$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa File: 33cfc89a-77af-32ce-967f-624f38d50607.roa (raw, json) Hash identifier: KVFqj+xsnIxbCxG+nc9NggTknUqKUP/z2K2otzE5p0w= Subject key identifier: 7B:1F:39:DC:A5:D9:4F:3C:21:CA:94:28:85:DD:E2:BF:96:B4:67:30 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584B970CF6574F9627F9D9685F80 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 399381 IP address blocks: 131.201.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f6:57:4f:96:27:f9:d9:68:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=ee1fe9ce-1859-49ca-ae57-322424d4e19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:52:9d:48:a3:98:9d:b8:af:ed:0d:4f:91:c2: b4:c9:d2:0d:40:4c:4c:a6:33:85:e5:b3:25:cb:f8: bd:64:e3:92:60:f3:05:44:b6:41:06:81:77:5f:9b: 63:a5:30:ac:94:62:5f:47:21:87:51:46:f6:51:1f: ff:95:c6:94:24:e4:41:0d:34:05:0e:01:5d:7e:00: 19:eb:5f:b9:7d:43:76:87:c1:74:db:e6:ab:42:c2: c3:4e:d9:61:16:70:bd:69:92:84:f7:f9:c8:fb:c5: eb:39:20:38:2a:3c:9f:0d:ee:8e:31:cf:04:c4:b2: 64:2e:a9:cd:c0:98:39:84:28:88:fc:62:56:af:bb: 96:ce:7b:be:eb:fc:08:73:bf:70:cb:f0:56:88:75: f0:fb:fd:53:10:10:ac:8e:e6:3b:69:f8:7a:90:3f: 99:7c:a5:e1:5e:53:a3:dd:6a:a1:c1:01:02:8d:f6: 2c:55:22:25:e3:27:34:7c:fa:ce:1f:52:77:3f:e4: 31:31:40:89:5d:b6:86:22:07:ab:b5:4a:ae:d1:a2: 88:d5:d7:90:2e:6a:c0:d6:31:80:77:02:c3:3f:b5: d7:48:68:ee:59:1d:85:61:29:b1:21:28:b5:cd:03: c9:e1:c5:f8:31:59:13:2c:e0:52:4d:06:44:d3:da: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1F:39:DC:A5:D9:4F:3C:21:CA:94:28:85:DD:E2:BF:96:B4:67:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:63:1b:86:70:e4:0f:ac:6a:e4:9b:6e:2a:d8:4e:ec:64:3a: 5a:57:32:19:f2:23:3f:a7:50:e6:80:3f:f6:91:c4:82:b1:b1: 03:3e:5a:e6:42:f5:ef:9f:33:46:bc:b4:7e:48:24:23:71:73: 35:38:84:59:5c:f9:d1:84:ee:ff:89:ae:7e:e3:3d:7d:67:18: e5:d0:2f:68:18:7b:89:7c:4d:3f:98:2e:80:a2:3a:74:ea:9c: 21:41:18:4d:54:0a:31:de:53:01:42:d4:77:62:06:d9:bc:38: 46:3e:a0:77:f7:56:bf:42:19:c3:86:77:0f:4e:37:06:18:49: 97:1e:cb:a9:43:c3:95:3c:17:b4:12:c9:2a:31:92:09:13:9a: af:79:48:b8:62:88:65:31:32:df:f4:46:29:e3:cb:e9:0d:5a: 68:92:c4:28:7d:66:32:88:d4:ba:b3:7c:3c:c0:b9:81:6b:8c: 18:52:71:7d:cf:c8:8a:1e:d0:97:2e:8b:12:d0:1b:a3:5b:5c: b6:c1:de:aa:06:bf:62:91:c5:52:da:4e:1a:d4:ab:33:67:6e: 5a:62:e3:63:a1:d6:87:65:b9:17:b2:89:ce:7d:e6:5e:51:5d: b3:7c:56:37:c0:aa:60:34:2e:fe:47:6d:f9:ab:9a:7a:8f:25: ad:e5:33:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPZXT5Yn+dloX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZWUxZmU5Y2UtMTg1OS00OWNhLWFlNTctMzIyNDI0ZDRlMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1KdSKOYnbiv7Q1PkcK0ydINQExMpjOF5bMl y/i9ZOOSYPMFRLZBBoF3X5tjpTCslGJfRyGHUUb2UR//lcaUJORBDTQFDgFdfgAZ 61+5fUN2h8F02+arQsLDTtlhFnC9aZKE9/nI+8XrOSA4KjyfDe6OMc8ExLJkLqnN wJg5hCiI/GJWr7uWznu+6/wIc79wy/BWiHXw+/1TEBCsjuY7afh6kD+ZfKXhXlOj 3WqhwQECjfYsVSIl4yc0fPrOH1J3P+QxMUCJXbaGIgertUqu0aKI1deQLmrA1jGA dwLDP7XXSGjuWR2FYSmxISi1zQPJ4cX4MVkTLOBSTQZE09rMtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsfOdyl2U88IcqUKIXd4r+WtGcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvMzNjZmM4OWEtNzdhZi0z MmNlLTk2N2YtNjI0ZjM4ZDUwNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg8nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRjG4Zw5A+sauSbbirYTuxkOlpXMhnyIz+nUOaAP/aRxIKxsQM+WuZC 9e+fM0a8tH5IJCNxczU4hFlc+dGE7v+Jrn7jPX1nGOXQL2gYe4l8TT+YLoCiOnTq nCFBGE1UCjHeUwFC1HdiBtm8OEY+oHf3Vr9CGcOGdw9ONwYYSZcey6lDw5U8F7QS ySoxkgkTmq95SLhiiGUxMt/0Rinjy+kNWmiSxCh9ZjKI1LqzfDzAuYFrjBhScX3P yIoe0JcuixLQG6NbXLbB3qoGv2KRxVLaThrUqzNnblpi42Oh1odluReyic595l5R XbN8VjfAqmA0Lv5HbfmrmnqPJa3lM0s= -----END CERTIFICATE-----Generated at Tue Nov 4 09:45:27 2025 by rpki-client