$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa File: d398e187-3fa7-3919-8a37-a9993ff3c633.roa (raw, json) Hash identifier: 2keR6x9PFgLv5/DThvZdswb9lbJav2kTzVLMIUCaZOI= Subject key identifier: 66:EC:55:A5:44:3E:C7:55:E2:19:FA:EB:72:8D:96:F4:DD:9A:18:A7 Certificate issuer: /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Certificate serial: 010D0C9F4328584B8BE2214BB6BDA4A379781900 Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16580 IP address blocks: 131.232.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:21:4b:b6:bd:a4:a3:79:78:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=a22170d4-2f8d-428f-a328-8711eb4e4ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:c0:d0:af:05:ab:1c:a9:6a:1e:45:da:96: cc:e6:31:27:05:19:ee:dc:0b:97:ae:e1:62:c0:99: 14:70:fc:5d:27:8e:d9:a1:83:93:6f:94:40:19:bb: 9f:5d:c6:08:07:3c:c5:40:6a:a8:fa:15:34:dd:d4: b6:b4:ff:b0:db:1a:b9:c9:94:f5:67:84:8e:49:10: 20:ed:ec:57:81:41:ec:21:e8:29:eb:ae:bf:d7:15: ec:60:c6:8b:cd:43:48:fc:4b:86:fa:81:e8:fc:00: 3d:10:35:55:9e:40:01:87:4f:c5:8a:83:e8:79:f1: df:30:1d:07:71:92:73:21:43:7c:17:3f:f9:b1:d3: e8:5d:f4:f4:ed:c3:c6:f7:15:42:d4:f5:07:24:e2: 2d:9d:78:d1:80:39:54:d0:02:47:3b:77:11:f3:c4: 87:ec:c3:35:54:72:de:c4:9e:96:b3:1a:6e:71:e6: bc:1a:69:32:63:cd:73:eb:1f:38:7d:97:7c:a9:1c: e7:59:a7:b9:c2:99:70:d5:92:d3:c6:00:5a:6a:ff: 61:1c:fc:01:36:76:19:d3:f1:79:e8:c3:cf:d2:c4: 4a:ef:16:0a:7e:9e:55:eb:39:f4:52:51:02:8d:ff: 8a:e9:97:84:1b:10:c1:b8:3e:1c:71:c7:a8:49:9a: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EC:55:A5:44:3E:C7:55:E2:19:FA:EB:72:8D:96:F4:DD:9A:18:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl X509v3 Authority Key Identifier: keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer sbgp-ipAddrBlock: critical IPv4: 131.232.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4c:72:7b:e4:51:77:05:f6:f4:f9:08:0b:fd:62:ba:de:99: d4:ff:99:29:a4:b5:4e:a2:90:b9:63:d9:1c:b2:e1:7b:64:1f: 32:4e:f7:a8:81:73:2b:38:cf:93:b4:4f:0e:bc:4d:ed:ea:02: 26:74:7d:f1:e5:af:91:e6:6e:72:2c:97:d1:98:38:72:bf:c8: 94:ee:ab:f2:f5:29:f9:b0:7f:03:f0:8a:f6:59:18:85:f5:37: ea:1c:e0:f3:e2:26:83:9a:dc:72:44:85:b4:af:33:09:3e:09: d6:4c:0e:ba:13:a7:91:03:ec:da:fd:3c:75:9e:be:4a:0b:e2: ba:53:01:85:a3:02:95:83:63:66:4e:f9:ff:36:f6:26:9b:88: 7e:07:82:41:ee:89:e6:b7:6b:b0:5f:53:a4:52:5d:4c:30:51: 79:00:2a:57:94:c7:e0:5f:1d:29:51:06:f3:c3:df:b2:c7:7d: cf:d5:b8:a7:5a:c7:d4:1c:9b:15:c6:76:87:f4:5d:04:c2:39: 8f:f2:77:83:7b:aa:3f:0d:76:74:fe:12:e2:15:eb:3b:c1:05: a3:0f:0e:b1:6a:9e:ce:6b:d9:3e:7b:10:19:b5:31:6c:54:67: 36:ab:30:7e:d6:ea:89:d6:db:1d:11:b6:c8:41:3e:00:e6:03: 6d:7e:e2:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iFLtr2ko3l4GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQz NjVlMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YTIyMTcwZDQtMmY4ZC00MjhmLWEzMjgtODcxMWViNGU0Y2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZPA0K8Fqxypah5F2pbM5jEnBRnu3AuXruFi wJkUcPxdJ47ZoYOTb5RAGbufXcYIBzzFQGqo+hU03dS2tP+w2xq5yZT1Z4SOSRAg 7exXgUHsIegp666/1xXsYMaLzUNI/EuG+oHo/AA9EDVVnkABh0/FioPoefHfMB0H cZJzIUN8Fz/5sdPoXfT07cPG9xVC1PUHJOItnXjRgDlU0AJHO3cR88SH7MM1VHLe xJ6Wsxpucea8GmkyY81z6x84fZd8qRznWae5wplw1ZLTxgBaav9hHPwBNnYZ0/F5 6MPP0sRK7xYKfp5V6zn0UlECjf+K6ZeEGxDBuD4ccceoSZpFCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbsVaVEPsdV4hn663KNlvTdmhinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2 NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvZDM5OGUxODctM2ZhNy0z OTE5LThhMzctYTk5OTNmZjNjNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlNjRiNjYtODRkZi00NjY1LWE0 ZmItZWIzYjhhZGQzNjVlL2E3ZTY0YjY2LTg0ZGYtNDY2NS1hNGZiLWViM2I4YWRk MzY1ZS5jcmwwHwYDVR0jBBgwFoAURD98KgLjgWbdKUOAz3Mgib/DGEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNi OGFkZDM2NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+glMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1McnvkUXcF9vT5CAv9YrremdT/mSmktU6ikLlj2Ryy4XtkHzJO96iB cys4z5O0Tw68Te3qAiZ0ffHlr5HmbnIsl9GYOHK/yJTuq/L1KfmwfwPwivZZGIX1 N+oc4PPiJoOa3HJEhbSvMwk+CdZMDroTp5ED7Nr9PHWevkoL4rpTAYWjApWDY2ZO +f829iabiH4HgkHuiea3a7BfU6RSXUwwUXkAKleUx+BfHSlRBvPD37LHfc/VuKda x9QcmxXGdof0XQTCOY/yd4N7qj8NdnT+EuIV6zvBBaMPDrFqns5r2T57EBm1MWxU ZzarMH7W6onW2x0RtshBPgDmA21+4t0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:05 2025 by rpki-client