$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/2869901b-705b-3f0a-ad8b-bacf24452caa.roa File: 2869901b-705b-3f0a-ad8b-bacf24452caa.roa (raw, json) Hash identifier: l25P9JluZvHkweiaHoM89y/1jtEw6E1sTTfHVJ8amDw= Subject key identifier: 96:4A:AB:20:72:6F:12:86:C7:A2:9D:76:50:3E:80:8F:03:62:77:D6 Certificate issuer: /CN=c0e74f0a-989b-4956-b947-f56b9aee9d3c Certificate serial: 010D0C9F4328584BBFDE6BE83AFA273B905FFF00 Authority key identifier: 6D:45:0D:D0:2C:FC:62:22:9E:DE:FC:F8:3B:4B:51:B6:0B:35:C7:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/2869901b-705b-3f0a-ad8b-bacf24452caa.roa Signing time: Tue 04 Nov 2025 15:55:15 +0000 ROA not before: Tue 04 Nov 2025 15:55:15 +0000 ROA not after: Mon 02 Feb 2026 15:55:15 +0000 asID: 401650 IP address blocks: 131.143.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:de:6b:e8:3a:fa:27:3b:90:5f:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e74f0a-989b-4956-b947-f56b9aee9d3c Validity Not Before: Nov 4 15:55:15 2025 GMT Not After : Feb 2 15:55:15 2026 GMT Subject: CN=0ca4337c-7021-4a58-9628-b6646043caf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:fa:62:86:ea:bf:42:d2:e8:c9:b7:2c:72: b3:36:d8:84:2d:9a:9a:c1:71:5b:c9:41:08:2c:76: 8a:ce:4d:a6:52:b8:91:9d:b4:5c:da:1d:4e:e0:cf: 70:75:94:5e:f1:b3:ff:4a:cc:3d:a1:38:b6:72:51: c2:c4:5d:17:40:28:b3:3d:90:4f:5b:2a:92:ed:a2: 35:9f:2f:06:ff:4c:91:ea:83:44:8d:bf:e7:45:1b: 1e:9d:0d:11:d6:e2:33:30:dd:63:d3:8b:86:cb:9b: 3a:ff:32:fc:44:97:c5:28:8f:41:b1:5f:51:42:b9: aa:2a:d7:aa:91:7c:66:1c:d2:f4:79:93:87:e0:4a: a6:af:62:20:64:ed:67:7a:f9:db:77:8d:e7:dd:76: e1:12:f6:ef:e9:9c:b9:4b:93:6a:92:f0:97:4f:f0: 2a:4b:2b:d3:20:9f:0f:c4:71:f3:b7:44:29:0a:6c: c1:50:b9:9d:d8:cf:2f:e9:12:1a:77:54:a8:71:9b: 0e:cb:93:5f:1d:f9:1d:3c:3a:47:b3:1d:26:a7:1e: 20:07:ac:68:1b:33:c4:ba:07:dc:c9:ac:9c:c4:63: ba:d1:6f:f5:7b:12:f5:4b:34:e7:c1:97:ac:bc:82: f4:a6:04:14:b7:44:2b:e3:d0:5f:c5:3f:87:69:82: 61:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4A:AB:20:72:6F:12:86:C7:A2:9D:76:50:3E:80:8F:03:62:77:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/2869901b-705b-3f0a-ad8b-bacf24452caa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.crl X509v3 Authority Key Identifier: keyid:6D:45:0D:D0:2C:FC:62:22:9E:DE:FC:F8:3B:4B:51:B6:0B:35:C7:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer sbgp-ipAddrBlock: critical IPv4: 131.143.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9e:31:33:b6:02:3d:cb:66:f1:86:b4:d2:e0:3c:2e:a4:b7: c3:6f:71:9b:78:1d:c4:fe:f0:8b:b0:31:48:33:a8:e5:6a:7e: 61:54:c4:98:d5:25:4e:c9:b8:a0:7b:3d:1b:48:2c:d4:fd:36: 79:73:82:78:be:65:f2:1f:ba:6c:e6:08:0c:0c:b3:9e:2a:91: eb:4c:bc:10:1b:5a:04:a5:18:9f:15:e5:b1:0f:69:ed:99:0b: da:ca:da:6d:ae:c1:59:46:e6:8d:34:4b:1a:24:22:a4:43:4b: 2d:b4:3f:a1:5c:b4:87:1a:de:be:df:d4:e2:e5:f6:2a:d7:ff: 0a:79:62:f8:59:8f:de:52:e6:c9:e1:d9:bf:51:93:c8:49:6b: fb:7b:fe:f4:43:75:f7:12:d2:c7:79:7b:81:54:6a:85:df:76: 7c:97:ed:c0:05:36:4c:9a:0c:d9:b9:21:ad:cf:92:37:66:f6: 24:10:8d:fb:0f:fb:16:de:5b:09:b1:27:f1:a1:f0:e2:26:fd: 09:33:fa:09:1e:e2:89:e2:4e:8f:f1:3f:a1:7e:f7:ad:7d:e3: 5f:99:a2:db:3a:b3:7b:50:95:f5:c6:a9:f8:b0:08:56:9a:6d: 61:ed:ef:ec:01:69:55:fd:fa:9d:f0:4b:8c:82:4f:64:ac:bb: 7b:c4:22:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/3mvoOvonO5Bf/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBlNzRmMGEtOTg5Yi00OTU2LWI5NDctZjU2YjlhZWU5 ZDNjMB4XDTI1MTEwNDE1NTUxNVoXDTI2MDIwMjE1NTUxNVowLzEtMCsGA1UEAxMk MGNhNDMzN2MtNzAyMS00YTU4LTk2MjgtYjY2NDYwNDNjYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzH6Yobqv0LS6Mm3LHKzNtiELZqawXFbyUEI LHaKzk2mUriRnbRc2h1O4M9wdZRe8bP/Ssw9oTi2clHCxF0XQCizPZBPWyqS7aI1 ny8G/0yR6oNEjb/nRRsenQ0R1uIzMN1j04uGy5s6/zL8RJfFKI9BsV9RQrmqKteq kXxmHNL0eZOH4Eqmr2IgZO1nevnbd43n3XbhEvbv6Zy5S5NqkvCXT/AqSyvTIJ8P xHHzt0QpCmzBULmd2M8v6RIad1SocZsOy5NfHfkdPDpHsx0mpx4gB6xoGzPEugfc yaycxGO60W/1exL1SzTnwZesvIL0pgQUt0Qr49BfxT+HaYJhewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZKqyBybxKGx6KddlA+gI8DYnfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMGU3 NGYwYS05ODliLTQ5NTYtYjk0Ny1mNTZiOWFlZTlkM2MvMjg2OTkwMWItNzA1Yi0z ZjBhLWFkOGItYmFjZjI0NDUyY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzBlNzRmMGEtOTg5Yi00OTU2LWI5 NDctZjU2YjlhZWU5ZDNjL2MwZTc0ZjBhLTk4OWItNDk1Ni1iOTQ3LWY1NmI5YWVl OWQzYy5jcmwwHwYDVR0jBBgwFoAUbUUN0Cz8YiKe3vz4O0tRtgs1xwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMGU3NGYwYS05ODliLTQ5NTYtYjk0Ny1mNTZi OWFlZTlkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWeMTO2Aj3LZvGGtNLgPC6kt8NvcZt4HcT+8IuwMUgzqOVqfmFUxJjV JU7JuKB7PRtILNT9Nnlzgni+ZfIfumzmCAwMs54qketMvBAbWgSlGJ8V5bEPae2Z C9rK2m2uwVlG5o00SxokIqRDSy20P6FctIca3r7f1OLl9irX/wp5YvhZj95S5snh 2b9Rk8hJa/t7/vRDdfcS0sd5e4FUaoXfdnyX7cAFNkyaDNm5Ia3Pkjdm9iQQjfsP +xbeWwmxJ/Gh8OIm/Qkz+gke4oniTo/xP6F+961941+Zots6s3tQlfXGqfiwCFaa bWHt7+wBaVX9+p3wS4yCT2Ssu3vEIkA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:40:18 2025 by rpki-client