$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/825c2fa1-c91b-3c43-a4d0-c8d16fbc75c9.roa File: 825c2fa1-c91b-3c43-a4d0-c8d16fbc75c9.roa (raw, json) Hash identifier: x+I5zV0jZFerR5b5DWbSrIz4OyPQdElbA0MpmjlOsGY= Subject key identifier: 9E:A3:37:27:85:6D:E3:7A:D2:2E:D7:89:9C:86:7C:91:66:F4:0A:8E Certificate issuer: /CN=02e2201b-75a6-4194-9898-6fe2f60eaf78 Certificate serial: 010D0C9F4328584B7A17499519E872D4616E9E40 Authority key identifier: 33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/825c2fa1-c91b-3c43-a4d0-c8d16fbc75c9.roa Signing time: Fri 10 Oct 2025 16:03:14 +0000 ROA not before: Fri 10 Oct 2025 16:03:14 +0000 ROA not after: Thu 08 Jan 2026 17:03:14 +0000 asID: 55140 IP address blocks: 131.149.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:17:49:95:19:e8:72:d4:61:6e:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02e2201b-75a6-4194-9898-6fe2f60eaf78 Validity Not Before: Oct 10 16:03:14 2025 GMT Not After : Jan 8 17:03:14 2026 GMT Subject: CN=7b21241a-95e5-4033-b77f-8126cb5903f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:31:0e:a2:a7:0b:96:57:43:71:31:ad:2d: 16:15:f2:e0:ae:ad:e3:5d:92:5c:4a:ff:d5:66:4d: 0b:c8:0a:65:00:b2:91:78:8b:95:47:1f:06:37:a4: f7:50:2f:83:89:38:a8:0f:bc:35:10:d4:ea:97:85: f8:22:07:38:88:63:ab:81:c4:74:00:53:c0:eb:7b: 3c:4c:79:a1:43:b2:8e:70:70:ce:d3:cc:16:af:72: e6:66:0a:f2:e8:42:db:67:59:0d:21:91:9e:96:3c: 33:29:1c:5b:37:77:51:0a:1b:69:ad:c9:e6:5b:79: 5e:79:24:73:f9:c9:2d:d0:be:4d:57:7a:53:59:c8: 32:62:fa:43:0d:32:53:d4:bc:49:b0:98:7a:5b:21: 1e:ca:61:b0:f8:06:6e:6e:86:fd:4e:c1:21:8b:ed: 4f:c2:cd:ae:55:48:4e:fe:c9:ed:db:31:aa:a5:60: 1f:37:a7:04:f7:20:f4:65:c9:93:3c:d4:ff:b1:f5: e6:d6:99:c6:ae:c4:a1:5a:61:f4:8f:54:d6:a6:74: 05:06:d9:4e:4e:d1:af:20:8a:d8:7b:c7:ca:dd:28: 07:b4:8b:0f:fc:61:a2:86:d1:77:a9:f4:39:be:d5: 90:2b:12:ab:cb:5b:61:34:e5:38:a7:3f:70:8a:0c: 35:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A3:37:27:85:6D:E3:7A:D2:2E:D7:89:9C:86:7C:91:66:F4:0A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/825c2fa1-c91b-3c43-a4d0-c8d16fbc75c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl X509v3 Authority Key Identifier: keyid:33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer sbgp-ipAddrBlock: critical IPv4: 131.149.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:36:2b:5f:f3:3d:e7:19:35:1c:92:61:d0:4c:03:71:97:84: 68:7e:0d:09:10:44:59:8d:9b:c0:a0:5d:29:49:64:cc:60:2a: 92:55:42:b2:63:6f:b2:c8:1c:b6:7a:73:75:80:6e:c1:68:8a: 50:2a:ad:ee:a1:6e:3b:34:28:92:36:e4:09:31:c7:44:d5:5b: df:fa:e9:c2:bd:0b:bf:ae:66:79:46:96:3b:c9:f2:47:8a:7f: 77:6a:af:94:de:eb:ec:4e:35:7b:a1:9a:6e:44:f8:26:08:bb: 2d:3c:c0:ca:21:fe:23:bd:d1:cb:77:66:aa:e2:e4:94:ee:f3: 05:a9:28:7c:f0:25:c2:e1:10:52:5d:33:a6:69:a1:c4:dd:49: 11:b6:29:1a:39:98:4a:7c:37:9c:aa:7c:bd:cf:75:49:de:56: 47:92:10:c3:dc:0d:a5:40:b5:23:cf:eb:53:db:0c:32:f3:3d: 9a:1e:0a:60:c4:26:75:05:88:db:cf:e6:f0:3e:d9:0f:6d:5f: 1b:45:63:92:89:77:1e:9e:4c:4c:79:c2:5f:35:a5:9f:0f:d8: df:12:31:a6:76:d4:c6:9f:2a:a2:e1:7f:56:16:90:7e:33:3d: fa:20:a3:2b:d8:15:79:19:17:d1:17:cd:ca:12:b1:07:eb:ac: 21:8b:ba:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6F0mVGehy1GFunkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJlMjIwMWItNzVhNi00MTk0LTk4OTgtNmZlMmY2MGVh Zjc4MB4XDTI1MTAxMDE2MDMxNFoXDTI2MDEwODE3MDMxNFowLzEtMCsGA1UEAxMk N2IyMTI0MWEtOTVlNS00MDMzLWI3N2YtODEyNmNiNTkwM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQIxDqKnC5ZXQ3ExrS0WFfLgrq3jXZJcSv/V Zk0LyAplALKReIuVRx8GN6T3UC+DiTioD7w1ENTql4X4Igc4iGOrgcR0AFPA63s8 THmhQ7KOcHDO08wWr3LmZgry6ELbZ1kNIZGeljwzKRxbN3dRChtprcnmW3leeSRz +ckt0L5NV3pTWcgyYvpDDTJT1LxJsJh6WyEeymGw+AZubob9TsEhi+1Pws2uVUhO /snt2zGqpWAfN6cE9yD0ZcmTPNT/sfXm1pnGrsShWmH0j1TWpnQFBtlOTtGvIIrY e8fK3SgHtIsP/GGihtF3qfQ5vtWQKxKry1thNOU4pz9wigw1UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6jNyeFbeN60i7XiZyGfJFm9AqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wMmUy MjAxYi03NWE2LTQxOTQtOTg5OC02ZmUyZjYwZWFmNzgvODI1YzJmYTEtYzkxYi0z YzQzLWE0ZDAtYzhkMTZmYmM3NWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDJlMjIwMWItNzVhNi00MTk0LTk4 OTgtNmZlMmY2MGVhZjc4LzAyZTIyMDFiLTc1YTYtNDE5NC05ODk4LTZmZTJmNjBl YWY3OC5jcmwwHwYDVR0jBBgwFoAUM2mkKSp0niVPJgv0X0QSbGZzIM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wMmUyMjAxYi03NWE2LTQxOTQtOTg5OC02ZmUy ZjYwZWFmNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs2K1/zPecZNRySYdBMA3GXhGh+DQkQRFmNm8CgXSlJZMxgKpJVQrJj b7LIHLZ6c3WAbsFoilAqre6hbjs0KJI25Akxx0TVW9/66cK9C7+uZnlGljvJ8keK f3dqr5Te6+xONXuhmm5E+CYIuy08wMoh/iO90ct3Zqri5JTu8wWpKHzwJcLhEFJd M6ZpocTdSRG2KRo5mEp8N5yqfL3PdUneVkeSEMPcDaVAtSPP61PbDDLzPZoeCmDE JnUFiNvP5vA+2Q9tXxtFY5KJdx6eTEx5wl81pZ8P2N8SMaZ21MafKqLhf1YWkH4z PfogoyvYFXkZF9EXzcoSsQfrrCGLumc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:52 2025 by rpki-client