$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/a1d22249-0ff9-3e15-9d12-3b4aa3f08621.roa File: a1d22249-0ff9-3e15-9d12-3b4aa3f08621.roa (raw, json) Hash identifier: ljBw+JYP/ga6rvHiYu4Utzw6K+0iL+k8wLLXrkFj6Tg= Subject key identifier: 28:7C:F5:D0:81:C7:27:02:A9:D7:9C:72:93:43:81:63:AC:02:EF:B2 Certificate issuer: /CN=dfc6770a-8775-4ba8-9d91-68facba79b33 Certificate serial: 010D0C9F4328584B7386952F57D598005A34A580 Authority key identifier: FC:15:E4:40:61:B7:C4:E7:24:7E:68:F9:54:6D:00:9F:25:56:D2:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/a1d22249-0ff9-3e15-9d12-3b4aa3f08621.roa Signing time: Wed 08 Oct 2025 07:36:50 +0000 ROA not before: Wed 08 Oct 2025 07:36:50 +0000 ROA not after: Tue 06 Jan 2026 08:36:50 +0000 asID: 18702 IP address blocks: 131.143.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:86:95:2f:57:d5:98:00:5a:34:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfc6770a-8775-4ba8-9d91-68facba79b33 Validity Not Before: Oct 8 07:36:50 2025 GMT Not After : Jan 6 08:36:50 2026 GMT Subject: CN=5e9ac4f7-4601-4b1d-b43d-7063cd4a73aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:42:ac:b8:67:12:02:04:73:01:d3:85:93: ac:22:12:62:6c:9e:1b:81:bb:59:a0:aa:ec:69:f1: d0:e3:41:33:0d:5c:33:65:70:0f:8f:f8:fc:3f:cb: 68:fd:97:ea:31:8d:46:11:81:97:11:de:47:6c:a3: 8c:d4:33:60:13:b0:e8:45:db:23:da:c3:db:07:f9: 40:16:42:1e:1b:66:cd:30:f7:99:29:80:d3:8c:3b: 67:41:49:ec:68:4f:fb:b9:76:76:18:48:18:76:c8: 32:13:67:95:e6:d9:16:01:74:5c:93:fa:3c:82:40: c0:99:e3:81:a1:c6:cc:8d:b7:61:97:cf:09:7e:9f: 07:3c:00:68:e3:6d:56:66:9a:17:6b:2d:29:0d:8d: 5f:e4:a9:f4:02:77:b5:5d:9d:26:3d:00:67:96:c0: 05:70:57:6d:72:5b:94:42:38:99:c3:c7:6c:09:5d: 2b:34:a2:13:a0:af:3e:0f:1d:a6:d7:c2:7c:ae:07: cc:0e:fd:b7:97:bc:24:ed:0c:21:22:47:35:75:72: 6c:03:c7:b7:58:49:fb:23:1c:e0:d6:07:c2:71:1d: 1c:1c:37:f2:9d:c3:8f:5a:f0:f3:07:58:a6:a1:d4: 6b:1d:44:2f:44:40:8c:18:2b:54:6f:67:04:47:22: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7C:F5:D0:81:C7:27:02:A9:D7:9C:72:93:43:81:63:AC:02:EF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/a1d22249-0ff9-3e15-9d12-3b4aa3f08621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.crl X509v3 Authority Key Identifier: keyid:FC:15:E4:40:61:B7:C4:E7:24:7E:68:F9:54:6D:00:9F:25:56:D2:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer sbgp-ipAddrBlock: critical IPv4: 131.143.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:93:fb:96:3d:77:c1:f6:4a:71:0b:e2:f7:42:1d:bb:26:1f: 4e:10:73:c9:da:23:d1:aa:8c:96:e5:79:b5:01:6c:fa:78:94: 38:b3:8b:09:8f:36:6f:0c:33:d4:f3:a9:a3:b2:3e:54:f3:ed: 46:3b:5e:38:8a:d1:75:9e:59:ca:35:17:43:62:9f:72:ee:84: bc:2a:63:7a:38:95:21:e3:fb:76:14:18:73:52:e5:25:6e:f2: 8d:08:b3:97:02:c3:ba:63:a5:26:54:34:95:43:7d:33:4e:09: 2a:74:6b:ff:6b:93:9f:fc:71:89:2f:fa:35:2c:39:f0:54:96: ae:c1:6c:56:a4:8d:db:73:3a:82:2d:e5:c4:a7:d4:1b:f2:d0: 25:69:01:c4:f4:03:d0:7e:07:81:36:c9:0a:60:35:ee:9c:53: e2:ba:d8:d1:80:6d:ff:05:4e:37:5e:9c:a4:7b:49:01:86:af: e3:4f:a3:2c:ee:3d:0e:eb:24:66:bd:e4:ee:e3:1b:cc:ea:7a: dc:f0:13:71:30:56:0f:ed:04:9d:48:8e:5b:78:f2:81:25:64: 29:29:aa:5e:34:9a:b9:37:48:27:bb:cc:21:57:60:56:2f:88: 3e:4f:5d:fd:71:5d:de:60:d7:28:97:2a:1f:0d:72:cc:24:69: 68:59:27:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtzhpUvV9WYAFo0pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjNjc3MGEtODc3NS00YmE4LTlkOTEtNjhmYWNiYTc5 YjMzMB4XDTI1MTAwODA3MzY1MFoXDTI2MDEwNjA4MzY1MFowLzEtMCsGA1UEAxMk NWU5YWM0ZjctNDYwMS00YjFkLWI0M2QtNzA2M2NkNGE3M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS5CrLhnEgIEcwHThZOsIhJibJ4bgbtZoKrs afHQ40EzDVwzZXAPj/j8P8to/ZfqMY1GEYGXEd5HbKOM1DNgE7DoRdsj2sPbB/lA FkIeG2bNMPeZKYDTjDtnQUnsaE/7uXZ2GEgYdsgyE2eV5tkWAXRck/o8gkDAmeOB ocbMjbdhl88Jfp8HPABo421WZpoXay0pDY1f5Kn0Ane1XZ0mPQBnlsAFcFdtcluU QjiZw8dsCV0rNKIToK8+Dx2m18J8rgfMDv23l7wk7QwhIkc1dXJsA8e3WEn7Ixzg 1gfCcR0cHDfyncOPWvDzB1imodRrHUQvRECMGCtUb2cERyKlawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCh89dCBxycCqdeccpNDgWOsAu+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZmM2 NzcwYS04Nzc1LTRiYTgtOWQ5MS02OGZhY2JhNzliMzMvYTFkMjIyNDktMGZmOS0z ZTE1LTlkMTItM2I0YWEzZjA4NjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGZjNjc3MGEtODc3NS00YmE4LTlk OTEtNjhmYWNiYTc5YjMzL2RmYzY3NzBhLTg3NzUtNGJhOC05ZDkxLTY4ZmFjYmE3 OWIzMy5jcmwwHwYDVR0jBBgwFoAU/BXkQGG3xOckfmj5VG0AnyVW0qgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZmM2NzcwYS04Nzc1LTRiYTgtOWQ5MS02OGZh Y2JhNzliMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2T+5Y9d8H2SnEL4vdCHbsmH04Qc8naI9GqjJblebUBbPp4lDiziwmP Nm8MM9TzqaOyPlTz7UY7XjiK0XWeWco1F0Nin3LuhLwqY3o4lSHj+3YUGHNS5SVu 8o0Is5cCw7pjpSZUNJVDfTNOCSp0a/9rk5/8cYkv+jUsOfBUlq7BbFakjdtzOoIt 5cSn1Bvy0CVpAcT0A9B+B4E2yQpgNe6cU+K62NGAbf8FTjdenKR7SQGGr+NPoyzu PQ7rJGa95O7jG8zqetzwE3EwVg/tBJ1Ijlt48oElZCkpql40mrk3SCe7zCFXYFYv iD5PXf1xXd5g1yiXKh8NcswkaWhZJ5Y= -----END CERTIFICATE-----Generated at Wed Nov 5 16:01:42 2025 by rpki-client