$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa File: 5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa (raw, json) Hash identifier: kLrJtqFYe+ijXhm/mgPbx9Td1q7O/S7ZZYHtKva02eE= Subject key identifier: 20:5D:E8:42:5A:76:00:5D:D4:C7:D8:F2:0C:6E:55:15:B6:05:C5:E1 Certificate issuer: /CN=c4825bb4-0295-4646-b747-1abe4ad33f18 Certificate serial: 010D0C9F4328584B85AEF9090CBA0152C491CCC0 Authority key identifier: A0:B8:1F:8E:EB:DD:8F:BB:88:E7:F8:AB:55:93:38:50:4F:49:67:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa Signing time: Tue 14 Oct 2025 19:42:46 +0000 ROA not before: Tue 14 Oct 2025 19:42:46 +0000 ROA not after: Mon 12 Jan 2026 20:42:46 +0000 asID: 402091 IP address blocks: 131.143.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:ae:f9:09:0c:ba:01:52:c4:91:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4825bb4-0295-4646-b747-1abe4ad33f18 Validity Not Before: Oct 14 19:42:46 2025 GMT Not After : Jan 12 20:42:46 2026 GMT Subject: CN=61f65763-6287-41da-a147-c6401786a66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:cf:94:1e:37:dd:c8:e0:bd:d8:0f:e0:ee: 15:5d:24:83:64:39:fc:61:49:e6:7a:43:cd:c2:52: ee:b6:70:ab:79:b9:76:d5:57:1b:f1:a5:48:ae:5a: f3:08:b9:a1:a0:40:5d:d8:38:18:b7:28:6f:88:eb: a2:76:cc:39:4f:0e:e0:5f:c0:a5:0a:c9:d3:58:a4: e6:0e:2a:d3:aa:1a:ab:52:b2:75:c3:08:fc:0b:ce: c7:b0:cf:c0:97:e6:9d:9c:1c:5f:03:85:34:2f:9a: 22:77:5a:ff:36:31:57:fb:d0:48:1c:12:24:78:0c: d9:99:c3:94:fa:9b:e5:db:4c:39:de:07:61:72:e9: 28:b1:dd:98:d8:49:9c:be:e3:be:ee:01:80:4b:62: aa:06:65:c6:87:e7:45:81:b5:36:28:83:75:48:0f: a1:a5:eb:39:8c:6e:05:bd:67:75:10:76:b7:c6:de: 82:a5:e1:51:3b:22:12:10:55:a6:44:1f:90:f7:9b: 0d:e3:a4:07:bd:c1:d9:57:c6:cd:20:5b:dd:c8:92: 92:5d:cb:4d:53:19:24:92:30:82:b5:7e:6c:e3:10: 60:36:c8:b4:40:2d:f9:b2:14:fd:1e:68:08:1e:af: 78:4f:49:b0:9d:f7:c0:f9:4c:52:90:94:a1:48:88: c6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5D:E8:42:5A:76:00:5D:D4:C7:D8:F2:0C:6E:55:15:B6:05:C5:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.crl X509v3 Authority Key Identifier: keyid:A0:B8:1F:8E:EB:DD:8F:BB:88:E7:F8:AB:55:93:38:50:4F:49:67:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18.cer sbgp-ipAddrBlock: critical IPv4: 131.143.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a6:8f:73:5b:32:41:39:4a:73:d7:2c:d6:9c:05:91:e2:dc: 95:15:86:c6:b2:65:c6:d5:90:d5:db:d2:7f:b5:09:78:4f:95: e1:98:06:1b:2f:b2:6b:c6:9f:8d:dc:ca:58:09:78:3c:c4:a3: 5d:93:0c:34:ee:57:32:ac:65:28:e6:f9:42:4f:a0:81:5f:a3: 95:d3:a3:33:5c:8d:8f:50:32:f3:59:0f:58:fd:45:16:e3:f1: b1:31:31:9d:e2:6f:c6:d2:e9:09:4e:b5:fe:bb:26:a7:58:cc: 0a:d4:5e:8c:d3:64:25:ca:24:da:a7:f3:06:97:0f:f3:1b:80: ae:4a:3b:83:b8:b2:14:98:79:22:29:2a:53:ab:26:b7:8c:53: 1c:dd:88:37:14:46:aa:43:57:df:d4:e1:9d:f2:18:55:86:9a: cf:d8:95:b1:a8:b5:0b:58:b9:e4:bb:04:a1:88:64:81:84:1b: 9a:24:2a:b5:c4:ed:97:52:d1:f4:74:56:15:6f:c7:23:38:e2: 31:66:75:de:7e:e1:67:4f:a6:92:9e:8a:68:99:09:60:2a:29: 83:7a:6e:97:10:31:b3:3f:ac:bb:c0:cc:17:99:45:2f:52:82: 8c:c2:b4:58:e8:90:da:07:ec:a5:83:25:c5:4f:11:57:1f:4c: 0b:e5:fc:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFrvkJDLoBUsSRzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ4MjViYjQtMDI5NS00NjQ2LWI3NDctMWFiZTRhZDMz ZjE4MB4XDTI1MTAxNDE5NDI0NloXDTI2MDExMjIwNDI0NlowLzEtMCsGA1UEAxMk NjFmNjU3NjMtNjI4Ny00MWRhLWExNDctYzY0MDE3ODZhNjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCjPlB433cjgvdgP4O4VXSSDZDn8YUnmekPN wlLutnCrebl21Vcb8aVIrlrzCLmhoEBd2DgYtyhviOuidsw5Tw7gX8ClCsnTWKTm DirTqhqrUrJ1wwj8C87HsM/Al+adnBxfA4U0L5oid1r/NjFX+9BIHBIkeAzZmcOU +pvl20w53gdhcukosd2Y2EmcvuO+7gGAS2KqBmXGh+dFgbU2KIN1SA+hpes5jG4F vWd1EHa3xt6CpeFROyISEFWmRB+Q95sN46QHvcHZV8bNIFvdyJKSXctNUxkkkjCC tX5s4xBgNsi0QC35shT9HmgIHq94T0mwnffA+UxSkJShSIjG0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBd6EJadgBd1MfY8gxuVRW2BcXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNDgy NWJiNC0wMjk1LTQ2NDYtYjc0Ny0xYWJlNGFkMzNmMTgvNWRhZDFjNzItOTVjNy0z MjI5LTkyN2MtNjlmYmQ1Y2FjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzQ4MjViYjQtMDI5NS00NjQ2LWI3 NDctMWFiZTRhZDMzZjE4L2M0ODI1YmI0LTAyOTUtNDY0Ni1iNzQ3LTFhYmU0YWQz M2YxOC5jcmwwHwYDVR0jBBgwFoAUoLgfjuvdj7uI5/irVZM4UE9JZx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNDgyNWJiNC0wMjk1LTQ2NDYtYjc0Ny0xYWJl NGFkMzNmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqmj3NbMkE5SnPXLNacBZHi3JUVhsayZcbVkNXb0n+1CXhPleGYBhsv smvGn43cylgJeDzEo12TDDTuVzKsZSjm+UJPoIFfo5XTozNcjY9QMvNZD1j9RRbj 8bExMZ3ib8bS6QlOtf67JqdYzArUXozTZCXKJNqn8waXD/MbgK5KO4O4shSYeSIp KlOrJreMUxzdiDcURqpDV9/U4Z3yGFWGms/YlbGotQtYueS7BKGIZIGEG5okKrXE 7ZdS0fR0VhVvxyM44jFmdd5+4WdPppKeimiZCWAqKYN6bpcQMbM/rLvAzBeZRS9S gozCtFjokNoH7KWDJcVPEVcfTAvl/LA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:32:14 2025 by rpki-client