: 99:66:d6:e7:bc:ca:6e:23:33:be:37:2a:06:b2:e5:a4:83:34: f0:83:c9:64:b2:e9:3f:88:8b:a6:e8:3b:21:db:1e:04:6e:d8: a0:ad:a2:bf:d1:58:27:c8:49:29:3e:1b:22:da:8d:d7:cc:b5: f7:5f:9e:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6YLjBHS/pRl0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMDA2MzMtYzFlZS00OTJjLWI3MzAtMTJlMTEzYWI4 YmQyMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YWU3MDc0OGItMDlmOC00OGVlLWFmYjctMDEwZGM0NmY5NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0pr5x5/pbsur6QCFHAmy6yOTzBVumTzDkOG xDLb1IO/bKcT5c/W2HpAKU203wXSCVdKl9uf0U2KgJC35g6iiOE91BesUALutfnD pi3yyj7EcQs8Ec4+dcf1jju8ND9qzqTbeNIA/M/tkkIifKI2o2s0kkutgLmoJKIy JeZqB5lnkWLd8jB9eoOoteCt0jmUV0u5eIQfcWQEl3K2aKE499w21vmx9ujK/Fnl dl5D8liZJgaEsF+RWyp49vgrq0L4x2U4LqP3qsmhbztAmT9vXracfHpNXF6kq7Ti MiRyXWNTBsUZJyWDNs+K++I8xEfjaLtbbOHcAYONHyh1aW1wdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5xuJovrbobgfHFhm0E+RhninjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAw MDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNhYjhiZDIvODk1NzI5ZDctMjNjNy0z YTBmLTg0YTItYjdkNTI4N2NkOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMDA2MzMtYzFlZS00OTJjLWI3 MzAtMTJlMTEzYWI4YmQyLzNhMDAwNjMzLWMxZWUtNDkyYy1iNzMwLTEyZTExM2Fi OGJkMi5jcmwwHwYDVR0jBBgwFoAUFGVxCMW+NO6jxif09m0EUs/PIyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUx MTNhYjhiZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFVYOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu84cfasnY0x2uZKIGdy+WRqF9U+Z/HZgL032WKPM5Ys0wbUnL0tiu0 cJF8J8JU5XKWkueU3tefwtUHXGUpZoGvt5u1kkzkakKn4FMlUcgmzUoOAX2nY8Qp wm7iCMaGTdx0LcYgehqj1qaiwqTG+jUqWm95G7k0TswretfedYXAUJPdKM7PfsKp R4ILy4614miuFgGJSpUALcuMrcWunN+N4s8ZWwlcos0YaYHrCCSv+jhrCpVaeUh7 QfkdPf5LAt2Oj9BACJlm1ue8ym4jM743Kgay5aSDNPCDyWSy6T+Ii6boOyHbHgRu 2KCtor/RWCfISSk+GyLajdfMtfdfnkg= -----END CERTIFICATE-----Generated at Mon Nov 3 08:38:10 2025 by rpki-client