$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/eef0ec67-f209-3411-87fa-e93729ff0ad7.roa File: eef0ec67-f209-3411-87fa-e93729ff0ad7.roa (raw, json) Hash identifier: QkDo5psguy4BsMHR1BBEAqdDy0iS2WgWojyN8GhMbpM= Subject key identifier: 12:72:DE:AE:3F:61:37:58:20:AE:7F:B9:E1:9F:11:9A:72:02:1A:14 Certificate issuer: /CN=9da2c17e-38b5-4574-b273-36a0f0b2956d Certificate serial: 010D0C9F4328584B79BE6663C07D3378E6389D00 Authority key identifier: CC:34:69:83:2B:B0:22:C7:B3:DF:70:02:47:E3:67:14:DE:34:F4:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/eef0ec67-f209-3411-87fa-e93729ff0ad7.roa Signing time: Fri 10 Oct 2025 13:04:09 +0000 ROA not before: Fri 10 Oct 2025 13:04:09 +0000 ROA not after: Thu 08 Jan 2026 14:04:09 +0000 asID: 7029 IP address blocks: 131.143.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:be:66:63:c0:7d:33:78:e6:38:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da2c17e-38b5-4574-b273-36a0f0b2956d Validity Not Before: Oct 10 13:04:09 2025 GMT Not After : Jan 8 14:04:09 2026 GMT Subject: CN=e7e3edb4-71b9-4524-9dff-cfffc07bbe8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:14:58:db:2c:4d:51:0b:33:db:ae:1a:58: 56:61:73:ec:86:9c:a8:66:fb:e7:db:6c:86:b6:9f: 3e:86:b0:99:6b:a5:d1:02:ec:3d:30:54:23:83:40: a3:61:4d:82:45:b8:4f:cd:35:ce:33:20:a4:6e:e9: d8:b0:a9:7a:ca:1a:05:ea:1b:13:33:b3:2e:5f:fe: 7d:2e:8b:3c:e2:4e:99:c5:75:eb:3f:2a:61:d0:53: be:bf:10:12:df:93:02:43:03:91:d3:3c:9e:73:a3: dd:c2:19:33:04:cb:2b:42:8a:78:f6:bb:25:3b:c8: 71:45:25:22:01:2e:f7:da:b2:73:34:0c:52:e5:fa: 52:3e:2e:13:76:fa:1b:7d:0c:f0:18:65:95:4b:26: a0:4f:f3:c7:44:c7:8f:3b:dc:9f:02:3d:5b:fe:58: 9f:92:4d:22:11:40:af:55:10:5c:d0:9d:8c:df:95: 9d:1a:b8:c6:ca:0f:39:5d:82:54:bc:ec:b5:1e:d4: c2:f9:e5:e9:3e:e6:4a:ec:75:bf:83:50:72:84:15: b8:ee:fe:1b:f8:80:c8:46:44:d1:d7:ff:af:d8:10: c2:fc:44:14:4c:0e:73:6e:d4:fe:1e:c1:4d:9a:e1: 65:43:f8:25:1e:09:88:58:92:0d:02:87:c7:8e:04: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:DE:AE:3F:61:37:58:20:AE:7F:B9:E1:9F:11:9A:72:02:1A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/eef0ec67-f209-3411-87fa-e93729ff0ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.crl X509v3 Authority Key Identifier: keyid:CC:34:69:83:2B:B0:22:C7:B3:DF:70:02:47:E3:67:14:DE:34:F4:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer sbgp-ipAddrBlock: critical IPv4: 131.143.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2b:92:86:7c:fa:6e:79:43:60:38:dd:c0:3d:ac:dd:d8:06: 3d:9b:2f:e6:21:7f:38:41:9e:b4:27:f9:8b:02:e0:f8:a0:77: cd:21:a0:5c:af:65:49:b1:95:3d:f0:dc:06:0f:a7:10:ed:5b: 4e:6b:50:52:83:e4:e9:16:13:b2:5d:83:b4:f9:6a:6b:c2:56: fc:b2:c4:e4:90:78:d2:c9:33:88:76:c1:2d:3a:38:b0:77:56: 68:3d:db:10:e1:d5:4b:a5:fe:d2:ce:09:5f:d6:c0:8c:0c:5e: b7:c2:14:f6:3c:1d:94:e0:7a:05:53:e0:5c:a2:10:e0:69:fb: b0:91:a0:3e:56:1f:f3:33:e3:08:a1:81:c8:62:7d:ed:0e:c3: 81:2c:0b:f4:ed:40:0e:9e:c2:f9:f2:90:46:0c:8b:51:bf:4a: 47:91:59:a8:73:0b:9d:24:6b:df:84:a1:1f:dd:4f:89:ed:3d: 06:89:21:70:54:06:0e:f3:c8:7c:05:a4:94:60:a8:1c:4c:6f: b4:32:bd:61:d3:10:88:4b:16:aa:7c:1f:db:29:df:39:19:50: fb:31:77:b8:95:58:e1:2d:50:e5:99:a3:59:45:36:d6:2d:45: 6d:b3:4e:d1:72:06:ed:90:b8:98:90:c7:7c:33:04:bc:27:b2: 4b:f8:7a:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vmZjwH0zeOY4nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRhMmMxN2UtMzhiNS00NTc0LWIyNzMtMzZhMGYwYjI5 NTZkMB4XDTI1MTAxMDEzMDQwOVoXDTI2MDEwODE0MDQwOVowLzEtMCsGA1UEAxMk ZTdlM2VkYjQtNzFiOS00NTI0LTlkZmYtY2ZmZmMwN2JiZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ukUWNssTVELM9uuGlhWYXPshpyoZvvn22yG tp8+hrCZa6XRAuw9MFQjg0CjYU2CRbhPzTXOMyCkbunYsKl6yhoF6hsTM7MuX/59 Los84k6ZxXXrPyph0FO+vxAS35MCQwOR0zyec6PdwhkzBMsrQop49rslO8hxRSUi AS732rJzNAxS5fpSPi4TdvobfQzwGGWVSyagT/PHRMePO9yfAj1b/lifkk0iEUCv VRBc0J2M35WdGrjGyg85XYJUvOy1HtTC+eXpPuZK7HW/g1ByhBW47v4b+IDIRkTR 1/+v2BDC/EQUTA5zbtT+HsFNmuFlQ/glHgmIWJINAofHjgSyTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJy3q4/YTdYIK5/ueGfEZpyAhoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85ZGEy YzE3ZS0zOGI1LTQ1NzQtYjI3My0zNmEwZjBiMjk1NmQvZWVmMGVjNjctZjIwOS0z NDExLTg3ZmEtZTkzNzI5ZmYwYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWRhMmMxN2UtMzhiNS00NTc0LWIy NzMtMzZhMGYwYjI5NTZkLzlkYTJjMTdlLTM4YjUtNDU3NC1iMjczLTM2YTBmMGIy OTU2ZC5jcmwwHwYDVR0jBBgwFoAUzDRpgyuwIsez33ACR+NnFN409AwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85ZGEyYzE3ZS0zOGI1LTQ1NzQtYjI3My0zNmEw ZjBiMjk1NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACorkoZ8+m55Q2A43cA9rN3YBj2bL+YhfzhBnrQn+YsC4Pigd80hoFyv ZUmxlT3w3AYPpxDtW05rUFKD5OkWE7Jdg7T5amvCVvyyxOSQeNLJM4h2wS06OLB3 Vmg92xDh1Uul/tLOCV/WwIwMXrfCFPY8HZTgegVT4FyiEOBp+7CRoD5WH/Mz4wih gchife0Ow4EsC/TtQA6ewvnykEYMi1G/SkeRWahzC50ka9+EoR/dT4ntPQaJIXBU Bg7zyHwFpJRgqBxMb7QyvWHTEIhLFqp8H9sp3zkZUPsxd7iVWOEtUOWZo1lFNtYt RW2zTtFyBu2QuJiQx3wzBLwnskv4eoo= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:11 2025 by rpki-client