$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa File: e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa (raw, json) Hash identifier: cH4CANAsKWa5k6aT+ABy6Njh7bE3V0IHyXfwqMQVGi0= Subject key identifier: EC:CF:81:6E:0A:10:5D:5B:93:4F:25:CE:B8:09:F0:7E:73:DA:48:03 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B48E1C27F64B6B109FD6DC480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 3949 IP address blocks: 131.103.20.200/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c2:7f:64:b6:b1:09:fd:6d:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=9f49708e-2564-432f-b9b3-eeddfa3fdef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bf:50:81:0f:72:4a:63:8c:31:52:74:ca:16: fb:f0:6e:e9:d3:c7:dc:bc:50:08:f5:22:1d:8a:45: b2:23:41:fb:15:6c:24:39:a7:38:67:b4:35:d2:9f: c6:a2:bc:ce:db:c3:bc:f5:e0:04:01:b9:26:d0:7c: d8:2c:80:e0:d3:d5:26:44:c6:43:7f:a4:4f:c9:d0: b1:30:5c:3c:46:c5:80:5f:83:54:b5:50:67:75:00: b7:94:29:d1:59:41:c4:4f:8b:cd:23:dd:49:16:a5: 58:8c:e1:64:cb:85:5a:8f:66:88:39:30:d1:33:e7: 66:dc:24:0b:27:03:0c:e4:cb:10:b9:4a:95:42:fe: 11:63:06:a8:f2:97:96:11:e4:7b:c0:bf:fa:17:c1: 32:f9:9b:1b:c0:14:b8:0b:db:cc:42:04:59:3f:3d: 08:6d:34:eb:e5:08:26:a1:2f:e4:4c:ca:5c:2b:20: c2:e2:74:9f:c0:90:69:fd:93:8e:b6:a8:a3:66:f2: 5f:8d:78:3c:fe:94:3e:a4:11:73:6a:2a:47:e7:e2: 7c:12:c2:f9:cf:50:f6:fb:fb:4b:7d:09:e4:2f:1d: ce:67:61:dc:db:0f:a3:9b:77:7a:c4:d4:f9:7a:ef: ac:d0:ee:e2:30:9e:4f:e6:9c:bb:20:ee:8f:ac:7b: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CF:81:6E:0A:10:5D:5B:93:4F:25:CE:B8:09:F0:7E:73:DA:48:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 131.103.20.200/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:00:e9:11:42:c6:3e:3f:3d:40:6c:d7:0d:23:4d:8b:ed:94: c9:a3:42:4c:c5:5c:d9:9b:a2:54:76:4d:eb:ba:63:03:88:b6: bf:01:1a:ed:bc:dd:3e:c1:4a:55:41:18:85:1a:21:79:0a:da: 81:f4:92:67:47:06:e1:36:9e:60:fe:4b:13:26:57:d9:d3:6a: a3:ee:2b:11:ee:e7:7c:28:ab:ea:c9:ee:92:c8:7d:99:59:7d: ce:c3:5a:82:86:a4:37:e1:a8:6c:7c:4f:62:28:34:e0:f5:a4: 50:44:bb:82:6b:eb:36:34:99:f7:cb:0a:0a:bb:d7:e2:ec:8d: ca:8c:92:39:93:76:29:b9:03:3f:9c:5b:37:b0:0a:60:ea:a4: 67:2a:db:2f:16:bb:91:79:79:cd:02:3d:eb:93:cb:ba:55:85: ba:8c:e5:e3:78:32:63:ae:9f:8e:b9:dc:bc:15:c1:56:fc:fd: e9:48:49:04:3a:59:71:ef:9b:e7:a4:f3:35:ce:dc:09:82:f7: 92:a6:8c:8c:71:e0:31:7b:86:dd:1c:c4:15:91:75:52:97:7e: 03:02:8f:ee:84:5d:09:15:5e:aa:89:c9:0c:9c:31:bc:c8:d5: 34:96:8f:82:6f:2d:2b:ac:88:55:b4:7e:28:16:a6:53:c5:35: 1e:66:91:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtI4cJ/ZLaxCf1txIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OWY0OTcwOGUtMjU2NC00MzJmLWI5YjMtZWVkZGZhM2ZkZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL9QgQ9ySmOMMVJ0yhb78G7p08fcvFAI9SId ikWyI0H7FWwkOac4Z7Q10p/GorzO28O89eAEAbkm0HzYLIDg09UmRMZDf6RPydCx MFw8RsWAX4NUtVBndQC3lCnRWUHET4vNI91JFqVYjOFky4Vaj2aIOTDRM+dm3CQL JwMM5MsQuUqVQv4RYwao8peWEeR7wL/6F8Ey+ZsbwBS4C9vMQgRZPz0IbTTr5Qgm oS/kTMpcKyDC4nSfwJBp/ZOOtqijZvJfjXg8/pQ+pBFzaipH5+J8EsL5z1D2+/tL fQnkLx3OZ2Hc2w+jm3d6xNT5eu+s0O7iMJ5P5py7IO6PrHu9sQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOzPgW4KEF1bk08lzrgJ8H5z2kgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTRiOWVjNDAtMGQ4YS0z N2UyLTlhMDEtZDIzNmFhN2ZlYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDg2cUyDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCmAOkRQsY+Pz1AbNcNI02L7ZTJo0JMxVzZm6JUdk3rumMDiLa/ARrt vN0+wUpVQRiFGiF5CtqB9JJnRwbhNp5g/ksTJlfZ02qj7isR7ud8KKvqye6SyH2Z WX3Ow1qChqQ34ahsfE9iKDTg9aRQRLuCa+s2NJn3ywoKu9fi7I3KjJI5k3YpuQM/ nFs3sApg6qRnKtsvFruReXnNAj3rk8u6VYW6jOXjeDJjrp+Oudy8FcFW/P3pSEkE Ollx75vnpPM1ztwJgveSpoyMceAxe4bdHMQVkXVSl34DAo/uhF0JFV6qickMnDG8 yNU0lo+Cby0rrIhVtH4oFqZTxTUeZpEh -----END CERTIFICATE-----Generated at Sun Oct 19 19:10:34 2025 by rpki-client