$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/85080ee6-4816-3c0b-8319-42c05a6124e1.roa File: 85080ee6-4816-3c0b-8319-42c05a6124e1.roa (raw, json) Hash identifier: 9G2hobebMQ+/2jxQrrJ15WKFI8Zf6iqaaShE+RZUAyw= Subject key identifier: 29:70:2B:6B:EB:9D:6D:E2:81:BC:2B:ED:AC:E5:75:AD:61:0F:14:D7 Certificate issuer: /CN=70833e05-2509-4686-bf80-d3c49dc27dac Certificate serial: 010D0C9F4328584B83C2067A4693DC7A766FCE00 Authority key identifier: 51:E6:3D:C3:5C:D0:8B:93:C3:B0:A2:16:28:5A:0B:59:2C:23:20:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/85080ee6-4816-3c0b-8319-42c05a6124e1.roa Signing time: Tue 14 Oct 2025 03:09:32 +0000 ROA not before: Tue 14 Oct 2025 03:09:32 +0000 ROA not after: Mon 12 Jan 2026 04:09:32 +0000 asID: 46488 IP address blocks: 131.143.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:c2:06:7a:46:93:dc:7a:76:6f:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70833e05-2509-4686-bf80-d3c49dc27dac Validity Not Before: Oct 14 03:09:32 2025 GMT Not After : Jan 12 04:09:32 2026 GMT Subject: CN=dfb358a9-7a74-4760-945e-046956708b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:7b:b9:71:0b:9a:f4:cc:1d:2d:99:f1:46: c4:77:06:82:40:9d:19:52:2e:79:6a:06:14:b1:04: dd:ef:c6:d7:6d:b9:1d:14:14:02:35:ac:95:de:ed: 02:49:ea:86:8c:e3:da:7d:03:ca:94:e9:89:8e:24: a0:3f:33:ce:15:55:b2:7a:a1:9c:cc:d7:fe:f5:84: bf:81:89:cb:ed:38:13:ef:0a:55:a6:7c:e8:99:f5: 94:c8:12:05:00:eb:5e:2e:33:b1:29:91:4a:56:2f: c4:1f:47:b2:21:ff:e4:b6:01:c5:2f:0d:ba:24:b5: b2:87:d1:5b:44:85:1a:a6:0d:eb:01:97:1c:c0:5a: 69:1b:8e:11:c7:d9:1f:86:db:ca:79:c3:80:b6:a3: 72:5b:da:54:19:81:ea:c5:e9:d8:c0:63:a5:fa:ca: 04:71:92:6c:0b:37:92:13:b9:8d:f8:08:62:90:ec: 82:20:c6:3b:65:2c:09:a4:28:d6:ac:bc:9a:c9:b2: 01:26:60:86:60:ae:be:41:17:da:19:aa:1a:16:b4: 7b:86:ae:75:92:0d:8a:22:d0:75:08:6e:22:30:b0: a8:c5:bb:f3:b3:8e:77:f9:94:b1:e9:ef:f7:06:b8: f1:0b:7e:bd:5a:3a:24:75:1b:43:09:37:2c:7c:1c: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:70:2B:6B:EB:9D:6D:E2:81:BC:2B:ED:AC:E5:75:AD:61:0F:14:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/85080ee6-4816-3c0b-8319-42c05a6124e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.crl X509v3 Authority Key Identifier: keyid:51:E6:3D:C3:5C:D0:8B:93:C3:B0:A2:16:28:5A:0B:59:2C:23:20:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac.cer sbgp-ipAddrBlock: critical IPv4: 131.143.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:da:98:20:2c:19:52:46:43:a9:42:44:a6:41:f5:61:80:eb: 8c:18:e2:d8:b2:67:2e:9f:00:b9:3d:b2:a0:aa:14:5e:77:e4: 21:7e:75:63:77:4d:81:04:48:9c:55:c9:06:d2:d5:a4:9f:99: 40:40:2c:61:e0:4d:d8:3c:17:1a:94:e4:b9:ea:96:1c:44:d9: 93:23:fd:32:79:8c:8e:ac:41:1a:47:9d:44:e3:a9:e9:63:f1: 47:55:c3:04:a4:42:a4:f6:2c:60:a1:e8:47:4b:d0:df:e0:7a: ed:d9:93:c6:93:25:0e:f7:f1:d1:10:e5:48:86:09:5a:c3:8c: 22:f5:05:ef:68:12:12:fe:ab:1c:9f:e5:47:c9:28:8c:89:8b: 59:e7:bf:79:05:c9:d0:9b:0f:e5:9a:b9:10:35:5b:44:0d:4f: 68:a8:50:69:cb:b9:7a:cc:a0:d6:18:dc:f1:41:78:64:b0:3f: 11:f9:ae:6c:87:8e:62:92:c4:6e:2c:e5:ea:1f:34:02:45:0d: f8:2f:2e:5f:e3:b4:be:36:ee:2b:ff:f0:ba:7b:85:bc:9b:0d: 82:1e:59:bc:be:54:c0:ba:84:79:51:2d:e8:95:f5:04:20:47: e1:e8:db:31:65:d9:82:5a:32:29:02:be:df:53:82:53:c1:76: 7b:de:88:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDwgZ6RpPcenZvzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA4MzNlMDUtMjUwOS00Njg2LWJmODAtZDNjNDlkYzI3 ZGFjMB4XDTI1MTAxNDAzMDkzMloXDTI2MDExMjA0MDkzMlowLzEtMCsGA1UEAxMk ZGZiMzU4YTktN2E3NC00NzYwLTk0NWUtMDQ2OTU2NzA4YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf97uXELmvTMHS2Z8UbEdwaCQJ0ZUi55agYU sQTd78bXbbkdFBQCNayV3u0CSeqGjOPafQPKlOmJjiSgPzPOFVWyeqGczNf+9YS/ gYnL7TgT7wpVpnzomfWUyBIFAOteLjOxKZFKVi/EH0eyIf/ktgHFLw26JLWyh9Fb RIUapg3rAZccwFppG44Rx9kfhtvKecOAtqNyW9pUGYHqxenYwGOl+soEcZJsCzeS E7mN+AhikOyCIMY7ZSwJpCjWrLyaybIBJmCGYK6+QRfaGaoaFrR7hq51kg2KItB1 CG4iMLCoxbvzs453+ZSx6e/3BrjxC369WjokdRtDCTcsfBy0KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClwK2vrnW3igbwr7azlda1hDxTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MDgz M2UwNS0yNTA5LTQ2ODYtYmY4MC1kM2M0OWRjMjdkYWMvODUwODBlZTYtNDgxNi0z YzBiLTgzMTktNDJjMDVhNjEyNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzA4MzNlMDUtMjUwOS00Njg2LWJm ODAtZDNjNDlkYzI3ZGFjLzcwODMzZTA1LTI1MDktNDY4Ni1iZjgwLWQzYzQ5ZGMy N2RhYy5jcmwwHwYDVR0jBBgwFoAUUeY9w1zQi5PDsKIWKFoLWSwjIEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83MDgzM2UwNS0yNTA5LTQ2ODYtYmY4MC1kM2M0 OWRjMjdkYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg49sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/amCAsGVJGQ6lCRKZB9WGA64wY4tiyZy6fALk9sqCqFF535CF+dWN3 TYEESJxVyQbS1aSfmUBALGHgTdg8FxqU5LnqlhxE2ZMj/TJ5jI6sQRpHnUTjqelj 8UdVwwSkQqT2LGCh6EdL0N/geu3Zk8aTJQ738dEQ5UiGCVrDjCL1Be9oEhL+qxyf 5UfJKIyJi1nnv3kFydCbD+WauRA1W0QNT2ioUGnLuXrMoNYY3PFBeGSwPxH5rmyH jmKSxG4s5eofNAJFDfgvLl/jtL427iv/8Lp7hbybDYIeWby+VMC6hHlRLeiV9QQg R+Ho2zFl2YJaMikCvt9TglPBdnveiFU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:49:25 2025 by rpki-client