$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa File: 8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa (raw, json) Hash identifier: bfkB4V5Dd+mkX5rd4ekEBXMTl1FGMcpYlYYo2zj2DqM= Subject key identifier: BF:B0:35:12:22:16:60:4B:28:28:02:4C:CD:82:0C:80:CF:57:D3:DD Certificate issuer: /CN=02e2201b-75a6-4194-9898-6fe2f60eaf78 Certificate serial: 010D0C9F4328584B7A16DE1ABE64074622172440 Authority key identifier: 33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa Signing time: Fri 10 Oct 2025 16:02:24 +0000 ROA not before: Fri 10 Oct 2025 16:02:24 +0000 ROA not after: Thu 08 Jan 2026 17:02:24 +0000 asID: 32695 IP address blocks: 131.149.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:16:de:1a:be:64:07:46:22:17:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02e2201b-75a6-4194-9898-6fe2f60eaf78 Validity Not Before: Oct 10 16:02:24 2025 GMT Not After : Jan 8 17:02:24 2026 GMT Subject: CN=38d18895-1a29-41f0-9510-0e0c499def6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:57:12:6f:6d:f3:f0:61:1c:44:8f:9d:32:1c: 7b:e7:16:22:2e:2b:dc:d4:95:d0:b5:33:84:c1:59: 8f:df:8a:77:29:f6:48:52:3e:c0:ff:2f:f3:4f:c6: b5:c0:39:8d:1b:02:89:1a:53:91:c1:85:9d:f6:8e: 34:93:3e:db:84:2b:a0:b0:5e:26:0d:3e:2d:be:8b: d9:c2:8e:54:05:0d:98:ab:42:b2:a1:2d:c3:52:3d: 83:0c:67:1b:d2:45:13:6a:9a:a3:22:e7:dc:34:b6: 90:8e:7d:b6:83:8b:db:00:39:2a:b3:0c:40:c7:6d: 01:4d:21:81:41:69:df:c2:49:1b:35:97:e5:3c:2e: 1b:4d:cc:22:34:c7:93:6d:d9:d0:5a:f0:6a:3e:9f: 1c:a2:e2:36:8f:ed:fa:17:01:e4:39:1c:a4:32:74: 1e:2a:d2:c9:ad:b8:6e:97:e8:ad:f4:bd:d9:85:03: 0c:07:9c:5d:bb:cc:29:35:e7:ea:e5:59:d6:2d:e0: 48:1a:7d:e5:0b:a6:8c:8c:b6:ad:6b:07:f3:66:92: b0:21:83:a0:77:56:46:d2:f8:20:b3:e5:ba:fa:30: 10:dc:89:87:bf:c7:64:cf:8d:58:a8:ac:a7:c0:7a: d5:f1:06:f5:75:5c:24:98:e1:40:f0:bf:78:3e:a4: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B0:35:12:22:16:60:4B:28:28:02:4C:CD:82:0C:80:CF:57:D3:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl X509v3 Authority Key Identifier: keyid:33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer sbgp-ipAddrBlock: critical IPv4: 131.149.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fb:e7:10:70:0e:f1:52:f8:68:07:f3:36:21:02:dd:8f:33: ca:8e:8b:6a:37:f7:04:67:72:78:f2:5b:86:02:89:1f:33:d6: a3:4f:1a:5e:2f:ce:fd:d7:24:8b:88:50:25:35:cf:77:5e:50: 55:17:50:77:a8:0c:5c:41:9d:11:2b:7a:b8:bf:c6:6f:ba:15: 43:72:1d:ce:51:86:20:e5:71:f1:e4:70:a1:e7:fb:07:4a:8a: 1c:7f:2f:41:5c:41:0d:5c:c8:fc:27:40:48:9c:54:a3:c1:5e: e1:52:10:15:ff:58:f5:5f:55:9f:87:79:ec:a7:2c:e0:bd:90: 1f:34:97:24:03:c3:ef:83:1e:b6:a7:ca:e4:76:3d:20:64:3e: be:bf:36:ee:94:06:bd:e8:01:37:eb:50:af:4e:96:3a:d5:b4: c3:40:4d:75:f1:bf:50:e9:ad:ce:66:23:80:a7:db:69:0e:29: e3:30:85:4d:a9:b4:18:13:d3:d8:c2:6c:a2:57:e5:00:8f:ef: 9c:b2:32:71:5d:f4:a8:fa:56:92:04:1e:de:c6:48:06:01:35: b4:bc:77:22:1b:c1:a9:5d:ec:18:49:04:de:cd:85:2b:33:b8: 9c:36:ac:cc:0e:50:62:f7:96:18:3e:32:c1:a3:6f:20:b2:e6: 5a:75:32:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6Ft4avmQHRiIXJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJlMjIwMWItNzVhNi00MTk0LTk4OTgtNmZlMmY2MGVh Zjc4MB4XDTI1MTAxMDE2MDIyNFoXDTI2MDEwODE3MDIyNFowLzEtMCsGA1UEAxMk MzhkMTg4OTUtMWEyOS00MWYwLTk1MTAtMGUwYzQ5OWRlZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1cSb23z8GEcRI+dMhx75xYiLivc1JXQtTOE wVmP34p3KfZIUj7A/y/zT8a1wDmNGwKJGlORwYWd9o40kz7bhCugsF4mDT4tvovZ wo5UBQ2Yq0KyoS3DUj2DDGcb0kUTapqjIufcNLaQjn22g4vbADkqswxAx20BTSGB QWnfwkkbNZflPC4bTcwiNMeTbdnQWvBqPp8couI2j+36FwHkORykMnQeKtLJrbhu l+it9L3ZhQMMB5xdu8wpNefq5VnWLeBIGn3lC6aMjLatawfzZpKwIYOgd1ZG0vgg s+W6+jAQ3ImHv8dkz41YqKynwHrV8Qb1dVwkmOFA8L94PqQVVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+wNRIiFmBLKCgCTM2CDIDPV9PdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wMmUy MjAxYi03NWE2LTQxOTQtOTg5OC02ZmUyZjYwZWFmNzgvOGI0ZDQ0YWQtMTQxMi0z OTg3LWE3YzctZGM1OTdjZGRiOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDJlMjIwMWItNzVhNi00MTk0LTk4 OTgtNmZlMmY2MGVhZjc4LzAyZTIyMDFiLTc1YTYtNDE5NC05ODk4LTZmZTJmNjBl YWY3OC5jcmwwHwYDVR0jBBgwFoAUM2mkKSp0niVPJgv0X0QSbGZzIM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wMmUyMjAxYi03NWE2LTQxOTQtOTg5OC02ZmUy ZjYwZWFmNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn75xBwDvFS+GgH8zYhAt2PM8qOi2o39wRncnjyW4YCiR8z1qNPGl4v zv3XJIuIUCU1z3deUFUXUHeoDFxBnREreri/xm+6FUNyHc5RhiDlcfHkcKHn+wdK ihx/L0FcQQ1cyPwnQEicVKPBXuFSEBX/WPVfVZ+HeeynLOC9kB80lyQDw++DHran yuR2PSBkPr6/Nu6UBr3oATfrUK9OljrVtMNATXXxv1Dprc5mI4Cn22kOKeMwhU2p tBgT09jCbKJX5QCP75yyMnFd9Kj6VpIEHt7GSAYBNbS8dyIbwald7BhJBN7NhSsz uJw2rMwOUGL3lhg+MsGjbyCy5lp1MpM= -----END CERTIFICATE-----Generated at Tue Nov 4 20:36:27 2025 by rpki-client