$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/01a7af66-3ab1-31fc-912e-d07e8faac6cd.roa File: 01a7af66-3ab1-31fc-912e-d07e8faac6cd.roa (raw, json) Hash identifier: 5Wxo7fIUvDYnCUH2+m5QydF9c7HYhx1npb67yhG/bVc= Subject key identifier: A2:06:E8:F7:C2:C0:B6:01:3D:18:F2:7D:F1:E7:25:79:0F:C2:3B:68 Certificate issuer: /CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Certificate serial: 010D0C9F4328584B3556E8AD38702B2128876C00 Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/01a7af66-3ab1-31fc-912e-d07e8faac6cd.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 131.226.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e8:ad:38:70:2b:21:28:87:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=7bba6c49-8880-4a5f-8061-bc8e0b184f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:2e:b1:2d:94:85:8a:4f:ae:f5:b1:67:a5: 34:85:86:56:61:2c:14:4d:ef:0c:66:a2:99:1c:63: 3c:60:09:28:84:37:bb:1b:91:ec:11:c7:8c:20:53: 1e:9e:d4:4e:21:28:2c:43:ff:e9:66:de:7c:40:26: 3c:2a:37:7e:37:56:19:7c:6c:48:6a:94:22:12:d0: 45:d4:84:ae:e1:6c:50:2e:ae:8d:91:d8:77:19:3b: dc:73:b2:6e:c4:e1:28:42:3a:f3:16:d0:32:cb:cf: 41:93:3f:15:7a:cf:12:00:4d:2f:1b:d5:68:b6:13: 66:34:76:b4:28:e7:59:64:50:bc:25:29:bc:15:e0: f0:04:0b:de:88:4c:ab:95:36:04:cf:51:3d:7c:8d: 06:02:b6:61:47:07:49:0a:14:e2:04:a3:f4:74:10: 77:9f:5b:41:5d:09:f4:7c:cd:7c:6e:a7:5e:4a:64: 69:a4:30:43:09:8b:db:22:37:62:17:14:40:3f:7b: db:c1:69:e7:ad:47:f6:af:57:a2:bc:9b:21:b6:90: 27:a4:89:ba:47:4a:1d:90:f5:17:eb:03:4c:71:22: e8:39:e9:2a:4e:a7:bb:e6:56:25:43:8e:c2:f9:8d: f8:7b:98:59:10:7d:78:7a:fe:4c:53:74:d8:15:86: a7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:06:E8:F7:C2:C0:B6:01:3D:18:F2:7D:F1:E7:25:79:0F:C2:3B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/01a7af66-3ab1-31fc-912e-d07e8faac6cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl X509v3 Authority Key Identifier: keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer sbgp-ipAddrBlock: critical IPv4: 131.226.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:7e:49:33:94:51:7e:14:14:ee:2a:a0:99:44:53:a2:c9:f4: d3:29:10:16:10:9a:b4:80:6d:45:15:06:ad:ef:a9:b7:e6:f2: c6:c2:23:25:04:a7:c0:f9:29:b6:cb:e3:4e:21:26:6f:85:b2: 72:bc:ce:3a:12:b6:6d:ca:96:a2:6a:ee:5a:af:37:90:6d:73: 9e:15:f8:ae:39:26:a4:5a:31:fb:8f:cf:d0:04:7a:d3:31:4d: 7f:88:00:7b:dc:30:fc:90:f6:94:e0:7b:f8:d8:fd:3f:bb:2b: 9f:dc:97:86:93:d9:4b:36:9f:9f:e9:bf:62:46:0e:ca:3b:29: 5a:94:a9:2e:85:ed:82:bd:40:f6:6a:34:da:54:9e:07:52:1e: 3c:b9:5d:82:5d:4c:c3:8e:05:71:fa:76:0e:f0:95:7d:3a:54: fb:fa:ec:ad:77:6a:b7:ec:1b:ed:37:80:d4:38:75:b9:f0:7b: 7e:11:f4:6b:eb:e7:a3:a1:21:84:70:94:4d:fa:fc:8c:cc:74: 0b:70:4b:51:ff:93:64:40:3e:6d:2b:26:76:f3:46:72:2a:7d: 01:0d:c7:a7:39:6a:53:39:2e:16:16:88:69:f1:33:7b:d5:cb: 0d:28:62:55:ca:97:33:9c:87:4a:61:0b:a0:3a:27:e1:9a:d9: 52:0f:4a:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VuitOHArISiHbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4NmZlNTItNWI3Ny00NmI2LTk1MDItNTFjY2NjZjNh NzU1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk N2JiYTZjNDktODg4MC00YTVmLTgwNjEtYmM4ZTBiMTg0ZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF8usS2UhYpPrvWxZ6U0hYZWYSwUTe8MZqKZ HGM8YAkohDe7G5HsEceMIFMentROISgsQ//pZt58QCY8Kjd+N1YZfGxIapQiEtBF 1ISu4WxQLq6Nkdh3GTvcc7JuxOEoQjrzFtAyy89Bkz8Ves8SAE0vG9VothNmNHa0 KOdZZFC8JSm8FeDwBAveiEyrlTYEz1E9fI0GArZhRwdJChTiBKP0dBB3n1tBXQn0 fM18bqdeSmRppDBDCYvbIjdiFxRAP3vbwWnnrUf2r1eivJshtpAnpIm6R0odkPUX 6wNMcSLoOekqTqe75lYlQ47C+Y34e5hZEH14ev5MU3TYFYanmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIG6PfCwLYBPRjyffHnJXkPwjtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2 ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNjY2NmM2E3NTUvMDFhN2FmNjYtM2FiMS0z MWZjLTkxMmUtZDA3ZThmYWFjNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWY4NmZlNTItNWI3Ny00NmI2LTk1 MDItNTFjY2NjZjNhNzU1L2FmODZmZTUyLTViNzctNDZiNi05NTAyLTUxY2NjY2Yz YTc1NS5jcmwwHwYDVR0jBBgwFoAUpCnYdby96fIjd9cnL82GRWj9YvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNj Y2NmM2E3NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg+K8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ+STOUUX4UFO4qoJlEU6LJ9NMpEBYQmrSAbUUVBq3vqbfm8sbCIyUE p8D5KbbL404hJm+FsnK8zjoStm3KlqJq7lqvN5Btc54V+K45JqRaMfuPz9AEetMx TX+IAHvcMPyQ9pTge/jY/T+7K5/cl4aT2Us2n5/pv2JGDso7KVqUqS6F7YK9QPZq NNpUngdSHjy5XYJdTMOOBXH6dg7wlX06VPv67K13arfsG+03gNQ4dbnwe34R9Gvr 56OhIYRwlE36/IzMdAtwS1H/k2RAPm0rJnbzRnIqfQENx6c5alM5LhYWiGnxM3vV yw0oYlXKlzOch0phC6A6J+Ga2VIPSkg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:56:22 2025 by rpki-client