$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/47dcae71-2eb6-3842-8c38-35739e5a28e3.roa File: 47dcae71-2eb6-3842-8c38-35739e5a28e3.roa (raw, json) Hash identifier: mycaoOrH3OkTTDHsdvK/QOX6T0U8jQkQZWqWjbkbSG0= Subject key identifier: B5:6C:1A:D0:AF:0B:58:F1:F6:2B:21:10:41:AA:BC:3F:DF:F1:4D:75 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11C11F1029AC56BA55CC20 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/47dcae71-2eb6-3842-8c38-35739e5a28e3.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 131.229.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c1:1f:10:29:ac:56:ba:55:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=3d5694f9-bfdc-4cb9-9ecb-1a1eb6ad2612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:0c:9c:66:ec:3d:c7:c7:49:b9:c5:46:00: b1:6c:eb:d5:7b:9a:78:d0:3b:07:af:bf:d6:87:da: 45:2a:08:b5:65:53:4f:68:c4:7c:4a:52:21:cb:17: e1:80:fd:c6:a8:9c:70:09:60:01:bd:e9:32:04:72: 63:6a:f9:3f:91:37:be:6c:2a:9b:ad:a8:87:0e:55: 3a:3f:ab:91:19:80:e8:19:ac:d0:6e:b0:5f:43:ae: ed:c6:07:a9:39:7a:10:01:d9:58:46:9d:e7:0b:53: a1:57:6a:9f:04:e5:b9:54:d3:e0:e4:03:7c:da:7d: e0:2e:b9:13:a4:bb:26:8a:bf:d3:74:b3:f5:d0:fd: c0:f9:85:eb:d6:6c:76:31:a0:6e:40:d4:11:85:b4: a3:b9:aa:01:6e:ca:2f:61:85:21:5c:d9:3a:ab:8b: 15:b3:c2:88:2f:91:58:cb:47:07:f8:43:6b:6d:f4: 02:56:9b:c3:4c:a7:40:a1:3c:71:5a:f5:73:3f:4c: 3c:9a:70:1c:6c:9e:56:60:f4:21:64:e4:05:3b:f9: 6d:69:b3:f8:54:50:2f:22:d3:88:03:c1:10:ba:28: cf:81:2f:7f:1a:f5:7d:47:20:e4:96:f8:5c:cc:5b: 55:ff:6e:6b:2c:61:3c:dd:21:4e:1a:e3:3c:be:0d: a7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6C:1A:D0:AF:0B:58:F1:F6:2B:21:10:41:AA:BC:3F:DF:F1:4D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/47dcae71-2eb6-3842-8c38-35739e5a28e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e9:14:75:cd:d0:08:51:07:96:11:88:1d:60:df:ae:d9:10: d8:e9:90:da:e1:ff:b6:31:b7:1a:72:90:e4:f6:eb:f1:9d:fa: d0:d8:bd:c9:bd:43:c0:49:3f:ca:3b:a3:ca:28:f7:0c:43:f8: e5:9a:3a:ae:e2:be:65:42:7c:ab:0c:38:3d:86:b4:94:c4:ef: 97:f8:48:4d:e6:58:73:fb:b6:93:2c:24:42:78:ae:56:69:e9: 60:60:61:71:7a:95:d9:5a:64:9f:17:50:99:90:e4:f7:cb:56: 25:c2:d6:bc:ff:6e:41:63:6b:41:9a:67:70:66:f8:88:f8:87: 3f:55:ff:df:ee:d7:e0:04:e8:5a:22:04:cf:94:08:16:3c:49: a3:3c:30:09:d4:ed:39:66:cc:54:cd:c7:e8:a6:a1:da:5a:fc: b1:28:f4:7f:4b:d1:8e:59:78:ae:33:a9:aa:da:e1:b4:db:7e: ae:c6:30:60:c2:1d:80:2a:c4:fa:5a:cc:90:51:1a:a2:b0:de: bf:2b:00:91:8b:90:03:c6:c4:ab:0c:e7:49:07:26:84:c9:77: 6d:b4:04:ad:1a:dd:1b:f4:2e:37:0c:5a:00:52:e3:9f:17:8d: 55:26:d8:e9:7e:5e:3a:16:64:65:46:f4:da:30:1f:d5:ed:b9: d3:fa:31:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcEfECmsVrpVzCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk M2Q1Njk0ZjktYmZkYy00Y2I5LTllY2ItMWExZWI2YWQyNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2IMnGbsPcfHSbnFRgCxbOvVe5p40DsHr7/W h9pFKgi1ZVNPaMR8SlIhyxfhgP3GqJxwCWABvekyBHJjavk/kTe+bCqbraiHDlU6 P6uRGYDoGazQbrBfQ67txgepOXoQAdlYRp3nC1OhV2qfBOW5VNPg5AN82n3gLrkT pLsmir/TdLP10P3A+YXr1mx2MaBuQNQRhbSjuaoBbsovYYUhXNk6q4sVs8KIL5FY y0cH+ENrbfQCVpvDTKdAoTxxWvVzP0w8mnAcbJ5WYPQhZOQFO/ltabP4VFAvItOI A8EQuijPgS9/GvV9RyDklvhczFtV/25rLGE83SFOGuM8vg2ndQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVsGtCvC1jx9ishEEGqvD/f8U11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNDdkY2FlNzEtMmViNi0z ODQyLThjMzgtMzU3MzllNWEyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDpFHXN0AhRB5YRiB1g367ZENjpkNrh/7YxtxpykOT26/Gd+tDYvcm9 Q8BJP8o7o8oo9wxD+OWaOq7ivmVCfKsMOD2GtJTE75f4SE3mWHP7tpMsJEJ4rlZp 6WBgYXF6ldlaZJ8XUJmQ5PfLViXC1rz/bkFja0GaZ3Bm+Ij4hz9V/9/u1+AE6Foi BM+UCBY8SaM8MAnU7TlmzFTNx+imodpa/LEo9H9L0Y5ZeK4zqara4bTbfq7GMGDC HYAqxPpazJBRGqKw3r8rAJGLkAPGxKsM50kHJoTJd220BK0a3Rv0LjcMWgBS458X jVUm2Ol+XjoWZGVG9NowH9XtudP6MRw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:36 2025 by rpki-client