$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0253bbda-951a-3ccf-9a2b-17d91289e8a8.roa File: 0253bbda-951a-3ccf-9a2b-17d91289e8a8.roa (raw, json) Hash identifier: sJXLMEkSFfbJx68kFKcAkmr2mXpkhy177RLV/xLyeOA= Subject key identifier: 11:C6:BE:05:E5:DD:B2:2E:C9:1B:A1:4B:63:F9:03:B8:C2:B9:50:35 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B4A4712E009163C69542C5340 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0253bbda-951a-3ccf-9a2b-17d91289e8a8.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 0 IP address blocks: 131.150.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:12:e0:09:16:3c:69:54:2c:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=2885b9e7-9e1a-4f1d-8378-af1dfd5a8ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:64:2e:11:6d:2b:08:d1:f7:01:56:79:44: a7:8b:93:9f:a9:16:56:9c:81:33:8d:f4:f5:61:51: ce:27:32:b5:91:9e:fb:45:b0:33:c0:fe:da:9e:21: 31:8e:8e:63:0c:75:5b:83:ce:32:f7:b3:bc:a0:14: a3:33:ec:42:9e:42:6a:87:73:bb:85:a2:c2:73:07: 5c:66:b9:73:b3:9d:6f:ae:3c:1a:00:35:4a:52:e5: e9:ae:55:8d:e3:37:cd:2e:9b:ba:ed:bd:6c:33:23: 67:c6:37:ca:a1:a5:c9:77:62:9f:2c:aa:7f:26:b7: 01:75:4a:9a:0e:2d:ea:c0:62:66:ac:d9:bc:21:f0: 76:d3:e9:df:d7:e8:aa:ac:27:dd:bc:4b:25:8b:3e: 2d:7f:bc:ba:6b:06:af:36:82:48:2c:cd:f9:2a:a4: 63:fb:67:5f:a8:a8:8a:08:2d:ca:1b:a6:db:41:e6: 5d:15:af:e9:32:f8:6b:ac:b0:05:c7:5b:f1:6d:89: a4:f5:fd:b2:01:01:58:4e:ff:e5:cf:75:ed:0b:d0: b3:f8:ef:87:5c:1d:26:33:f1:41:09:d4:f3:1f:86: b8:91:2a:7e:92:bb:ef:cf:48:4e:d6:ab:1a:17:9a: 47:c6:fc:58:bd:09:d4:ab:16:b3:ed:bb:29:4d:21: 16:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C6:BE:05:E5:DD:B2:2E:C9:1B:A1:4B:63:F9:03:B8:C2:B9:50:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0253bbda-951a-3ccf-9a2b-17d91289e8a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 131.150.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:5f:5f:f5:74:6d:f2:23:1d:09:03:62:5d:dd:91:e4:1a:94: cf:51:0d:c9:91:b7:ac:de:cc:38:a8:b4:bb:1a:e6:09:16:15: 8e:42:a9:bf:06:b1:cc:f4:f5:48:24:fe:bb:e9:01:f2:62:59: fe:a3:b6:32:d7:38:83:11:f4:8e:d3:83:b0:94:ad:49:51:12: da:92:ca:15:d8:08:cc:61:3c:11:b7:08:18:92:40:04:f3:df: fa:2e:6c:a9:d0:39:ab:4d:1a:a6:d3:1d:39:4b:a4:2d:66:20: bd:6f:c7:c7:21:81:6f:22:30:6a:d4:cb:62:0b:37:9f:fb:9c: 1b:af:67:9e:fa:82:5c:6a:2f:a7:bb:fa:ab:09:7a:0c:42:04: 72:7a:5c:79:ad:b8:86:72:95:b1:ab:17:51:30:8f:41:0b:a5: 28:c3:c5:87:8a:ad:ae:d9:31:2d:18:2f:b5:6b:8d:f7:5a:ab: 32:46:10:6b:be:16:0f:3e:12:82:a0:36:61:bd:f1:b7:7d:b4: 41:0a:02:80:fc:d2:e7:bf:57:85:a5:15:59:90:17:d6:2a:23: ef:c3:10:14:44:25:e1:2f:70:e5:1e:fe:76:bf:34:41:41:91: 88:3a:03:5c:6d:da:9d:dd:47:6e:2a:39:b4:8b:4c:c5:91:8f: e1:33:57:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxLgCRY8aVQsU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk Mjg4NWI5ZTctOWUxYS00ZjFkLTgzNzgtYWYxZGZkNWE4ZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0pkLhFtKwjR9wFWeUSni5OfqRZWnIEzjfT1 YVHOJzK1kZ77RbAzwP7aniExjo5jDHVbg84y97O8oBSjM+xCnkJqh3O7haLCcwdc Zrlzs51vrjwaADVKUuXprlWN4zfNLpu67b1sMyNnxjfKoaXJd2KfLKp/JrcBdUqa Di3qwGJmrNm8IfB20+nf1+iqrCfdvEsliz4tf7y6awavNoJILM35KqRj+2dfqKiK CC3KG6bbQeZdFa/pMvhrrLAFx1vxbYmk9f2yAQFYTv/lz3XtC9Cz+O+HXB0mM/FB CdTzH4a4kSp+krvvz0hO1qsaF5pHxvxYvQnUqxaz7bspTSEW9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHGvgXl3bIuyRuhS2P5A7jCuVA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDI1M2JiZGEtOTUxYS0z Y2NmLTlhMmItMTdkOTEyODllOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5YIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFfX/V0bfIjHQkDYl3dkeQalM9RDcmRt6zezDiotLsa5gkWFY5Cqb8G scz09Ugk/rvpAfJiWf6jtjLXOIMR9I7Tg7CUrUlREtqSyhXYCMxhPBG3CBiSQATz 3/oubKnQOatNGqbTHTlLpC1mIL1vx8chgW8iMGrUy2ILN5/7nBuvZ576glxqL6e7 +qsJegxCBHJ6XHmtuIZylbGrF1Ewj0ELpSjDxYeKra7ZMS0YL7VrjfdaqzJGEGu+ Fg8+EoKgNmG98bd9tEEKAoD80ue/V4WlFVmQF9YqI+/DEBREJeEvcOUe/na/NEFB kYg6A1xt2p3dR24qObSLTMWRj+EzV0E= -----END CERTIFICATE-----Generated at Tue Nov 4 23:12:30 2025 by rpki-client