$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7153a6e-9513-3ac8-8610-53d4d3e0b912.roa File: b7153a6e-9513-3ac8-8610-53d4d3e0b912.roa (raw, json) Hash identifier: QF7LwSz33egcLkuJpzM9LGH00s8PUEttsLlAQm4O02w= Subject key identifier: F1:63:0B:4F:80:3E:0F:7B:46:7A:F6:D0:60:02:2C:EC:CA:F1:D9:16 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11D2E1AFE1E0C005627C40 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7153a6e-9513-3ac8-8610-53d4d3e0b912.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203724 IP address blocks: 131.229.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d2:e1:af:e1:e0:c0:05:62:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=3d1aadfb-d4f4-4e34-9a3b-4accbc6c04c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:fb:34:01:d8:0e:74:84:4f:53:c9:7c:90: f6:dd:31:55:f3:3b:ff:ba:38:3f:89:4d:a8:96:92: 4b:ae:43:9d:44:89:88:c6:89:ac:d9:3d:fc:c1:1b: 89:c7:92:47:64:96:17:4b:c3:07:84:80:ca:b2:a1: 3f:cd:d5:9c:5e:4d:59:34:b7:a9:da:1b:d6:c0:a4: 30:ee:86:f8:4d:5a:8a:92:6b:be:19:39:0d:c2:3a: e5:8f:58:40:06:54:03:79:5f:3d:3c:83:5b:ef:1c: 69:23:25:fd:c3:80:40:08:9a:f1:58:d5:1e:07:42: 85:34:d8:6e:06:8c:b5:60:8a:6e:ea:ca:e5:1b:26: e7:ed:2c:1c:0d:a1:2c:1a:28:ed:ed:df:41:b2:e6: bb:de:b0:64:77:37:a5:30:54:91:5d:ee:78:56:a5: c8:89:86:04:1f:d4:54:85:88:97:9b:6d:53:41:c7: 85:5a:af:a3:c4:3d:dc:f4:9c:57:96:fe:e9:e5:67: 32:47:37:a1:29:6c:db:5e:0c:b3:dd:da:b0:68:bb: 19:d1:f8:d9:f8:8d:64:05:6a:3f:98:4c:da:4d:f2: 31:91:8f:a2:47:64:fd:0f:b2:f2:af:fc:ac:12:7f: 09:b5:c1:72:d6:82:53:4e:69:ab:37:b7:45:fe:9a: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:63:0B:4F:80:3E:0F:7B:46:7A:F6:D0:60:02:2C:EC:CA:F1:D9:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7153a6e-9513-3ac8-8610-53d4d3e0b912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:06:0a:ea:a2:fc:2a:6b:73:eb:47:b5:74:d7:6b:df:74:ea: e3:e4:51:24:e0:8a:a5:73:96:97:74:6e:b3:c2:a7:60:3c:5a: 10:64:d5:a6:32:65:fb:fc:36:7f:2d:d6:d7:36:c4:8d:a9:e3: 0f:8d:f9:c4:f7:c6:ee:a5:62:de:52:9c:88:e7:6f:0d:78:7e: 94:b7:a5:a3:8b:d2:79:21:f8:da:99:77:ac:a5:7e:24:9a:a0: e7:84:dc:7a:d0:d5:04:cc:59:88:6d:34:98:df:5d:a2:e4:a2: 89:40:ac:33:fa:9b:d1:08:ec:a5:ec:4f:08:21:bd:c2:ff:aa: eb:7c:d4:b3:f9:cd:1b:cc:73:48:7d:81:1b:e7:cf:56:42:eb: bc:0e:15:77:b6:43:49:24:df:9c:f9:9f:ed:5e:4a:5f:bf:d1: f8:4f:02:ec:9d:eb:b2:7d:aa:07:13:6d:03:72:44:1f:5c:35: 08:7b:db:21:2a:ae:63:bc:0e:6c:5a:b8:3a:13:03:24:71:ee: d5:ea:60:c6:af:5b:68:ac:14:63:e9:4c:27:89:cf:e3:5f:63: 64:04:9c:fc:fa:3c:15:ea:ee:41:36:5a:a0:2b:e0:4e:20:41: 0e:f3:76:94:c8:bc:db:f5:c2:da:a6:7c:3d:d0:cd:3e:34:18: 27:94:72:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdLhr+HgwAVifEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk M2QxYWFkZmItZDRmNC00ZTM0LTlhM2ItNGFjY2JjNmMwNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQL7NAHYDnSET1PJfJD23TFV8zv/ujg/iU2o lpJLrkOdRImIxoms2T38wRuJx5JHZJYXS8MHhIDKsqE/zdWcXk1ZNLep2hvWwKQw 7ob4TVqKkmu+GTkNwjrlj1hABlQDeV89PINb7xxpIyX9w4BACJrxWNUeB0KFNNhu Boy1YIpu6srlGybn7SwcDaEsGijt7d9Bsua73rBkdzelMFSRXe54VqXIiYYEH9RU hYiXm21TQceFWq+jxD3c9JxXlv7p5WcyRzehKWzbXgyz3dqwaLsZ0fjZ+I1kBWo/ mEzaTfIxkY+iR2T9D7Lyr/ysEn8JtcFy1oJTTmmrN7dF/ppViQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFjC0+APg97Rnr20GACLOzK8dkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYjcxNTNhNmUtOTUxMy0z YWM4LTg2MTAtNTNkNGQzZTBiOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8GCuqi/Cprc+tHtXTXa9906uPkUSTgiqVzlpd0brPCp2A8WhBk1aYy Zfv8Nn8t1tc2xI2p4w+N+cT3xu6lYt5SnIjnbw14fpS3paOL0nkh+NqZd6ylfiSa oOeE3HrQ1QTMWYhtNJjfXaLkoolArDP6m9EI7KXsTwghvcL/qut81LP5zRvMc0h9 gRvnz1ZC67wOFXe2Q0kk35z5n+1eSl+/0fhPAuyd67J9qgcTbQNyRB9cNQh72yEq rmO8DmxauDoTAyRx7tXqYMavW2isFGPpTCeJz+NfY2QEnPz6PBXq7kE2WqAr4E4g QQ7zdpTIvNv1wtqmfD3QzT40GCeUcg0= -----END CERTIFICATE-----Generated at Thu Oct 9 01:38:29 2025 by rpki-client