$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/2c21253b-f8b3-3ae4-95c8-3a448dbd4584.roa File: 2c21253b-f8b3-3ae4-95c8-3a448dbd4584.roa (raw, json) Hash identifier: zwnCkofCpPUwnk+4OhbrZGMSklz9jo93vzMPiZ0h7RY= Subject key identifier: B4:4F:DB:7A:C2:5E:C0:BD:27:B7:5C:10:FF:B5:A3:D2:3B:75:84:6B Certificate issuer: /CN=6851dce3-9572-4e18-8d38-8815a366e21c Certificate serial: 010D0C9F4328584BC084844D71ECAB3C0C9B7A20 Authority key identifier: 4F:65:B1:22:EF:40:E6:20:AE:2C:78:A1:25:2E:7E:3F:46:D6:81:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/2c21253b-f8b3-3ae4-95c8-3a448dbd4584.roa Signing time: Tue 04 Nov 2025 21:29:54 +0000 ROA not before: Tue 04 Nov 2025 21:29:54 +0000 ROA not after: Mon 02 Feb 2026 21:29:54 +0000 asID: 401650 IP address blocks: 131.143.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:84:84:4d:71:ec:ab:3c:0c:9b:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6851dce3-9572-4e18-8d38-8815a366e21c Validity Not Before: Nov 4 21:29:54 2025 GMT Not After : Feb 2 21:29:54 2026 GMT Subject: CN=10f5b7c0-9690-460b-94b7-a38029ac0827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7b:86:45:5a:4e:0c:65:d7:67:ae:34:d7:c7: 85:58:b8:ec:c2:7f:00:8f:d7:fe:23:9a:26:f3:df: 80:29:03:48:25:89:b4:68:a2:d6:01:6c:99:f2:42: 8a:fa:91:49:07:9a:87:54:5a:f2:21:46:7c:36:3a: 89:da:20:39:fc:b0:e8:03:0b:20:bd:46:28:38:18: 98:88:b9:f2:f0:4a:8c:b5:76:ff:fe:1e:56:2c:c5: 10:c0:ad:d6:f0:d9:54:ce:6b:96:0f:87:b9:43:44: a2:86:eb:75:22:ea:49:df:d6:cd:fe:d9:69:d7:a2: 8a:e9:b8:67:c3:eb:72:9d:a1:bc:5d:2e:ef:11:25: 51:d0:4a:8b:c9:50:7e:59:4f:ae:ec:b8:63:71:74: 7d:7c:76:c9:97:ee:e4:3d:13:14:5f:ff:9c:3c:02: 84:fa:d9:70:e3:b3:6f:22:e2:32:dc:02:9c:83:d3: 60:0f:48:b9:8f:9d:45:5a:5a:77:98:be:8c:80:63: 71:80:8c:3c:3d:40:ef:30:df:09:97:45:42:b6:0a: 87:18:04:b6:3a:39:0f:ef:40:e5:79:0f:6c:55:81: 92:fa:6f:9f:01:bf:83:88:88:59:cc:bd:1d:97:e7: c8:76:6d:ee:4e:61:37:2e:06:4a:14:bf:8f:7d:a3: ca:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4F:DB:7A:C2:5E:C0:BD:27:B7:5C:10:FF:B5:A3:D2:3B:75:84:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/2c21253b-f8b3-3ae4-95c8-3a448dbd4584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.crl X509v3 Authority Key Identifier: keyid:4F:65:B1:22:EF:40:E6:20:AE:2C:78:A1:25:2E:7E:3F:46:D6:81:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c.cer sbgp-ipAddrBlock: critical IPv4: 131.143.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:36:34:40:a7:d7:68:d9:a7:ec:25:08:7c:2e:31:d6:e0:3c: 62:b0:f9:d0:aa:42:d0:7d:a7:a2:83:08:f9:68:25:57:5a:c6: a1:a7:5f:17:7f:ee:5e:d3:3d:37:3a:8d:76:28:5e:cc:56:58: a8:b4:5e:b1:82:28:95:1f:f8:94:ce:c5:18:d4:b3:70:ec:20: 8c:6a:8c:3b:41:39:bf:a7:a3:6a:9a:db:f7:15:a2:31:9d:66: 72:72:d1:b8:63:16:a2:52:5e:6b:a7:2d:67:77:4c:d2:60:08: ab:9b:4e:c0:95:9b:99:a6:a2:68:86:d2:b8:83:b3:28:fe:10: 25:19:42:bb:6f:87:1a:12:9a:11:ee:21:b7:e7:56:60:be:48: 9f:0b:fb:d3:50:3e:63:3b:30:ae:ca:8b:33:ee:f3:56:ac:52: cd:91:ab:45:4a:e9:a4:01:6d:73:30:52:24:66:46:3a:19:a5: f5:6a:19:43:2a:69:8c:43:d4:31:8a:9f:5f:e2:68:0a:e0:2d: 79:1f:e1:67:e0:50:e4:0b:bf:ba:0b:39:d0:da:c8:a0:1e:83: 3a:1c:ea:fd:45:19:30:dc:40:68:c6:f4:d1:08:ce:2d:f1:19: d8:cb:94:3c:09:1c:45:bc:1d:53:5d:cb:7e:39:18:00:8b:af: 9d:18:d1:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvAhIRNceyrPAybeiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg1MWRjZTMtOTU3Mi00ZTE4LThkMzgtODgxNWEzNjZl MjFjMB4XDTI1MTEwNDIxMjk1NFoXDTI2MDIwMjIxMjk1NFowLzEtMCsGA1UEAxMk MTBmNWI3YzAtOTY5MC00NjBiLTk0YjctYTM4MDI5YWMwODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHuGRVpODGXXZ64018eFWLjswn8Aj9f+I5om 89+AKQNIJYm0aKLWAWyZ8kKK+pFJB5qHVFryIUZ8NjqJ2iA5/LDoAwsgvUYoOBiY iLny8EqMtXb//h5WLMUQwK3W8NlUzmuWD4e5Q0Sihut1IupJ39bN/tlp16KK6bhn w+tynaG8XS7vESVR0EqLyVB+WU+u7LhjcXR9fHbJl+7kPRMUX/+cPAKE+tlw47Nv IuIy3AKcg9NgD0i5j51FWlp3mL6MgGNxgIw8PUDvMN8Jl0VCtgqHGAS2OjkP70Dl eQ9sVYGS+m+fAb+DiIhZzL0dl+fIdm3uTmE3LgZKFL+PfaPKMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRP23rCXsC9J7dcEP+1o9I7dYRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ODUx ZGNlMy05NTcyLTRlMTgtOGQzOC04ODE1YTM2NmUyMWMvMmMyMTI1M2ItZjhiMy0z YWU0LTk1YzgtM2E0NDhkYmQ0NTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjg1MWRjZTMtOTU3Mi00ZTE4LThk MzgtODgxNWEzNjZlMjFjLzY4NTFkY2UzLTk1NzItNGUxOC04ZDM4LTg4MTVhMzY2 ZTIxYy5jcmwwHwYDVR0jBBgwFoAUT2WxIu9A5iCuLHihJS5+P0bWge0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ODUxZGNlMy05NTcyLTRlMTgtOGQzOC04ODE1 YTM2NmUyMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU2NECn12jZp+wlCHwuMdbgPGKw+dCqQtB9p6KDCPloJVdaxqGnXxd/ 7l7TPTc6jXYoXsxWWKi0XrGCKJUf+JTOxRjUs3DsIIxqjDtBOb+no2qa2/cVojGd ZnJy0bhjFqJSXmunLWd3TNJgCKubTsCVm5mmomiG0riDsyj+ECUZQrtvhxoSmhHu IbfnVmC+SJ8L+9NQPmM7MK7KizPu81asUs2Rq0VK6aQBbXMwUiRmRjoZpfVqGUMq aYxD1DGKn1/iaArgLXkf4WfgUOQLv7oLOdDayKAegzoc6v1FGTDcQGjG9NEIzi3x GdjLlDwJHEW8HVNdy345GACLr50Y0Ug= -----END CERTIFICATE-----Generated at Wed Nov 5 11:41:33 2025 by rpki-client