$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/d3cac5c0-7a9d-3036-bd74-de0fa3dba8f7.roa File: d3cac5c0-7a9d-3036-bd74-de0fa3dba8f7.roa (raw, json) Hash identifier: Hi3Eoq/mdMGwS+xtlmcFuYHKTf5T65mEw42gBRnzBrk= Subject key identifier: 45:21:EC:81:C6:48:75:BB:65:82:43:95:4A:58:C8:01:40:D7:10:C9 Certificate issuer: /CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Certificate serial: 010D0C9F4328584B3556E8C48CF85201914E0000 Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/d3cac5c0-7a9d-3036-bd74-de0fa3dba8f7.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 131.226.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e8:c4:8c:f8:52:01:91:4e:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=1c8e3654-37b8-45a8-bd04-b1673cc6391a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bc:3a:ef:9c:d4:0e:f7:40:c5:00:42:1f:f4: 42:3c:59:26:b2:27:5c:d9:c0:9f:8f:ba:9f:da:01: ee:0e:a8:aa:11:82:79:0d:ea:57:27:c5:86:a7:4a: d5:06:23:da:52:d9:31:61:9d:3e:be:81:bb:47:2e: c2:f8:ac:72:c5:cb:17:4d:4b:ba:eb:ea:de:91:ee: c8:75:c7:ab:c3:6b:01:de:2a:d6:5a:63:a7:4e:d7: 80:80:70:4d:93:e6:5e:3e:a3:d2:d2:e3:5c:2d:97: f4:55:3d:83:ed:13:16:51:62:7a:85:4e:01:1e:94: 74:ad:c5:d9:5c:0c:a9:48:26:44:e2:5c:4d:d8:63: 7a:b1:48:cf:90:4a:42:d6:c6:42:fe:0c:c6:19:70: 4b:24:67:84:2b:6c:b8:db:01:43:82:19:64:4e:44: a8:97:bf:c7:27:05:3c:0e:b3:26:2b:9d:aa:6f:58: 84:96:30:39:00:a5:4f:79:5c:dc:d3:0b:b1:f2:62: e1:2f:20:df:1c:8d:6f:b5:da:81:9c:49:c9:71:23: 0e:90:c7:5e:65:24:08:57:6c:c0:65:25:2b:ea:da: ee:d8:96:52:a1:3c:fc:59:ed:bb:3d:a5:0f:09:4b: 19:ea:5c:ce:2f:1e:ee:dc:d3:42:de:eb:f0:fd:b0: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:21:EC:81:C6:48:75:BB:65:82:43:95:4A:58:C8:01:40:D7:10:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/d3cac5c0-7a9d-3036-bd74-de0fa3dba8f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl X509v3 Authority Key Identifier: keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer sbgp-ipAddrBlock: critical IPv4: 131.226.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:5a:8e:fa:c0:68:6b:51:5d:9f:77:ef:ac:a3:a4:31:f0:4c: 06:ea:be:67:e5:17:00:5b:09:01:a2:d2:3d:81:bb:95:55:2b: 08:c9:b1:a0:c0:79:3d:ec:1b:3e:fb:6c:9c:6e:d3:c9:b6:1a: 61:25:0f:d0:72:76:ec:e9:11:d7:41:23:b7:dd:4b:c1:7d:c7: 60:2e:64:34:99:e6:56:1a:ff:d5:b8:95:49:3a:a6:4d:19:1b: b8:1f:a7:dd:36:35:4c:05:e0:33:bc:bc:7a:4b:bf:5e:ec:d1: 08:b2:39:4a:3e:32:dc:46:78:b9:9e:e3:02:e8:54:4f:9b:91: 2a:b8:db:54:e5:88:11:28:60:b2:82:78:f6:d9:62:7c:43:fe: 17:f4:e3:b7:bd:ba:ee:f9:de:60:d6:f2:2c:51:49:86:a2:85: 14:23:c4:0d:2e:4a:0b:85:7a:21:3e:aa:6f:b0:c9:06:2c:72: 94:da:3d:23:b8:57:81:82:12:f8:4b:c6:91:c2:2f:47:76:ca: ec:dd:ee:2d:d4:ef:af:56:f5:b4:b4:a0:0a:92:f3:8c:c7:61: 61:77:10:a9:2c:0b:e0:a5:38:68:a0:1e:59:2f:30:37:e3:02: cd:3f:de:20:33:90:9c:95:55:5b:b5:64:7a:8d:7b:77:89:00: 19:04:0e:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VujEjPhSAZFOAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4NmZlNTItNWI3Ny00NmI2LTk1MDItNTFjY2NjZjNh NzU1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MWM4ZTM2NTQtMzdiOC00NWE4LWJkMDQtYjE2NzNjYzYzOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrw675zUDvdAxQBCH/RCPFkmsidc2cCfj7qf 2gHuDqiqEYJ5DepXJ8WGp0rVBiPaUtkxYZ0+voG7Ry7C+KxyxcsXTUu66+reke7I dcerw2sB3irWWmOnTteAgHBNk+ZePqPS0uNcLZf0VT2D7RMWUWJ6hU4BHpR0rcXZ XAypSCZE4lxN2GN6sUjPkEpC1sZC/gzGGXBLJGeEK2y42wFDghlkTkSol7/HJwU8 DrMmK52qb1iEljA5AKVPeVzc0wux8mLhLyDfHI1vtdqBnEnJcSMOkMdeZSQIV2zA ZSUr6tru2JZSoTz8We27PaUPCUsZ6lzOLx7u3NNC3uvw/bA9jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUh7IHGSHW7ZYJDlUpYyAFA1xDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2 ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNjY2NmM2E3NTUvZDNjYWM1YzAtN2E5ZC0z MDM2LWJkNzQtZGUwZmEzZGJhOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWY4NmZlNTItNWI3Ny00NmI2LTk1 MDItNTFjY2NjZjNhNzU1L2FmODZmZTUyLTViNzctNDZiNi05NTAyLTUxY2NjY2Yz YTc1NS5jcmwwHwYDVR0jBBgwFoAUpCnYdby96fIjd9cnL82GRWj9YvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNj Y2NmM2E3NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg+K4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFajvrAaGtRXZ9376yjpDHwTAbqvmflFwBbCQGi0j2Bu5VVKwjJsaDA eT3sGz77bJxu08m2GmElD9ByduzpEddBI7fdS8F9x2AuZDSZ5lYa/9W4lUk6pk0Z G7gfp902NUwF4DO8vHpLv17s0QiyOUo+MtxGeLme4wLoVE+bkSq421TliBEoYLKC ePbZYnxD/hf047e9uu753mDW8ixRSYaihRQjxA0uSguFeiE+qm+wyQYscpTaPSO4 V4GCEvhLxpHCL0d2yuzd7i3U769W9bS0oAqS84zHYWF3EKksC+ClOGigHlkvMDfj As0/3iAzkJyVVVu1ZHqNe3eJABkEDtY= -----END CERTIFICATE-----Generated at Fri Sep 19 19:42:19 2025 by rpki-client