$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa File: 23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa (raw, json) Hash identifier: tMtqI5whHUwR8EFC5GX/3iMiBHugS0Y80XCv6nwpl4A= Subject key identifier: C6:C3:11:01:53:55:E0:8A:64:3A:13:03:8B:7E:E0:0C:8D:8D:50:C6 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584AF0F12ECACC5338B73157BBC0 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 12213 IP address blocks: 131.226.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:2e:ca:cc:53:38:b7:31:57:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=3bc02abd-c9a4-4ede-8089-f1e024911ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:71:c5:eb:10:ab:af:98:70:d4:c2:7e:e1:2d: e6:e6:13:30:8a:93:8e:b2:1e:7e:aa:d6:cf:0d:6c: 6d:03:d4:6f:7f:43:ac:22:17:b9:fa:4e:01:93:e5: 45:ae:ca:01:23:0c:bb:9d:aa:81:a1:39:c8:58:51: 60:b6:47:a7:5b:e8:83:d3:82:e2:1b:41:30:99:32: 73:01:f8:a6:70:b5:4c:3f:57:0c:0d:d4:26:5a:00: 74:2a:cf:2a:a5:a9:23:45:38:17:3b:5d:f3:09:86: e4:cc:20:d1:15:bc:4e:77:e9:45:42:0c:82:27:55: 9d:cc:14:6a:38:a3:d7:56:7c:0c:80:05:f4:23:a1: 89:63:b1:16:5c:63:7b:b1:41:d9:15:18:5f:cf:57: e7:1b:d4:d1:1e:c7:86:18:c9:30:75:42:6d:10:c6: 20:cf:4b:37:57:9c:2f:bc:c0:ef:b2:6f:f1:5c:a2: 83:9e:18:1d:54:db:9a:22:a5:5b:cb:69:b6:fe:b5: a5:58:7d:80:de:32:de:0d:38:a0:05:90:32:a1:c8: 12:21:c4:c3:49:c2:45:77:7e:3d:f4:46:ac:02:57: ee:b2:9f:45:eb:a1:f9:2c:de:a7:e9:99:45:37:1b: df:ce:e6:27:b7:47:e5:f7:b1:8b:88:fc:9b:f4:e4: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C3:11:01:53:55:E0:8A:64:3A:13:03:8B:7E:E0:0C:8D:8D:50:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 131.226.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:6d:45:75:40:dc:7e:3b:5d:ce:50:04:fd:c9:9a:e0:8c:c4: 2e:c5:e9:51:d8:ba:45:d7:0f:00:8b:2a:e4:0a:ec:a6:cd:70: dc:91:68:e3:69:79:bf:2c:22:e1:13:da:4f:6f:5f:5f:1c:fd: 6e:c6:3c:58:01:f3:a8:df:83:35:24:d4:a4:7d:ac:b8:00:9e: e9:74:7c:ea:c7:cd:57:e2:56:9b:8e:71:cc:43:8d:71:61:9e: 89:78:c3:47:a2:f8:a4:05:77:db:01:be:cf:41:87:f7:aa:61: 7d:2c:56:b7:ea:f1:a5:02:67:81:c0:2f:f7:67:4e:02:c2:9c: dc:e7:0b:1c:b4:95:be:a8:85:ca:11:b8:aa:24:5a:68:91:ff: 1e:97:a1:83:ff:f4:c9:42:ae:74:f2:54:a3:7a:9c:e5:96:dd: 56:56:81:2d:f6:d7:80:34:27:75:e0:3a:f4:12:c4:f1:6f:21: a3:d2:07:ec:4c:44:1f:e6:f4:43:45:45:3f:1b:7d:90:0b:8e: ed:a3:5b:29:aa:eb:21:d0:7f:89:b1:1f:27:47:02:5a:d0:46: 46:ea:7d:43:29:92:b4:9f:c4:21:c8:bf:0a:ab:d2:f1:1c:10: 27:ed:46:09:5a:90:76:65:6b:16:5f:da:80:0a:40:f7:96:20: db:98:ff:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8S7KzFM4tzFXu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk M2JjMDJhYmQtYzlhNC00ZWRlLTgwODktZjFlMDI0OTExZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03HF6xCrr5hw1MJ+4S3m5hMwipOOsh5+qtbP DWxtA9Rvf0OsIhe5+k4Bk+VFrsoBIwy7naqBoTnIWFFgtkenW+iD04LiG0EwmTJz AfimcLVMP1cMDdQmWgB0Ks8qpakjRTgXO13zCYbkzCDRFbxOd+lFQgyCJ1WdzBRq OKPXVnwMgAX0I6GJY7EWXGN7sUHZFRhfz1fnG9TRHseGGMkwdUJtEMYgz0s3V5wv vMDvsm/xXKKDnhgdVNuaIqVby2m2/rWlWH2A3jLeDTigBZAyocgSIcTDScJFd349 9EasAlfusp9F66H5LN6n6ZlFNxvfzuYnt0fl97GLiPyb9OQHTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbDEQFTVeCKZDoTA4t+4AyNjVDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMjNmODE4OTQtMmY3ZS0z MjhmLWJjMWYtYjZhN2ViMjZmODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGg+LAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZtRXVA3H47Xc5QBP3JmuCMxC7F6VHYukXXDwCLKuQK7KbNcNyRaONp eb8sIuET2k9vX18c/W7GPFgB86jfgzUk1KR9rLgAnul0fOrHzVfiVpuOccxDjXFh nol4w0ei+KQFd9sBvs9Bh/eqYX0sVrfq8aUCZ4HAL/dnTgLCnNznCxy0lb6ohcoR uKokWmiR/x6XoYP/9MlCrnTyVKN6nOWW3VZWgS3214A0J3XgOvQSxPFvIaPSB+xM RB/m9ENFRT8bfZALju2jWymq6yHQf4mxHydHAlrQRkbqfUMpkrSfxCHIvwqr0vEc ECftRglakHZlaxZf2oAKQPeWINuY/2E= -----END CERTIFICATE-----Generated at Sun Oct 26 16:45:34 2025 by rpki-client