$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9bd0a75d-d2e2-328e-a56f-f4da2ed28532.roa File: 9bd0a75d-d2e2-328e-a56f-f4da2ed28532.roa (raw, json) Hash identifier: GJQ5OoWfSJiylEszpyc0k+1fkKBWipqkU85R2TE/2mU= Subject key identifier: F3:C0:8F:F6:AF:68:FE:6D:C7:1F:30:00:9F:53:DD:30:BE:D4:1B:49 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11F28BB85280D5D1B53E40 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9bd0a75d-d2e2-328e-a56f-f4da2ed28532.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 131.229.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:f2:8b:b8:52:80:d5:d1:b5:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=a4e485f8-8d7f-47d9-8dfc-603b7219539a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:01:e6:b3:a2:48:0a:cc:35:64:4c:4c:72:3b: 5d:14:c3:80:a2:07:08:4a:93:3a:df:b3:43:85:2b: 22:12:cf:1b:9c:02:fa:ab:6d:08:e4:8e:f2:53:6d: 41:fa:83:86:fd:0f:f0:bd:d5:83:12:2b:1c:d4:7b: 44:0e:bd:9d:17:b3:86:23:aa:cc:ce:cd:9f:ad:09: 5d:94:15:80:b9:5b:16:62:06:27:8d:f9:87:c6:e1: 0b:09:c5:db:a7:5b:36:a3:c9:ee:45:6c:49:5b:de: c6:59:aa:20:14:45:86:46:85:82:4c:d7:0c:80:31: 4a:df:4e:fa:c7:86:55:ca:0e:98:9f:88:a3:87:14: 37:6b:e6:e6:70:95:6d:4a:cf:0b:f3:1c:e7:ae:94: 07:db:d3:21:f9:34:98:53:bf:06:43:17:bd:25:20: 9c:01:57:6a:27:ef:a3:bb:7e:15:f2:5e:41:c0:8e: 7a:9c:f5:8a:8b:e1:53:b2:78:cb:6f:73:5a:30:15: 48:ec:12:03:44:f0:56:7c:a2:08:f1:c6:e9:19:8b: 22:34:54:e2:1d:4f:e1:d7:c9:9e:a5:08:3d:15:b1: f5:f6:74:57:24:6c:01:2b:13:c3:28:a2:8d:2c:63: a1:12:6f:22:a3:7c:66:6d:8f:69:a0:24:b3:3b:54: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C0:8F:F6:AF:68:FE:6D:C7:1F:30:00:9F:53:DD:30:BE:D4:1B:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9bd0a75d-d2e2-328e-a56f-f4da2ed28532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:bb:b8:06:70:fa:b7:9d:82:69:50:b1:4f:64:d8:cc:6a:b8: 63:c9:26:08:0d:06:e9:67:f4:7a:b7:8e:3b:c0:7f:b0:db:d5: f4:40:86:64:7b:66:1a:d6:2b:f2:98:5a:a9:21:bd:58:d9:cb: e1:2b:ad:a7:16:73:55:a0:25:82:9e:89:8f:e2:21:4c:a1:bd: ca:8a:92:83:fd:5c:d4:b7:07:da:33:7a:0a:75:9f:e3:85:ec: 54:48:31:10:97:3d:bc:06:a6:d2:dc:43:6d:ed:ff:e9:a8:d1: c6:24:c2:d4:ce:bc:e2:e8:64:54:1d:78:09:60:ee:33:19:b1: fb:27:da:6d:42:e5:85:7b:46:53:12:ae:ce:b0:ef:87:6a:3f: b5:17:96:2f:eb:ea:c2:ce:87:95:9b:9d:f2:76:7e:f0:31:b2: 3c:4f:94:45:f8:0c:ed:21:c5:7f:5c:86:19:21:a6:a2:e1:27: cb:64:84:c1:f6:a6:d5:27:47:93:5b:c4:48:67:2e:ef:87:8c: bb:a1:0a:64:55:2f:53:ee:ee:0c:8d:84:5f:18:b1:d2:28:5e: af:3a:87:ba:4b:9d:b0:3d:b1:40:74:1c:de:4e:5d:08:b0:d7: 81:d1:86:52:62:94:fc:64:33:1e:72:b7:3c:ce:bb:94:55:bc: 2d:2d:bf:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEfKLuFKA1dG1PkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YTRlNDg1ZjgtOGQ3Zi00N2Q5LThkZmMtNjAzYjcyMTk1MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAHms6JICsw1ZExMcjtdFMOAogcISpM637ND hSsiEs8bnAL6q20I5I7yU21B+oOG/Q/wvdWDEisc1HtEDr2dF7OGI6rMzs2frQld lBWAuVsWYgYnjfmHxuELCcXbp1s2o8nuRWxJW97GWaogFEWGRoWCTNcMgDFK3076 x4ZVyg6Yn4ijhxQ3a+bmcJVtSs8L8xznrpQH29Mh+TSYU78GQxe9JSCcAVdqJ++j u34V8l5BwI56nPWKi+FTsnjLb3NaMBVI7BIDRPBWfKII8cbpGYsiNFTiHU/h18me pQg9FbH19nRXJGwBKxPDKKKNLGOhEm8io3xmbY9poCSzO1Qg/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPAj/avaP5txx8wAJ9T3TC+1BtJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvOWJkMGE3NWQtZDJlMi0z MjhlLWE1NmYtZjRkYTJlZDI4NTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB67uAZw+redgmlQsU9k2MxquGPJJggNBuln9Hq3jjvAf7Db1fRAhmR7 ZhrWK/KYWqkhvVjZy+ErracWc1WgJYKeiY/iIUyhvcqKkoP9XNS3B9ozegp1n+OF 7FRIMRCXPbwGptLcQ23t/+mo0cYkwtTOvOLoZFQdeAlg7jMZsfsn2m1C5YV7RlMS rs6w74dqP7UXli/r6sLOh5WbnfJ2fvAxsjxPlEX4DO0hxX9chhkhpqLhJ8tkhMH2 ptUnR5NbxEhnLu+HjLuhCmRVL1Pu7gyNhF8YsdIoXq86h7pLnbA9sUB0HN5OXQiw 14HRhlJilPxkMx5ytzzOu5RVvC0tv5o= -----END CERTIFICATE-----Generated at Thu Oct 9 01:09:47 2025 by rpki-client