$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5ed64f9a-65b4-39d9-a79a-64dc37f92672.roa File: 5ed64f9a-65b4-39d9-a79a-64dc37f92672.roa (raw, json) Hash identifier: /lCPPNV+mf3q3EziczPxUl6T8W+x7F3tS+gKvPH3ZVQ= Subject key identifier: B2:A6:E6:8C:E3:82:B8:BC:F5:C3:C1:84:B6:6F:FA:22:D8:33:38:25 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11D21AC03703F173A77500 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5ed64f9a-65b4-39d9-a79a-64dc37f92672.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 131.229.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d2:1a:c0:37:03:f1:73:a7:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=99ccf0f4-5819-4066-a363-3b61a9d3078f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0c:b9:1e:ba:de:3c:f5:a9:97:f9:f9:09:54: f4:81:17:ae:10:4a:ae:bb:3f:d4:19:20:29:2e:4c: b3:0d:62:5b:87:ae:3d:e9:0b:94:69:93:15:f8:7f: 93:e1:05:30:ef:fb:dc:6f:f2:14:73:61:cb:3a:a5: 93:fa:75:a3:5c:3b:8a:c2:74:d5:a1:03:e5:c4:67: 17:4b:30:f8:2a:fc:00:46:27:ab:50:80:f8:26:e0: 3b:b7:3f:a9:fd:6a:7d:1e:06:ce:07:e8:19:d7:db: 3d:2d:b8:ba:25:1b:c6:78:0c:71:18:db:df:6f:2e: cc:70:78:27:bf:a8:7d:64:ab:f5:99:a4:d7:5e:dc: f6:3c:a8:da:35:30:aa:e4:82:57:d2:68:67:a4:1f: b3:71:96:a5:b7:7c:25:ae:80:8c:f3:c7:1a:8a:0a: 79:e2:20:45:23:96:92:47:09:19:62:72:a0:c3:4f: 0f:4d:a3:ca:2f:c4:da:77:25:03:99:b1:db:14:34: d3:b5:4e:96:c9:be:83:c5:ad:bf:9c:21:f2:11:e3: 36:f1:64:37:6f:2d:3c:d2:72:fc:bd:ed:e9:0b:97: 80:de:9f:44:e6:13:e3:e0:f8:11:25:08:f0:f8:0b: c4:af:5c:55:c6:f2:5b:51:55:0b:5b:f6:d5:ff:00: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A6:E6:8C:E3:82:B8:BC:F5:C3:C1:84:B6:6F:FA:22:D8:33:38:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5ed64f9a-65b4-39d9-a79a-64dc37f92672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:af:30:98:4e:c8:6b:5f:9c:65:a7:98:42:a1:d4:05:eb:4f: e8:75:56:61:c7:c2:9a:06:25:d5:cb:13:47:18:7d:ad:21:08: d8:ca:6b:c7:3a:f4:72:27:32:61:e7:d6:5d:c1:02:cb:3a:f6: 58:de:17:8f:e1:16:b5:81:b7:0d:87:a5:66:44:a2:af:05:37: 38:96:d8:1d:d6:a8:a6:65:f9:13:de:4e:26:89:8d:ef:9d:5f: fd:1f:3a:10:c5:b0:bf:5a:d0:0f:6a:5c:00:9f:eb:96:27:6f: e5:43:c3:fe:33:46:08:c4:18:bf:21:82:93:b7:ff:52:07:71: 1f:33:ad:98:f4:ea:08:04:ab:d8:a6:9e:16:78:ef:e2:d5:67: b1:11:9a:31:6a:c0:64:ff:a6:5d:ce:08:cf:2a:0c:01:a0:6d: d7:11:5e:13:f5:af:59:d7:50:48:82:b0:9c:0a:47:76:40:38: ad:43:74:00:42:6a:8f:d5:2e:e8:d1:0a:39:26:6b:58:66:fe: 29:0e:ba:44:7f:75:ab:ec:44:f8:78:bc:73:cf:7e:40:d6:6f: e5:2b:90:56:50:23:ba:56:c6:e6:7d:0a:84:cc:df:ed:6d:78: 97:8d:34:a5:8d:a9:2d:0d:20:ba:91:ee:c4:f1:a4:5d:f5:8b: b8:25:79:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdIawDcD8XOndQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk OTljY2YwZjQtNTgxOS00MDY2LWEzNjMtM2I2MWE5ZDMwNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAy5HrrePPWpl/n5CVT0gReuEEquuz/UGSAp LkyzDWJbh6496QuUaZMV+H+T4QUw7/vcb/IUc2HLOqWT+nWjXDuKwnTVoQPlxGcX SzD4KvwARierUID4JuA7tz+p/Wp9HgbOB+gZ19s9Lbi6JRvGeAxxGNvfby7McHgn v6h9ZKv1maTXXtz2PKjaNTCq5IJX0mhnpB+zcZalt3wlroCM88caigp54iBFI5aS RwkZYnKgw08PTaPKL8TadyUDmbHbFDTTtU6Wyb6Dxa2/nCHyEeM28WQ3by080nL8 ve3pC5eA3p9E5hPj4PgRJQjw+AvEr1xVxvJbUVULW/bV/wD89QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKm5ozjgri89cPBhLZv+iLYMzglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNWVkNjRmOWEtNjViNC0z OWQ5LWE3OWEtNjRkYzM3ZjkyNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHavMJhOyGtfnGWnmEKh1AXrT+h1VmHHwpoGJdXLE0cYfa0hCNjKa8c6 9HInMmHn1l3BAss69ljeF4/hFrWBtw2HpWZEoq8FNziW2B3WqKZl+RPeTiaJje+d X/0fOhDFsL9a0A9qXACf65Ynb+VDw/4zRgjEGL8hgpO3/1IHcR8zrZj06ggEq9im nhZ47+LVZ7ERmjFqwGT/pl3OCM8qDAGgbdcRXhP1r1nXUEiCsJwKR3ZAOK1DdABC ao/VLujRCjkma1hm/ikOukR/davsRPh4vHPPfkDWb+UrkFZQI7pWxuZ9CoTM3+1t eJeNNKWNqS0NILqR7sTxpF31i7gleZ4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:25 2025 by rpki-client