$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/908ae10e-e12a-3d13-a22a-151082897543.roa File: 908ae10e-e12a-3d13-a22a-151082897543.roa (raw, json) Hash identifier: vfqxVbbMTl1hPjkjCdS3mq9y1UfFRDQrRfZaNvAY5o8= Subject key identifier: EE:98:36:79:45:38:2E:1E:01:76:CD:99:84:DF:A2:D8:6B:59:63:FC Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584B4E771523A0ED164DF5E88E80 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/908ae10e-e12a-3d13-a22a-151082897543.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18434 IP address blocks: 195.110.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:15:23:a0:ed:16:4d:f5:e8:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=2bf91e1d-9c98-4e51-b2e5-dd8942368c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:76:9c:f9:40:87:92:cb:5b:26:3c:40:c1:e5: 70:33:c8:91:6d:15:f3:8f:10:1c:03:80:56:12:4b: 0d:83:f4:b0:a1:0d:11:ae:a9:5a:eb:bd:15:c5:d0: 99:a6:0c:2c:1f:85:35:4d:e6:45:bf:cb:4c:9a:29: 61:ec:d2:a8:9a:41:76:da:18:a9:45:d8:07:ab:40: cf:97:a2:ed:2c:2d:90:13:25:74:03:fd:02:7d:9e: 0f:03:fc:5e:0b:0e:71:00:48:75:db:36:b8:8a:b1: 5c:14:66:2f:ec:f0:e8:c3:dc:69:7e:ca:2e:cd:1f: cc:11:38:88:9a:30:7a:ac:f4:88:90:54:08:62:9b: 3f:f1:68:7f:93:47:66:88:61:7c:4b:ee:2e:96:7e: 35:8e:e2:7b:0c:19:67:92:64:43:49:c5:aa:d5:13: f1:30:b0:28:01:5c:9b:1e:ea:43:75:f4:7f:6e:27: 29:61:75:bb:6e:5d:3f:80:15:95:73:5c:c6:c9:80: ec:a6:b2:3b:c0:df:ab:c7:99:4d:d1:83:41:ab:17: fe:cd:79:3b:e0:de:a1:1c:e4:24:87:b9:08:11:a2: 6a:eb:6b:66:c8:37:1c:40:93:d3:38:7d:3b:49:bf: 71:61:81:a3:e9:94:7e:81:8b:a4:a1:40:eb:38:54: 4e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:98:36:79:45:38:2E:1E:01:76:CD:99:84:DF:A2:D8:6B:59:63:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/908ae10e-e12a-3d13-a22a-151082897543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 195.110.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:05:e3:20:80:38:c7:37:e1:48:3e:0b:80:37:bd:90:7a:3e: 25:88:5b:b5:e8:38:43:65:aa:a0:62:d4:98:f2:54:36:aa:55: 93:07:e2:49:75:2b:82:33:48:e5:91:df:9f:60:04:b7:9b:eb: 2e:7d:28:95:50:56:cd:ec:d6:f2:74:22:c6:68:64:0a:80:2c: 00:e3:a0:bc:42:90:0c:b1:22:f8:bc:d9:b5:46:d7:15:b1:5d: e8:2e:31:3b:fc:34:46:65:ef:28:dc:44:84:cc:f9:93:0d:ca: d7:02:31:81:48:32:b1:7e:d1:20:8e:ee:9b:40:ad:42:1f:03: ee:0b:ef:96:e1:89:61:a8:dc:10:65:6d:6e:3b:c6:0d:d3:b1: 09:8a:65:8c:a2:ac:8e:d8:9e:b6:54:a4:f1:9c:f5:d8:d0:1b: f2:14:93:86:3d:ba:4d:28:b0:72:81:15:39:73:a1:5d:93:1a: 26:af:6b:45:ff:ba:4c:b9:ce:41:1a:bf:4c:ed:43:c8:25:ae: e2:cb:d7:53:ae:09:6c:27:2c:48:11:d1:2b:6e:14:14:17:37: ba:0d:4e:d1:19:d4:d0:0e:28:bf:ff:c6:cb:76:87:2b:e4:3a: 05:59:13:9f:38:b4:4c:d9:21:68:e4:26:3e:e3:13:f2:9e:75: b1:79:2a:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxUjoO0WTfXojoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MmJmOTFlMWQtOWM5OC00ZTUxLWIyZTUtZGQ4OTQyMzY4YzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHac+UCHkstbJjxAweVwM8iRbRXzjxAcA4BW EksNg/SwoQ0Rrqla670VxdCZpgwsH4U1TeZFv8tMmilh7NKomkF22hipRdgHq0DP l6LtLC2QEyV0A/0CfZ4PA/xeCw5xAEh12za4irFcFGYv7PDow9xpfsouzR/METiI mjB6rPSIkFQIYps/8Wh/k0dmiGF8S+4uln41juJ7DBlnkmRDScWq1RPxMLAoAVyb HupDdfR/bicpYXW7bl0/gBWVc1zGyYDsprI7wN+rx5lN0YNBqxf+zXk74N6hHOQk h7kIEaJq62tmyDccQJPTOH07Sb9xYYGj6ZR+gYukoUDrOFROiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6YNnlFOC4eAXbNmYTfothrWWP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvOTA4YWUxMGUtZTEyYS0z ZDEzLWEyMmEtMTUxMDgyODk3NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw27mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMF4yCAOMc34Ug+C4A3vZB6PiWIW7XoOENlqqBi1JjyVDaqVZMH4kl1 K4IzSOWR359gBLeb6y59KJVQVs3s1vJ0IsZoZAqALADjoLxCkAyxIvi82bVG1xWx XeguMTv8NEZl7yjcRITM+ZMNytcCMYFIMrF+0SCO7ptArUIfA+4L75bhiWGo3BBl bW47xg3TsQmKZYyirI7YnrZUpPGc9djQG/IUk4Y9uk0osHKBFTlzoV2TGiava0X/ uky5zkEav0ztQ8glruLL11OuCWwnLEgR0StuFBQXN7oNTtEZ1NAOKL//xst2hyvk OgVZE584tEzZIWjkJj7jE/KedbF5KnM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:54 2025 by rpki-client