$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ba2a6430-d0f1-3341-bb52-90eb72839b2e.roa File: ba2a6430-d0f1-3341-bb52-90eb72839b2e.roa (raw, json) Hash identifier: EgD5Otwmg468ro/8fTj9ID5c8NgKNrVEhrfSr+h5WGg= Subject key identifier: 41:AD:2E:C3:6A:A4:91:4C:1F:F3:A6:F5:AC:90:DE:4B:8A:DE:4F:D2 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11D31A990E1D7874E8BCC0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ba2a6430-d0f1-3341-bb52-90eb72839b2e.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203724 IP address blocks: 131.229.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d3:1a:99:0e:1d:78:74:e8:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=89bbcd0f-8ac3-4f93-b5db-6480e3555e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:bb:5e:cd:e7:1f:31:76:81:9a:15:a1:2d: a3:83:79:52:7b:3b:c4:7e:0b:a3:21:09:73:d8:15: d2:fd:43:3a:1b:67:65:38:ea:d0:7a:88:9c:33:82: 8b:f6:59:c6:d5:4a:dc:7b:6c:47:42:07:52:5c:02: 57:0e:7b:2f:d5:6d:33:eb:a4:1a:7f:de:85:4c:46: 1c:8e:6a:4c:85:39:2d:ea:6f:f6:c5:2a:ad:91:d2: 30:dc:d3:c4:1f:59:40:23:36:83:b4:4f:16:9a:20: 96:75:a2:4a:1c:eb:2c:03:87:df:95:3d:3c:f2:37: a5:41:43:9c:dc:23:82:32:b6:cf:ec:7c:03:31:88: f1:bd:40:17:9d:ed:33:57:f5:84:53:5a:77:36:4e: 57:73:7d:41:00:54:cc:54:07:29:23:36:2b:b3:66: f1:86:85:7c:43:49:d1:db:f8:a6:4d:8a:af:80:fd: 41:50:7a:78:a4:ba:db:0e:1b:d1:d3:b5:b0:dc:9d: d4:8e:03:f0:c5:8f:fc:52:37:b4:ca:ac:46:dc:23: e7:fc:7a:bf:7a:43:f2:d6:3d:61:8e:19:93:0d:64: 0b:0d:80:8c:44:e8:d6:26:c3:9a:a7:cf:8a:37:0b: 30:c0:6a:f4:08:85:88:ca:a9:73:33:45:01:85:e4: ef:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AD:2E:C3:6A:A4:91:4C:1F:F3:A6:F5:AC:90:DE:4B:8A:DE:4F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ba2a6430-d0f1-3341-bb52-90eb72839b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2b:c2:73:7a:55:04:d5:ec:e4:5b:fa:aa:89:6b:03:2f:88: a8:d0:2d:c1:70:bb:59:15:f2:ca:27:12:26:59:21:8d:5b:fe: a9:75:d4:92:75:f2:3d:0a:de:2f:d7:a0:75:6c:07:82:b3:fb: 1f:57:2a:73:a8:86:83:8a:bc:e9:a0:4d:de:4c:57:4b:24:26: c2:97:81:7e:2d:81:1a:e5:3c:bb:58:d1:91:f7:e9:90:c2:cb: f3:32:5b:95:41:ae:89:ca:76:db:53:05:5b:67:d9:e4:a2:56: bd:0b:97:e0:b2:9d:fc:0b:39:62:56:a1:d7:ad:b8:bd:9a:72: f2:85:78:cf:39:59:81:39:a2:41:1f:cc:f7:29:86:83:98:60: 9e:83:b7:30:80:fc:0b:95:85:05:87:55:2d:01:7d:75:90:b8: a3:0a:d5:f8:35:e6:8d:76:dc:37:98:f6:33:44:3b:7f:ca:8e: 56:15:7a:a1:f0:46:21:72:db:98:f1:c9:7c:78:a3:0a:ff:d6: 15:b0:ec:15:b0:d3:ac:f4:6e:b4:7a:fd:7d:06:b6:7e:d6:99: 19:46:9f:4f:5b:c8:a7:75:88:a8:67:86:19:47:d7:b5:ac:7e: 09:cc:c8:33:b7:0c:92:c2:46:4f:6e:06:c3:49:56:0b:fa:62: ab:d9:5b:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdMamQ4deHTovMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ODliYmNkMGYtOGFjMy00ZjkzLWI1ZGItNjQ4MGUzNTU1ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyW7Xs3nHzF2gZoVoS2jg3lSezvEfgujIQlz 2BXS/UM6G2dlOOrQeoicM4KL9lnG1Urce2xHQgdSXAJXDnsv1W0z66Qaf96FTEYc jmpMhTkt6m/2xSqtkdIw3NPEH1lAIzaDtE8WmiCWdaJKHOssA4fflT088jelQUOc 3COCMrbP7HwDMYjxvUAXne0zV/WEU1p3Nk5Xc31BAFTMVAcpIzYrs2bxhoV8Q0nR 2/imTYqvgP1BUHp4pLrbDhvR07Ww3J3UjgPwxY/8Uje0yqxG3CPn/Hq/ekPy1j1h jhmTDWQLDYCMROjWJsOap8+KNwswwGr0CIWIyqlzM0UBheTvNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGtLsNqpJFMH/Om9ayQ3kuK3k/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYmEyYTY0MzAtZDBmMS0z MzQxLWJiNTItOTBlYjcyODM5YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADErwnN6VQTV7ORb+qqJawMviKjQLcFwu1kV8sonEiZZIY1b/ql11JJ1 8j0K3i/XoHVsB4Kz+x9XKnOohoOKvOmgTd5MV0skJsKXgX4tgRrlPLtY0ZH36ZDC y/MyW5VBronKdttTBVtn2eSiVr0Ll+CynfwLOWJWodetuL2acvKFeM85WYE5okEf zPcphoOYYJ6DtzCA/AuVhQWHVS0BfXWQuKMK1fg15o123DeY9jNEO3/KjlYVeqHw RiFy25jxyXx4owr/1hWw7BWw06z0brR6/X0Gtn7WmRlGn09byKd1iKhnhhlH17Ws fgnMyDO3DJLCRk9uBsNJVgv6YqvZW5w= -----END CERTIFICATE-----Generated at Thu Oct 9 01:33:37 2025 by rpki-client