$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8e66429a-48d0-3aa5-8dc6-bd5f4431c161.roa File: 8e66429a-48d0-3aa5-8dc6-bd5f4431c161.roa (raw, json) Hash identifier: DdbLaUGiEKP2MPp8qF1HKNkLDNFOGzYzZJsZK8ftTOo= Subject key identifier: 87:8D:E7:3A:95:F0:80:57:CC:B8:18:F9:B0:37:26:FE:9D:81:91:8F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B4A471576767D268F8A10C930 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8e66429a-48d0-3aa5-8dc6-bd5f4431c161.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 0 IP address blocks: 131.150.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:15:76:76:7d:26:8f:8a:10:c9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=20836347-27f5-4df1-9e62-14e0a13900b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:03:74:7a:15:fa:06:dd:2b:db:85:28:f1:4c: 41:b1:d8:45:d9:98:05:4e:3a:54:55:a2:98:9d:54: 3b:e3:a7:e7:1c:46:f7:01:9e:ef:2e:b8:1a:18:af: d6:8d:9d:c4:64:ea:7e:12:4c:d9:5b:ee:a5:a0:52: 9c:b5:12:cd:86:8d:0d:86:f9:cb:f5:01:4d:60:70: 8c:f1:de:34:7f:63:4f:38:a4:e1:81:40:1e:4c:b5: c5:c0:04:85:e5:2b:8f:4e:bd:ca:d9:02:16:89:fc: 97:ff:15:d3:3a:4b:b9:0d:41:8a:83:64:b1:40:1d: 73:0d:13:1e:85:35:91:86:6f:79:b6:d4:c7:b6:89: fc:89:59:9a:40:c8:69:c2:e3:e1:a7:b6:96:4a:cd: 8c:11:07:70:7b:4b:61:d2:33:56:70:38:07:18:91: 0e:7e:5d:33:55:68:bd:fd:a6:25:08:ff:ab:23:0d: bd:a8:d7:61:43:d7:f9:e9:99:fa:72:27:49:2d:4b: a3:99:e1:34:a6:cd:cb:b2:d9:66:5b:5f:f8:ff:00: 70:67:39:31:2d:47:c5:f1:1a:d6:ac:17:d8:cf:2e: 89:0d:0d:8d:20:41:e8:37:e6:1e:7e:fe:d9:47:0f: 50:52:f5:4e:2c:01:53:5f:36:9b:d1:0f:b6:c1:a5: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8D:E7:3A:95:F0:80:57:CC:B8:18:F9:B0:37:26:FE:9D:81:91:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8e66429a-48d0-3aa5-8dc6-bd5f4431c161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 131.150.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ad:66:0a:c7:7a:6b:b4:5e:5e:e1:30:ce:78:ac:90:18:d6: e6:8e:62:d2:69:56:5f:b3:74:8f:69:b8:ea:1c:21:c1:11:83: e9:37:bf:c5:05:d0:0e:b8:b7:24:0f:de:de:90:38:44:32:02: d0:41:31:9e:c0:a3:83:5a:26:0a:e0:f8:1d:75:94:4a:7e:9f: 26:94:68:86:22:a3:8e:b9:c7:38:62:5d:4e:4b:1f:fe:13:ea: d1:71:c9:a7:81:51:90:bc:50:97:1e:a4:32:32:31:87:48:74: 1b:3b:f4:f0:51:81:f0:d7:f2:f5:ea:20:2b:8b:6e:0b:10:38: 66:24:36:86:10:e6:e6:47:57:42:a0:d8:65:d9:e5:1c:72:03: a4:be:22:41:ba:a3:11:24:ab:5d:f7:74:a3:9e:37:1c:a6:28: 2e:29:b8:99:20:7a:d2:ae:a5:9d:ff:30:1d:b7:38:10:a4:20: ef:07:9b:e3:d7:51:5a:66:44:74:d2:e7:b4:4a:53:d0:9d:f2: 04:97:4b:25:af:cd:b2:f0:73:69:d3:a4:dd:9f:ac:b9:8a:90: 50:57:0d:2c:05:d3:1f:f6:e2:00:9f:46:5e:00:75:dc:b3:64: b0:cf:f1:c1:29:9c:62:f8:0c:59:d0:63:bd:bf:28:14:10:b0: 76:74:a8:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxV2dn0mj4oQyTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MjA4MzYzNDctMjdmNS00ZGYxLTllNjItMTRlMGExMzkwMGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgN0ehX6Bt0r24Uo8UxBsdhF2ZgFTjpUVaKY nVQ746fnHEb3AZ7vLrgaGK/WjZ3EZOp+EkzZW+6loFKctRLNho0NhvnL9QFNYHCM 8d40f2NPOKThgUAeTLXFwASF5SuPTr3K2QIWifyX/xXTOku5DUGKg2SxQB1zDRMe hTWRhm95ttTHton8iVmaQMhpwuPhp7aWSs2MEQdwe0th0jNWcDgHGJEOfl0zVWi9 /aYlCP+rIw29qNdhQ9f56Zn6cidJLUujmeE0ps3LstlmW1/4/wBwZzkxLUfF8RrW rBfYzy6JDQ2NIEHoN+Yefv7ZRw9QUvVOLAFTXzab0Q+2waVp2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeN5zqV8IBXzLgY+bA3Jv6dgZGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOGU2NjQyOWEtNDhkMC0z YWE1LThkYzYtYmQ1ZjQ0MzFjMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5YcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAStZgrHemu0Xl7hMM54rJAY1uaOYtJpVl+zdI9puOocIcERg+k3v8UF 0A64tyQP3t6QOEQyAtBBMZ7Ao4NaJgrg+B11lEp+nyaUaIYio465xzhiXU5LH/4T 6tFxyaeBUZC8UJcepDIyMYdIdBs79PBRgfDX8vXqICuLbgsQOGYkNoYQ5uZHV0Kg 2GXZ5RxyA6S+IkG6oxEkq133dKOeNxymKC4puJkgetKupZ3/MB23OBCkIO8Hm+PX UVpmRHTS57RKU9Cd8gSXSyWvzbLwc2nTpN2frLmKkFBXDSwF0x/24gCfRl4Addyz ZLDP8cEpnGL4DFnQY72/KBQQsHZ0qGE= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:41 2025 by rpki-client