$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa File: a64bf38f-925a-34bb-b213-9abac238d2a5.roa (raw, json) Hash identifier: AZxrxFcpOPlwncaJs8rFDIbZDAWVcw7AMuqcBqrqfVs= Subject key identifier: 40:96:3D:0E:29:2B:50:47:9E:8F:64:B6:71:EB:39:BC:05:B8:C6:B2 Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Certificate serial: 010D0C9F4328584B477C78F1EB476BA1959C7600 Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 3152 IP address blocks: 131.225.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:78:f1:eb:47:6b:a1:95:9c:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=372cdbaf-047c-4605-bd84-39bf966c6441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:c2:51:30:59:8b:b7:32:7f:93:a7:f8:e7: dd:06:e5:13:9f:88:48:ba:17:93:60:de:bd:e1:12: 46:53:17:15:01:b8:c1:1e:9f:28:90:6c:ff:97:6c: 3a:ea:9c:5c:da:6c:fa:94:26:b8:5b:e2:fb:4f:5b: 90:8f:07:ea:18:f9:83:b8:06:98:a9:bb:bc:53:ba: 3c:7d:b8:a0:4c:9e:60:e8:e6:70:30:18:7c:a2:f6: cc:b9:24:33:f4:63:8d:0b:42:72:6e:53:46:6f:08: 00:8a:b6:ad:7d:3f:8b:c7:61:8b:5f:0f:38:1c:65: c1:25:35:fd:63:36:1f:f2:0e:0b:18:3a:0e:78:ff: 3f:e8:cb:16:dc:6a:8b:34:dc:1e:ab:30:38:68:0a: 78:0a:fd:fe:ee:05:ba:12:8b:a5:6c:c2:fb:7c:7d: c1:e6:6f:4a:9f:5b:fb:59:6e:4c:eb:57:c1:bc:69: bf:8c:00:75:1a:50:04:5b:4b:23:5b:e9:ae:47:36: ae:13:b2:a9:95:40:ac:cc:b7:f4:10:5a:42:11:1c: f0:39:a5:ad:be:84:95:a4:f7:e0:fb:c5:53:21:53: f7:29:0c:a7:49:65:ca:e1:2f:c1:af:de:d4:bb:00: 46:f3:2f:58:e2:b6:89:34:d8:a7:18:f5:2b:de:1d: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:96:3D:0E:29:2B:50:47:9E:8F:64:B6:71:EB:39:BC:05:B8:C6:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl X509v3 Authority Key Identifier: keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer sbgp-ipAddrBlock: critical IPv4: 131.225.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:73:69:50:c0:d6:cc:48:e1:07:ff:93:1c:ec:f3:fc:34:ef: 8e:70:f5:53:22:ea:2f:11:ac:9f:50:24:20:4f:27:8f:a9:d1: 22:52:e9:c2:d6:f8:05:27:11:a9:b8:18:64:1c:84:d9:18:38: 7b:13:f2:b1:05:5a:d8:c0:3c:86:98:57:61:30:c3:94:2e:16: f9:cc:fc:d2:f7:ca:66:01:da:27:49:52:72:1c:96:d3:2c:39: 50:5f:fd:a2:e7:67:49:85:fd:97:b9:af:cc:55:fd:89:2e:3b: c5:7f:07:98:95:4b:1d:98:f3:a2:d7:c0:6f:42:21:fa:60:65: 06:96:70:80:d6:f7:ec:00:82:d7:e2:26:de:70:7f:76:91:8f: 07:74:c4:c9:b1:d7:66:9a:56:13:74:21:40:39:d9:c5:9d:29: 1c:f3:6a:b1:fe:6c:af:21:2b:58:5e:b4:bb:62:10:94:fa:de: 58:81:15:83:34:61:17:3d:c0:21:5d:a1:c8:40:da:b6:d2:a0: 70:8d:b2:4d:c9:58:d9:20:f3:48:47:cb:94:8d:db:99:75:85: 42:27:88:09:83:0a:b0:40:4c:35:aa:a4:e3:4a:96:fa:21:5c: 7d:19:e6:00:ec:c9:01:4f:07:6e:a7:c5:dd:4c:67:db:8d:ca: c6:ac:9a:66 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtHfHjx60droZWcdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx ZTQ5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MzcyY2RiYWYtMDQ3Yy00NjA1LWJkODQtMzliZjk2NmM2NDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGrCUTBZi7cyf5On+OfdBuUTn4hIuheTYN69 4RJGUxcVAbjBHp8okGz/l2w66pxc2mz6lCa4W+L7T1uQjwfqGPmDuAaYqbu8U7o8 fbigTJ5g6OZwMBh8ovbMuSQz9GONC0JyblNGbwgAiratfT+Lx2GLXw84HGXBJTX9 YzYf8g4LGDoOeP8/6MsW3GqLNNweqzA4aAp4Cv3+7gW6EoulbML7fH3B5m9Kn1v7 WW5M61fBvGm/jAB1GlAEW0sjW+muRzauE7KplUCszLf0EFpCERzwOaWtvoSVpPfg +8VTIVP3KQynSWXK4S/Br97UuwBG8y9Y4raJNNinGPUr3h3IzwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFECWPQ4pK1BHno9ktnHrObwFuMayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvYTY0YmYzOGYtOTI1YS0z NGJiLWIyMTMtOWFiYWMyMzhkMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1 NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk N2FhMjFlNDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg+EwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAInNpUMDWzEjhB/+THOzz/DTvjnD1UyLqLxGsn1AkIE8nj6nRIlLpwtb4 BScRqbgYZByE2Rg4exPysQVa2MA8hphXYTDDlC4W+cz80vfKZgHaJ0lSchyW0yw5 UF/9oudnSYX9l7mvzFX9iS47xX8HmJVLHZjzotfAb0Ih+mBlBpZwgNb37ACC1+Im 3nB/dpGPB3TEybHXZppWE3QhQDnZxZ0pHPNqsf5sryErWF60u2IQlPreWIEVgzRh Fz3AIV2hyEDattKgcI2yTclY2SDzSEfLlI3bmXWFQieICYMKsEBMNaqk40qW+iFc fRnmAOzJAU8HbqfF3Uxn243KxqyaZg== -----END CERTIFICATE-----Generated at Tue Oct 21 06:28:07 2025 by rpki-client