$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa File: 4338433f-a208-3589-9c69-6c3b1db06a76.roa (raw, json) Hash identifier: 7L3zRjE5i6Sn1WEfD+iyetlOqok+9gDRvFHGijHva1M= Subject key identifier: 1E:09:02:1A:E4:B7:DE:83:AF:2D:45:E6:35:90:27:A0:28:C5:A7:A7 Certificate issuer: /CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Certificate serial: 010D0C9F4328584BB88D0FF0D186303467408780 Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 21976 IP address blocks: 130.156.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:0f:f0:d1:86:30:34:67:40:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=ca7552f7-b14e-4e18-a04e-eb1686902998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:69:fe:72:47:c9:88:74:9c:88:16:ae:96: be:ef:a2:f3:14:ea:e8:24:12:d2:20:cd:8d:87:35: 9a:c9:39:b5:e6:ec:56:07:41:71:0a:e4:f0:2b:ff: 6b:be:02:d5:cf:28:98:39:90:98:82:f8:6a:3f:f9: 63:07:1f:43:0f:4c:31:9a:fa:60:a5:3f:d6:ba:a0: 74:0b:06:36:fc:44:a0:23:1f:e6:ef:d8:c7:51:18: 59:2d:c2:6a:78:40:cd:b3:e3:6b:25:00:1d:60:f9: a6:08:2e:d5:0c:83:8b:0b:81:e7:f0:6c:fb:9f:0c: 83:97:4d:25:b7:81:dc:d7:a2:b2:ca:eb:88:84:f0: 9e:1d:da:16:d4:cc:75:91:e8:23:7e:9b:54:3e:56: c0:fa:66:e5:c0:43:55:5b:a5:53:54:d5:25:37:09: 1b:37:fb:80:42:fd:f0:26:2c:e8:7a:1d:59:bf:6d: 11:00:02:68:ef:6d:cc:2d:e3:67:7b:3b:d3:75:7c: 81:e3:62:f3:39:f3:43:13:e2:8d:d5:7c:ca:b8:46: 16:1e:c4:a1:32:ce:d9:a6:31:1f:37:21:f0:2e:31: af:3e:03:1a:a6:09:1d:94:8f:7e:1e:db:77:a0:9b: 92:10:51:63:7e:8a:b9:95:37:5d:22:be:6d:b0:e1: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:09:02:1A:E4:B7:DE:83:AF:2D:45:E6:35:90:27:A0:28:C5:A7:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl X509v3 Authority Key Identifier: keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer sbgp-ipAddrBlock: critical IPv4: 130.156.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:90:96:9e:20:0d:d9:37:0b:01:36:ff:88:25:9a:e0:cb:6b: be:1a:b9:df:49:d5:51:be:4e:31:94:e4:1b:85:86:ce:9e:60: 71:3d:ce:e0:85:32:99:2c:64:0f:08:3a:7d:84:41:2c:cb:66: af:27:ab:b8:77:43:78:48:09:98:6b:cd:69:84:3e:93:d1:7c: 33:3d:72:82:e5:1d:d1:6a:27:0c:f5:86:81:c0:91:71:6f:35: 5a:b4:fd:1c:e4:1f:66:80:6f:a8:39:27:ad:ca:ec:ef:52:84: 92:90:51:20:93:d1:a9:f2:20:d8:cd:be:40:26:2a:cd:a9:36: b0:36:7c:10:32:de:51:42:2a:5f:72:73:0d:90:99:95:be:40: e4:ef:8b:04:2d:21:f8:07:9f:70:2d:a4:ae:31:9e:ab:2a:14: dd:4c:f0:b1:7a:cc:62:34:3c:4a:34:30:0b:ff:2f:e8:6b:b7: bd:f4:81:99:6f:3f:bf:0d:45:b2:24:8f:ff:17:88:9c:da:fa: f2:dc:4c:1d:e1:bb:3b:41:30:13:dd:78:c4:ac:85:e2:08:ee: c6:ce:68:63:f7:ef:3d:59:6f:e1:ff:ab:f8:8b:16:6f:f7:4c: 21:b2:7e:db:20:10:67:e3:81:d4:6a:c9:4f:21:ba:13:c3:51: f3:54:b4:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQ/w0YYwNGdAh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU4NjcyMmMtMjdlYy00MDU5LWExZWYtNzU3Y2Y1ZTE1 NzE1MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2E3NTUyZjctYjE0ZS00ZTE4LWEwNGUtZWIxNjg2OTAyOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXpp/nJHyYh0nIgWrpa+76LzFOroJBLSIM2N hzWayTm15uxWB0FxCuTwK/9rvgLVzyiYOZCYgvhqP/ljBx9DD0wxmvpgpT/WuqB0 CwY2/ESgIx/m79jHURhZLcJqeEDNs+NrJQAdYPmmCC7VDIOLC4Hn8Gz7nwyDl00l t4Hc16KyyuuIhPCeHdoW1Mx1kegjfptUPlbA+mblwENVW6VTVNUlNwkbN/uAQv3w Jizoeh1Zv20RAAJo723MLeNnezvTdXyB42LzOfNDE+KN1XzKuEYWHsShMs7ZpjEf NyHwLjGvPgMapgkdlI9+Htt3oJuSEFFjfoq5lTddIr5tsOEKcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4JAhrkt96Dry1F5jWQJ6AoxaenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2 NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVlMTU3MTUvNDMzODQzM2YtYTIwOC0z NTg5LTljNjktNmMzYjFkYjA2YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmU4NjcyMmMtMjdlYy00MDU5LWEx ZWYtNzU3Y2Y1ZTE1NzE1L2ZlODY3MjJjLTI3ZWMtNDA1OS1hMWVmLTc1N2NmNWUx NTcxNS5jcmwwHwYDVR0jBBgwFoAUnK6jm4GtANWgU0O/JxPv/0fWuPcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdj ZjVlMTU3MTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgpwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSQlp4gDdk3CwE2/4glmuDLa74aud9J1VG+TjGU5BuFhs6eYHE9zuCF MpksZA8IOn2EQSzLZq8nq7h3Q3hICZhrzWmEPpPRfDM9coLlHdFqJwz1hoHAkXFv NVq0/RzkH2aAb6g5J63K7O9ShJKQUSCT0anyINjNvkAmKs2pNrA2fBAy3lFCKl9y cw2QmZW+QOTviwQtIfgHn3AtpK4xnqsqFN1M8LF6zGI0PEo0MAv/L+hrt730gZlv P78NRbIkj/8XiJza+vLcTB3huztBMBPdeMSsheII7sbOaGP37z1Zb+H/q/iLFm/3 TCGyftsgEGfjgdRqyU8huhPDUfNUtBY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:43:36 2025 by rpki-client