$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa File: eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa (raw, json) Hash identifier: 4dC7gztmURAnu2oj1nS5YCab/csUH8jlDbkIDZWdStg= Subject key identifier: AE:DC:BF:30:86:DB:65:51:3A:1B:6F:28:08:A9:B9:0C:56:88:FC:57 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584B95A7978E33391639B25C6300 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 399381 IP address blocks: 131.201.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:97:8e:33:39:16:39:b2:5c:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8953501a-0bb1-4a3a-820c-3b91466c166c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d8:17:58:5d:8e:a1:76:c8:70:54:55:ee:ed: 47:cb:2b:f9:19:24:c3:59:f9:79:48:df:f3:20:61: 3f:58:d3:49:21:29:7e:d3:a2:c5:46:85:23:9f:6d: 9c:cb:06:b2:a1:ac:0d:f1:67:b4:46:e4:c7:33:c9: d5:aa:a9:fe:59:2b:da:bd:11:eb:cd:2e:9b:d6:46: 9f:0c:f7:cd:4b:8a:4d:2a:4e:af:8d:68:3d:b2:f6: 6d:6f:69:0d:86:30:d1:1e:72:fd:2b:b1:3e:32:00: 9a:43:06:43:7b:1f:3e:45:2f:a1:bb:24:60:3d:b6: cb:a8:96:6c:37:4a:28:7a:63:8a:2b:06:4a:97:89: bc:fa:b9:f2:6a:f7:f4:57:29:dc:63:3c:29:b1:81: d5:1f:d5:34:19:83:66:b4:5b:c5:1d:5f:7f:c7:26: 23:a0:07:df:12:d8:c8:58:39:e4:2b:3f:a1:00:96: a3:85:7e:6c:e4:fb:78:43:9e:b2:e4:e4:c1:85:4e: d4:52:9a:61:b8:bc:f8:f9:a7:76:43:a6:e7:26:d9: 3b:7f:e0:64:97:7e:f2:6b:d0:a5:e5:2c:9a:e4:34: 63:6c:c9:d5:87:ae:0d:5c:a8:77:23:16:07:07:fe: 8b:72:cf:a5:09:c6:58:51:cc:ab:cd:7b:8a:59:71: 06:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DC:BF:30:86:DB:65:51:3A:1B:6F:28:08:A9:B9:0C:56:88:FC:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:30:1a:1c:16:66:55:c5:44:9c:ba:bc:96:05:8a:9b:5f:40: 81:63:95:5d:44:db:7d:7e:63:14:11:62:d7:38:65:a9:cb:68: 83:0f:95:c0:a0:de:19:d9:b3:a5:65:f7:90:e9:21:9b:11:c9: 56:e7:ff:33:08:f4:41:e4:18:51:dd:f2:8b:d4:df:61:68:cc: c0:2f:e0:7e:41:80:a0:35:69:ae:8c:60:57:17:bc:ed:8a:d5: dc:30:19:35:f6:87:2d:57:da:1c:c3:06:c1:7a:0e:ba:42:f6: 4e:79:78:e2:0a:18:78:d3:a3:ef:b0:f4:8e:dd:ef:b4:94:7b: 96:49:ed:eb:39:0c:ec:4a:e5:97:14:34:6e:f7:31:ac:78:68: 47:b2:52:9c:6a:6e:fc:d1:20:93:37:78:1d:97:4c:c8:f1:94: 5c:e8:3a:2e:f2:c5:cb:2e:2a:06:48:9f:9f:62:ef:21:f1:4e: 93:61:f9:3a:f3:a0:4f:c2:d6:94:9c:11:f1:6e:a1:1f:0c:10: 99:72:2e:46:ff:b8:b8:8b:25:34:88:44:ed:52:6d:ed:d6:ec: ed:02:6b:b5:68:94:ed:37:17:34:88:f6:92:d8:0a:07:84:ba: c5:4c:cd:63:28:98:45:be:85:6b:d1:27:24:d2:de:48:9a:e7: 06:97:8c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5eOMzkWObJcYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODk1MzUwMWEtMGJiMS00YTNhLTgyMGMtM2I5MTQ2NmMxNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNgXWF2OoXbIcFRV7u1Hyyv5GSTDWfl5SN/z IGE/WNNJISl+06LFRoUjn22cywayoawN8We0RuTHM8nVqqn+WSvavRHrzS6b1kaf DPfNS4pNKk6vjWg9svZtb2kNhjDRHnL9K7E+MgCaQwZDex8+RS+huyRgPbbLqJZs N0ooemOKKwZKl4m8+rnyavf0VyncYzwpsYHVH9U0GYNmtFvFHV9/xyYjoAffEtjI WDnkKz+hAJajhX5s5Pt4Q56y5OTBhU7UUpphuLz4+ad2Q6bnJtk7f+Bkl37ya9Cl 5Sya5DRjbMnVh64NXKh3IxYHB/6Lcs+lCcZYUcyrzXuKWXEG6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7cvzCG22VROhtvKAipuQxWiPxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvZWI5ZmNmZWMtNTc3OC0z NzQ5LWI4M2UtYzRlODRjN2ZiYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcwGhwWZlXFRJy6vJYFiptfQIFjlV1E231+YxQRYtc4ZanLaIMPlcCg 3hnZs6Vl95DpIZsRyVbn/zMI9EHkGFHd8ovU32FozMAv4H5BgKA1aa6MYFcXvO2K 1dwwGTX2hy1X2hzDBsF6DrpC9k55eOIKGHjTo++w9I7d77SUe5ZJ7es5DOxK5ZcU NG73Max4aEeyUpxqbvzRIJM3eB2XTMjxlFzoOi7yxcsuKgZIn59i7yHxTpNh+Trz oE/C1pScEfFuoR8MEJlyLkb/uLiLJTSIRO1Sbe3W7O0Ca7VolO03FzSI9pLYCgeE usVMzWMomEW+hWvRJyTS3kia5waXjJQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:00 2025 by rpki-client