$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8920d918-6c0c-35be-9466-ec3c3e762b2a.roa File: 8920d918-6c0c-35be-9466-ec3c3e762b2a.roa (raw, json) Hash identifier: dZhXkBgfKfGuoQYfMMQagiGNxKNQ8u4ktuLnSr8DNVc= Subject key identifier: 10:97:CB:6C:BD:34:92:A3:D2:13:5A:E2:FB:4D:7C:09:2E:5A:2F:A2 Certificate issuer: /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9 Certificate serial: 010D0C9F4328584B9E07CDB82D0CCF9FA1858B00 Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8920d918-6c0c-35be-9466-ec3c3e762b2a.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 398391 IP address blocks: 131.226.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cd:b8:2d:0c:cf:9f:a1:85:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=fe52e3a7-3f01-42db-a5fe-f9635475d8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b5:9a:bf:79:64:a7:5e:11:35:54:d3:0b:9c: d3:29:15:82:27:91:e8:8b:28:52:c8:a0:d7:4f:68: fe:c4:c6:2c:80:1d:a9:0f:45:92:cc:e3:07:a9:12: c4:e7:f6:2e:2a:e4:45:d9:e5:3b:67:1b:23:2f:1f: d9:d4:0b:2e:d4:46:56:a9:80:58:cd:97:27:12:20: 21:fc:8e:45:15:09:c7:69:51:f0:c7:6b:a7:14:b7: aa:c2:a2:ba:57:9c:6a:d3:d7:dd:81:d8:64:40:ee: 78:e9:12:3e:8e:1b:f9:2c:b4:6f:96:10:28:f0:b8: ea:83:3a:9e:19:fc:47:ec:94:a8:a0:f3:b9:ee:01: 96:e2:55:07:b2:00:1b:ee:4f:55:ab:fb:da:fa:25: 95:6c:96:c9:f7:e5:7f:58:de:69:f3:54:40:21:76: f9:85:62:57:69:2d:17:e3:30:77:b7:d9:5d:95:c0: f8:78:2c:b3:84:25:96:07:55:6b:1b:3b:b4:91:ab: 15:16:f1:4b:7d:32:2c:4e:1d:9a:74:b3:ae:34:41: fc:87:d2:ae:28:11:2e:4d:b0:61:d8:ea:8b:e0:3e: c1:7a:42:7a:2e:21:23:18:85:b5:fc:7e:2d:4c:43: 2a:09:f7:3a:ad:7e:3a:cf:8f:7e:26:0d:11:67:c2: 62:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:97:CB:6C:BD:34:92:A3:D2:13:5A:E2:FB:4D:7C:09:2E:5A:2F:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8920d918-6c0c-35be-9466-ec3c3e762b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl X509v3 Authority Key Identifier: keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer sbgp-ipAddrBlock: critical IPv4: 131.226.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:96:63:50:f2:59:c9:c0:a4:91:d5:a0:08:2b:bb:0a:92:a9: 14:6f:5f:9a:fd:68:e7:72:a3:06:f2:7a:1a:4a:2c:bc:16:26: 8c:da:ba:eb:c4:6c:70:42:a6:77:c8:9d:16:d1:d2:2a:57:1f: fb:19:04:7e:b8:fb:2b:4a:ea:a3:08:ad:fa:e5:6b:93:02:6d: 96:ce:9a:f2:ff:43:01:70:d7:4a:7f:cc:bc:a1:4b:4e:0f:1f: 9f:5f:ec:45:ce:0e:50:a1:61:99:7a:93:65:3b:f4:62:cc:d9: 1d:8c:20:94:9b:36:f8:be:63:1c:0e:9b:cb:2f:93:f2:15:e1: 28:aa:44:cd:b4:79:ad:3f:69:1f:6d:77:13:a6:b3:84:a1:fd: fb:84:de:d5:79:99:41:37:db:48:7b:9c:25:ad:c4:44:a4:16: 43:24:2b:6c:38:19:d3:ef:db:b0:e8:eb:85:56:f3:66:db:12: b9:35:d4:9f:e9:49:47:99:e4:05:51:ad:be:f5:c8:24:35:c4: 52:5d:91:41:6c:2a:47:34:4c:5e:09:14:03:bb:77:9b:7e:eb: aa:1e:52:70:e6:7f:8f:fd:8e:75:e5:60:53:40:9c:a3:c6:d8: 8f:54:fb:9c:38:cd:eb:f7:17:22:ec:e1:39:26:78:d8:c1:79: 29:72:ab:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB824LQzPn6GFiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5 ZWU5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmU1MmUzYTctM2YwMS00MmRiLWE1ZmUtZjk2MzU0NzVkOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLWav3lkp14RNVTTC5zTKRWCJ5HoiyhSyKDX T2j+xMYsgB2pD0WSzOMHqRLE5/YuKuRF2eU7ZxsjLx/Z1Asu1EZWqYBYzZcnEiAh /I5FFQnHaVHwx2unFLeqwqK6V5xq09fdgdhkQO546RI+jhv5LLRvlhAo8Ljqgzqe GfxH7JSooPO57gGW4lUHsgAb7k9Vq/va+iWVbJbJ9+V/WN5p81RAIXb5hWJXaS0X 4zB3t9ldlcD4eCyzhCWWB1VrGzu0kasVFvFLfTIsTh2adLOuNEH8h9KuKBEuTbBh 2OqL4D7BekJ6LiEjGIW1/H4tTEMqCfc6rX46z49+Jg0RZ8JiGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCXy2y9NJKj0hNa4vtNfAkuWi+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvODkyMGQ5MTgtNmMwYy0z NWJlLTk0NjYtZWMzYzNlNzYyYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4 OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+ImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqWY1DyWcnApJHVoAgruwqSqRRvX5r9aOdyowbyehpKLLwWJozauuvE bHBCpnfInRbR0ipXH/sZBH64+ytK6qMIrfrla5MCbZbOmvL/QwFw10p/zLyhS04P H59f7EXODlChYZl6k2U79GLM2R2MIJSbNvi+YxwOm8svk/IV4SiqRM20ea0/aR9t dxOms4Sh/fuE3tV5mUE320h7nCWtxESkFkMkK2w4GdPv27Do64VW82bbErk11J/p SUeZ5AVRrb71yCQ1xFJdkUFsKkc0TF4JFAO7d5t+66oeUnDmf4/9jnXlYFNAnKPG 2I9U+5w4zev3FyLs4TkmeNjBeSlyq/E= -----END CERTIFICATE-----Generated at Wed Nov 5 05:02:28 2025 by rpki-client