$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa File: 4c146698-99de-3bf6-915e-d2a6ca46429b.roa (raw, json) Hash identifier: +FG/3/5zbZ3T4j6oiM08j4ROatDkha2BI002sjTe+ww= Subject key identifier: 50:9F:A1:A3:BC:72:A9:2A:B8:C3:76:2A:83:59:47:A8:6F:19:0B:7C Certificate issuer: /CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Certificate serial: 010D0C9F4328584B8EACE2BA2D9D43BAF7FB1C1C Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22794 IP address blocks: 131.226.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e2:ba:2d:9d:43:ba:f7:fb:1c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=a2f02271-af06-4456-bc39-c0a87359c710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:58:21:5e:ac:c4:c8:21:79:b0:6a:78:a5: cb:51:69:12:d8:0f:01:e4:2c:8e:42:4b:c5:49:08: a3:97:41:c0:22:7d:94:f6:34:c1:fe:70:af:f3:1f: 00:3d:ee:a9:6e:42:de:be:cd:bb:0e:7d:6f:46:c5: c8:f2:9e:1c:1b:bb:54:1b:d4:18:ee:7c:82:c4:64: 3a:d9:4a:42:ed:76:03:ca:e4:f5:23:2c:66:db:8f: 16:1e:5e:35:e5:9a:45:a3:2c:7d:cd:a5:68:13:4a: fc:69:4d:24:0f:44:a0:e6:59:fe:09:0f:2b:dd:3a: 1d:ff:83:c0:5f:d8:ae:af:2a:d4:a4:33:f7:d1:f5: 25:4f:fd:c9:59:7f:17:1a:db:db:5d:56:99:c4:d6: 02:71:7e:f6:dd:45:33:21:b7:89:94:02:a3:31:cc: 21:b3:b2:0a:e4:81:53:f8:65:e6:12:24:a6:f6:00: 87:16:f6:f3:67:61:86:b4:a5:28:88:cc:83:8e:a4: bd:cd:d9:f7:10:37:60:e1:d7:a9:5e:f2:42:04:ae: d0:43:8e:8c:05:41:a4:69:7c:92:4d:60:52:64:16: 08:4c:43:7c:34:31:62:37:ef:c1:21:4b:11:3d:d7: 1c:36:96:a6:70:15:bc:4b:be:15:6f:54:e0:56:f3: 68:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9F:A1:A3:BC:72:A9:2A:B8:C3:76:2A:83:59:47:A8:6F:19:0B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl X509v3 Authority Key Identifier: keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer sbgp-ipAddrBlock: critical IPv4: 131.226.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:27:63:37:78:dc:54:c3:bf:40:16:9e:ae:00:8a:23:f8:f6: 52:c1:1a:28:54:04:54:72:4c:9f:4c:92:af:0b:a8:0d:69:50: e6:0f:32:f2:91:6e:d6:61:46:31:e6:07:ec:b0:52:2f:87:53: 51:db:52:2a:38:eb:83:c0:fa:b6:f9:24:26:62:14:e5:6a:01: 24:30:0d:b5:3a:a1:35:c5:b8:42:6b:c9:bf:b2:3c:22:65:d0: 3c:47:7d:68:58:4d:77:9c:ef:3f:9d:4f:8f:47:06:d4:53:55: 7d:e4:3a:50:db:15:06:9d:23:da:79:a9:98:6a:a1:3a:41:ff: a4:b0:a7:cb:df:a9:b7:f0:d7:9a:ed:e7:a6:8e:da:87:d5:59: f6:b2:5a:94:ca:03:00:5e:df:97:f4:b2:d4:2f:3c:37:d0:5c: f8:ff:a7:98:86:ac:a0:b8:4b:3e:61:56:66:e4:f2:5b:19:74: 95:7b:f1:fe:bc:21:f4:a8:0f:1a:45:71:0a:2a:a6:d5:52:69: 26:35:50:b9:35:13:4e:f2:65:11:f2:43:c9:4e:8d:24:24:8b: d1:ec:69:c8:f6:90:98:96:26:a5:be:08:8b:8b:c8:65:4a:3e: 74:b0:b6:29:8a:fa:c7:48:b9:7b:d9:7e:46:4f:e3:6e:e7:b2: 8a:6a:d5:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOK6LZ1Duvf7HBwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4NmZlNTItNWI3Ny00NmI2LTk1MDItNTFjY2NjZjNh NzU1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YTJmMDIyNzEtYWYwNi00NDU2LWJjMzktYzBhODczNTljNzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX1YIV6sxMghebBqeKXLUWkS2A8B5CyOQkvF SQijl0HAIn2U9jTB/nCv8x8APe6pbkLevs27Dn1vRsXI8p4cG7tUG9QY7nyCxGQ6 2UpC7XYDyuT1Iyxm248WHl415ZpFoyx9zaVoE0r8aU0kD0Sg5ln+CQ8r3Tod/4PA X9iuryrUpDP30fUlT/3JWX8XGtvbXVaZxNYCcX723UUzIbeJlAKjMcwhs7IK5IFT +GXmEiSm9gCHFvbzZ2GGtKUoiMyDjqS9zdn3EDdg4depXvJCBK7QQ46MBUGkaXyS TWBSZBYITEN8NDFiN+/BIUsRPdccNpamcBW8S74Vb1TgVvNoMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCfoaO8cqkquMN2KoNZR6hvGQt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2 ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNjY2NmM2E3NTUvNGMxNDY2OTgtOTlkZS0z YmY2LTkxNWUtZDJhNmNhNDY0MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWY4NmZlNTItNWI3Ny00NmI2LTk1 MDItNTFjY2NjZjNhNzU1L2FmODZmZTUyLTViNzctNDZiNi05NTAyLTUxY2NjY2Yz YTc1NS5jcmwwHwYDVR0jBBgwFoAUpCnYdby96fIjd9cnL82GRWj9YvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNj Y2NmM2E3NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGg+KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMnYzd43FTDv0AWnq4AiiP49lLBGihUBFRyTJ9Mkq8LqA1pUOYPMvKR btZhRjHmB+ywUi+HU1HbUio464PA+rb5JCZiFOVqASQwDbU6oTXFuEJryb+yPCJl 0DxHfWhYTXec7z+dT49HBtRTVX3kOlDbFQadI9p5qZhqoTpB/6Swp8vfqbfw15rt 56aO2ofVWfayWpTKAwBe35f0stQvPDfQXPj/p5iGrKC4Sz5hVmbk8lsZdJV78f68 IfSoDxpFcQoqptVSaSY1ULk1E07yZRHyQ8lOjSQki9Hsacj2kJiWJqW+CIuLyGVK PnSwtimK+sdIuXvZfkZP427nsopq1TY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:12 2025 by rpki-client