$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa File: 32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa (raw, json) Hash identifier: vlqdX2uf+CR7VAhG0l3iSMSE1qVJ7lHfDsrANoxosT4= Subject key identifier: 50:BE:9D:8A:2D:72:2B:B8:32:FC:F1:EF:3A:29:15:E3:3A:A7:9C:79 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11F2EBA9CCB50AD8E53680 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203724 IP address blocks: 131.229.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:f2:eb:a9:cc:b5:0a:d8:e5:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=4c47a220-fc2d-4b0c-808b-fb74e7bee738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:ed:42:58:16:28:69:35:b9:01:c2:5d:8d: f4:7a:04:c3:a3:8e:18:65:a8:9b:af:4b:d0:96:4a: 3a:f9:86:32:03:39:81:9e:dc:12:98:c4:1d:4a:d7: 56:2c:cd:62:bf:f5:63:18:db:d6:6e:52:c7:54:ad: 25:c9:3f:90:ed:cf:fa:3d:30:49:25:2e:ff:5b:5f: 97:c9:dc:52:fd:12:16:7f:d4:f3:b6:15:69:5a:cf: 9f:55:4e:74:67:32:38:eb:7f:62:c4:25:49:af:ed: b3:ac:67:96:2a:5d:52:69:b1:98:8e:9e:d0:96:27: 61:cd:42:c3:a9:ac:ec:30:1e:d9:87:6b:21:ec:3c: 8d:f3:3f:e2:1f:5b:0e:72:94:3b:f4:df:23:db:b8: 38:cb:92:0b:45:59:1f:27:f3:5c:d3:84:8a:8c:22: 58:f5:ed:31:fe:ec:a5:25:06:49:2a:a5:74:25:51: 7f:83:c1:56:49:33:8a:d0:ef:00:78:a3:41:39:db: e4:f0:96:04:c4:bb:ef:e3:37:c7:93:5d:fd:19:60: 93:c7:8f:1b:1f:74:e2:87:ea:99:1a:0c:96:14:bd: 59:28:85:e6:df:25:ec:50:e9:cd:a4:88:99:2a:b0: 19:78:83:83:85:69:8c:1f:fa:a5:dd:80:c9:77:00: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BE:9D:8A:2D:72:2B:B8:32:FC:F1:EF:3A:29:15:E3:3A:A7:9C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:57:40:38:ba:55:91:c8:ce:e3:3a:64:b1:35:b7:39:eb:3b: 99:8e:8b:25:a0:ad:d2:da:13:ce:1d:8a:28:07:fe:f9:b8:c2: ed:0a:d3:b3:ef:5e:cd:39:22:60:43:e2:fb:c1:61:72:c3:cd: e5:cf:07:70:11:aa:db:27:72:b4:e7:f4:ca:07:07:16:ec:08: 93:a0:29:a4:de:21:0e:9b:5f:32:75:9c:3a:12:14:73:18:5b: 5d:38:2a:7b:c9:22:e3:64:91:e7:28:b7:e9:86:50:fd:d6:de: d7:5b:52:3d:d7:53:8a:8a:d3:8d:72:c5:76:1c:46:bc:4e:57: 7f:43:0d:5b:be:38:aa:58:1b:30:0d:36:29:85:d1:c0:8f:24: 20:4e:09:d3:63:56:51:3b:56:8e:6f:f0:b8:d4:73:b6:fd:9b: aa:7b:90:17:8d:2d:46:23:a3:23:93:1a:b9:67:96:c2:4e:8d: 49:58:2a:6a:d4:f4:b4:07:4f:10:3d:81:68:4f:b3:fa:fd:1c: e1:3d:4c:be:64:2f:fd:2b:e2:56:90:ae:71:1e:77:86:97:81: c5:4d:75:c1:d3:54:fa:17:b1:27:5b:78:60:c9:8c:ab:2b:49: c5:db:c9:c9:f5:61:a0:7b:fd:4c:2b:1b:81:91:13:a3:7d:99: a7:42:6c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEfLrqcy1CtjlNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NGM0N2EyMjAtZmMyZC00YjBjLTgwOGItZmI3NGU3YmVlNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIntQlgWKGk1uQHCXY30egTDo44YZaibr0vQ lko6+YYyAzmBntwSmMQdStdWLM1iv/VjGNvWblLHVK0lyT+Q7c/6PTBJJS7/W1+X ydxS/RIWf9TzthVpWs+fVU50ZzI4639ixCVJr+2zrGeWKl1SabGYjp7QlidhzULD qazsMB7Zh2sh7DyN8z/iH1sOcpQ79N8j27g4y5ILRVkfJ/Nc04SKjCJY9e0x/uyl JQZJKqV0JVF/g8FWSTOK0O8AeKNBOdvk8JYExLvv4zfHk139GWCTx48bH3Tih+qZ GgyWFL1ZKIXm3yXsUOnNpIiZKrAZeIODhWmMH/ql3YDJdwCdfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC+nYotciu4Mvzx7zopFeM6p5x5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzJiZTg1NzAtZDFhYS0z MTk1LWIxZjMtNTJkOGU1MWQ4YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5XQDi6VZHIzuM6ZLE1tznrO5mOiyWgrdLaE84diigH/vm4wu0K07Pv Xs05ImBD4vvBYXLDzeXPB3ARqtsncrTn9MoHBxbsCJOgKaTeIQ6bXzJ1nDoSFHMY W104KnvJIuNkkecot+mGUP3W3tdbUj3XU4qK041yxXYcRrxOV39DDVu+OKpYGzAN NimF0cCPJCBOCdNjVlE7Vo5v8LjUc7b9m6p7kBeNLUYjoyOTGrlnlsJOjUlYKmrU 9LQHTxA9gWhPs/r9HOE9TL5kL/0r4laQrnEed4aXgcVNdcHTVPoXsSdbeGDJjKsr ScXbycn1YaB7/UwrG4GRE6N9madCbNc= -----END CERTIFICATE-----Generated at Thu Oct 9 01:34:21 2025 by rpki-client