$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa File: 2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa (raw, json) Hash identifier: fPf66QGpzdwHNTYNJU5igTJtOjJi3SV21SsI5gBOVBE= Subject key identifier: 9D:43:53:6E:29:33:60:4E:FD:47:52:A5:1C:82:BB:07:0C:53:BF:93 Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F4328584B5B0738C6DD99D08A0752F580 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 14464 IP address blocks: 131.109.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:38:c6:dd:99:d0:8a:07:52:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=45d901ab-5435-4ad1-a739-88fe4bff39cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:d3:03:cb:2b:03:07:f8:48:29:ad:24:c9: e8:63:27:14:cb:07:df:af:b2:64:8a:aa:51:0d:cb: 6a:50:9b:cb:e3:d2:24:9f:3e:c9:74:19:e1:4e:b8: db:fc:89:01:4d:3b:c2:7b:44:8a:68:89:b1:10:a3: d5:1a:de:f6:d9:4f:57:41:02:8a:c7:8b:ce:ac:3f: e0:05:ef:3c:c3:c3:0a:73:ca:a7:36:6e:a6:d3:41: 2e:3f:23:1e:e4:e3:ac:7f:2c:84:fb:80:88:4a:c8: 07:1e:fc:0e:92:5d:9f:7d:75:39:55:6b:d2:27:e6: f3:63:83:9d:4e:e1:97:a8:e8:d2:19:80:dd:bb:43: e9:4f:4b:b4:86:ba:70:cc:36:65:45:cb:81:59:ce: 01:ed:dd:94:18:5d:dd:36:32:57:c2:cf:2b:29:c9: b4:19:59:0c:79:4f:81:2e:5a:4c:69:e2:a2:1f:6d: 6a:ba:92:be:32:0f:af:b9:89:85:39:21:2f:23:9c: ac:77:fd:a5:31:b2:d3:8a:c5:fc:be:61:63:79:10: 0a:b2:70:49:1d:98:d4:7b:24:7e:a0:41:4d:84:ad: 0c:fb:1d:6f:d1:0d:fe:03:30:9d:66:49:ba:e7:d1: 7e:05:9a:b6:8f:be:33:5d:43:05:be:ab:d8:18:bd: 72:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:43:53:6E:29:33:60:4E:FD:47:52:A5:1C:82:BB:07:0C:53:BF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv4: 131.109.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:af:ae:60:4f:14:27:da:2c:5b:c2:e2:cc:3c:41:7b:6e:ab: 11:69:c5:3b:e3:fe:ca:b8:d4:ad:20:55:4e:ca:f4:0a:21:46: 14:db:ee:7f:58:40:1c:dc:c1:4f:91:94:c9:9c:bf:78:18:20: 2c:4f:76:a3:ad:0b:77:a9:b2:5f:5b:ac:b6:20:94:7a:aa:42: f9:31:79:77:45:75:12:0b:17:80:58:e4:49:83:19:25:1a:08: af:bb:a4:59:ad:46:0c:44:10:b9:63:8d:a6:3d:9a:ad:2f:ce: 6e:08:8d:59:54:6a:e6:c4:53:b6:83:c0:17:c2:cd:62:fb:1e: 94:56:b6:e3:f7:61:73:fe:9b:3e:dd:b4:02:d0:3d:51:2b:b9: 4f:1f:ac:61:33:47:00:7e:29:6f:5c:d6:d5:68:7d:fe:06:eb: bf:1d:4c:6a:ff:52:6e:6c:ec:1f:c9:d8:40:d8:d5:c9:3b:b2: 54:3e:a9:0d:d4:8d:ea:4a:a3:8b:09:62:2a:31:23:05:41:fe: 1f:e0:c6:4f:fa:63:b9:19:40:8a:b3:e2:3a:ff:07:c3:78:37: 3b:96:87:cc:5f:ac:b5:7a:f2:4a:82:b7:d8:39:81:94:ec:9b: f3:81:56:10:b2:a4:37:75:b1:1c:60:cc:27:58:b0:62:dc:1f: 67:b4:4a:2d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtbBzjG3ZnQigdS9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NDVkOTAxYWItNTQzNS00YWQxLWE3MzktODhmZTRiZmYzOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5TTA8srAwf4SCmtJMnoYycUywffr7JkiqpR DctqUJvL49Iknz7JdBnhTrjb/IkBTTvCe0SKaImxEKPVGt722U9XQQKKx4vOrD/g Be88w8MKc8qnNm6m00EuPyMe5OOsfyyE+4CISsgHHvwOkl2ffXU5VWvSJ+bzY4Od TuGXqOjSGYDdu0PpT0u0hrpwzDZlRcuBWc4B7d2UGF3dNjJXws8rKcm0GVkMeU+B LlpMaeKiH21qupK+Mg+vuYmFOSEvI5ysd/2lMbLTisX8vmFjeRAKsnBJHZjUeyR+ oEFNhK0M+x1v0Q3+AzCdZkm659F+BZq2j74zXUMFvqvYGL1yowIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ1DU24pM2BO/UdSpRyCuwcMU7+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMmMzMmUzYmQtMTIwMC0z OTg4LTlhNTQtZWU0YTZkMjc1YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg20wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJ6+uYE8UJ9osW8LizDxBe26rEWnFO+P+yrjUrSBVTsr0CiFGFNvuf1hA HNzBT5GUyZy/eBggLE92o60Ld6myX1ustiCUeqpC+TF5d0V1EgsXgFjkSYMZJRoI r7ukWa1GDEQQuWONpj2arS/ObgiNWVRq5sRTtoPAF8LNYvselFa24/dhc/6bPt20 AtA9USu5Tx+sYTNHAH4pb1zW1Wh9/gbrvx1Mav9SbmzsH8nYQNjVyTuyVD6pDdSN 6kqjiwliKjEjBUH+H+DGT/pjuRlAirPiOv8Hw3g3O5aHzF+stXrySoK32DmBlOyb 84FWELKkN3WxHGDMJ1iwYtwfZ7RKLQ== -----END CERTIFICATE-----Generated at Sat Oct 11 14:54:00 2025 by rpki-client