$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa File: 8357b082-17dc-3d36-87f1-8e0746d54610.roa (raw, json) Hash identifier: BSTxyKxMK2eXUT6MVb9JXm48c3xiaW7G6zM5Wx8nXCc= Subject key identifier: FF:04:2A:0F:D1:EB:33:9E:3C:BF:A3:28:D7:52:43:59:84:34:E7:DE Certificate issuer: /CN=d9e22f6d-5551-4712-9f95-3008c51223ec Certificate serial: 010D0C9F4328584B84E780E33A7DF3618EC42EC0 Authority key identifier: 28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16430 IP address blocks: 131.95.0.0/17 maxlen: 17 131.95.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:80:e3:3a:7d:f3:61:8e:c4:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e22f6d-5551-4712-9f95-3008c51223ec Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=d62f1b5b-4d7c-4a60-83e3-79c0e5d1511b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:00:58:6e:a3:ec:aa:3e:8e:ed:cf:25:a3:ca: 50:ba:91:10:fb:35:97:61:fd:00:ae:79:8d:c2:c1: 1a:a2:38:7e:38:ce:a6:96:9f:ab:f3:3a:54:b8:41: 25:23:43:e0:19:67:9a:0f:eb:32:2c:b7:cc:2c:03: db:4e:7b:e9:fa:7e:f5:dd:0a:20:ed:de:c6:c0:c8: fe:9d:1b:97:6c:c1:77:4f:cc:54:7c:8a:1f:80:a5: b5:82:bb:87:6c:3c:79:c5:49:6a:a7:7c:5d:c5:95: dc:7a:b4:03:04:3e:81:ba:cf:4e:0b:5b:ad:65:bf: 7a:46:f0:a9:b7:71:04:92:18:25:e4:5d:da:a4:15: e6:6c:73:22:9c:a8:3e:78:63:7b:b9:01:f1:16:2c: d5:bd:b1:a1:57:f6:83:31:dc:b9:c8:81:27:4c:4c: 2b:35:00:20:84:1a:da:27:33:92:0f:d7:14:dc:b7: f6:9c:71:9a:1d:41:35:5d:9c:c9:54:be:5b:4b:82: a5:89:89:f5:a5:85:6b:58:82:f1:55:d2:21:54:cd: af:87:df:f0:da:33:c7:a5:d1:64:14:30:cc:cb:1c: be:13:e1:4a:3f:07:f4:1c:d8:ef:91:a5:b8:af:e2: a1:00:27:23:d2:1a:41:99:fe:b0:90:8b:49:3c:99: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:04:2A:0F:D1:EB:33:9E:3C:BF:A3:28:D7:52:43:59:84:34:E7:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl X509v3 Authority Key Identifier: keyid:28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer sbgp-ipAddrBlock: critical IPv4: 131.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e4:1f:72:9a:67:ce:77:88:2f:a7:13:c1:5c:70:30:ab:d4: b8:92:e9:c2:ce:28:c9:0c:aa:02:e1:33:82:f9:f7:b4:da:c3: 90:76:4c:45:1d:7e:54:14:e3:d4:cb:88:22:80:6f:9b:56:23: e0:b6:dd:05:58:a6:f1:f5:3c:f0:c3:62:93:b3:cc:0a:80:34: 6b:72:c8:1f:66:27:a7:2f:db:45:34:ec:65:27:8f:9d:96:9f: 48:e3:b6:56:46:77:c6:81:56:fd:06:69:0b:80:5c:19:75:d8: d7:d4:98:cc:63:2f:21:95:f4:f9:0f:c1:87:53:29:d2:7c:94: f9:e7:17:4c:23:32:44:56:35:14:66:4f:11:79:4f:c1:bb:93: 96:3a:63:43:88:d5:37:0a:2c:71:02:c1:c7:41:69:19:a4:21: 98:98:f8:88:7e:ff:71:6d:f5:41:73:c0:ae:62:3c:2e:d6:4e: 4f:80:c4:76:2f:2c:a9:72:0f:7e:6a:af:68:b4:1d:40:cd:eb: ca:d3:c9:4e:8b:f5:e1:e9:07:d5:18:ab:cc:28:40:6d:6d:87: 97:a3:37:6d:b2:39:ee:5c:71:57:6e:d7:c2:c0:71:8f:c5:04: 11:c1:fd:ed:e5:78:10:9d:66:da:f6:5f:4f:af:9d:d8:51:7d: 29:03:70:c6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuE54DjOn3zYY7ELsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDllMjJmNmQtNTU1MS00NzEyLTlmOTUtMzAwOGM1MTIy M2VjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZDYyZjFiNWItNGQ3Yy00YTYwLTgzZTMtNzljMGU1ZDE1MTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApABYbqPsqj6O7c8lo8pQupEQ+zWXYf0ArnmN wsEaojh+OM6mlp+r8zpUuEElI0PgGWeaD+syLLfMLAPbTnvp+n713Qog7d7GwMj+ nRuXbMF3T8xUfIofgKW1gruHbDx5xUlqp3xdxZXcerQDBD6Bus9OC1utZb96RvCp t3EEkhgl5F3apBXmbHMinKg+eGN7uQHxFizVvbGhV/aDMdy5yIEnTEwrNQAghBra JzOSD9cU3Lf2nHGaHUE1XZzJVL5bS4KliYn1pYVrWILxVdIhVM2vh9/w2jPHpdFk FDDMyxy+E+FKPwf0HNjvkaW4r+KhACcj0hpBmf6wkItJPJnMcwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP8EKg/R6zOePL+jKNdSQ1mENOfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUy MmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4YzUxMjIzZWMvODM1N2IwODItMTdkYy0z ZDM2LTg3ZjEtOGUwNzQ2ZDU0NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDllMjJmNmQtNTU1MS00NzEyLTlm OTUtMzAwOGM1MTIyM2VjL2Q5ZTIyZjZkLTU1NTEtNDcxMi05Zjk1LTMwMDhjNTEy MjNlYy5jcmwwHwYDVR0jBBgwFoAUKMgwTb3YSsAeO4Ye5UoxZba3l3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUyMmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4 YzUxMjIzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIuQfcppnzneIL6cTwVxwMKvUuJLpws4oyQyqAuEzgvn3tNrDkHZMRR1+ VBTj1MuIIoBvm1Yj4LbdBVim8fU88MNik7PMCoA0a3LIH2Ynpy/bRTTsZSePnZaf SOO2VkZ3xoFW/QZpC4BcGXXY19SYzGMvIZX0+Q/Bh1Mp0nyU+ecXTCMyRFY1FGZP EXlPwbuTljpjQ4jVNwoscQLBx0FpGaQhmJj4iH7/cW31QXPArmI8LtZOT4DEdi8s qXIPfmqvaLQdQM3rytPJTov14ekH1RirzChAbW2Hl6M3bbI57lxxV27XwsBxj8UE EcH97eV4EJ1m2vZfT6+d2FF9KQNwxg== -----END CERTIFICATE-----Generated at Tue Oct 21 05:29:35 2025 by rpki-client