$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa File: 31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa (raw, json) Hash identifier: IejUgOZAk2zQRWd117635y5hRRLgR/7a7ub9lnjzdtk= Subject key identifier: 25:72:EB:C3:67:DF:48:C9:3C:C8:C9:4F:3E:4E:52:0B:1A:DE:AC:90 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584B99D78F41C04B934FD4266AC0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 26658 IP address blocks: 172.87.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8f:41:c0:4b:93:4f:d4:26:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=78a76967-2ff4-46be-acfa-0c612dbeee9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:d2:39:5c:68:fe:23:b3:6e:1c:64:8c:85: 5f:3d:91:8c:e0:a1:f8:3e:81:6a:94:24:78:31:0b: 8e:63:bf:99:a3:d1:92:95:8b:f2:30:de:45:6a:d7: 26:fb:94:38:39:ab:ab:2a:ce:ec:db:75:2a:37:f2: cd:96:6f:62:2e:c1:80:fa:60:06:0a:03:78:27:39: 7e:e9:a0:f5:11:d9:68:f6:89:2d:18:10:60:34:06: 24:e9:11:88:79:1a:ab:fe:92:74:79:f8:2c:f5:3d: 97:e5:5b:97:93:23:e2:13:54:bc:68:a3:47:13:66: bd:d4:90:f2:64:c6:aa:be:0a:1e:1a:ba:91:5b:77: a0:e2:1a:03:3e:26:e7:44:fe:fe:28:17:68:1e:57: 8c:22:72:a2:53:1c:0e:e5:7d:45:1a:76:51:cf:55: 50:7c:3e:fc:dc:48:c6:1d:ab:d9:e7:38:ae:55:5f: ed:0f:68:49:fe:0e:ec:53:1d:8a:d9:11:3b:51:c3: 2d:b9:00:42:bd:5e:17:a3:44:44:29:1f:1d:5f:6e: 8a:11:6f:bd:f6:2a:e5:9e:77:bc:6d:38:f3:85:95: 78:38:61:f0:c8:98:cf:77:32:d2:66:bf:82:35:15: e6:7a:d0:ae:d7:04:3a:92:d0:7f:74:af:23:47:b6: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:72:EB:C3:67:DF:48:C9:3C:C8:C9:4F:3E:4E:52:0B:1A:DE:AC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:20:cb:fd:48:d3:39:0e:f8:e7:1b:9b:8e:ca:b6:2f:fc:32: 2d:55:a6:fd:9a:38:98:67:9f:d5:76:ed:23:aa:38:90:c9:6b: a4:67:f6:94:98:85:dd:1d:40:53:2e:17:67:b9:61:cd:72:01: 37:a4:e7:73:2d:3f:0c:75:a4:f8:f7:04:cf:43:6d:98:71:5a: 9c:c9:8f:b6:6d:5e:1b:63:5a:67:36:12:f8:95:15:ad:77:5c: 99:9c:3d:53:83:31:e7:9a:f8:36:77:75:54:23:58:42:c6:1b: 1f:57:7e:24:25:92:1e:35:48:64:8b:7a:3d:79:1b:79:45:ad: e7:c6:a7:e3:16:21:7b:20:d2:d6:24:f2:4a:c8:14:ab:82:88: b5:26:bd:e8:e5:36:b0:c6:46:e9:d8:24:54:87:ef:8a:9f:de: ea:ca:68:59:3f:54:d4:7b:e9:fc:ac:2c:e4:88:86:ac:27:e7: 87:4a:5a:ae:66:0f:22:08:c6:3e:ec:58:9d:c2:ec:b6:ff:86: f7:2c:18:bf:2d:5e:c5:4c:d0:c7:cd:13:c2:5b:3f:cd:26:e4: 57:fa:c1:5b:99:f3:80:21:4a:7b:36:76:67:07:bf:6b:a9:2b: b1:5f:4e:b6:cb:c6:5e:c9:ad:ea:53:0f:01:a7:9d:d9:8f:70: e1:1c:ce:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ149BwEuTT9QmasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzhhNzY5NjctMmZmNC00NmJlLWFjZmEtMGM2MTJkYmVlZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DHSOVxo/iOzbhxkjIVfPZGM4KH4PoFqlCR4 MQuOY7+Zo9GSlYvyMN5Fatcm+5Q4OaurKs7s23UqN/LNlm9iLsGA+mAGCgN4Jzl+ 6aD1Edlo9oktGBBgNAYk6RGIeRqr/pJ0efgs9T2X5VuXkyPiE1S8aKNHE2a91JDy ZMaqvgoeGrqRW3eg4hoDPibnRP7+KBdoHleMInKiUxwO5X1FGnZRz1VQfD783EjG HavZ5ziuVV/tD2hJ/g7sUx2K2RE7UcMtuQBCvV4Xo0REKR8dX26KEW+99irlnne8 bTjzhZV4OGHwyJjPdzLSZr+CNRXmetCu1wQ6ktB/dK8jR7bg1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVy68Nn30jJPMjJTz5OUgsa3qyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMzFmNDdlZTgtZGQ4Zi0z NjEzLWI0ZDAtYTA5ZGYyYTdjYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFogy/1I0zkO+Ocbm47Kti/8Mi1Vpv2aOJhnn9V27SOqOJDJa6Rn9pSY hd0dQFMuF2e5Yc1yATek53MtPwx1pPj3BM9DbZhxWpzJj7ZtXhtjWmc2EviVFa13 XJmcPVODMeea+DZ3dVQjWELGGx9XfiQlkh41SGSLej15G3lFrefGp+MWIXsg0tYk 8krIFKuCiLUmvejlNrDGRunYJFSH74qf3urKaFk/VNR76fysLOSIhqwn54dKWq5m DyIIxj7sWJ3C7Lb/hvcsGL8tXsVM0MfNE8JbP80m5Ff6wVuZ84AhSns2dmcHv2up K7FfTrbLxl7JrepTDwGnndmPcOEczvA= -----END CERTIFICATE-----Generated at Mon Oct 27 09:57:41 2025 by rpki-client