$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/49ddd083-e7f3-37cc-86ea-eef71c189fea.roa File: 49ddd083-e7f3-37cc-86ea-eef71c189fea.roa (raw, json) Hash identifier: MjhGBP/unJkeXACpdbHDY/9OM+2PQbXhkly1qPxCC+0= Subject key identifier: 9D:08:EB:C1:2C:D1:61:B4:9A:1E:09:03:FC:3F:02:33:B6:BB:25:B1 Certificate issuer: /CN=9ace5cc7-82ec-4bec-947e-97e7401aa1cc Certificate serial: 010D0C9F4328584B890305C9B2144984AD036380 Authority key identifier: 00:A3:EE:AC:67:BF:DE:4C:CC:CD:4F:1F:E0:47:7A:CF:26:09:D7:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/49ddd083-e7f3-37cc-86ea-eef71c189fea.roa Signing time: Thu 16 Oct 2025 00:19:32 +0000 ROA not before: Thu 16 Oct 2025 00:19:32 +0000 ROA not after: Wed 14 Jan 2026 01:19:32 +0000 asID: 402092 IP address blocks: 131.143.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:03:05:c9:b2:14:49:84:ad:03:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ace5cc7-82ec-4bec-947e-97e7401aa1cc Validity Not Before: Oct 16 00:19:32 2025 GMT Not After : Jan 14 01:19:32 2026 GMT Subject: CN=3ffd28ab-21d7-4390-97cf-cfdbdb9e9855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:25:db:6f:fb:c9:e2:cf:00:d5:79:b1:77: e3:0b:20:8c:4c:71:6d:61:9e:f6:96:83:a6:1e:65: a6:b3:46:b9:60:4b:b0:66:00:52:e9:7a:0d:97:5e: be:37:8a:e8:65:2a:58:42:16:15:d2:43:d0:10:60: bc:8d:dc:01:1f:4a:62:6a:a7:59:4f:0c:4b:c4:2f: 29:b7:79:25:c7:9f:53:c3:b8:93:20:87:99:5d:5b: 1a:1a:ef:62:23:00:25:d7:b3:3c:e0:46:62:3c:40: 78:34:1d:84:1c:40:0c:f4:6b:53:1e:d5:5e:1b:38: 13:d1:00:31:af:d7:99:42:a2:17:63:56:35:28:9e: 6b:90:ed:5d:b3:df:6c:72:aa:05:af:fc:63:43:1d: 7c:16:96:1a:88:20:ab:1f:dc:23:5a:52:22:f0:90: 5f:2b:a8:be:24:63:b5:bf:33:23:8f:e7:9e:c1:c2: d6:20:d6:69:74:d9:ae:9c:cc:16:52:cd:45:59:15: f5:1c:ed:ec:e2:53:35:7c:e7:21:ef:9f:ef:5b:41: 19:a1:fd:7c:fc:41:90:e8:8a:93:44:f3:40:27:45: 3f:0a:c3:0b:97:7c:dd:77:59:24:bb:e2:5a:6e:53: 56:f2:48:b6:b0:6d:11:97:f9:16:5f:c8:1b:45:6a: 48:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:08:EB:C1:2C:D1:61:B4:9A:1E:09:03:FC:3F:02:33:B6:BB:25:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/49ddd083-e7f3-37cc-86ea-eef71c189fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.crl X509v3 Authority Key Identifier: keyid:00:A3:EE:AC:67:BF:DE:4C:CC:CD:4F:1F:E0:47:7A:CF:26:09:D7:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer sbgp-ipAddrBlock: critical IPv4: 131.143.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4e:53:26:06:ac:d4:e9:6d:32:ca:b6:1f:ff:04:39:e4:0d: a6:05:72:c2:31:6c:10:de:a9:48:ba:77:6a:05:68:d3:1d:cd: 98:6a:7f:00:97:2f:d9:c7:80:48:62:46:cb:fa:1c:83:ed:2d: c7:8b:ca:b5:ca:d1:0a:79:e0:a7:a9:01:02:17:03:4f:fd:61: 16:c4:98:53:9f:41:e3:30:07:0e:6e:b5:40:15:e4:64:1b:28: 59:57:e4:69:2e:5e:2a:bd:25:52:1e:87:47:0a:41:43:0d:af: e4:ca:35:66:7c:a9:80:01:e8:6f:8d:56:81:bc:b1:2d:9d:d4: 8e:8e:84:ee:1d:23:32:39:3d:70:3f:9e:63:1c:30:91:d2:61: f8:4f:87:80:ac:59:cc:30:20:ae:ac:22:90:84:a2:ac:b0:fd: 6c:1b:04:ba:29:c0:a1:82:15:1d:a8:ae:12:b2:96:31:f8:86: 1e:38:55:91:81:bf:c5:b8:4c:57:f5:d3:a7:92:8a:3f:e8:ac: ed:3e:61:e6:69:b7:a0:d3:af:d1:71:97:61:7f:86:22:f7:52: 18:1a:80:54:25:25:a3:27:3f:08:4a:ff:b1:17:74:ed:cb:39: 00:3e:86:63:7a:c9:59:11:3a:56:b8:81:37:5b:3a:4f:09:47: d8:5c:a0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJAwXJshRJhK0DY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjZTVjYzctODJlYy00YmVjLTk0N2UtOTdlNzQwMWFh MWNjMB4XDTI1MTAxNjAwMTkzMloXDTI2MDExNDAxMTkzMlowLzEtMCsGA1UEAxMk M2ZmZDI4YWItMjFkNy00MzkwLTk3Y2YtY2ZkYmRiOWU5ODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZUl22/7yeLPANV5sXfjCyCMTHFtYZ72loOm HmWms0a5YEuwZgBS6XoNl16+N4roZSpYQhYV0kPQEGC8jdwBH0piaqdZTwxLxC8p t3klx59Tw7iTIIeZXVsaGu9iIwAl17M84EZiPEB4NB2EHEAM9GtTHtVeGzgT0QAx r9eZQqIXY1Y1KJ5rkO1ds99scqoFr/xjQx18FpYaiCCrH9wjWlIi8JBfK6i+JGO1 vzMjj+eewcLWINZpdNmunMwWUs1FWRX1HO3s4lM1fOch75/vW0EZof18/EGQ6IqT RPNAJ0U/CsMLl3zdd1kku+JablNW8ki2sG0Rl/kWX8gbRWpILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0I68Es0WG0mh4JA/w/AjO2uyWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85YWNl NWNjNy04MmVjLTRiZWMtOTQ3ZS05N2U3NDAxYWExY2MvNDlkZGQwODMtZTdmMy0z N2NjLTg2ZWEtZWVmNzFjMTg5ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWFjZTVjYzctODJlYy00YmVjLTk0 N2UtOTdlNzQwMWFhMWNjLzlhY2U1Y2M3LTgyZWMtNGJlYy05NDdlLTk3ZTc0MDFh YTFjYy5jcmwwHwYDVR0jBBgwFoAUAKPurGe/3kzMzU8f4Ed6zyYJ10AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85YWNlNWNjNy04MmVjLTRiZWMtOTQ3ZS05N2U3 NDAxYWExY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxOUyYGrNTpbTLKth//BDnkDaYFcsIxbBDeqUi6d2oFaNMdzZhqfwCX L9nHgEhiRsv6HIPtLceLyrXK0Qp54KepAQIXA0/9YRbEmFOfQeMwBw5utUAV5GQb KFlX5GkuXiq9JVIeh0cKQUMNr+TKNWZ8qYAB6G+NVoG8sS2d1I6OhO4dIzI5PXA/ nmMcMJHSYfhPh4CsWcwwIK6sIpCEoqyw/WwbBLopwKGCFR2orhKyljH4hh44VZGB v8W4TFf106eSij/orO0+YeZpt6DTr9Fxl2F/hiL3UhgagFQlJaMnPwhK/7EXdO3L OQA+hmN6yVkROla4gTdbOk8JR9hcoP0= -----END CERTIFICATE-----Generated at Tue Oct 21 01:57:28 2025 by rpki-client