$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa File: aabe01d2-6b84-3a4c-a160-177c79696872.roa (raw, json) Hash identifier: P81th0EZ3KGmXcKGTfOwp6mfVXB4IhwKgdnMkFDpr+g= Subject key identifier: 20:F7:35:A6:06:CB:99:70:04:72:45:6F:B9:C3:32:D3:71:CF:09:7C Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B2B919531AE2F1C91850A2C40 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 902 IP address blocks: 131.148.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:95:31:ae:2f:1c:91:85:0a:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=d55c2ce2-c0a3-4354-8eeb-259e01589c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:01:89:86:93:14:7b:88:fb:b8:18:0a:72: f6:98:4b:af:85:f0:4d:d2:50:9e:e9:60:b5:21:d0: 43:bc:29:41:42:c6:b4:2c:d6:dd:a9:c4:2d:82:f5: b4:e7:d2:ba:5c:69:ac:59:ed:bf:3d:d0:c0:44:38: e5:a6:18:83:77:19:f8:78:f8:4f:81:c2:71:0d:01: 20:01:12:6c:1f:7e:0f:30:55:4f:5b:e0:5b:6b:8d: 6e:69:fe:1d:f5:8a:cf:da:05:92:d8:1f:f0:b7:2e: 73:92:83:4f:f3:95:3d:25:2f:9e:f3:aa:92:75:24: 49:96:2e:11:13:60:62:02:a8:97:fc:11:f9:aa:92: 5a:20:34:a7:dc:d3:c8:02:24:e7:06:4f:f0:c4:9a: 26:ed:5e:cd:d3:5e:66:40:3f:86:13:de:50:25:db: 9a:93:64:33:91:05:85:cb:c4:ce:e2:d1:f8:50:17: 8a:52:35:ce:28:e5:b8:d0:ad:5a:bc:11:c2:f2:d0: 06:8f:d0:fd:85:ad:d7:3e:54:2c:ae:54:95:a4:72: 65:63:04:19:44:55:8f:54:d8:13:22:e4:25:a4:bb: bd:7a:74:df:d8:7d:92:05:e7:6e:56:8a:c3:91:62: 36:bf:a3:9e:e2:79:de:d7:41:d2:50:06:a5:dd:28: 11:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F7:35:A6:06:CB:99:70:04:72:45:6F:B9:C3:32:D3:71:CF:09:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 131.148.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b7:cd:51:0a:d2:de:4f:1d:f4:3b:3d:8b:6b:74:7a:6b:20: fa:b7:49:50:73:00:3c:dd:61:67:61:a5:37:f4:51:f5:a9:50: 12:13:84:ca:1e:a3:ef:6b:f3:64:5a:10:88:67:7a:b3:f4:f0: 67:36:9a:08:7d:42:e6:71:f7:19:48:41:a5:50:f7:46:17:9b: a7:a6:cc:ad:e0:b1:66:4a:65:1e:97:6d:50:54:2b:49:30:7e: 77:0d:df:30:ce:81:62:aa:00:0d:ec:c2:56:98:84:02:07:ba: f1:da:1b:2a:b7:ac:61:41:e6:c9:37:01:a2:49:58:fe:a6:8c: 57:9d:39:b9:f3:8a:f9:6d:1d:a7:e0:f4:17:88:40:ce:24:4c: c7:57:17:77:65:12:88:b0:32:20:89:0c:03:ac:24:73:55:23: 41:ed:bb:b0:4c:78:39:ad:31:02:a7:a4:c1:0a:f2:e7:e6:81: 99:fb:eb:b7:2f:c2:21:8b:ea:90:14:f6:3a:30:36:c1:ae:40: 0d:95:6f:54:54:45:38:70:df:46:c4:7b:23:63:77:c0:aa:68: b7:86:49:fa:3b:0a:1e:8f:16:87:75:d4:be:b6:cd:98:46:8a: 25:9a:67:8a:89:19:a8:17:a9:c0:6f:47:9d:97:fb:5c:1e:43: 2a:f7:71:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZUxri8ckYUKLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk ZDU1YzJjZTItYzBhMy00MzU0LThlZWItMjU5ZTAxNTg5YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsusBiYaTFHuI+7gYCnL2mEuvhfBN0lCe6WC1 IdBDvClBQsa0LNbdqcQtgvW059K6XGmsWe2/PdDARDjlphiDdxn4ePhPgcJxDQEg ARJsH34PMFVPW+Bba41uaf4d9YrP2gWS2B/wty5zkoNP85U9JS+e86qSdSRJli4R E2BiAqiX/BH5qpJaIDSn3NPIAiTnBk/wxJom7V7N015mQD+GE95QJduak2QzkQWF y8TO4tH4UBeKUjXOKOW40K1avBHC8tAGj9D9ha3XPlQsrlSVpHJlYwQZRFWPVNgT IuQlpLu9enTf2H2SBeduVorDkWI2v6Oe4nne10HSUAal3SgRvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD3NaYGy5lwBHJFb7nDMtNxzwl8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWFiZTAxZDItNmI4NC0z YTRjLWExNjAtMTc3Yzc5Njk2ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5R9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA63zVEK0t5PHfQ7PYtrdHprIPq3SVBzADzdYWdhpTf0UfWpUBIThMoe o+9r82RaEIhnerP08Gc2mgh9QuZx9xlIQaVQ90YXm6emzK3gsWZKZR6XbVBUK0kw fncN3zDOgWKqAA3swlaYhAIHuvHaGyq3rGFB5sk3AaJJWP6mjFedObnzivltHafg 9BeIQM4kTMdXF3dlEoiwMiCJDAOsJHNVI0Htu7BMeDmtMQKnpMEK8ufmgZn767cv wiGL6pAU9jowNsGuQA2Vb1RURThw30bEeyNjd8CqaLeGSfo7Ch6PFod11L62zZhG iiWaZ4qJGagXqcBvR52X+1weQyr3cdw= -----END CERTIFICATE-----Generated at Wed Nov 5 06:08:37 2025 by rpki-client