$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa File: 7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa (raw, json) Hash identifier: eHBHbpElCNH8veRNF9AIATgFaLVV5W/HCS/3gGIapFk= Subject key identifier: 35:67:04:C4:D4:4A:D1:60:4E:24:C2:06:BF:B9:D3:26:03:2F:20:6F Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584B970CF632FD70336E05F4E080 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 399381 IP address blocks: 131.201.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f6:32:fd:70:33:6e:05:f4:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=c031709d-a1b3-4566-a7dd-e459797fa4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:dd:83:23:f1:e0:4f:85:83:cd:b8:bb:9a: 6f:04:79:b2:e2:57:32:f6:08:76:9d:b4:5c:fc:41: 79:df:8c:68:40:2d:ac:3b:a4:94:a5:52:2a:34:33: 9b:cc:48:ec:06:4e:9f:3c:63:5e:c4:30:30:36:4a: bb:75:ee:7f:08:b4:d8:d1:65:3f:af:45:83:21:26: c1:83:e8:82:a7:f8:2b:54:28:7e:ee:02:70:7a:98: d8:94:7d:a3:41:b9:9c:a4:e7:38:67:1d:01:02:24: 20:9d:2c:37:71:18:cb:22:9a:e7:33:7f:eb:68:4b: 9a:3e:d7:b6:b1:84:3d:50:61:da:34:a0:e9:5b:b0: 6f:32:11:98:9c:2b:0e:f1:e6:de:b2:79:4a:3f:48: df:58:c7:80:3b:89:fe:5a:18:12:1c:97:ba:32:7e: 61:36:a5:5c:26:1b:3e:b0:be:a6:99:7a:52:11:08: ed:8b:99:12:3e:25:0c:ab:64:bc:e3:da:5b:e1:0b: ea:f0:a2:b7:fa:4e:3c:ae:f5:5a:49:13:fd:56:95: 83:53:79:f9:fe:33:f9:a0:83:f8:4f:83:a5:28:70: 32:19:31:7a:89:5d:e6:0d:dc:b5:89:e6:c2:e8:a2: af:8e:22:64:1c:9d:ae:b9:63:64:dc:7b:1d:64:26: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:67:04:C4:D4:4A:D1:60:4E:24:C2:06:BF:B9:D3:26:03:2F:20:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6e:d7:d5:77:8d:ec:03:3b:ad:e0:f9:57:8f:ff:56:7e:1d: b5:26:34:4b:96:23:de:df:03:5f:8c:4f:b9:fa:5e:fb:ea:29: 61:af:17:82:f1:31:5d:45:f2:d2:d0:9c:66:ea:5c:2b:67:27: 93:ab:48:54:fd:47:74:fb:9e:71:47:ea:f9:8d:7e:89:71:60: 4f:9f:a4:d7:6f:db:1b:ed:ec:7f:da:78:23:f9:02:d1:fe:63: c5:a0:76:07:d3:10:39:f9:63:39:34:aa:cb:f3:c1:89:ae:40: 30:43:0a:93:53:a1:c8:38:c5:d9:48:53:fb:3e:f8:9b:14:de: 76:c1:06:bd:0e:4f:29:7a:ee:a2:79:90:4b:04:50:75:11:ac: f2:1a:b2:7c:31:92:74:85:05:6c:82:93:f6:f5:dc:00:23:51: 71:f8:8d:32:4f:ae:5a:32:ae:ef:a0:44:81:20:6c:29:f7:01: 06:7f:7d:38:e9:f3:bd:a4:bc:2a:71:f3:da:94:d9:f2:15:6c: a7:88:de:04:bd:f6:03:c7:fd:68:c0:14:a0:6c:69:f3:7a:2e: e8:5c:6e:ed:fb:1c:70:63:f4:51:6e:b1:d5:57:67:68:7e:48: 70:13:da:a0:53:b8:5a:1b:ba:f7:df:de:69:02:df:90:c0:ee: 1b:df:bf:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPYy/XAzbgX04IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YzAzMTcwOWQtYTFiMy00NTY2LWE3ZGQtZTQ1OTc5N2ZhNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjXdgyPx4E+Fg824u5pvBHmy4lcy9gh2nbRc /EF534xoQC2sO6SUpVIqNDObzEjsBk6fPGNexDAwNkq7de5/CLTY0WU/r0WDISbB g+iCp/grVCh+7gJwepjYlH2jQbmcpOc4Zx0BAiQgnSw3cRjLIprnM3/raEuaPte2 sYQ9UGHaNKDpW7BvMhGYnCsO8ebesnlKP0jfWMeAO4n+WhgSHJe6Mn5hNqVcJhs+ sL6mmXpSEQjti5kSPiUMq2S849pb4Qvq8KK3+k48rvVaSRP9VpWDU3n5/jP5oIP4 T4OlKHAyGTF6iV3mDdy1iebC6KKvjiJkHJ2uuWNk3HsdZCZX7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVnBMTUStFgTiTCBr+50yYDLyBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvN2Q3NTVkMWItODAxNS0z NGZkLThiNGItZjE5ZmUyYzg0N2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJu19V3jewDO63g+VeP/1Z+HbUmNEuWI97fA1+MT7n6XvvqKWGvF4Lx MV1F8tLQnGbqXCtnJ5OrSFT9R3T7nnFH6vmNfolxYE+fpNdv2xvt7H/aeCP5AtH+ Y8WgdgfTEDn5Yzk0qsvzwYmuQDBDCpNTocg4xdlIU/s++JsU3nbBBr0OTyl67qJ5 kEsEUHURrPIasnwxknSFBWyCk/b13AAjUXH4jTJPrloyru+gRIEgbCn3AQZ/fTjp 872kvCpx89qU2fIVbKeI3gS99gPH/WjAFKBsafN6Luhcbu37HHBj9FFusdVXZ2h+ SHAT2qBTuFobuvff3mkC35DA7hvfv6E= -----END CERTIFICATE-----Generated at Tue Nov 4 09:48:08 2025 by rpki-client