$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/a36775dc-21a9-3010-a61d-2eea3636aea2.roa File: a36775dc-21a9-3010-a61d-2eea3636aea2.roa (raw, json) Hash identifier: Mlr5zP/07Ypfqt4CLef8BB6Gyw8KCbYIRr71R0G5gHQ= Subject key identifier: FB:33:CD:05:77:40:B1:A6:D2:00:7D:1E:23:FD:5F:BB:E4:BB:3D:61 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4A470FEB444FC760F68E6F00 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/a36775dc-21a9-3010-a61d-2eea3636aea2.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 203724 IP address blocks: 131.229.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:0f:eb:44:4f:c7:60:f6:8e:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=dd3c5353-5f64-456c-9d1d-8fa469f71c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:64:1f:2f:bc:25:69:1e:0a:0d:f9:ea:fc:74: b9:a7:f5:50:91:97:e2:46:31:76:01:76:27:0f:55: 6c:a7:b1:9f:02:92:06:81:08:88:13:8d:2a:6a:c0: db:e4:1c:2a:77:5b:34:74:5f:dc:0c:fd:b0:88:f4: fd:4d:4b:4e:6c:75:69:b3:c0:17:54:8e:25:28:84: d1:3c:e4:97:2d:6f:77:c3:a9:db:dc:d9:46:fa:9e: ed:ed:7e:53:d0:df:99:f8:3e:bd:c3:91:93:52:1b: 9f:92:64:9f:04:7f:61:a3:49:1b:d9:52:24:1c:e4: d9:9e:2c:0b:13:46:53:90:b0:3a:39:9e:d9:05:21: ed:17:e0:f6:91:35:7c:4f:77:39:6f:93:7b:59:11: ca:a5:5f:5d:1b:29:85:bf:59:4b:87:9e:83:6a:b8: fe:6f:f2:be:6b:d3:fb:ab:c8:86:35:f4:16:bc:ee: 18:b0:57:bb:a2:51:21:49:ce:8a:14:8b:47:02:01: e9:3c:44:03:dd:a3:ce:71:6c:d6:23:cb:cf:16:dd: 20:fd:c1:85:61:0c:24:f8:51:58:5f:7e:ba:6f:d1: f4:cf:88:22:1c:ce:b7:28:88:ef:d5:c1:16:aa:05: 04:c5:c9:22:b9:dd:45:38:4b:88:63:8c:fd:34:99: bf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:33:CD:05:77:40:B1:A6:D2:00:7D:1E:23:FD:5F:BB:E4:BB:3D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/a36775dc-21a9-3010-a61d-2eea3636aea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:9b:36:30:1b:d6:67:a8:0d:12:20:fe:5e:eb:f9:3c:1d:35: a7:ca:6f:45:f1:e1:74:11:61:11:47:e8:23:09:b1:5c:74:32: 1e:3b:d7:66:6d:bf:9d:92:2a:5b:30:2a:ed:8d:48:81:a2:2b: 0c:1f:4d:91:9e:6a:ac:dd:d9:b3:2c:8e:2a:32:cd:b7:73:52: 34:64:94:31:59:10:1f:97:fa:9f:22:71:98:fb:93:ce:71:bf: 32:11:1b:07:60:a6:39:97:5d:33:98:9d:3f:b2:97:41:cc:b1: 47:ba:d9:53:ff:61:6e:9f:66:fc:cc:93:c5:eb:7e:6d:5b:7f: 00:b5:b0:fc:a8:1e:c8:0d:b2:1f:6b:d3:05:d2:6d:f9:b3:2d: 2c:2b:55:57:b7:bc:7f:18:85:2c:c3:21:12:73:54:50:3e:60: 0b:6b:fe:fc:87:89:af:c4:8e:d1:8e:1c:46:50:b6:a7:f2:e8: db:1a:e5:77:d9:db:18:c7:50:df:f9:8d:30:04:ab:8c:71:6d: c2:4e:c8:13:78:4a:8d:2b:3b:cc:30:02:69:c0:ab:6d:98:87: 7b:a4:2b:05:19:79:d1:f6:cc:c5:de:0d:6d:6a:aa:a2:ee:13: 9a:0c:15:6c:c9:c4:93:be:96:0a:9e:d0:03:2e:14:ff:77:e9: 71:1e:95:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRw/rRE/HYPaObwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZGQzYzUzNTMtNWY2NC00NTZjLTlkMWQtOGZhNDY5ZjcxYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWQfL7wlaR4KDfnq/HS5p/VQkZfiRjF2AXYn D1Vsp7GfApIGgQiIE40qasDb5Bwqd1s0dF/cDP2wiPT9TUtObHVps8AXVI4lKITR POSXLW93w6nb3NlG+p7t7X5T0N+Z+D69w5GTUhufkmSfBH9ho0kb2VIkHOTZniwL E0ZTkLA6OZ7ZBSHtF+D2kTV8T3c5b5N7WRHKpV9dGymFv1lLh56Darj+b/K+a9P7 q8iGNfQWvO4YsFe7olEhSc6KFItHAgHpPEQD3aPOcWzWI8vPFt0g/cGFYQwk+FFY X366b9H0z4giHM63KIjv1cEWqgUExckiud1FOEuIY4z9NJm/BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPszzQV3QLGm0gB9HiP9X7vkuz1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYTM2Nzc1ZGMtMjFhOS0z MDEwLWE2MWQtMmVlYTM2MzZhZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWbNjAb1meoDRIg/l7r+TwdNafKb0Xx4XQRYRFH6CMJsVx0Mh4712Zt v52SKlswKu2NSIGiKwwfTZGeaqzd2bMsjioyzbdzUjRklDFZEB+X+p8icZj7k85x vzIRGwdgpjmXXTOYnT+yl0HMsUe62VP/YW6fZvzMk8Xrfm1bfwC1sPyoHsgNsh9r 0wXSbfmzLSwrVVe3vH8YhSzDIRJzVFA+YAtr/vyHia/EjtGOHEZQtqfy6Nsa5XfZ 2xjHUN/5jTAEq4xxbcJOyBN4So0rO8wwAmnAq22Yh3ukKwUZedH2zMXeDW1qqqLu E5oMFWzJxJO+lgqe0AMuFP936XEelSM= -----END CERTIFICATE-----Generated at Thu Oct 9 01:38:30 2025 by rpki-client