$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e1948923-d381-39a7-ab5c-51935c3a0ac9.roa File: e1948923-d381-39a7-ab5c-51935c3a0ac9.roa (raw, json) Hash identifier: iXgIrFP+pYUZzl+gAIsq+B9xI31AfIB+PSNnMyDdZu0= Subject key identifier: 93:17:28:C4:52:87:55:93:9B:0D:9F:98:91:4F:D4:23:C3:C0:FF:C7 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B1806F722AD7C35C17835A038 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e1948923-d381-39a7-ab5c-51935c3a0ac9.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 131.229.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:f7:22:ad:7c:35:c1:78:35:a0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ddaea485-de8b-4346-8227-9cdaddacb418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:a5:d4:4d:db:60:91:6f:4a:84:d3:02:ee: f5:22:94:89:2d:fc:ba:84:31:34:3c:56:2a:0e:af: e4:94:de:6b:d0:a7:b8:03:f1:7a:2b:fd:33:46:4c: ce:8e:21:82:c2:b5:aa:0f:5e:b9:ff:06:12:f8:70: c2:c7:29:ca:d5:63:b1:b6:86:22:71:b1:53:71:d3: bb:39:5b:7e:c5:32:a2:dd:40:b2:50:a3:4c:c3:c9: 43:01:79:95:e4:de:03:75:fe:dc:03:01:c9:2e:c7: 70:7b:57:72:0b:98:0b:5c:aa:78:3f:aa:a7:4e:b2: d5:05:5f:ac:52:85:a6:8a:ee:a6:cb:ec:1a:db:ca: b3:ff:0e:a4:83:bd:25:ee:d7:d5:9e:bf:5e:07:af: 02:2d:bf:8d:22:81:9c:4f:5a:e1:73:23:17:e4:bf: c5:0f:35:75:11:ce:47:be:58:bf:8f:aa:c9:cd:73: cd:9c:e1:c4:d1:a4:cf:c7:70:74:e2:30:30:d1:1e: 0d:7a:b4:89:6f:37:e6:0d:15:4f:b3:c7:06:f9:b3: d3:4a:17:25:7e:df:dd:62:a0:2b:60:58:7f:b5:07: ab:ff:f3:8c:5e:54:6e:fd:bb:37:d8:ed:33:3c:41: be:50:ca:27:53:b5:ee:0d:23:fc:f9:de:d7:9c:50: 85:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:17:28:C4:52:87:55:93:9B:0D:9F:98:91:4F:D4:23:C3:C0:FF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e1948923-d381-39a7-ab5c-51935c3a0ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:b7:17:ee:f3:90:6d:0c:22:38:1e:8e:04:56:79:11:41:73: d8:06:d7:55:6b:a4:a6:60:36:5e:4c:62:73:00:f1:de:f5:89: fc:a5:66:7f:f7:8c:55:00:55:5e:30:81:c2:fa:8d:45:21:a3: ee:75:0b:e3:40:e4:46:b1:4c:00:a6:29:38:7f:28:0d:bd:e4: 64:47:f0:26:ec:40:2b:06:f0:3b:19:bb:25:49:43:c4:07:f9: 03:f2:3e:f4:90:8c:f0:24:59:38:73:e5:12:73:ae:78:fe:03: f4:cf:64:fc:ba:6a:20:d2:ec:94:02:e8:5c:0f:a1:ab:1e:b7: 76:d7:0d:da:79:0a:90:f3:33:86:64:e9:c4:6c:6c:2c:db:bf: 8c:9a:b5:a2:e1:e6:4d:db:e6:1e:92:c3:80:70:c1:54:86:42: 14:eb:80:26:36:6e:f5:3e:e5:cf:c5:34:48:78:1a:84:04:6d: 46:fc:c0:b6:07:40:92:04:b5:35:b6:86:43:61:04:c0:d8:7b: be:d9:d3:93:2e:cf:fc:41:ef:95:84:4e:4e:3a:d8:3e:5f:73: 78:8a:54:28:4b:65:30:a4:5b:58:5a:86:0c:f2:ea:eb:9c:9d: 60:e7:8d:b2:73:7b:5c:3d:34:a0:0f:89:a9:6f:93:a5:0f:8a: ad:58:9c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvcirXw1wXg1oDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGRhZWE0ODUtZGU4Yi00MzQ2LTgyMjctOWNkYWRkYWNiNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Gl1E3bYJFvSoTTAu71IpSJLfy6hDE0PFYq Dq/klN5r0Ke4A/F6K/0zRkzOjiGCwrWqD165/wYS+HDCxynK1WOxtoYicbFTcdO7 OVt+xTKi3UCyUKNMw8lDAXmV5N4Ddf7cAwHJLsdwe1dyC5gLXKp4P6qnTrLVBV+s UoWmiu6my+wa28qz/w6kg70l7tfVnr9eB68CLb+NIoGcT1rhcyMX5L/FDzV1Ec5H vli/j6rJzXPNnOHE0aTPx3B04jAw0R4NerSJbzfmDRVPs8cG+bPTShclft/dYqAr YFh/tQer//OMXlRu/bs32O0zPEG+UMonU7XuDSP8+d7XnFCF1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMXKMRSh1WTmw2fmJFP1CPDwP/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZTE5NDg5MjMtZDM4MS0z OWE3LWFiNWMtNTE5MzVjM2EwYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKu3F+7zkG0MIjgejgRWeRFBc9gG11VrpKZgNl5MYnMA8d71ifylZn/3 jFUAVV4wgcL6jUUho+51C+NA5EaxTACmKTh/KA295GRH8CbsQCsG8DsZuyVJQ8QH +QPyPvSQjPAkWThz5RJzrnj+A/TPZPy6aiDS7JQC6FwPoaset3bXDdp5CpDzM4Zk 6cRsbCzbv4yataLh5k3b5h6Sw4BwwVSGQhTrgCY2bvU+5c/FNEh4GoQEbUb8wLYH QJIEtTW2hkNhBMDYe77Z05Muz/xB75WETk462D5fc3iKVChLZTCkW1hahgzy6uuc nWDnjbJze1w9NKAPialvk6UPiq1YnFc= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:37 2025 by rpki-client