$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa File: 15426059-319f-322c-95e8-198a3ab84115.roa (raw, json) Hash identifier: Gadtx8DbpaQ45crljHElQ7plOK9M7AUrSr9jcyi2k8I= Subject key identifier: D8:F5:36:0F:68:29:24:DF:AB:12:84:C4:A4:B4:9C:C5:ED:C6:9D:11 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B48E1C2AA34939A3097300500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 3949 IP address blocks: 131.103.21.32/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c2:aa:34:93:9a:30:97:30:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=558155c4-f391-4b1e-9750-39a7ea46310d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:16:3c:6c:35:78:18:37:67:ae:f2:98:f0: 34:af:12:45:c0:fe:78:71:b3:08:5e:1e:ff:6c:55: d4:71:3c:fd:1a:28:c0:a4:92:17:1b:62:60:e8:87: 33:95:76:2b:12:60:54:29:65:eb:99:41:d0:fc:80: db:3c:20:97:e8:2c:f9:ef:31:24:c3:b9:b0:d9:1c: 39:f0:55:e4:74:eb:5c:8c:0d:ff:13:ef:8d:66:41: 3c:90:95:d2:6f:72:6b:38:fc:48:23:c7:3a:ef:e7: 0c:6e:87:86:cb:65:3f:eb:f8:6d:d1:0f:40:45:80: 20:81:79:23:f2:b0:b8:b4:17:b1:aa:e2:b8:20:dd: e9:49:96:86:52:37:d6:6a:14:a6:c5:1a:dc:2a:29: 7f:e1:42:25:00:48:cf:81:d8:51:64:64:e3:63:00: 67:f8:78:8b:7b:4b:59:26:4d:7c:f8:05:8d:3b:af: 72:b4:17:d0:23:13:9b:3a:b7:c4:6b:1e:fb:13:6f: b9:e2:05:7e:6c:ba:64:3e:22:6e:80:5c:6f:f5:c6: e2:4c:0c:db:88:6d:7d:46:b4:45:c3:f8:ea:8b:c9: eb:16:b1:83:ee:5d:12:0d:3a:bd:7e:2b:8c:c4:dc: f6:7d:e8:3f:db:8c:55:06:01:bf:33:75:c2:65:66: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F5:36:0F:68:29:24:DF:AB:12:84:C4:A4:B4:9C:C5:ED:C6:9D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 131.103.21.32/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:d6:7f:be:47:20:6c:b5:ea:44:ee:c6:04:65:69:a8:9e:b3: 68:37:0d:e0:72:cb:52:c1:ec:0f:ff:bc:97:e3:34:91:95:a1: 49:27:c0:c0:9e:37:68:00:e4:42:ad:4d:f3:80:8a:c3:52:8b: f8:19:de:fb:94:f0:cc:41:5b:7b:5d:6e:91:ed:73:3c:ec:06: 9b:06:b6:d3:9a:ee:e4:84:ed:10:9f:02:85:35:61:50:dc:6d: 44:e1:38:9c:fc:14:82:11:d8:d5:00:5d:c1:f1:c7:2f:47:46: 21:17:9d:df:5b:52:7c:c9:f7:c2:e3:f5:64:c8:e2:38:1d:16: f4:73:b3:58:dd:59:aa:47:b1:cb:05:5b:f5:82:6f:98:d6:ff: e0:e1:1e:f7:88:fd:09:f6:95:40:c7:72:64:42:6c:64:dd:d2: f9:83:40:9b:4d:fc:0f:a5:b8:fa:3d:5d:10:20:50:69:4a:56: 90:55:25:3d:46:07:7a:c5:d9:f0:56:ed:56:50:f1:e8:bf:09: ac:5f:04:b1:c1:39:fd:10:0a:8d:da:2f:f0:59:6f:42:76:de: 4e:17:36:13:39:0f:e4:fd:a4:09:4d:5f:27:53:10:83:42:d5: 85:65:0b:9f:20:e3:a4:8f:64:b2:78:8a:0f:c6:52:dd:ca:6f: a7:1c:81:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtI4cKqNJOaMJcwBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTU4MTU1YzQtZjM5MS00YjFlLTk3NTAtMzlhN2VhNDYzMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgoWPGw1eBg3Z67ymPA0rxJFwP54cbMIXh7/ bFXUcTz9GijApJIXG2Jg6IczlXYrEmBUKWXrmUHQ/IDbPCCX6Cz57zEkw7mw2Rw5 8FXkdOtcjA3/E++NZkE8kJXSb3JrOPxII8c67+cMboeGy2U/6/ht0Q9ARYAggXkj 8rC4tBexquK4IN3pSZaGUjfWahSmxRrcKil/4UIlAEjPgdhRZGTjYwBn+HiLe0tZ Jk18+AWNO69ytBfQIxObOrfEax77E2+54gV+bLpkPiJugFxv9cbiTAzbiG19RrRF w/jqi8nrFrGD7l0SDTq9fiuMxNz2feg/24xVBgG/M3XCZWbmuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNj1Ng9oKSTfqxKExKS0nMXtxp0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTU0MjYwNTktMzE5Zi0z MjJjLTk1ZTgtMTk4YTNhYjg0MTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEg2cVIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC31n++RyBstepE7sYEZWmonrNoNw3gcstSwewP/7yX4zSRlaFJJ8DA njdoAORCrU3zgIrDUov4Gd77lPDMQVt7XW6R7XM87AabBrbTmu7khO0QnwKFNWFQ 3G1E4Tic/BSCEdjVAF3B8ccvR0YhF53fW1J8yffC4/VkyOI4HRb0c7NY3VmqR7HL BVv1gm+Y1v/g4R73iP0J9pVAx3JkQmxk3dL5g0CbTfwPpbj6PV0QIFBpSlaQVSU9 Rgd6xdnwVu1WUPHovwmsXwSxwTn9EAqN2i/wWW9Cdt5OFzYTOQ/k/aQJTV8nUxCD QtWFZQufIOOkj2SyeIoPxlLdym+nHIH6 -----END CERTIFICATE-----Generated at Mon Oct 20 03:56:16 2025 by rpki-client