$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/2a2fd522-a857-35ff-9d95-ec6b7744cf7f.roa File: 2a2fd522-a857-35ff-9d95-ec6b7744cf7f.roa (raw, json) Hash identifier: be/+Hs4KjSbpxZavpAK491/sEJ/pMDbSqErQeD548Cs= Subject key identifier: 10:7F:EA:1F:67:B3:C0:FD:4B:1A:DC:1B:5F:4B:F5:3D:2A:D3:9C:08 Certificate issuer: /CN=a51b800a-cdc8-4235-aaa3-e8dad4043af8 Certificate serial: 010D0C9F4328584B80B7716040E94029AC2FF940 Authority key identifier: AE:D8:54:17:2D:6E:59:A4:6A:0D:3D:A2:3D:F9:35:71:EA:15:4D:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/2a2fd522-a857-35ff-9d95-ec6b7744cf7f.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 46956 IP address blocks: 139.60.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/a51b800a-cdc8-4235-aaa3-e8dad4043af8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/a51b800a-cdc8-4235-aaa3-e8dad4043af8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:71:60:40:e9:40:29:ac:2f:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a51b800a-cdc8-4235-aaa3-e8dad4043af8 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=19ff1129-b1a8-4b62-a0c9-c98eb7e69541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0b:d2:c6:f2:1a:44:68:b1:fc:2b:36:20:4e: 84:41:19:96:cb:86:0f:99:73:c2:0e:93:09:30:1c: 44:57:cc:41:bb:a6:8b:0f:20:a8:84:06:a3:40:22: 0d:e7:0f:a2:df:fc:db:a1:05:8a:bd:54:3c:7c:a8: 3d:99:4b:6a:93:e1:fe:f8:42:48:78:30:18:64:1c: 56:24:79:a7:9e:c4:a9:a8:28:48:42:7b:2f:27:38: c2:54:72:c6:7f:b9:ce:28:9f:40:5f:76:9d:15:79: e2:99:c0:80:37:6c:70:21:f8:f2:0f:f8:11:30:5c: 75:c7:6b:05:0f:da:6f:62:6e:e4:ce:53:b7:7a:7d: e0:31:7c:ce:10:8f:b5:ae:ff:c1:d1:be:a3:c6:b1: a6:b1:40:bc:99:b1:b2:7a:42:41:c1:d0:c1:61:f8: 27:ae:2e:8d:f9:7a:01:29:63:9e:6e:01:11:cf:77: d5:95:85:e4:88:e8:0c:64:01:33:ea:88:9a:91:f5: 38:1f:50:8b:d3:28:ea:61:0d:0b:96:d0:de:f9:fe: 63:93:1e:b2:96:2b:a0:5c:b6:7b:44:ce:78:8b:bd: 29:b2:9e:4b:12:08:35:f2:9e:dd:58:e6:4a:9f:3e: ea:df:8e:e8:fa:67:6a:88:64:00:cd:22:71:46:de: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7F:EA:1F:67:B3:C0:FD:4B:1A:DC:1B:5F:4B:F5:3D:2A:D3:9C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/2a2fd522-a857-35ff-9d95-ec6b7744cf7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/a51b800a-cdc8-4235-aaa3-e8dad4043af8.crl X509v3 Authority Key Identifier: keyid:AE:D8:54:17:2D:6E:59:A4:6A:0D:3D:A2:3D:F9:35:71:EA:15:4D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8.cer sbgp-ipAddrBlock: critical IPv4: 139.60.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:78:3c:ae:ec:c8:c2:da:6c:7b:5d:d3:ef:28:5f:e2:6e:57: b4:d1:a1:67:68:76:e1:3e:ca:00:d7:3d:bf:26:f3:16:0a:45: 2c:74:fc:2c:7f:af:5a:5c:f3:8a:7e:34:68:4a:56:37:f1:fb: 13:88:54:1d:6e:3b:68:d2:9f:42:09:09:89:f6:ee:dc:71:c3: a5:f3:16:34:a1:dd:3c:9a:4f:7f:56:b9:37:23:cc:87:e7:87: bb:59:24:0f:56:1b:8b:97:28:3c:17:b3:9a:01:de:b7:18:93: b4:64:be:ff:a8:ec:90:63:2a:b0:4e:08:15:07:e3:31:f5:b0: 1f:f5:3c:8b:be:f4:26:f9:ea:8a:c2:88:ed:ac:ed:39:81:ed: f0:e8:8e:5f:94:12:da:9f:21:dc:c6:b4:37:d9:29:53:18:47: 50:31:2c:8e:c1:01:42:7d:1a:2f:03:1f:f7:02:d2:24:04:e1: bf:53:b6:23:59:b4:04:c0:63:9b:bf:dc:13:4b:94:3f:44:9e: c3:21:b4:14:09:03:b3:ea:71:e6:0f:73:87:a0:46:bb:77:81: f8:93:ea:79:3a:f8:32:a2:d5:05:32:bf:99:22:66:7b:94:1d: 2b:bd:a2:af:6a:64:38:23:18:6f:74:1c:fc:8a:55:51:ac:11: a4:da:3b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt3FgQOlAKawv+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUxYjgwMGEtY2RjOC00MjM1LWFhYTMtZThkYWQ0MDQz YWY4MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MTlmZjExMjktYjFhOC00YjYyLWEwYzktYzk4ZWI3ZTY5NTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQvSxvIaRGix/Cs2IE6EQRmWy4YPmXPCDpMJ MBxEV8xBu6aLDyCohAajQCIN5w+i3/zboQWKvVQ8fKg9mUtqk+H++EJIeDAYZBxW JHmnnsSpqChIQnsvJzjCVHLGf7nOKJ9AX3adFXnimcCAN2xwIfjyD/gRMFx1x2sF D9pvYm7kzlO3en3gMXzOEI+1rv/B0b6jxrGmsUC8mbGyekJBwdDBYfgnri6N+XoB KWOebgERz3fVlYXkiOgMZAEz6oiakfU4H1CL0yjqYQ0LltDe+f5jkx6yliugXLZ7 RM54i70psp5LEgg18p7dWOZKnz7q347o+mdqiGQAzSJxRt4NRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBB/6h9ns8D9SxrcG19L9T0q05wIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNTFi ODAwYS1jZGM4LTQyMzUtYWFhMy1lOGRhZDQwNDNhZjgvMmEyZmQ1MjItYTg1Ny0z NWZmLTlkOTUtZWM2Yjc3NDRjZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTUxYjgwMGEtY2RjOC00MjM1LWFh YTMtZThkYWQ0MDQzYWY4L2E1MWI4MDBhLWNkYzgtNDIzNS1hYWEzLWU4ZGFkNDA0 M2FmOC5jcmwwHwYDVR0jBBgwFoAUrthUFy1uWaRqDT2iPfk1ceoVTeMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNTFiODAwYS1jZGM4LTQyMzUtYWFhMy1lOGRh ZDQwNDNhZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd4PK7syMLabHtd0+8oX+JuV7TRoWdoduE+ygDXPb8m8xYKRSx0/Cx/ r1pc84p+NGhKVjfx+xOIVB1uO2jSn0IJCYn27txxw6XzFjSh3TyaT39WuTcjzIfn h7tZJA9WG4uXKDwXs5oB3rcYk7Rkvv+o7JBjKrBOCBUH4zH1sB/1PIu+9Cb56orC iO2s7TmB7fDojl+UEtqfIdzGtDfZKVMYR1AxLI7BAUJ9Gi8DH/cC0iQE4b9TtiNZ tATAY5u/3BNLlD9EnsMhtBQJA7PqceYPc4egRrt3gfiT6nk6+DKi1QUyv5kiZnuU HSu9oq9qZDgjGG90HPyKVVGsEaTaO7E= -----END CERTIFICATE-----Generated at Tue Oct 14 17:22:30 2025 by rpki-client