$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/31125309-5805-34c1-9fed-5da19e518d3a.roa File: 31125309-5805-34c1-9fed-5da19e518d3a.roa (raw, json) Hash identifier: mLiFafvAosr5GlUjXNIVyl9CH+le88IpkbJCRuljxwE= Subject key identifier: 87:8F:3C:A8:C5:23:C7:B9:9B:0C:9A:E4:D3:A6:CF:29:6B:26:CC:2E Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11F2BC7F4CA77A10BDAE80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/31125309-5805-34c1-9fed-5da19e518d3a.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203724 IP address blocks: 131.229.128.0/24 maxlen: 24 131.229.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:f2:bc:7f:4c:a7:7a:10:bd:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=64305fbb-07ee-49e6-ac42-a83f41745681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:c0:01:44:ff:a0:f9:01:e5:60:0b:eb:82: 3c:bc:dc:c9:d5:01:0f:f9:2d:6b:74:0e:e4:b9:1b: d9:5f:9b:fd:7a:09:49:48:fc:06:ad:31:f3:45:b5: 43:aa:62:cc:05:bf:4c:5b:5a:13:c1:24:e2:2a:64: 2e:0a:f3:aa:f9:1a:4e:2e:ae:27:ec:52:c6:c9:0a: 48:ab:c1:59:a9:62:8f:8c:3d:ef:33:99:fa:e2:05: 09:ab:fc:a4:42:f7:a4:fd:97:58:6e:52:2f:d0:2c: 3e:25:72:89:a5:c9:ef:17:52:65:c9:eb:1d:19:95: fb:8e:b2:8f:60:9f:3c:d2:70:f1:7b:54:5d:d3:f0: 5e:e6:72:d1:b2:74:eb:67:88:cd:54:29:7b:38:71: 95:ae:13:63:fd:ce:7d:32:3e:ce:3c:aa:07:e6:e2: 13:ea:74:d4:34:be:40:7e:8b:83:58:ec:55:51:bf: 08:5b:b1:08:e1:ce:46:f4:70:6a:e4:1f:92:18:cc: 90:0d:9f:14:68:57:ce:fa:58:0e:14:3a:bf:10:10: d1:b0:22:b2:d1:4c:51:a1:3a:5f:b5:b6:41:46:3e: df:aa:07:aa:22:25:9d:f8:19:58:eb:36:be:86:65: c9:2b:43:bc:0f:ee:40:a9:1b:b8:b7:4c:2a:b0:d0: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8F:3C:A8:C5:23:C7:B9:9B:0C:9A:E4:D3:A6:CF:29:6B:26:CC:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/31125309-5805-34c1-9fed-5da19e518d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.128.0/24 131.229.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:62:3b:78:ec:70:ae:59:00:38:d7:58:78:90:cc:c3:10:a9: bd:12:1a:83:76:bf:6d:c5:8a:a4:3b:7c:5a:1e:1e:1c:31:44: 4a:7c:61:99:5b:4e:75:80:ac:d9:14:df:c6:af:2f:6b:5d:4e: fd:69:92:5e:41:d8:da:b4:d0:af:f5:30:e7:f8:3c:06:ff:4a: 2d:02:8c:39:9d:0a:4b:bf:fe:55:bc:a7:0f:91:75:14:aa:2b: 62:55:ae:80:22:94:54:af:7b:8e:bf:82:4a:45:48:2d:39:96: 8f:74:6c:28:1e:f2:5d:cc:e9:05:b6:62:56:7d:be:db:c7:08: b0:a1:73:d8:a2:f5:0c:b8:b0:01:80:82:20:f3:f3:7d:94:57: 0b:aa:6a:fd:bf:07:bd:46:a0:9a:31:c3:bb:15:71:8f:ef:ab: 4e:2c:e0:54:36:3e:e0:c8:a9:df:47:d9:c4:16:2a:96:f6:70: d2:f5:e0:93:c1:f4:d4:e1:de:bb:69:4a:7d:92:5f:93:85:15: 5e:e3:09:2c:5d:12:1f:31:e5:bd:20:fd:67:58:00:d3:10:a8: a8:67:4d:6f:30:4f:47:a9:ae:4d:03:1f:d1:e7:9a:23:23:9b: e8:a3:10:33:7d:f3:77:ed:0a:65:8e:32:f4:1c:7d:64:a7:94: 4d:53:39:bb -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtNEfK8f0ynehC9roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NjQzMDVmYmItMDdlZS00OWU2LWFjNDItYTgzZjQxNzQ1NjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqvAAUT/oPkB5WAL64I8vNzJ1QEP+S1rdA7k uRvZX5v9eglJSPwGrTHzRbVDqmLMBb9MW1oTwSTiKmQuCvOq+RpOLq4n7FLGyQpI q8FZqWKPjD3vM5n64gUJq/ykQvek/ZdYblIv0Cw+JXKJpcnvF1JlyesdGZX7jrKP YJ880nDxe1Rd0/Be5nLRsnTrZ4jNVCl7OHGVrhNj/c59Mj7OPKoH5uIT6nTUNL5A fouDWOxVUb8IW7EI4c5G9HBq5B+SGMyQDZ8UaFfO+lgOFDq/EBDRsCKy0UxRoTpf tbZBRj7fqgeqIiWd+BlY6za+hmXJK0O8D+5AqRu4t0wqsNAZMwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIePPKjFI8e5mwya5NOmzylrJswuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzExMjUzMDktNTgwNS0z NGMxLTlmZWQtNWRhMTllNTE4ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg+WAAwQA g+WEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFdiO3jscK5ZADjXWHiQzMMQqb0SGoN2v23FiqQ7fFoeHhwx REp8YZlbTnWArNkU38avL2tdTv1pkl5B2Nq00K/1MOf4PAb/Si0CjDmdCku//lW8 pw+RdRSqK2JVroAilFSve46/gkpFSC05lo90bCge8l3M6QW2YlZ9vtvHCLChc9ii 9Qy4sAGAgiDz832UVwuqav2/B71GoJoxw7sVcY/vq04s4FQ2PuDIqd9H2cQWKpb2 cNL14JPB9NTh3rtpSn2SX5OFFV7jCSxdEh8x5b0g/WdYANMQqKhnTW8wT0eprk0D H9HnmiMjm+ijEDN983ftCmWOMvQcfWSnlE1TObs= -----END CERTIFICATE-----Generated at Thu Oct 9 01:34:19 2025 by rpki-client