$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa File: 0250530e-60f1-3b41-aba9-e6d0f26b8737.roa (raw, json) Hash identifier: YcJojnjeh3xzqwBP/Q3/syz9edwSWCv0srVIikpTE8Q= Subject key identifier: C4:E6:5C:E9:98:BD:94:53:97:87:69:12:F9:73:E3:78:2D:13:49:82 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584B8EACDD3F44A0980A3638A880 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36136 IP address blocks: 131.201.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:dd:3f:44:a0:98:0a:36:38:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=2f9db04d-77aa-4863-93cf-07319e558cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:67:8a:33:9e:0a:ed:0d:cc:b0:37:48:7a: 7c:8b:20:26:95:fd:aa:25:63:cf:17:c9:c3:7c:45: 5c:eb:58:4b:2e:66:43:61:0f:34:b5:5d:f8:d9:57: b0:79:c4:42:02:89:9f:7d:f9:e1:f7:10:c8:e4:a2: 39:75:f9:b4:01:3b:d9:65:05:07:e9:38:11:77:d2: 82:9f:5b:7a:c8:ed:e7:37:03:e9:4e:47:ba:58:57: 37:cc:02:7d:93:0f:1a:aa:c7:96:ee:57:6a:2a:78: 10:75:24:88:65:2c:a9:a9:fd:d8:9c:40:27:eb:ea: 7e:34:89:22:1a:73:c9:c5:98:4a:cd:16:14:9c:50: 22:40:b3:a4:36:2f:c3:c4:41:48:ec:31:d3:45:c7: 9b:64:d6:f3:a9:fc:85:11:81:01:24:7e:09:aa:ae: 6a:7e:b8:35:02:ce:c1:17:9e:5a:2e:a2:19:82:9b: bd:3a:a9:53:cb:fa:0b:c4:fd:49:7a:90:40:a2:48: cb:58:79:d3:95:bc:7c:26:7a:49:e1:a8:d2:8b:f0: 31:0e:83:62:2d:e1:24:89:0d:66:2c:df:be:a8:4d: e4:15:a9:80:77:54:66:ef:40:28:34:0d:39:59:64: 04:6a:b1:77:7f:f9:9c:29:8d:45:1c:1a:4c:6b:c7: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E6:5C:E9:98:BD:94:53:97:87:69:12:F9:73:E3:78:2D:13:49:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:63:68:d1:56:0e:23:87:f9:0f:2f:7d:3b:1f:f3:da:3e:c6: 48:ce:92:44:64:82:f8:fc:f9:2c:55:54:55:b7:e4:63:bf:d8: 99:60:d9:7e:c5:38:00:f8:82:48:3e:aa:5c:c9:0c:54:ef:64: c0:50:f7:40:8b:e5:6d:f8:19:e4:ea:46:c7:6d:74:14:18:c2: 6c:5e:d4:9e:d0:f2:16:76:fa:2b:5a:e6:40:7c:44:d7:db:1a: 3c:30:f2:ba:3e:17:60:d0:a3:e4:3e:4e:fc:67:39:78:4f:2b: 05:0b:d2:9f:67:60:6a:eb:c4:2e:9e:aa:3d:9a:32:52:18:02: d8:f9:7f:76:ee:43:fe:06:d5:7e:8c:b7:59:07:30:fa:60:23: 2e:a7:7d:fd:c4:43:b9:ef:d5:7a:83:61:dc:7f:46:c3:ad:e3: c7:f3:96:8a:92:9a:01:0b:c2:f3:41:9e:da:f2:b8:7f:6e:80: 22:65:59:c3:77:f7:d5:bc:80:10:19:bc:6e:75:8b:12:f7:5c: 22:bb:e1:e0:a7:5a:df:13:dd:d0:fc:02:81:e3:b8:03:01:44: 67:d9:90:fd:af:a6:31:6a:d3:7a:3d:57:9e:83:08:41:a9:65: a2:79:56:5a:0d:7f:a3:15:61:3c:11:d6:8f:d0:07:71:9c:de: 5f:69:3f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrN0/RKCYCjY4qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MmY5ZGIwNGQtNzdhYS00ODYzLTkzY2YtMDczMTllNTU4Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioxnijOeCu0NzLA3SHp8iyAmlf2qJWPPF8nD fEVc61hLLmZDYQ80tV342VewecRCAomfffnh9xDI5KI5dfm0ATvZZQUH6TgRd9KC n1t6yO3nNwPpTke6WFc3zAJ9kw8aqseW7ldqKngQdSSIZSypqf3YnEAn6+p+NIki GnPJxZhKzRYUnFAiQLOkNi/DxEFI7DHTRcebZNbzqfyFEYEBJH4Jqq5qfrg1As7B F55aLqIZgpu9OqlTy/oLxP1JepBAokjLWHnTlbx8JnpJ4ajSi/AxDoNiLeEkiQ1m LN++qE3kFamAd1Rm70AoNA05WWQEarF3f/mcKY1FHBpMa8f+rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTmXOmYvZRTl4dpEvlz43gtE0mCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvMDI1MDUzMGUtNjBmMS0z YjQxLWFiYTktZTZkMGYyNmI4NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8nsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdjaNFWDiOH+Q8vfTsf89o+xkjOkkRkgvj8+SxVVFW35GO/2Jlg2X7F OAD4gkg+qlzJDFTvZMBQ90CL5W34GeTqRsdtdBQYwmxe1J7Q8hZ2+ita5kB8RNfb Gjww8ro+F2DQo+Q+TvxnOXhPKwUL0p9nYGrrxC6eqj2aMlIYAtj5f3buQ/4G1X6M t1kHMPpgIy6nff3EQ7nv1XqDYdx/RsOt48fzloqSmgELwvNBntryuH9ugCJlWcN3 99W8gBAZvG51ixL3XCK74eCnWt8T3dD8AoHjuAMBRGfZkP2vpjFq03o9V56DCEGp ZaJ5VloNf6MVYTwR1o/QB3Gc3l9pPzU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:50 2025 by rpki-client