$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/4689b037-43ab-3a42-8b75-c96618aaeb54.roa File: 4689b037-43ab-3a42-8b75-c96618aaeb54.roa (raw, json) Hash identifier: 1DrTx49ee5q0m5yR4jzA/AJ8TyrWg+6iXrFqADWcd58= Subject key identifier: 3F:ED:AB:68:2D:13:58:F1:91:2F:ED:D8:D2:75:D4:61:5B:42:16:86 Certificate issuer: /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08 Certificate serial: 010D0C9F4328584B717C8232C1A65536A04B2F00 Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/4689b037-43ab-3a42-8b75-c96618aaeb54.roa Signing time: Tue 07 Oct 2025 14:04:55 +0000 ROA not before: Tue 07 Oct 2025 14:04:55 +0000 ROA not after: Mon 05 Jan 2026 15:04:55 +0000 asID: 205220 IP address blocks: 141.195.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:7c:82:32:c1:a6:55:36:a0:4b:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08 Validity Not Before: Oct 7 14:04:55 2025 GMT Not After : Jan 5 15:04:55 2026 GMT Subject: CN=91ad56fc-bb83-4b0e-b2b1-023ab5816536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a1:77:f7:f7:5f:92:6a:d4:c6:02:70:cc:a1: 05:e6:9e:e5:6e:57:b1:e6:99:c2:73:a3:2b:c4:94: 29:02:9c:95:b4:33:1d:fc:f8:bb:15:45:71:d2:6c: c8:ba:2c:3e:06:87:7a:82:d7:d2:27:65:df:e6:e5: 82:87:1a:fb:02:e7:04:1b:1a:9c:3c:48:17:fe:46: b0:93:79:54:bd:93:5a:b2:96:de:85:a3:71:a6:35: 31:1e:44:24:39:14:69:a1:48:d1:46:87:36:2d:28: f2:db:60:04:6b:2a:f2:62:87:72:1b:fb:e9:7a:42: 90:da:84:ca:6e:f0:a0:d2:1b:af:82:fb:ad:6d:40: 9f:97:fc:04:d0:63:8a:df:a4:3e:59:f7:44:f5:9f: 28:c2:b0:11:e2:f0:db:da:6e:62:89:5e:57:18:dc: ad:09:ab:31:16:45:81:82:26:a6:8d:ec:a3:42:eb: 19:40:0a:1a:fc:da:fd:ef:53:b4:e5:53:a4:c6:9d: 13:71:07:c3:cc:1b:35:a5:e6:cf:5c:ba:5a:34:52: 93:9a:11:a8:bf:50:4a:b5:e4:1b:11:eb:73:30:01: 60:9c:8a:9c:10:c9:3b:ec:3f:bc:a0:93:13:2d:63: 2e:69:18:f5:5e:7a:f4:2a:ef:c9:22:9a:db:00:09: 5c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:ED:AB:68:2D:13:58:F1:91:2F:ED:D8:D2:75:D4:61:5B:42:16:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/4689b037-43ab-3a42-8b75-c96618aaeb54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl X509v3 Authority Key Identifier: keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer sbgp-ipAddrBlock: critical IPv4: 141.195.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:46:b0:f8:f7:f2:d2:5f:5f:a3:dc:a2:ed:90:7d:01:c3:fe: 17:83:bc:4b:06:4f:4f:fe:18:06:84:d7:eb:4d:1d:e5:1e:58: 97:71:4a:56:45:48:ea:de:8f:78:b0:41:b7:7e:f5:3c:fa:e5: aa:b6:6f:e7:a7:ae:f7:09:75:25:95:a5:35:6b:56:cc:e6:f9: 7b:36:92:2b:ba:bd:3f:ab:14:a8:94:3a:54:62:bb:d3:c9:86: 15:85:48:ee:3d:bd:44:28:50:e6:73:e1:be:e4:ae:2b:06:ca: 22:94:da:dc:31:36:34:bf:88:5b:f7:42:49:79:06:94:6b:1c: d5:c7:0b:01:c0:4d:60:7f:a3:d3:45:f9:6d:56:ca:93:51:24: 2f:9f:74:62:57:d7:dc:c7:90:54:04:8a:36:d3:1a:a2:83:91: 14:73:36:6b:e6:cc:af:3c:70:b1:49:e9:aa:40:0d:8a:6b:18: 7b:cf:f3:b7:43:ab:64:61:13:2b:b2:e4:8e:56:f4:6b:ad:cb: cd:80:fc:e3:ff:37:8c:b7:61:5f:83:e0:38:86:a9:28:4e:0a: 05:4e:fe:09:e0:67:fd:d6:9d:19:0a:18:52:bb:94:f9:48:2c: b7:b6:29:52:0b:14:fa:e4:36:63:e6:b1:c8:2e:8b:48:dc:13: bb:d6:cd:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxfIIywaZVNqBLLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1OGIyZDctZGI5MC00ZTE2LWE1NWMtMWRlNjI5ZjJj YTA4MB4XDTI1MTAwNzE0MDQ1NVoXDTI2MDEwNTE1MDQ1NVowLzEtMCsGA1UEAxMk OTFhZDU2ZmMtYmI4My00YjBlLWIyYjEtMDIzYWI1ODE2NTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqF39/dfkmrUxgJwzKEF5p7lblex5pnCc6Mr xJQpApyVtDMd/Pi7FUVx0mzIuiw+Bod6gtfSJ2Xf5uWChxr7AucEGxqcPEgX/kaw k3lUvZNaspbehaNxpjUxHkQkORRpoUjRRoc2LSjy22AEayryYodyG/vpekKQ2oTK bvCg0huvgvutbUCfl/wE0GOK36Q+WfdE9Z8owrAR4vDb2m5iiV5XGNytCasxFkWB giamjeyjQusZQAoa/Nr971O05VOkxp0TcQfDzBs1pebPXLpaNFKTmhGov1BKteQb EetzMAFgnIqcEMk77D+8oJMTLWMuaRj1Xnr0Ku/JIprbAAlc5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/tq2gtE1jxkS/t2NJ11GFbQhaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNzU4 YjJkNy1kYjkwLTRlMTYtYTU1Yy0xZGU2MjlmMmNhMDgvNDY4OWIwMzctNDNhYi0z YTQyLThiNzUtYzk2NjE4YWFlYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzc1OGIyZDctZGI5MC00ZTE2LWE1 NWMtMWRlNjI5ZjJjYTA4L2M3NThiMmQ3LWRiOTAtNGUxNi1hNTVjLTFkZTYyOWYy Y2EwOC5jcmwwHwYDVR0jBBgwFoAUDmCzSifD5DV2KMoQViGQ2iXNZdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNzU4YjJkNy1kYjkwLTRlMTYtYTU1Yy0xZGU2 MjlmMmNhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcN9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxGsPj38tJfX6Pcou2QfQHD/heDvEsGT0/+GAaE1+tNHeUeWJdxSlZF SOrej3iwQbd+9Tz65aq2b+enrvcJdSWVpTVrVszm+Xs2kiu6vT+rFKiUOlRiu9PJ hhWFSO49vUQoUOZz4b7krisGyiKU2twxNjS/iFv3Qkl5BpRrHNXHCwHATWB/o9NF +W1WypNRJC+fdGJX19zHkFQEijbTGqKDkRRzNmvmzK88cLFJ6apADYprGHvP87dD q2RhEyuy5I5W9Guty82A/OP/N4y3YV+D4DiGqShOCgVO/gngZ/3WnRkKGFK7lPlI LLe2KVILFPrkNmPmscgui0jcE7vWzRA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:52:21 2025 by rpki-client