$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/1b903585-76bc-3d1a-b041-b74d5abc5d82.roa File: 1b903585-76bc-3d1a-b041-b74d5abc5d82.roa (raw, json) Hash identifier: a8hFj/cSZafqZ1bLOa05ecbiirr4KzW0VQbyHNNFipc= Subject key identifier: 00:EB:C2:B6:42:43:51:95:CB:9B:F7:21:4D:01:48:66:40:E7:FC:8C Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4A47127BC3B2F94D5BD83580 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/1b903585-76bc-3d1a-b041-b74d5abc5d82.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203724 IP address blocks: 131.229.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:12:7b:c3:b2:f9:4d:5b:d8:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=4b540ba2-dec1-4867-8d5b-93d9861fdb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:8a:5b:3e:92:e8:29:6c:f5:d9:aa:99:ff: b8:11:cd:99:b5:b5:92:93:dd:64:05:ee:63:22:79: 8e:ae:d1:02:44:4a:d1:a4:15:d2:10:5c:0f:02:68: 80:ee:27:7d:2b:f0:92:b0:d4:46:d7:ad:7a:e2:f5: 17:61:92:12:a9:0b:06:cb:12:2c:56:dc:cd:01:75: 90:70:21:f0:b4:00:96:91:2f:3d:f3:eb:4b:46:1d: 41:15:2a:8c:1f:9d:b5:e1:f9:d2:ce:f3:c5:16:9e: 23:3b:b3:b7:45:a0:b8:96:6b:7b:fa:29:b7:24:83: bd:9c:24:a0:f9:0c:71:ab:8e:31:aa:9e:16:fc:c6: 7e:30:a4:ae:50:3e:fa:5f:c9:83:0b:50:95:1a:c6: 66:60:84:a3:1d:ab:a1:3a:46:61:9b:6a:34:0c:38: 52:0a:21:72:8d:1e:56:d5:28:f1:6d:3d:fd:66:15: 59:4c:04:5a:6b:d9:82:a6:84:eb:ca:8d:3f:1e:fb: 8e:aa:f6:30:c0:3f:c9:82:6d:2c:7b:43:0a:c6:47: d7:f4:b3:c4:51:09:7d:d4:c3:a5:7f:98:de:27:2f: 30:b8:d5:9f:0d:43:8a:12:bd:9e:92:f7:5e:a3:68: 8a:02:5d:1e:ba:f0:01:1c:fa:e8:f8:7d:f9:99:85: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EB:C2:B6:42:43:51:95:CB:9B:F7:21:4D:01:48:66:40:E7:FC:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/1b903585-76bc-3d1a-b041-b74d5abc5d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b8:bd:61:6c:40:47:77:6e:dc:a0:fe:29:c9:ff:c0:f2:56: d1:42:b3:bb:99:6c:58:b5:63:4b:6a:ed:e2:99:0c:73:a3:a6: 0d:45:0f:8f:6d:04:1b:93:7a:12:ae:75:43:0e:9e:d3:87:9e: 95:7b:dc:66:fe:4d:52:78:96:b9:0f:73:5c:16:4e:74:da:9c: bd:c9:ba:63:10:20:63:3c:c8:56:b3:d7:2f:12:49:e2:e5:eb: f5:57:82:76:48:cf:ca:50:f9:fe:6c:f0:de:ec:16:50:5d:07: ee:4a:4d:aa:19:0e:b4:dc:8e:af:c3:50:17:2e:f8:d0:fb:53: 88:7e:26:49:53:9f:b0:cc:88:ff:0f:85:8c:79:53:2b:4a:53: 0f:9b:96:9a:da:b9:92:ac:b3:16:2d:0c:88:e0:8e:78:18:22: b0:69:db:db:3f:c2:1c:37:85:e0:19:1f:d8:3c:51:3f:ef:31: b5:cb:06:be:35:34:61:71:60:5e:49:2f:06:74:28:9c:5f:15: 84:3e:86:b3:f8:85:c1:aa:d7:15:16:69:9b:49:0b:28:ae:7f: 0f:6d:84:2b:5f:16:68:d8:a8:2a:d0:23:c6:4d:93:3a:2d:27: b3:c6:a2:c7:89:40:68:c3:69:e2:d4:b8:09:f4:f3:ca:63:39: df:f3:09:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxJ7w7L5TVvYNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NGI1NDBiYTItZGVjMS00ODY3LThkNWItOTNkOTg2MWZkYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppuKWz6S6Cls9dmqmf+4Ec2ZtbWSk91kBe5j InmOrtECRErRpBXSEFwPAmiA7id9K/CSsNRG16164vUXYZISqQsGyxIsVtzNAXWQ cCHwtACWkS898+tLRh1BFSqMH5214fnSzvPFFp4jO7O3RaC4lmt7+im3JIO9nCSg +Qxxq44xqp4W/MZ+MKSuUD76X8mDC1CVGsZmYISjHauhOkZhm2o0DDhSCiFyjR5W 1SjxbT39ZhVZTARaa9mCpoTryo0/HvuOqvYwwD/Jgm0se0MKxkfX9LPEUQl91MOl f5jeJy8wuNWfDUOKEr2ekvdeo2iKAl0euvABHPro+H35mYXAOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADrwrZCQ1GVy5v3IU0BSGZA5/yMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMWI5MDM1ODUtNzZiYy0z ZDFhLWIwNDEtYjc0ZDVhYmM1ZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi4vWFsQEd3btyg/inJ/8DyVtFCs7uZbFi1Y0tq7eKZDHOjpg1FD49t BBuTehKudUMOntOHnpV73Gb+TVJ4lrkPc1wWTnTanL3JumMQIGM8yFaz1y8SSeLl 6/VXgnZIz8pQ+f5s8N7sFlBdB+5KTaoZDrTcjq/DUBcu+ND7U4h+JklTn7DMiP8P hYx5UytKUw+blprauZKssxYtDIjgjngYIrBp29s/whw3heAZH9g8UT/vMbXLBr41 NGFxYF5JLwZ0KJxfFYQ+hrP4hcGq1xUWaZtJCyiufw9thCtfFmjYqCrQI8ZNkzot J7PGoseJQGjDaeLUuAn088pjOd/zCeE= -----END CERTIFICATE-----Generated at Thu Oct 9 01:34:22 2025 by rpki-client