$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa File: 20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa (raw, json) Hash identifier: VhFlPijNpKfvuRVb/vxrC8G+5P8ilXWjfRQVRit1Xno= Subject key identifier: CA:0C:0E:D4:58:5C:7F:11:B4:10:3C:DE:88:F3:13:46:74:E0:A9:B8 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584B99D7A659F01528AE7A5F1680 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54994 IP address blocks: 157.185.131.0/24 maxlen: 24 157.185.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a6:59:f0:15:28:ae:7a:5f:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c51e9122-5aab-492c-a5fe-8f719cfb0fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:b3:11:28:e1:63:0b:48:2a:f8:40:02:36: f0:eb:7d:79:8f:be:44:77:13:52:81:fc:4f:05:5c: 2c:f6:80:45:6a:30:d6:05:2d:6c:24:f1:48:e9:d8: d9:9f:9c:53:f8:d6:38:73:a2:33:54:98:fc:e2:f0: 4d:a8:c5:34:db:d5:4b:90:47:54:2b:5d:7a:4f:f9: 9e:a9:a4:bc:cc:8c:09:53:16:0a:51:8d:63:82:55: 96:ab:a1:40:80:e2:bb:0b:0e:d5:ea:fe:98:84:b6: 46:3e:96:2d:63:7f:66:0c:6a:1c:b4:d8:87:d1:70: ea:18:48:e3:b2:37:e3:1d:9b:81:7f:22:a2:19:fa: bd:59:f0:76:bb:33:09:6c:bc:17:fa:42:99:12:ad: 34:2d:ca:3e:f0:ee:89:e4:92:52:dc:05:26:c7:8b: 1a:84:6b:82:23:63:92:da:9e:fb:5c:09:7a:d1:d7: 54:d6:00:66:b9:b6:f8:d2:fb:c9:85:fb:ce:7d:2a: 96:ce:87:df:59:dc:33:25:d7:45:b5:b0:1f:1f:f9: 74:cb:34:ff:07:26:15:6e:6d:ce:69:89:19:62:a9: 33:27:97:d7:0b:65:86:93:8b:a5:c8:d2:60:02:f6: b1:92:33:02:7d:4b:0c:91:4b:f5:9e:bd:a5:ed:5f: 27:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0C:0E:D4:58:5C:7F:11:B4:10:3C:DE:88:F3:13:46:74:E0:A9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.131.0-157.185.132.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:2c:c3:9a:2e:dc:dc:62:9e:6a:8d:ca:cd:a3:b5:46:bf:64: 03:12:0b:a4:0e:d4:ae:38:13:68:61:25:7c:fc:6b:da:b2:e9: a4:93:33:94:79:6a:17:4f:ef:7d:6f:6c:37:ed:17:9b:22:7a: b7:59:e3:8a:7a:b3:88:fa:87:12:80:43:17:6d:e9:2a:d5:2c: 5d:d7:5c:c0:dc:af:d7:a3:fa:f8:68:0a:04:cf:6b:72:86:11: a5:da:63:94:56:ce:85:68:33:28:44:7e:e4:c6:7a:92:5c:24: ea:0d:a8:ec:ca:51:b1:ab:bb:97:19:e5:ff:68:70:4b:6a:8f: c5:fb:a5:0d:a2:cb:ed:af:5b:12:07:0a:67:c4:70:66:78:c5: 59:6d:9d:14:63:7b:76:2c:a8:83:8a:1a:75:30:21:20:5e:7c: 74:f3:c9:17:c3:7f:d8:7c:f9:bc:d3:e5:2b:57:b4:9c:4d:45: 6e:2c:ad:45:f9:d1:a1:9b:54:32:69:a5:4b:ea:22:a4:3f:62: 41:45:55:7a:fd:60:6c:45:e9:87:a0:d6:70:b8:d5:0b:31:7f: c6:14:0d:d3:e4:f9:db:0b:27:2b:9c:ad:77:c8:7b:23:6c:01: a6:51:51:b7:30:0f:af:00:a4:96:e3:a1:10:83:2f:ce:f7:e6: 7a:c5:c8:c9 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuZ16ZZ8BUornpfFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YzUxZTkxMjItNWFhYi00OTJjLWE1ZmUtOGY3MTljZmIwZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshSzESjhYwtIKvhAAjbw6315j75EdxNSgfxP BVws9oBFajDWBS1sJPFI6djZn5xT+NY4c6IzVJj84vBNqMU029VLkEdUK116T/me qaS8zIwJUxYKUY1jglWWq6FAgOK7Cw7V6v6YhLZGPpYtY39mDGoctNiH0XDqGEjj sjfjHZuBfyKiGfq9WfB2uzMJbLwX+kKZEq00Lco+8O6J5JJS3AUmx4sahGuCI2OS 2p77XAl60ddU1gBmubb40vvJhfvOfSqWzoffWdwzJddFtbAfH/l0yzT/ByYVbm3O aYkZYqkzJ5fXC2WGk4ulyNJgAvaxkjMCfUsMkUv1nr2l7V8nOwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMoMDtRYXH8RtBA83ojzE0Z04Km4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjBlYjlhOGQtYmFiNS0z ZTVjLWEwMzYtNzlhODM0OWFiODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACduYMD BACduYQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZizDmi7c3GKeao3KzaO1Rr9kAxILpA7UrjgTaGElfPxr 2rLppJMzlHlqF0/vfW9sN+0XmyJ6t1njinqziPqHEoBDF23pKtUsXddcwNyv16P6 +GgKBM9rcoYRpdpjlFbOhWgzKER+5MZ6klwk6g2o7MpRsau7lxnl/2hwS2qPxful DaLL7a9bEgcKZ8RwZnjFWW2dFGN7diyog4oadTAhIF58dPPJF8N/2Hz5vNPlK1e0 nE1FbiytRfnRoZtUMmmlS+oipD9iQUVVev1gbEXph6DWcLjVCzF/xhQN0+T52wsn K5ytd8h7I2wBplFRtzAPrwCkluOhEIMvzvfmesXIyQ== -----END CERTIFICATE-----Generated at Tue Nov 4 23:00:19 2025 by rpki-client