$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ec746cda-6b08-3f4b-9c2e-304be7a12eb7.roa File: ec746cda-6b08-3f4b-9c2e-304be7a12eb7.roa (raw, json) Hash identifier: zVwgpVJ+7gbExx2OUrNpM7TYe0+yok48aHhszsw9lvo= Subject key identifier: 10:F5:57:21:FD:82:D3:0F:B1:92:DA:69:66:B9:09:1A:1F:B9:E4:B8 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584AF0F13E413647BAE95C6FD2A0 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ec746cda-6b08-3f4b-9c2e-304be7a12eb7.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 398014 IP address blocks: 131.226.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3e:41:36:47:ba:e9:5c:6f:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=5e3483d4-fe8b-4525-932a-719d7e1077b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:af:a6:31:ad:61:b4:d3:36:b6:bc:35:69:af: 2f:8a:78:0f:e6:c9:18:de:6c:16:d3:02:5f:20:b4: 99:18:73:d4:5c:56:dd:46:92:88:30:5f:d7:63:b4: c2:38:4d:c8:ac:be:22:93:7f:fc:ba:86:d0:0b:a8: 67:f3:2a:28:8d:c7:0b:91:77:e8:49:0a:1e:01:1c: 4d:ba:c6:16:d0:86:f8:1d:88:d6:86:fe:24:fa:a2: d6:40:77:ad:7a:03:d1:74:0f:2e:c5:42:41:a6:3b: 56:e0:78:06:d0:1f:d7:c1:f9:9f:bc:75:8d:2b:61: 5f:09:15:b1:1a:92:cf:c6:30:7e:5b:bd:62:50:f9: 39:7f:93:23:e9:98:68:c3:90:61:59:ee:18:98:02: e4:4a:5a:46:be:8c:97:75:25:e9:9d:86:3b:c9:75: d6:0a:58:09:25:19:dc:fa:da:b8:45:35:6c:d2:a2: 2e:c3:88:19:dd:f5:3b:9b:81:c9:5d:82:9c:a4:08: 44:01:48:1d:80:e9:7b:99:05:35:fa:c6:b1:0f:ed: 4e:27:df:a6:85:b1:4d:02:80:ba:23:39:2f:17:6d: 59:5d:a2:2e:d6:af:70:a8:ec:56:34:7a:68:03:51: b7:c6:ef:f7:40:1e:7b:fb:1d:e7:bb:2a:e8:6a:c8: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F5:57:21:FD:82:D3:0F:B1:92:DA:69:66:B9:09:1A:1F:B9:E4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ec746cda-6b08-3f4b-9c2e-304be7a12eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 131.226.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b8:a0:69:65:7a:9a:be:7c:9b:e7:d9:ef:69:9e:07:c5:29: b3:a5:ca:20:82:58:3f:08:27:a1:b7:06:59:82:8f:ae:78:9d: 82:29:37:3d:07:c2:85:f3:a1:e4:f3:0f:06:f4:1a:6c:13:26: cb:b0:85:6f:17:30:1d:86:47:2c:ba:7e:43:9e:a2:e1:f7:e1: 0b:7a:29:6a:1d:ff:74:17:c8:90:fe:53:68:79:4c:41:05:7e: f4:2a:a9:c4:ff:c4:9f:f6:ac:4a:60:51:e6:f5:c3:39:8a:82: 70:92:61:5d:5f:a2:50:c1:25:8e:83:b8:4f:65:a2:2f:46:7e: 36:34:50:f1:79:a7:93:47:9b:6f:e9:fb:99:4d:47:cd:81:f3: 58:f7:43:5c:be:38:60:50:b7:73:69:2e:d9:e2:94:bf:32:6e: cf:1b:52:fb:22:6c:64:00:44:3a:f9:aa:3c:53:17:8e:49:f1: 2e:5d:09:1d:29:a0:76:a6:f2:0c:74:ef:e3:b6:b1:57:49:38: d9:60:80:7b:78:42:c6:5c:8b:59:09:aa:b9:72:cf:89:d8:f9: 8a:e9:c9:63:ef:06:4f:7f:38:9b:b7:32:bc:f7:8a:a9:e1:37: 82:59:c6:b9:2a:e3:67:cd:b9:29:09:84:44:46:56:cb:08:fd: 38:60:98:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8T5BNke66Vxv0qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NWUzNDgzZDQtZmU4Yi00NTI1LTkzMmEtNzE5ZDdlMTA3N2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq+mMa1htNM2trw1aa8vingP5skY3mwW0wJf ILSZGHPUXFbdRpKIMF/XY7TCOE3IrL4ik3/8uobQC6hn8yoojccLkXfoSQoeARxN usYW0Ib4HYjWhv4k+qLWQHetegPRdA8uxUJBpjtW4HgG0B/XwfmfvHWNK2FfCRWx GpLPxjB+W71iUPk5f5Mj6Zhow5BhWe4YmALkSlpGvoyXdSXpnYY7yXXWClgJJRnc +tq4RTVs0qIuw4gZ3fU7m4HJXYKcpAhEAUgdgOl7mQU1+saxD+1OJ9+mhbFNAoC6 IzkvF21ZXaIu1q9wqOxWNHpoA1G3xu/3QB57+x3nuyroashunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBD1VyH9gtMPsZLaaWa5CRofueS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvZWM3NDZjZGEtNmIwOC0z ZjRiLTljMmUtMzA0YmU3YTEyZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGg+LAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu4oGllepq+fJvn2e9pngfFKbOlyiCCWD8IJ6G3BlmCj654nYIpNz0H woXzoeTzDwb0GmwTJsuwhW8XMB2GRyy6fkOeouH34Qt6KWod/3QXyJD+U2h5TEEF fvQqqcT/xJ/2rEpgUeb1wzmKgnCSYV1folDBJY6DuE9loi9GfjY0UPF5p5NHm2/p +5lNR82B81j3Q1y+OGBQt3NpLtnilL8ybs8bUvsibGQARDr5qjxTF45J8S5dCR0p oHam8gx07+O2sVdJONlggHt4QsZci1kJqrlyz4nY+YrpyWPvBk9/OJu3Mrz3iqnh N4JZxrkq42fNuSkJhERGVssI/ThgmPk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:32:14 2025 by rpki-client