$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/d52ea58c-e29f-3a43-840a-2f77aba702be.roa File: d52ea58c-e29f-3a43-840a-2f77aba702be.roa (raw, json) Hash identifier: xJd/80R2y+7JCiqlWBrr8Glmgd5wrbGYNq9cTfalxlk= Subject key identifier: 56:BF:D9:AF:19:10:EF:ED:FA:56:90:8E:AB:87:21:68:F9:36:1F:EE Certificate issuer: /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6 Certificate serial: 010D0C9F4328584B9512EA132BB51E22C36EAB80 Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/d52ea58c-e29f-3a43-840a-2f77aba702be.roa Signing time: Mon 20 Oct 2025 08:01:15 +0000 ROA not before: Mon 20 Oct 2025 08:01:15 +0000 ROA not after: Sun 18 Jan 2026 09:01:15 +0000 asID: 12198 IP address blocks: 131.143.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:12:ea:13:2b:b5:1e:22:c3:6e:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6 Validity Not Before: Oct 20 08:01:15 2025 GMT Not After : Jan 18 09:01:15 2026 GMT Subject: CN=32c0f6ab-5b52-4a9c-b750-93f9ac6f250f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:28:1e:bc:0f:2a:c1:79:7a:9d:83:9c:83: 71:ae:a7:ec:52:cc:91:6d:00:0c:56:c3:3e:59:a1: e9:29:de:6f:65:5b:84:91:08:d5:80:e8:4e:08:46: c4:1c:9f:29:d4:7c:b2:4f:20:00:7f:00:2f:2e:2d: c7:3c:25:96:5e:17:67:e1:df:99:1d:e7:67:72:f4: 39:02:57:41:4d:d1:80:5f:9a:ad:64:d6:f6:e0:fd: 3e:ab:fe:40:e1:b7:1d:80:7c:ad:5c:c8:cc:86:fe: ed:59:4c:b7:e9:1e:e4:5a:d5:43:dd:80:c1:77:43: d9:68:32:a1:e0:5c:fa:57:34:dd:c6:ab:97:7a:07: 37:8b:83:d6:c2:43:14:a9:8f:62:16:06:be:f1:44: c9:3c:14:a3:56:4b:cf:2a:dd:24:ec:c1:c2:af:e3: 49:7b:d7:9e:df:89:d9:ad:04:64:c9:b6:04:38:a8: 3d:38:c1:ae:fc:cf:67:89:9c:2d:ec:75:0c:71:64: c4:20:b1:58:60:fb:b4:91:31:59:48:e6:bd:2a:ea: 79:ec:02:57:cc:75:c6:55:47:29:08:65:c5:8d:a1: ca:99:ed:1f:b5:20:21:32:30:e3:5c:eb:87:35:e8: c9:26:ab:a1:d6:10:8b:da:65:86:01:e3:c4:ee:27: ac:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BF:D9:AF:19:10:EF:ED:FA:56:90:8E:AB:87:21:68:F9:36:1F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/d52ea58c-e29f-3a43-840a-2f77aba702be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl X509v3 Authority Key Identifier: keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer sbgp-ipAddrBlock: critical IPv4: 131.143.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:90:1d:cb:9f:01:37:75:84:b0:a2:7c:ae:d0:7b:c1:2e:a2: 35:da:d6:b3:7e:54:13:42:cb:c1:a6:a7:9c:d4:bb:96:0d:30: 39:1a:d4:a3:43:58:6a:f7:35:6b:fa:f9:93:5f:c4:9f:58:c4: 75:6e:a5:69:bd:fa:07:8b:64:17:bb:9e:b8:16:e2:03:e8:b1: 67:e3:8d:1b:76:91:9b:f8:d6:6c:78:1d:e3:f7:f3:cf:dd:a0: c6:de:5e:bd:41:97:23:4c:84:45:35:23:6c:e1:5c:91:c6:7b: ad:5d:4f:92:8a:e2:4f:46:d3:c0:25:e7:db:02:c6:97:f3:96: 50:fb:2a:b2:c6:73:0b:60:0f:8d:c8:41:23:6e:52:21:5e:b3: 56:de:eb:ea:94:76:21:6a:d2:74:60:b4:47:d0:2d:91:83:fa: 29:3c:5d:25:74:c2:d4:22:ff:7f:c1:55:db:8e:a8:21:fa:3d: 81:6a:3c:b3:37:90:29:0b:2c:ca:2b:e6:f2:72:d4:f4:e2:2d: e8:91:09:74:7a:d8:1a:24:da:27:f2:d0:3e:41:b6:b3:f3:88: bf:52:c5:c8:17:e7:30:73:1a:5b:f1:31:3d:9b:e3:dc:c6:31: 66:7d:80:90:82:46:ca:a7:9b:17:80:59:f7:82:c8:c8:48:7e: d0:7a:63:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVEuoTK7UeIsNuq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg0OGNjOWItZTQ2Zi00ODVlLWIzZjItNGYzOTNiNWQ5 MmQ2MB4XDTI1MTAyMDA4MDExNVoXDTI2MDExODA5MDExNVowLzEtMCsGA1UEAxMk MzJjMGY2YWItNWI1Mi00YTljLWI3NTAtOTNmOWFjNmYyNTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+goHrwPKsF5ep2DnINxrqfsUsyRbQAMVsM+ WaHpKd5vZVuEkQjVgOhOCEbEHJ8p1HyyTyAAfwAvLi3HPCWWXhdn4d+ZHedncvQ5 AldBTdGAX5qtZNb24P0+q/5A4bcdgHytXMjMhv7tWUy36R7kWtVD3YDBd0PZaDKh 4Fz6VzTdxquXegc3i4PWwkMUqY9iFga+8UTJPBSjVkvPKt0k7MHCr+NJe9ee34nZ rQRkybYEOKg9OMGu/M9niZwt7HUMcWTEILFYYPu0kTFZSOa9Kup57AJXzHXGVUcp CGXFjaHKme0ftSAhMjDjXOuHNejJJquh1hCL2mWGAePE7iesUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFa/2a8ZEO/t+laQjquHIWj5Nh/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ODQ4 Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1ZDkyZDYvZDUyZWE1OGMtZTI5Zi0z YTQzLTg0MGEtMmY3N2FiYTcwMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDg0OGNjOWItZTQ2Zi00ODVlLWIz ZjItNGYzOTNiNWQ5MmQ2LzQ4NDhjYzliLWU0NmYtNDg1ZS1iM2YyLTRmMzkzYjVk OTJkNi5jcmwwHwYDVR0jBBgwFoAUtipAlYdVr48BpEATPSLyFSu2jeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5 M2I1ZDkyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4/vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqQHcufATd1hLCifK7Qe8EuojXa1rN+VBNCy8Gmp5zUu5YNMDka1KND WGr3NWv6+ZNfxJ9YxHVupWm9+geLZBe7nrgW4gPosWfjjRt2kZv41mx4HeP388/d oMbeXr1BlyNMhEU1I2zhXJHGe61dT5KK4k9G08Al59sCxpfzllD7KrLGcwtgD43I QSNuUiFes1be6+qUdiFq0nRgtEfQLZGD+ik8XSV0wtQi/3/BVduOqCH6PYFqPLM3 kCkLLMor5vJy1PTiLeiRCXR62Bok2ify0D5BtrPziL9SxcgX5zBzGlvxMT2b49zG MWZ9gJCCRsqnmxeAWfeCyMhIftB6Y8o= -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:18 2025 by rpki-client