$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/75a5baee-4f9f-3105-8127-70c1252cbd8e.roa File: 75a5baee-4f9f-3105-8127-70c1252cbd8e.roa (raw, json) Hash identifier: cOlzRppD57o+z41mA/iEdOOL5fNLNSl2qtN3FYyZ+Hk= Subject key identifier: 8B:D4:30:4E:4E:7B:82:C7:17:3B:F8:88:F1:4B:57:3A:7D:C1:A0:90 Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Certificate serial: 010D0C9F4328584F8412E79EDEFDD01D946C0400 Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/75a5baee-4f9f-3105-8127-70c1252cbd8e.roa Signing time: Fri 16 Oct 2026 01:00:12 +0000 ROA not before: Fri 16 Oct 2026 01:00:12 +0000 ROA not after: Thu 14 Jan 2027 02:00:12 +0000 asID: 3152 IP address blocks: 131.225.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:84:12:e7:9e:de:fd:d0:1d:94:6c:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Validity Not Before: Oct 16 01:00:12 2026 GMT Not After : Jan 14 02:00:12 2027 GMT Subject: CN=0cb9d9bf-49b6-431e-89a8-7ae4467bd972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:0a:66:b4:03:88:17:de:47:c1:df:a8:52: 86:39:2f:8b:e6:1b:52:c4:6e:9e:35:70:ce:86:d6: a2:50:84:f1:41:00:6d:de:b5:61:d1:12:2b:c4:f2: a6:03:f0:4b:cb:7f:9d:2a:7f:dd:cc:51:5f:e4:5b: bc:a0:a2:06:e7:9a:db:4d:95:23:14:a2:f1:44:5b: c5:6f:1f:5e:e3:68:c6:fe:1a:01:15:1d:6a:d8:2a: 05:a3:9c:e4:33:59:bf:06:26:65:b7:be:a6:df:44: ac:ea:12:d4:26:1f:92:93:d3:37:bb:b1:26:58:37: bf:b6:dd:fc:5e:39:c3:7d:cf:58:d0:50:64:72:98: 4e:8d:f3:4c:eb:c1:19:8c:a8:3a:37:7b:b3:c3:94: fb:77:82:db:1c:dc:ce:36:f7:e4:54:58:74:8e:d9: 2b:7e:25:e0:b5:08:4e:cc:27:e3:2f:d1:09:39:1f: a4:e6:44:9c:d1:6d:7b:70:29:0d:97:60:57:cb:35: cb:ea:1d:d6:22:69:70:45:c3:9c:73:8a:37:d0:48: 27:e6:ca:7f:34:d9:a4:1f:4e:58:a8:73:dc:42:1b: 5a:89:ed:4b:2f:c0:40:92:22:a5:66:38:2b:a0:da: 8a:36:85:2f:60:50:5c:0a:21:c6:71:f1:81:1e:08: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D4:30:4E:4E:7B:82:C7:17:3B:F8:88:F1:4B:57:3A:7D:C1:A0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/75a5baee-4f9f-3105-8127-70c1252cbd8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl X509v3 Authority Key Identifier: keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer sbgp-ipAddrBlock: critical IPv4: 131.225.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:15:ed:f6:62:5a:30:c4:d8:50:1c:88:3e:c1:a0:60:cd:d5: c9:73:1b:30:d5:78:63:01:e9:fa:ab:bf:5e:bf:1b:07:0a:87: e8:fa:5e:b3:99:59:50:69:17:85:55:6d:8b:1f:40:ea:1d:23: 99:d1:25:6d:72:7a:94:00:b0:75:e8:88:82:9e:b0:e6:0d:a8: 29:1f:d1:d7:51:c9:e6:cb:0e:d7:da:84:d2:c3:a8:ba:26:c1: fd:b3:f8:86:c5:f1:32:0f:79:66:18:c5:20:6c:ed:e4:b9:cb: 66:cd:c7:45:7a:ff:8d:20:70:58:9c:e7:82:4a:19:30:25:c7: 39:99:96:99:05:e1:b8:aa:11:54:7b:f3:5b:0f:22:65:47:1b: ac:48:26:5c:7b:68:39:ed:3a:f4:5c:ae:20:d3:c6:38:d7:00: 2d:09:43:86:d5:c9:8a:e7:4a:4f:30:ee:ff:1c:5a:48:bc:85: 04:7c:35:76:bc:45:06:26:fc:68:0b:2d:aa:4c:79:e2:ef:c4: 42:b4:8f:e0:ba:15:13:20:6f:e9:09:e4:15:35:02:0b:c7:aa: ee:43:8f:18:2f:77:04:15:dc:ae:e3:7f:79:17:86:6f:04:0b: 23:70:54:63:2e:fe:ef:20:5f:15:68:8f:e1:62:ae:09:d9:31: b7:5b:96:29 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+EEuee3v3QHZRsBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx ZTQ5MB4XDTI2MTAxNjAxMDAxMloXDTI3MDExNDAyMDAxMlowLzEtMCsGA1UEAxMk MGNiOWQ5YmYtNDliNi00MzFlLTg5YTgtN2FlNDQ2N2JkOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1YKZrQDiBfeR8HfqFKGOS+L5htSxG6eNXDO htaiUITxQQBt3rVh0RIrxPKmA/BLy3+dKn/dzFFf5Fu8oKIG55rbTZUjFKLxRFvF bx9e42jG/hoBFR1q2CoFo5zkM1m/BiZlt76m30Ss6hLUJh+Sk9M3u7EmWDe/tt38 XjnDfc9Y0FBkcphOjfNM68EZjKg6N3uzw5T7d4LbHNzONvfkVFh0jtkrfiXgtQhO zCfjL9EJOR+k5kSc0W17cCkNl2BXyzXL6h3WImlwRcOcc4o30Egn5sp/NNmkH05Y qHPcQhtaie1LL8BAkiKlZjgroNqKNoUvYFBcCiHGcfGBHgjeEQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIvUME5Oe4LHFzv4iPFLVzp9waCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvNzVhNWJhZWUtNGY5Zi0z MTA1LTgxMjctNzBjMTI1MmNiZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1 NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk N2FhMjFlNDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg+EwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAABXt9mJaMMTYUByIPsGgYM3VyXMbMNV4YwHp+qu/Xr8bBwqH6Ppes5lZ UGkXhVVtix9A6h0jmdElbXJ6lACwdeiIgp6w5g2oKR/R11HJ5ssO19qE0sOouibB /bP4hsXxMg95ZhjFIGzt5LnLZs3HRXr/jSBwWJzngkoZMCXHOZmWmQXhuKoRVHvz Ww8iZUcbrEgmXHtoOe069FyuINPGONcALQlDhtXJiudKTzDu/xxaSLyFBHw1drxF Bib8aAstqkx54u/EQrSP4LoVEyBv6QnkFTUCC8eq7kOPGC93BBXcruN/eReGbwQL I3BUYy7+7yBfFWiP4WKuCdkxt1uWKQ== -----END CERTIFICATE-----Generated at Sun Nov 15 18:13:56 2026 by rpki-client