$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/7131aac6-c3db-33bb-bbc4-d301b29e4648.roa File: 7131aac6-c3db-33bb-bbc4-d301b29e4648.roa (raw, json) Hash identifier: 68QFwYt4b8V5SYceQ6uOBiKO9Vx8pZyJF5XGf70zVJs= Subject key identifier: B9:E9:0A:2A:2F:67:FD:E7:EC:97:C4:49:E9:6F:F3:F4:1B:82:9A:3A Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584BA0D25AD0A2A9A64A864A6540 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/7131aac6-c3db-33bb-bbc4-d301b29e4648.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 54623 IP address blocks: 138.229.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5a:d0:a2:a9:a6:4a:86:4a:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=fb1ef615-174c-42ba-b7c3-ee72d551f243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:60:85:8b:70:06:54:61:bb:a2:76:7a:22: 7d:03:58:56:59:04:9a:c5:c6:92:e1:52:a6:c5:19: 3c:1c:ee:f4:2f:a6:c4:ea:3b:2d:57:22:6f:5f:2e: 58:55:6b:1b:c4:a0:39:72:69:46:16:b4:89:18:d1: 27:23:ee:73:d5:2e:01:0e:f8:d7:63:02:2a:04:82: 83:43:32:4b:ea:b1:38:6d:12:f6:51:05:bf:82:af: 97:8d:9e:a5:ed:86:59:26:d6:3d:fe:f9:0e:b6:fb: d1:9b:01:5e:cd:fd:98:0b:43:b2:d2:19:47:4b:e3: 9d:3b:e4:39:25:c0:1e:12:2a:24:e4:8d:00:bd:b6: fb:9d:16:80:3e:cb:72:bd:aa:ed:99:59:11:0c:5c: 1e:97:8d:3f:b0:58:4d:31:3e:83:f2:fa:d7:1e:75: 4e:9c:89:c8:79:8f:6c:ed:9e:8e:2b:89:67:15:41: 5b:86:d0:78:18:67:e9:ec:ed:23:5e:4e:c6:c5:a7: 87:d0:ff:ff:13:d6:67:7a:f2:aa:11:7a:01:7a:c0: 12:39:44:eb:52:64:63:a9:cc:0a:4f:cd:88:1b:c4: ee:f5:9c:f8:3f:13:fb:1f:6e:69:67:b0:87:a7:a4: 8c:3b:d5:eb:29:3e:15:20:2f:f4:ce:ab:a6:fd:a5: c6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E9:0A:2A:2F:67:FD:E7:EC:97:C4:49:E9:6F:F3:F4:1B:82:9A:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/7131aac6-c3db-33bb-bbc4-d301b29e4648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 138.229.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c0:cd:f1:59:99:a4:77:e9:48:ae:38:f9:fc:e7:58:43:cb: fd:18:b3:6f:6f:f7:f2:a0:6f:4b:db:ff:cc:5b:54:23:87:48: 80:8b:e1:52:69:79:96:8a:36:66:57:2f:ab:b5:df:c8:d0:c0: 1f:2f:37:cf:34:6e:59:48:b4:a6:45:e8:e5:5e:c8:d2:8c:d2: 8c:87:f5:8f:01:71:80:3d:ac:dc:0c:a2:c6:19:7f:3c:a8:91: 04:15:b9:26:0e:80:8f:e0:cb:cc:73:89:2e:4c:cf:f0:12:c1: 83:66:1e:97:0c:62:32:92:52:b0:4a:d9:a1:be:5a:8f:e4:ff: 36:60:41:05:51:3f:8b:0b:81:d2:67:c3:ab:59:85:3e:40:e3: 1a:b2:8b:f1:72:c4:e6:67:05:a6:34:09:52:56:59:4a:83:58: 6c:a5:b5:bb:66:92:6c:50:a4:4e:66:0f:bf:7f:73:d5:8a:b6: 62:e4:b6:ee:4b:70:a2:25:b1:98:77:f9:e9:98:80:69:2d:ce: df:54:17:45:5b:20:e0:68:0b:cf:43:05:b3:94:06:4e:4b:69: 87:cf:fd:bd:b5:de:d1:f3:f2:8b:8d:35:cd:eb:4d:1d:b1:bf: 9f:6e:44:9a:dd:93:7d:5a:79:af:8c:1f:a0:96:ca:c9:d3:cf: d7:b7:db:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lrQoqmmSoZKZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZmIxZWY2MTUtMTc0Yy00MmJhLWI3YzMtZWU3MmQ1NTFmMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ5ghYtwBlRhu6J2eiJ9A1hWWQSaxcaS4VKm xRk8HO70L6bE6jstVyJvXy5YVWsbxKA5cmlGFrSJGNEnI+5z1S4BDvjXYwIqBIKD QzJL6rE4bRL2UQW/gq+XjZ6l7YZZJtY9/vkOtvvRmwFezf2YC0Oy0hlHS+OdO+Q5 JcAeEiok5I0Avbb7nRaAPstyvartmVkRDFwel40/sFhNMT6D8vrXHnVOnInIeY9s 7Z6OK4lnFUFbhtB4GGfp7O0jXk7GxaeH0P//E9ZnevKqEXoBesASOUTrUmRjqcwK T82IG8Tu9Zz4PxP7H25pZ7CHp6SMO9XrKT4VIC/0zqum/aXGHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnpCiovZ/3n7JfESelv8/Qbgpo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvNzEzMWFhYzYtYzNkYi0z M2JiLWJiYzQtZDMwMWIyOWU0NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHAzfFZmaR36UiuOPn851hDy/0Ys29v9/Kgb0vb/8xbVCOHSICL4VJp eZaKNmZXL6u138jQwB8vN880bllItKZF6OVeyNKM0oyH9Y8BcYA9rNwMosYZfzyo kQQVuSYOgI/gy8xziS5Mz/ASwYNmHpcMYjKSUrBK2aG+Wo/k/zZgQQVRP4sLgdJn w6tZhT5A4xqyi/FyxOZnBaY0CVJWWUqDWGyltbtmkmxQpE5mD79/c9WKtmLktu5L cKIlsZh3+emYgGktzt9UF0VbIOBoC89DBbOUBk5LaYfP/b213tHz8ouNNc3rTR2x v59uRJrdk31aea+MH6CWysnTz9e32wI= -----END CERTIFICATE-----Generated at Mon Nov 3 22:06:24 2025 by rpki-client