$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa File: 8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa (raw, json) Hash identifier: YGQ0mlQVoYDNFrIchsA++HONCoh8JAYI5IyH6HLJ2aA= Subject key identifier: C9:80:7E:4B:04:1B:0B:F2:B9:14:D1:F2:E6:74:58:59:4E:10:10:BA Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584B7233D34D810163439121FB80 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa Signing time: Tue 07 Oct 2025 20:14:16 +0000 ROA not before: Tue 07 Oct 2025 20:14:16 +0000 ROA not after: Mon 05 Jan 2026 21:14:16 +0000 asID: 210645 IP address blocks: 131.143.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:33:d3:4d:81:01:63:43:91:21:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Oct 7 20:14:16 2025 GMT Not After : Jan 5 21:14:16 2026 GMT Subject: CN=7afe820c-8e87-4199-9a23-592a0836dc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:57:1c:29:0e:0a:58:67:c2:3c:95:03:ad:65: bf:85:29:3b:dd:de:87:2e:09:12:95:10:6a:61:9e: aa:bc:4d:1f:17:9d:41:fd:d4:ae:20:8b:d5:39:e2: 6b:ad:7c:8c:00:88:03:68:21:83:d1:76:6e:99:e2: 46:7f:01:fd:89:ea:b1:ec:3a:b5:35:9a:77:78:86: 2c:18:d4:e7:18:bb:8b:e2:4b:68:07:cd:ba:04:6a: f2:97:f8:b1:a6:47:8b:3d:84:93:ad:71:be:4c:7d: 88:2e:76:f3:7a:3c:5d:1e:9e:14:15:a1:a2:95:0c: 0a:90:be:d0:53:25:5a:16:d6:39:6d:a4:32:ac:9d: 5c:b7:d1:32:fa:8d:5b:09:4d:34:84:bc:2b:1c:2e: 88:ac:a4:cb:fb:74:28:f0:42:99:12:4a:45:21:98: 74:98:3f:0b:ee:5a:4c:81:44:7b:bd:5b:ea:94:45: 49:ba:f9:c4:d6:77:2f:a2:97:39:45:79:a4:42:2b: 22:a5:6d:45:6a:0c:7f:e0:af:59:b8:06:a2:8f:68: 92:bc:88:b0:ef:ce:e0:9c:56:d4:4a:6b:9a:3a:79: 8f:06:d8:40:80:8b:39:47:a5:3f:7e:3e:f4:ad:21: 63:a2:54:8d:68:6f:e2:0c:3f:24:f3:11:63:74:1f: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:80:7E:4B:04:1B:0B:F2:B9:14:D1:F2:E6:74:58:59:4E:10:10:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv4: 131.143.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:94:27:e7:5d:59:e6:a7:56:4e:7b:13:72:e7:01:68:fb:84: 72:00:aa:df:02:6e:1e:65:91:48:87:f5:5c:c9:07:73:8b:25: ed:2b:f3:79:e4:aa:da:74:03:fd:86:f4:64:97:3a:bf:dc:18: 3a:bd:8c:f0:d1:30:83:33:ab:a7:42:e9:26:9c:11:d4:da:d5: 27:8c:38:8d:e5:dd:72:44:f0:46:ad:fe:7d:59:12:13:60:72: e8:a4:aa:f3:5a:ae:9f:03:4b:1f:19:0b:35:3d:ad:a6:1e:cc: 25:9c:29:3b:2d:8a:99:89:8b:8c:cb:b5:39:34:c4:03:1c:3e: c5:3c:f3:2a:fb:28:35:04:60:97:e8:48:a3:bd:89:81:19:44: 7a:2a:80:e4:f0:75:3e:35:e7:e4:6a:fe:41:db:a5:d7:0b:7a: 0d:6d:83:1d:ed:68:70:f1:fd:1b:a4:b4:e8:09:84:60:e8:de: 04:9c:87:13:fa:17:48:9c:b6:75:c3:ae:dc:29:ed:4b:5e:dc: b3:5f:22:69:e7:96:df:5d:b4:9f:ea:20:b5:ee:02:a5:1a:56: e4:f9:e5:d9:3d:de:e2:de:69:e3:8a:25:52:09:81:2a:bc:0a: 87:b0:18:04:d9:e8:6f:44:72:93:93:b9:73:fb:e4:39:f0:f8: df:8a:de:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtyM9NNgQFjQ5Eh+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MTAwNzIwMTQxNloXDTI2MDEwNTIxMTQxNlowLzEtMCsGA1UEAxMk N2FmZTgyMGMtOGU4Ny00MTk5LTlhMjMtNTkyYTA4MzZkYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1ccKQ4KWGfCPJUDrWW/hSk73d6HLgkSlRBq YZ6qvE0fF51B/dSuIIvVOeJrrXyMAIgDaCGD0XZumeJGfwH9ieqx7Dq1NZp3eIYs GNTnGLuL4ktoB826BGryl/ixpkeLPYSTrXG+TH2ILnbzejxdHp4UFaGilQwKkL7Q UyVaFtY5baQyrJ1ct9Ey+o1bCU00hLwrHC6IrKTL+3Qo8EKZEkpFIZh0mD8L7lpM gUR7vVvqlEVJuvnE1ncvopc5RXmkQisipW1Fagx/4K9ZuAaij2iSvIiw787gnFbU SmuaOnmPBthAgIs5R6U/fj70rSFjolSNaG/iDD8k8xFjdB/A/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmAfksEGwvyuRTR8uZ0WFlOEBC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvOGY0OWU2YjItNzg4Ny0z YWE4LWI2NGUtOWRlMGUyMDcxNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmUJ+ddWeanVk57E3LnAWj7hHIAqt8Cbh5lkUiH9VzJB3OLJe0r83nk qtp0A/2G9GSXOr/cGDq9jPDRMIMzq6dC6SacEdTa1SeMOI3l3XJE8Eat/n1ZEhNg cuikqvNarp8DSx8ZCzU9raYezCWcKTstipmJi4zLtTk0xAMcPsU88yr7KDUEYJfo SKO9iYEZRHoqgOTwdT415+Rq/kHbpdcLeg1tgx3taHDx/RuktOgJhGDo3gSchxP6 F0ictnXDrtwp7Ute3LNfImnnlt9dtJ/qILXuAqUaVuT55dk93uLeaeOKJVIJgSq8 CoewGATZ6G9EcpOTuXP75Dnw+N+K3hc= -----END CERTIFICATE-----Generated at Wed Oct 22 12:05:42 2025 by rpki-client