$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/45969623-15ca-3a6d-95c6-f7f1cbce5eea.roa File: 45969623-15ca-3a6d-95c6-f7f1cbce5eea.roa (raw, json) Hash identifier: qPS55IsT4ZjcORl5YfPckyuddxam8jUtirdmck0aesg= Subject key identifier: 82:EF:AE:E8:7B:18:74:2B:66:DD:72:B6:93:59:1A:A5:72:CF:1A:75 Certificate issuer: /CN=60c99364-71db-4a15-b5dd-c9b590a5c628 Certificate serial: 010D0C9F4328584B82A747C202826333E28D0C00 Authority key identifier: 30:BD:65:B1:18:E9:3F:1B:B4:E8:CA:88:6F:29:7A:44:00:FC:6E:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/45969623-15ca-3a6d-95c6-f7f1cbce5eea.roa Signing time: Mon 13 Oct 2025 17:39:50 +0000 ROA not before: Mon 13 Oct 2025 17:39:50 +0000 ROA not after: Sun 11 Jan 2026 18:39:50 +0000 asID: 51299 IP address blocks: 131.143.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/60c99364-71db-4a15-b5dd-c9b590a5c628.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/60c99364-71db-4a15-b5dd-c9b590a5c628.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:a7:47:c2:02:82:63:33:e2:8d:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c99364-71db-4a15-b5dd-c9b590a5c628 Validity Not Before: Oct 13 17:39:50 2025 GMT Not After : Jan 11 18:39:50 2026 GMT Subject: CN=e28dfc00-b7e4-48ce-90f6-ade67e0ce2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:d0:32:0b:a7:a5:29:c7:00:c3:66:e9:e9: cd:ea:b7:2b:d2:11:c4:a3:fb:c5:c8:85:16:cc:34: 71:a1:d7:2a:63:1a:cb:73:10:e9:3c:fb:8d:3e:73: a0:fd:c5:01:ec:d3:d4:01:85:9e:12:b6:35:5e:9e: c4:e4:5f:37:7c:ae:69:d6:e4:5f:e6:7a:13:af:4e: 8b:f0:b5:96:a7:f2:03:a9:ba:40:41:c8:0d:a5:02: 18:05:d5:b9:6a:ef:a2:f3:17:02:b4:a4:53:e6:90: d6:23:79:52:9f:e1:a0:ba:b3:67:59:d3:10:29:7f: b7:42:e2:24:43:d3:06:ca:68:f5:ae:ee:3f:31:cd: 32:fb:cd:79:99:2b:67:91:eb:ff:f5:de:a1:2f:76: 6a:c1:72:91:01:9a:1b:94:e2:a5:3e:f0:45:c9:f9: 6d:0f:f6:ca:ab:9b:a5:b7:84:fb:2c:16:4b:97:09: cb:30:9c:2e:cd:ff:a4:2d:cf:c5:f0:1d:10:0a:42: 87:f8:c5:e4:4f:b4:13:44:53:a3:48:74:57:95:4f: 17:90:38:11:44:91:33:ac:ce:a1:eb:92:9a:36:8d: 70:e3:90:a0:c8:31:b5:b9:2e:71:9f:a0:9e:c5:b4: 8d:cd:c6:9a:a4:95:03:fd:ae:00:81:6b:da:f0:99: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EF:AE:E8:7B:18:74:2B:66:DD:72:B6:93:59:1A:A5:72:CF:1A:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/45969623-15ca-3a6d-95c6-f7f1cbce5eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/60c99364-71db-4a15-b5dd-c9b590a5c628.crl X509v3 Authority Key Identifier: keyid:30:BD:65:B1:18:E9:3F:1B:B4:E8:CA:88:6F:29:7A:44:00:FC:6E:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628.cer sbgp-ipAddrBlock: critical IPv4: 131.143.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1c:ef:10:50:00:d6:5b:5f:c3:67:ff:5a:b0:c5:a2:d9:56: 1c:60:db:90:fc:6f:84:3f:4c:83:b7:87:6f:3f:83:9e:4c:7f: e5:0c:57:dd:d9:fa:ea:18:32:4f:b9:49:3c:23:b8:c9:10:fa: 72:18:b0:f7:cc:93:26:1f:70:16:b0:4b:31:94:0e:45:a7:7b: 1e:70:a4:69:13:e9:6f:e3:91:bc:16:6b:af:c2:b4:d8:04:3e: 40:1b:d4:0e:f8:de:53:76:62:1a:e5:2e:fe:8f:b9:74:aa:55: 56:c5:26:6a:e3:a0:b9:6f:26:df:dc:c4:80:4d:b1:7f:f7:8c: 81:13:c1:f4:80:f6:d6:57:e2:fa:31:c3:12:de:b4:0e:f0:50: 23:e6:d7:7c:e5:0d:7a:87:8e:51:41:34:aa:c3:4d:ee:90:bd: 25:d0:65:7c:a9:a8:ac:2b:bb:83:cf:49:bc:d5:af:f5:0e:67: 9e:75:07:0a:11:d4:2d:75:3b:1c:c0:ac:db:4a:28:99:9a:c5: c3:e9:b5:f4:af:41:27:a4:4c:d6:ff:b1:74:eb:3f:c9:e4:0b: 14:59:37:37:7e:d2:52:d3:48:ce:d6:07:f1:72:c6:3c:4c:2e: 2a:bd:25:8d:31:48:3d:75:8d:33:71:2d:b4:58:80:5a:49:cb: 11:48:bf:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCp0fCAoJjM+KNDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBjOTkzNjQtNzFkYi00YTE1LWI1ZGQtYzliNTkwYTVj NjI4MB4XDTI1MTAxMzE3Mzk1MFoXDTI2MDExMTE4Mzk1MFowLzEtMCsGA1UEAxMk ZTI4ZGZjMDAtYjdlNC00OGNlLTkwZjYtYWRlNjdlMGNlMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCLQMgunpSnHAMNm6enN6rcr0hHEo/vFyIUW zDRxodcqYxrLcxDpPPuNPnOg/cUB7NPUAYWeErY1Xp7E5F83fK5p1uRf5noTr06L 8LWWp/IDqbpAQcgNpQIYBdW5au+i8xcCtKRT5pDWI3lSn+GgurNnWdMQKX+3QuIk Q9MGymj1ru4/Mc0y+815mStnkev/9d6hL3ZqwXKRAZoblOKlPvBFyfltD/bKq5ul t4T7LBZLlwnLMJwuzf+kLc/F8B0QCkKH+MXkT7QTRFOjSHRXlU8XkDgRRJEzrM6h 65KaNo1w45CgyDG1uS5xn6CexbSNzcaapJUD/a4AgWva8Jn03QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILvruh7GHQrZt1ytpNZGqVyzxp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGM5 OTM2NC03MWRiLTRhMTUtYjVkZC1jOWI1OTBhNWM2MjgvNDU5Njk2MjMtMTVjYS0z YTZkLTk1YzYtZjdmMWNiY2U1ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBjOTkzNjQtNzFkYi00YTE1LWI1 ZGQtYzliNTkwYTVjNjI4LzYwYzk5MzY0LTcxZGItNGExNS1iNWRkLWM5YjU5MGE1 YzYyOC5jcmwwHwYDVR0jBBgwFoAUML1lsRjpPxu06MqIbyl6RAD8bm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGM5OTM2NC03MWRiLTRhMTUtYjVkZC1jOWI1 OTBhNWM2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4+tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUc7xBQANZbX8Nn/1qwxaLZVhxg25D8b4Q/TIO3h28/g55Mf+UMV93Z +uoYMk+5STwjuMkQ+nIYsPfMkyYfcBawSzGUDkWnex5wpGkT6W/jkbwWa6/CtNgE PkAb1A743lN2YhrlLv6PuXSqVVbFJmrjoLlvJt/cxIBNsX/3jIETwfSA9tZX4vox wxLetA7wUCPm13zlDXqHjlFBNKrDTe6QvSXQZXypqKwru4PPSbzVr/UOZ551BwoR 1C11OxzArNtKKJmaxcPptfSvQSekTNb/sXTrP8nkCxRZNzd+0lLTSM7WB/FyxjxM Liq9JY0xSD11jTNxLbRYgFpJyxFIvx8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:26 2025 by rpki-client