$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/ff34f3db-3da0-3523-90dc-56fd5fefefd6.roa File: ff34f3db-3da0-3523-90dc-56fd5fefefd6.roa (raw, json) Hash identifier: iFyAfBO7uhKSIKhjsuq4XBDdZs+OIN4xlb973LFf054= Subject key identifier: FC:22:EF:02:8F:7C:B0:31:E7:AF:36:7B:AE:09:C1:EF:04:99:6B:6B Certificate issuer: /CN=9ace5cc7-82ec-4bec-947e-97e7401aa1cc Certificate serial: 010D0C9F4328584B7CFEFB1D889396C3F8244584 Authority key identifier: 00:A3:EE:AC:67:BF:DE:4C:CC:CD:4F:1F:E0:47:7A:CF:26:09:D7:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/ff34f3db-3da0-3523-90dc-56fd5fefefd6.roa Signing time: Sat 11 Oct 2025 17:01:41 +0000 ROA not before: Sat 11 Oct 2025 17:01:41 +0000 ROA not after: Fri 09 Jan 2026 18:01:41 +0000 asID: 0 IP address blocks: 131.143.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:fe:fb:1d:88:93:96:c3:f8:24:45:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ace5cc7-82ec-4bec-947e-97e7401aa1cc Validity Not Before: Oct 11 17:01:41 2025 GMT Not After : Jan 9 18:01:41 2026 GMT Subject: CN=2c637f2e-ef18-41a0-838a-0a6f96a19f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e3:35:96:50:10:ca:56:da:d0:50:e8:27:cf: d1:5a:e9:d5:e4:53:3c:0b:d3:e2:7c:1a:61:d2:50: 45:6d:a2:89:96:b4:67:8f:7e:51:fc:73:16:e4:44: ee:b2:f7:bb:17:cc:8a:e7:22:46:db:1b:94:aa:d3: 08:4d:d4:76:05:4d:ec:5f:59:5b:49:a5:7d:b3:0d: 02:f1:5a:5e:85:f4:da:42:51:a2:d9:96:13:3a:3a: cc:e8:59:88:84:cc:30:8c:1f:33:76:4b:02:23:2d: 22:69:cb:50:06:d1:35:ec:43:dd:61:ed:73:a9:7a: eb:d6:0c:3c:97:f7:e1:af:2b:bd:0a:1a:46:9f:e0: 7e:65:b3:c3:12:dd:92:93:0c:eb:03:39:93:82:16: f8:bd:22:ae:aa:45:eb:50:c1:d8:74:76:02:d9:3f: 66:b1:31:60:bb:35:66:29:4b:c8:a7:ee:a0:e4:27: 7a:10:da:c9:59:0a:f3:ea:e1:67:1d:76:a0:52:c5: 76:b0:07:21:29:0c:fe:70:c4:d2:e3:3d:75:aa:dc: 10:12:4e:fe:c0:ec:50:c4:03:2c:d4:4d:ad:e0:69: 72:e5:db:51:6e:fb:bd:e9:f0:22:9d:52:5a:fe:f2: 9a:6c:e3:2e:86:1a:aa:93:9c:bf:60:44:81:2d:a5: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:22:EF:02:8F:7C:B0:31:E7:AF:36:7B:AE:09:C1:EF:04:99:6B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/ff34f3db-3da0-3523-90dc-56fd5fefefd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.crl X509v3 Authority Key Identifier: keyid:00:A3:EE:AC:67:BF:DE:4C:CC:CD:4F:1F:E0:47:7A:CF:26:09:D7:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer sbgp-ipAddrBlock: critical IPv4: 131.143.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:30:71:9d:93:e3:20:9e:d7:76:d9:6f:81:ed:ae:35:fa:6e: c2:40:c5:bb:25:ee:94:1a:0b:b4:80:93:67:e4:79:4b:9c:e9: 59:1c:86:2c:83:0e:e5:41:f6:68:b5:55:86:49:a0:b5:43:68: 90:5e:ad:3f:4f:a7:af:82:68:d7:a2:07:9e:b7:db:81:bc:20: 12:00:62:3e:f2:38:7c:d3:8d:f1:8a:05:da:7a:0a:d4:b2:06: d1:fb:4f:38:60:72:08:d1:74:c4:41:43:20:c5:cf:3e:fa:15: 28:58:aa:81:75:a3:d8:25:17:56:7c:57:96:8a:78:4b:c7:b6: 70:2a:c4:14:b5:52:67:66:30:26:4f:04:31:a2:78:0e:bd:0f: 3d:85:a5:ab:d5:4e:b3:60:69:52:c6:23:ca:21:b1:1e:a0:09: 37:57:fc:14:d5:fc:27:95:7f:0a:96:34:3e:82:3b:b7:e6:87: a9:b9:4b:84:25:15:e1:88:cc:93:50:b6:e0:4a:94:ca:4f:62: 1c:54:fa:d1:7c:07:e3:a0:df:8c:21:e6:ad:58:c5:ed:56:70: 37:ab:2e:ae:9e:b9:3d:39:7b:07:d1:33:57:e0:db:af:23:5d: f9:dd:d1:6d:42:17:dd:6f:dd:21:8b:07:8f:60:21:be:d6:78: 4e:4a:6b:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8/vsdiJOWw/gkRYQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjZTVjYzctODJlYy00YmVjLTk0N2UtOTdlNzQwMWFh MWNjMB4XDTI1MTAxMTE3MDE0MVoXDTI2MDEwOTE4MDE0MVowLzEtMCsGA1UEAxMk MmM2MzdmMmUtZWYxOC00MWEwLTgzOGEtMGE2Zjk2YTE5ZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleM1llAQylba0FDoJ8/RWunV5FM8C9PifBph 0lBFbaKJlrRnj35R/HMW5ETusve7F8yK5yJG2xuUqtMITdR2BU3sX1lbSaV9sw0C 8VpehfTaQlGi2ZYTOjrM6FmIhMwwjB8zdksCIy0iactQBtE17EPdYe1zqXrr1gw8 l/fhryu9ChpGn+B+ZbPDEt2SkwzrAzmTghb4vSKuqkXrUMHYdHYC2T9msTFguzVm KUvIp+6g5Cd6ENrJWQrz6uFnHXagUsV2sAchKQz+cMTS4z11qtwQEk7+wOxQxAMs 1E2t4Gly5dtRbvu96fAinVJa/vKabOMuhhqqk5y/YESBLaU5WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwi7wKPfLAx5682e64Jwe8EmWtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85YWNl NWNjNy04MmVjLTRiZWMtOTQ3ZS05N2U3NDAxYWExY2MvZmYzNGYzZGItM2RhMC0z NTIzLTkwZGMtNTZmZDVmZWZlZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWFjZTVjYzctODJlYy00YmVjLTk0 N2UtOTdlNzQwMWFhMWNjLzlhY2U1Y2M3LTgyZWMtNGJlYy05NDdlLTk3ZTc0MDFh YTFjYy5jcmwwHwYDVR0jBBgwFoAUAKPurGe/3kzMzU8f4Ed6zyYJ10AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85YWNlNWNjNy04MmVjLTRiZWMtOTQ3ZS05N2U3 NDAxYWExY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQwcZ2T4yCe13bZb4HtrjX6bsJAxbsl7pQaC7SAk2fkeUuc6VkchiyD DuVB9mi1VYZJoLVDaJBerT9Pp6+CaNeiB56324G8IBIAYj7yOHzTjfGKBdp6CtSy BtH7TzhgcgjRdMRBQyDFzz76FShYqoF1o9glF1Z8V5aKeEvHtnAqxBS1UmdmMCZP BDGieA69Dz2FpavVTrNgaVLGI8ohsR6gCTdX/BTV/CeVfwqWND6CO7fmh6m5S4Ql FeGIzJNQtuBKlMpPYhxU+tF8B+Og34wh5q1Yxe1WcDerLq6euT05ewfRM1fg268j Xfnd0W1CF91v3SGLB49gIb7WeE5Ka2o= -----END CERTIFICATE-----Generated at Tue Oct 14 08:16:37 2025 by rpki-client