$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa File: 1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa (raw, json) Hash identifier: OP0jLe4lR9uf/cRBDShL4eIE8nYPMwgNfm2000w7Ck8= Subject key identifier: 56:62:09:15:BD:69:0C:79:CE:0C:02:93:00:E8:F3:E0:86:1C:AB:ED Certificate issuer: /CN=135a25e4-6a94-45c6-b694-2d6e8256166a Certificate serial: 010D0C9F4328584B7DECA674A357234A4205AD80 Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 7448 IP address blocks: 143.192.0.0/18 maxlen: 24 143.192.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a6:74:a3:57:23:4a:42:05:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=34a1e599-2da5-434e-8162-b82fc27c75f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:36:c5:c6:e1:03:22:16:26:88:27:9d:24:2e: 08:3e:47:15:a7:42:95:43:9a:fa:b0:3c:c1:df:a8: b8:83:99:81:ce:a7:b4:7c:d9:2f:98:bc:2a:fc:1b: 45:3b:27:fa:65:00:62:97:18:da:5a:d3:e6:75:4f: 6b:2e:10:68:51:45:8a:b3:4e:2c:cd:e9:56:08:82: 26:31:c7:fb:fd:7d:8b:99:c2:a6:a1:ba:cd:04:c9: a0:bb:4b:ab:02:be:52:1d:37:32:93:fa:29:f1:46: 8b:9b:01:7d:90:0f:58:d9:6a:fb:70:f0:c1:5f:d2: bb:6e:f4:4c:06:bf:56:d0:1c:34:bc:de:ac:9f:69: 7e:84:fd:a8:17:6f:97:f0:e7:9a:09:e2:9c:15:0e: 71:1e:df:b6:1b:7b:aa:e2:19:ef:22:65:82:be:c5: c8:a5:98:ef:43:b3:c1:24:2f:72:c6:f9:8f:7b:2d: 18:de:7c:a2:ca:b0:3f:fb:cc:cf:86:f1:15:c8:48: 3a:b7:12:9e:26:2f:26:b8:57:4e:88:5c:e2:2f:d1: 7d:9e:f2:ac:85:ac:9a:00:be:30:b4:e0:85:4d:11: ec:c4:07:5b:2a:69:19:6e:93:5c:ad:ed:e9:46:21: ca:38:59:35:db:2e:f2:9b:e5:31:43:94:ea:f1:76: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:62:09:15:BD:69:0C:79:CE:0C:02:93:00:E8:F3:E0:86:1C:AB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl X509v3 Authority Key Identifier: keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer sbgp-ipAddrBlock: critical IPv4: 143.192.0.0-143.192.95.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:40:af:12:ce:61:b3:b1:26:3e:2a:68:16:d9:dc:e3:52:1b: ec:43:f6:25:c5:56:b6:fd:54:54:73:cf:b6:5f:a7:85:c4:84: 82:e3:8c:e9:af:9d:5e:d8:bc:f3:d0:fb:b7:42:e6:8b:51:e6: f4:be:c9:69:ca:3f:64:54:9e:5c:a8:2d:9a:ac:f0:ae:13:db: e6:4b:6b:22:1e:f1:e2:a7:70:f5:65:fe:06:d0:86:f5:7f:23: 91:a4:e0:1b:c3:94:8f:fa:63:96:92:bf:cc:9c:7a:35:f5:30: 2f:58:3a:90:70:78:42:f6:9f:9c:80:09:65:59:1a:ae:b9:78: 4d:64:ff:bb:57:08:41:65:48:dc:44:45:02:89:f9:10:5e:bc: 6a:80:c1:6d:0e:37:86:eb:67:be:75:73:26:57:d8:df:d8:73: 92:60:eb:70:11:14:5a:47:a7:e7:4f:0c:19:82:cd:ba:30:34: 3c:cb:17:51:d3:d5:fe:7d:f9:1a:7a:76:bd:f8:43:9c:50:fc: a6:4a:24:e9:7d:c8:39:89:d5:fe:1b:c6:76:77:8a:fe:87:a1: 78:27:15:c4:4f:16:ef:9d:2d:82:a2:af:a3:3c:40:bf:37:c7: 3e:d3:89:bc:f9:37:b3:b1:1c:94:16:83:35:6e:22:9a:8f:bc: 92:b5:8c:ad -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEt97KZ0o1cjSkIFrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM1YTI1ZTQtNmE5NC00NWM2LWI2OTQtMmQ2ZTgyNTYx NjZhMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MzRhMWU1OTktMmRhNS00MzRlLTgxNjItYjgyZmMyN2M3NWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijbFxuEDIhYmiCedJC4IPkcVp0KVQ5r6sDzB 36i4g5mBzqe0fNkvmLwq/BtFOyf6ZQBilxjaWtPmdU9rLhBoUUWKs04szelWCIIm Mcf7/X2LmcKmobrNBMmgu0urAr5SHTcyk/op8UaLmwF9kA9Y2Wr7cPDBX9K7bvRM Br9W0Bw0vN6sn2l+hP2oF2+X8OeaCeKcFQ5xHt+2G3uq4hnvImWCvsXIpZjvQ7PB JC9yxvmPey0Y3nyiyrA/+8zPhvEVyEg6txKeJi8muFdOiFziL9F9nvKshayaAL4w tOCFTRHsxAdbKmkZbpNcre3pRiHKOFk12y7ym+UxQ5Tq8XYrUwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFFZiCRW9aQx5zgwCkwDo8+CGHKvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMzVh MjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZlODI1NjE2NmEvMWFhM2YxYWItY2M3OC0z NmI0LWI4OTAtNTUyZWMyZDRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTM1YTI1ZTQtNmE5NC00NWM2LWI2 OTQtMmQ2ZTgyNTYxNjZhLzEzNWEyNWU0LTZhOTQtNDVjNi1iNjk0LTJkNmU4MjU2 MTY2YS5jcmwwHwYDVR0jBBgwFoAU3z6ArD0AzzQWeNXZQvPiHb3A8b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMzVhMjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZl ODI1NjE2NmEuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwaPwAME BY/AQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQARQK8SzmGzsSY+KmgW2dzjUhvsQ/YlxVa2/VRUc8+2X6eF xISC44zpr51e2Lzz0Pu3QuaLUeb0vslpyj9kVJ5cqC2arPCuE9vmS2siHvHip3D1 Zf4G0Ib1fyORpOAbw5SP+mOWkr/MnHo19TAvWDqQcHhC9p+cgAllWRquuXhNZP+7 VwhBZUjcREUCifkQXrxqgMFtDjeG62e+dXMmV9jf2HOSYOtwERRaR6fnTwwZgs26 MDQ8yxdR09X+ffkaena9+EOcUPymSiTpfcg5idX+G8Z2d4r+h6F4JxXETxbvnS2C oq+jPEC/N8c+04m8+TezsRyUFoM1biKaj7yStYyt -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:41 2025 by rpki-client