$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa File: 2e020565-2650-3731-84b4-b30e83f1cb6a.roa (raw, json) Hash identifier: 4d+zKNrFS9i4Q3lk6W2ov1TbBxf8GXtPOqEgiB70QOc= Subject key identifier: 99:FC:68:1C:A5:DB:C3:88:05:FE:37:BE:22:D6:25:05:E2:77:A0:D9 Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F4328584BA667AC232B8CFA3ED0E1EA80 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 32145 IP address blocks: 131.109.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ac:23:2b:8c:fa:3e:d0:e1:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=a204e6a8-c72a-4a60-80eb-41fb25fb74c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:ef:c2:fd:f9:1f:79:04:62:30:c0:16:be: 33:ba:c3:3d:b3:00:e2:bd:20:83:df:a5:69:fe:7f: c2:80:12:93:b1:f5:87:1e:3f:b9:0d:90:77:ea:f8: 99:61:2b:65:e3:b3:38:94:6e:57:09:9c:c1:25:92: 40:30:71:a4:96:46:bf:77:7d:80:97:65:ae:91:cf: f5:a8:a4:92:2a:45:57:7c:8c:4a:c6:3e:db:e2:2b: 05:32:20:87:84:12:11:9d:2f:15:2b:76:87:2b:64: 76:7f:fb:03:c8:13:cf:fe:93:f4:3e:16:5f:bb:c7: 4c:ac:48:d7:00:7f:dd:db:f8:61:37:01:1e:ea:da: c0:83:a1:eb:24:0b:b7:4a:85:c5:5f:96:c5:44:c5: 63:5b:03:1e:4a:ac:d7:8c:99:32:4c:58:f9:bc:e1: 3a:7e:87:77:17:09:10:6f:9c:5a:70:2d:d8:8d:96: 3b:33:52:9b:a6:85:3a:0f:e7:50:bb:fe:13:46:54: c9:21:0c:e0:74:2d:a6:b5:bd:33:30:04:9b:46:c1: bf:91:62:dc:ce:cb:31:08:3d:f5:b3:d5:13:0d:03: 4b:40:18:70:80:76:fd:5a:66:99:d9:98:13:12:28: 70:e2:ba:b3:c5:28:ea:44:52:0e:2e:97:c1:9e:69: 8d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FC:68:1C:A5:DB:C3:88:05:FE:37:BE:22:D6:25:05:E2:77:A0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv4: 131.109.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:36:b7:7e:64:b9:2a:d0:d2:0b:84:99:ba:57:92:c9:ad:f7: cd:1e:aa:88:47:3d:89:82:e0:c5:2c:f3:cc:9f:30:26:ad:4f: 0e:b4:fc:4a:93:4d:84:a0:56:75:aa:f2:8d:13:68:6d:29:fa: 1e:96:81:4e:a7:77:c5:6b:5e:3f:86:94:88:08:be:76:80:0b: 84:d2:4a:d7:ee:f1:17:eb:9a:62:39:d4:02:a0:02:3e:2f:fd: 80:51:5e:fd:15:46:b1:33:10:35:f7:3c:96:11:68:56:b5:21: bc:54:5f:0b:0b:6c:2c:8f:19:ec:0f:2d:43:41:7d:bc:13:22: bd:1e:ee:1c:10:8d:cd:64:45:7e:11:f9:8b:a5:ef:9a:a9:c5: 65:27:99:9c:47:67:3f:5c:ca:94:b9:31:5c:87:f1:72:ef:66: 4d:79:8d:07:66:06:68:7b:d2:c1:f2:ae:da:6e:89:ec:09:2e: 63:19:d9:b0:36:5b:8b:f5:f8:28:e7:61:60:76:b0:61:d4:99: 93:c6:42:01:df:fd:61:bd:1e:bb:a7:ee:89:24:76:f0:ac:ec: 64:cf:7e:cd:1e:f8:1b:dd:f9:ff:f2:02:16:1a:18:a0:18:cd: d2:fb:89:96:42:98:e5:a6:cd:2d:7c:6b:d8:b1:ab:e4:e1:33: d1:45:0a:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6wjK4z6PtDh6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YTIwNGU2YTgtYzcyYS00YTYwLTgwZWItNDFmYjI1ZmI3NGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOTvwv35H3kEYjDAFr4zusM9swDivSCD36Vp /n/CgBKTsfWHHj+5DZB36viZYStl47M4lG5XCZzBJZJAMHGklka/d32Al2Wukc/1 qKSSKkVXfIxKxj7b4isFMiCHhBIRnS8VK3aHK2R2f/sDyBPP/pP0PhZfu8dMrEjX AH/d2/hhNwEe6trAg6HrJAu3SoXFX5bFRMVjWwMeSqzXjJkyTFj5vOE6fod3FwkQ b5xacC3YjZY7M1KbpoU6D+dQu/4TRlTJIQzgdC2mtb0zMASbRsG/kWLczssxCD31 s9UTDQNLQBhwgHb9WmaZ2ZgTEihw4rqzxSjqRFIOLpfBnmmNpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn8aByl28OIBf43viLWJQXid6DZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMmUwMjA1NjUtMjY1MC0z NzMxLTg0YjQtYjMwZTgzZjFjYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg22AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA2t35kuSrQ0guEmbpXksmt980eqohHPYmC4MUs88yfMCatTw60/EqT TYSgVnWq8o0TaG0p+h6WgU6nd8VrXj+GlIgIvnaAC4TSStfu8RfrmmI51AKgAj4v /YBRXv0VRrEzEDX3PJYRaFa1IbxUXwsLbCyPGewPLUNBfbwTIr0e7hwQjc1kRX4R +Yul75qpxWUnmZxHZz9cypS5MVyH8XLvZk15jQdmBmh70sHyrtpuiewJLmMZ2bA2 W4v1+CjnYWB2sGHUmZPGQgHf/WG9Hrun7okkdvCs7GTPfs0e+Bvd+f/yAhYaGKAY zdL7iZZCmOWmzS18a9ixq+ThM9FFCnU= -----END CERTIFICATE-----Generated at Wed Nov 5 15:13:04 2025 by rpki-client