$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/4b60a8c5-a562-3e71-ae2c-6d9e0da41dff.roa File: 4b60a8c5-a562-3e71-ae2c-6d9e0da41dff.roa (raw, json) Hash identifier: 2sMnJedta7NszUtwgx/lkzIwolhNecj/i9pM0fDLAt4= Subject key identifier: FE:0F:A3:21:97:1E:78:50:C6:84:6C:93:88:56:47:3E:50:21:4B:17 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11F488BF83784DA42D0680 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/4b60a8c5-a562-3e71-ae2c-6d9e0da41dff.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 131.229.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:f4:88:bf:83:78:4d:a4:2d:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=6a84900d-f12b-4925-884d-b681f3bcdd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9a:59:75:b1:32:c8:fb:70:d5:bc:a2:45:e5: 8b:bd:83:36:b7:64:fd:34:c4:10:d2:ad:a2:dd:d9: 85:d3:b1:af:6e:db:43:9a:2f:8e:f5:48:00:b1:5b: e4:79:d7:8d:a0:bf:ec:04:76:80:12:57:61:2e:0b: 08:3b:ec:a0:64:a6:cb:f0:16:9b:f1:ec:e6:fe:80: 33:47:e4:19:db:c2:db:6c:b1:fb:0b:a2:b0:84:e7: 89:30:3a:4f:f0:52:81:ad:4d:86:8c:84:1e:78:c1: b1:be:ac:f5:32:00:b5:28:fe:c2:b7:ca:9a:47:80: 02:2d:a7:e2:12:e6:11:5a:de:89:8d:04:de:0f:ec: 8b:02:98:e1:cc:49:a4:fe:72:d9:9e:0b:83:da:b1: 56:83:93:6b:8c:53:5f:5f:0b:8d:1d:72:bb:25:51: 78:31:4c:9b:dd:16:0a:30:14:26:7e:26:3a:b6:5d: f0:0c:51:c9:fb:aa:20:21:65:62:14:60:06:8e:37: 76:73:e1:45:fa:61:6c:ab:88:b1:c8:18:ed:0e:30: d7:2b:4c:7a:6f:62:5a:0e:6d:28:b1:4c:66:c2:42: af:fa:5a:97:04:ad:90:ea:ce:89:5f:52:9b:6c:f7: 77:4f:79:cd:2e:fc:2f:ae:e6:5d:f1:62:3c:4b:58: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0F:A3:21:97:1E:78:50:C6:84:6C:93:88:56:47:3E:50:21:4B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/4b60a8c5-a562-3e71-ae2c-6d9e0da41dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d0:e2:12:a9:d4:a5:2a:2c:1b:f7:4b:f8:3e:cc:aa:3a:0b: a5:fc:12:0d:e9:ea:ed:c7:23:fa:9a:ab:b4:e8:fb:d7:eb:71: f4:ad:e3:c6:22:aa:4b:e3:e4:41:df:f7:ef:8b:5e:48:53:30: 50:e8:a7:f8:dd:4b:77:c4:23:0b:db:c4:46:1d:3b:04:2f:4a: 76:72:b1:fb:31:32:58:e4:07:26:95:28:ea:24:50:7b:c5:56: 34:54:55:cd:5c:8d:70:8b:26:81:48:17:bf:dd:79:1a:a0:e5: d7:c2:07:67:a0:92:f9:1c:3c:46:a6:ce:04:4d:c2:a3:2b:ce: 68:15:bc:d9:81:c3:fc:d4:19:44:c7:7a:cf:ec:96:9d:89:8f: 0d:f3:6a:3f:d9:d9:80:9e:1e:0f:68:fc:d4:9e:52:52:7c:e4: 71:48:4c:fd:92:df:50:4f:dd:df:f7:75:9e:d7:da:44:a2:2f: 84:f2:12:60:19:c5:6c:3c:f8:a5:05:1a:60:df:b0:a9:64:56: b6:a0:18:77:b4:ba:e6:3c:10:0c:b8:fe:3f:2e:fb:1b:87:33: 89:d9:42:e5:cf:34:2b:3d:ee:35:41:a8:8d:5d:76:8d:9f:22: 42:57:01:70:3f:88:a8:f9:41:a5:9a:4b:1f:de:fc:13:ee:36: 32:a1:fe:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEfSIv4N4TaQtBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NmE4NDkwMGQtZjEyYi00OTI1LTg4NGQtYjY4MWYzYmNkZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhppZdbEyyPtw1byiReWLvYM2t2T9NMQQ0q2i 3dmF07GvbttDmi+O9UgAsVvkedeNoL/sBHaAEldhLgsIO+ygZKbL8Bab8ezm/oAz R+QZ28LbbLH7C6KwhOeJMDpP8FKBrU2GjIQeeMGxvqz1MgC1KP7Ct8qaR4ACLafi EuYRWt6JjQTeD+yLApjhzEmk/nLZnguD2rFWg5NrjFNfXwuNHXK7JVF4MUyb3RYK MBQmfiY6tl3wDFHJ+6ogIWViFGAGjjd2c+FF+mFsq4ixyBjtDjDXK0x6b2JaDm0o sUxmwkKv+lqXBK2Q6s6JX1KbbPd3T3nNLvwvruZd8WI8S1hYNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4PoyGXHnhQxoRsk4hWRz5QIUsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNGI2MGE4YzUtYTU2Mi0z ZTcxLWFlMmMtNmQ5ZTBkYTQxZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfQ4hKp1KUqLBv3S/g+zKo6C6X8Eg3p6u3HI/qaq7To+9frcfSt48Yi qkvj5EHf9++LXkhTMFDop/jdS3fEIwvbxEYdOwQvSnZysfsxMljkByaVKOokUHvF VjRUVc1cjXCLJoFIF7/deRqg5dfCB2egkvkcPEamzgRNwqMrzmgVvNmBw/zUGUTH es/slp2Jjw3zaj/Z2YCeHg9o/NSeUlJ85HFITP2S31BP3d/3dZ7X2kSiL4TyEmAZ xWw8+KUFGmDfsKlkVragGHe0uuY8EAy4/j8u+xuHM4nZQuXPNCs97jVBqI1ddo2f IkJXAXA/iKj5QaWaSx/e/BPuNjKh/iE= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:51 2025 by rpki-client