$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9cc30cbe-c426-3916-89e6-51e8228b944b.roa File: 9cc30cbe-c426-3916-89e6-51e8228b944b.roa (raw, json) Hash identifier: kdRjoY8deca7VfaPABmUNBzmrzOvdWBc9KnVjypgIHU= Subject key identifier: 0C:06:B3:5E:E4:00:B7:E2:27:CA:F7:93:8C:B9:2A:72:D7:56:43:4A Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11C103F7BD45C08BB1A5C0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9cc30cbe-c426-3916-89e6-51e8228b944b.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 131.229.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c1:03:f7:bd:45:c0:8b:b1:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=5d8e49c3-9bd7-4306-8d6f-91818a2136ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b3:b1:58:59:ef:23:53:5c:af:cd:92:f2:44: 79:9f:02:19:03:5f:6a:99:ef:b5:2b:d9:a9:50:03: 36:a8:f4:6a:77:4b:aa:2b:d4:a6:18:fe:48:e6:7d: 7d:3f:11:13:82:4e:9b:83:ea:80:99:46:53:e4:13: bf:df:19:a3:ba:22:3a:6b:f5:6b:58:2a:7b:cf:c7: d1:43:1f:45:8d:e0:36:de:a6:e7:e5:7c:57:82:9f: c2:3f:42:f9:43:bc:a6:78:e1:4d:4c:5b:ac:c8:d5: 43:98:db:ae:14:6a:37:63:47:2a:0b:3f:a7:c6:a5: 64:dd:5c:94:0b:5c:90:36:a2:62:3e:2a:e8:ec:bf: 38:ec:27:91:b0:37:73:e6:a6:71:c8:01:27:f4:e5: bf:e8:82:f6:e5:58:4f:ce:c3:0e:28:04:15:44:18: 7c:e7:3d:be:aa:0d:30:66:74:63:f9:bc:2e:5d:10: 04:1f:ad:c8:57:8b:c7:b3:eb:19:98:0b:ef:a3:78: 2d:0f:e4:72:3d:83:a1:b7:5c:09:6f:20:06:04:fb: 06:5b:df:ae:ec:cf:da:f0:f4:09:1d:1e:51:37:f8: 04:f6:93:46:3a:9c:28:07:08:e7:a3:2b:bb:03:67: e7:cd:e2:88:78:f3:20:78:f1:89:3d:c8:27:e4:dd: df:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:06:B3:5E:E4:00:B7:E2:27:CA:F7:93:8C:B9:2A:72:D7:56:43:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9cc30cbe-c426-3916-89e6-51e8228b944b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:fe:3d:83:2a:c9:91:e5:55:a1:b2:73:4f:34:89:79:ba:64: 17:4a:89:03:bf:35:56:e1:8a:34:89:1a:46:09:b7:1b:85:ad: ce:58:a1:84:9b:7d:a3:35:39:c1:8a:1b:40:73:a5:b7:ea:65: b4:67:7c:a1:c0:3a:66:bf:0f:fe:5a:3e:11:1c:19:e0:1f:db: b4:04:7f:15:0f:88:9f:43:79:70:c3:84:9e:dc:e4:d9:ab:5e: 6e:93:e5:b6:85:e2:25:db:ce:e8:06:01:2f:b7:d3:31:dd:15: 1f:97:04:0b:2f:d2:25:34:b8:24:4e:56:af:21:bf:1e:ed:f9: 09:96:51:c1:be:88:68:1b:f8:aa:c8:b9:ce:1e:db:19:f8:60: 1a:c1:3d:47:86:bf:1d:38:fc:18:62:3b:aa:dd:4e:d5:03:fb: 24:b9:da:62:18:86:5a:35:26:81:04:1f:33:f1:94:81:d8:1b: e1:e1:86:7d:01:63:0f:93:18:d8:45:93:a5:fc:73:5c:d5:af: 06:66:84:1e:0b:9e:35:c6:1e:4d:8c:8d:4a:cc:14:cb:5f:f3: a5:fc:44:ab:f7:aa:06:28:ff:0e:33:cc:90:f3:1b:07:15:68: 43:21:ec:74:5d:af:2b:04:8f:ea:78:fa:1c:35:6f:90:68:e0: e9:09:e1:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcED971FwIuxpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NWQ4ZTQ5YzMtOWJkNy00MzA2LThkNmYtOTE4MThhMjEzNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bOxWFnvI1Ncr82S8kR5nwIZA19qme+1K9mp UAM2qPRqd0uqK9SmGP5I5n19PxETgk6bg+qAmUZT5BO/3xmjuiI6a/VrWCp7z8fR Qx9FjeA23qbn5XxXgp/CP0L5Q7ymeOFNTFusyNVDmNuuFGo3Y0cqCz+nxqVk3VyU C1yQNqJiPiro7L847CeRsDdz5qZxyAEn9OW/6IL25VhPzsMOKAQVRBh85z2+qg0w ZnRj+bwuXRAEH63IV4vHs+sZmAvvo3gtD+RyPYOht1wJbyAGBPsGW9+u7M/a8PQJ HR5RN/gE9pNGOpwoBwjnoyu7A2fnzeKIePMgePGJPcgn5N3f6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwGs17kALfiJ8r3k4y5KnLXVkNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvOWNjMzBjYmUtYzQyNi0z OTE2LTg5ZTYtNTFlODIyOGI5NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz+PYMqyZHlVaGyc080iXm6ZBdKiQO/NVbhijSJGkYJtxuFrc5YoYSb faM1OcGKG0BzpbfqZbRnfKHAOma/D/5aPhEcGeAf27QEfxUPiJ9DeXDDhJ7c5Nmr Xm6T5baF4iXbzugGAS+30zHdFR+XBAsv0iU0uCROVq8hvx7t+QmWUcG+iGgb+KrI uc4e2xn4YBrBPUeGvx04/BhiO6rdTtUD+yS52mIYhlo1JoEEHzPxlIHYG+Hhhn0B Yw+TGNhFk6X8c1zVrwZmhB4LnjXGHk2MjUrMFMtf86X8RKv3qgYo/w4zzJDzGwcV aEMh7HRdrysEj+p4+hw1b5Bo4OkJ4X0= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:31 2025 by rpki-client