$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/0b54fa88-c8bf-39f9-b5a8-a41249d8207f.roa File: 0b54fa88-c8bf-39f9-b5a8-a41249d8207f.roa (raw, json) Hash identifier: mnUYzdFg9MopSqKkTDfEpgGazwqYi3uv5Um6nl3AMFM= Subject key identifier: 00:4C:62:60:D6:C1:90:C8:75:56:BD:5A:68:01:61:C5:39:06:A5:D0 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584ACF711106F94CBCFB56201780 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/0b54fa88-c8bf-39f9-b5a8-a41249d8207f.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 203724 IP address blocks: 131.229.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:11:06:f9:4c:bc:fb:56:20:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=231989b2-cd10-4bae-b6dd-57e76e0303af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b0:57:e5:6a:8d:c7:66:18:6a:1c:69:38:83: b3:1c:58:ad:cb:58:dc:4d:da:84:9f:f8:a9:b7:13: d3:1a:d2:07:4b:ef:ed:7e:2d:93:3b:c7:ef:9f:fb: 92:32:1a:d3:66:b7:c1:45:58:47:3b:9d:6c:96:f5: 05:10:ee:74:46:2a:68:08:36:a5:fc:22:fc:5c:ce: dd:c2:01:e4:89:17:1e:f3:02:f8:bd:fb:81:78:21: 63:a0:a3:6d:1e:0e:bc:f1:bf:10:a1:29:eb:c2:75: fc:78:ad:6f:33:60:a5:27:dc:87:56:8b:ae:19:f9: c9:5b:36:11:b0:38:fd:0d:24:b9:96:27:ce:c6:ad: 75:69:b9:ad:d2:4b:9b:75:07:78:ea:b7:63:68:34: 64:44:89:87:ab:79:27:dd:55:7d:13:5a:91:59:5f: 60:af:58:17:d3:13:0d:50:3d:89:34:92:ac:db:d0: 6e:15:b5:16:1b:44:67:f4:60:fc:b1:9a:a2:50:11: 26:b7:49:47:4b:e9:f6:dc:7d:51:51:7a:a1:12:bc: 6a:15:91:e8:32:4e:67:4a:29:9f:e1:3e:fc:dc:79: 2e:79:c3:21:60:64:73:fb:38:5e:1a:d0:7c:01:3c: 82:bb:3f:15:a0:c0:dd:9b:f5:e2:0d:e9:3c:1b:ce: b6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4C:62:60:D6:C1:90:C8:75:56:BD:5A:68:01:61:C5:39:06:A5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/0b54fa88-c8bf-39f9-b5a8-a41249d8207f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8c:47:1d:6b:ee:a6:8c:f2:aa:cd:57:b7:8b:d0:ff:29:01: b9:6a:02:13:55:10:b4:eb:85:03:95:de:36:02:84:e2:3c:68: 98:d8:37:5c:91:e2:2e:aa:db:f6:ef:dd:12:67:45:40:6f:a0: 0b:3d:a7:d7:4c:e9:16:e6:b9:32:69:bd:ce:f6:95:b3:82:69: b7:5a:39:f6:99:45:31:72:bb:b0:6e:dd:ec:31:94:bf:6b:8a: d4:2b:5f:23:4c:92:0a:0b:9e:38:a3:24:9a:29:86:d0:89:4e: 15:37:3e:27:63:e4:ff:bb:b5:52:4b:76:59:34:5e:df:a5:9b: 13:d8:3c:c4:8a:17:9b:d0:83:ae:b4:bd:ad:c3:d9:17:fe:0b: c7:27:8e:7b:32:d8:ae:07:ff:3e:b4:7a:e6:e4:70:78:d3:7c: b2:3c:d7:82:84:8c:22:5b:46:b4:98:0d:25:18:5f:38:05:07: 10:32:bd:b9:c5:ee:33:fd:45:45:d2:ae:b5:00:59:d1:57:47: cd:14:06:b6:d2:31:b8:88:76:e2:5d:72:38:7b:72:bc:77:9a: b0:89:e7:cd:5e:e2:6d:ff:bf:ae:a3:f5:93:0e:1c:96:b1:19: f3:72:b0:cc:01:49:a0:60:7d:68:72:31:93:fa:3d:d4:e3:c5: 65:3a:95:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcREG+Uy8+1YgF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MjMxOTg5YjItY2QxMC00YmFlLWI2ZGQtNTdlNzZlMDMwM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrBX5WqNx2YYahxpOIOzHFity1jcTdqEn/ip txPTGtIHS+/tfi2TO8fvn/uSMhrTZrfBRVhHO51slvUFEO50RipoCDal/CL8XM7d wgHkiRce8wL4vfuBeCFjoKNtHg688b8QoSnrwnX8eK1vM2ClJ9yHVouuGfnJWzYR sDj9DSS5lifOxq11abmt0kubdQd46rdjaDRkRImHq3kn3VV9E1qRWV9gr1gX0xMN UD2JNJKs29BuFbUWG0Rn9GD8sZqiUBEmt0lHS+n23H1RUXqhErxqFZHoMk5nSimf 4T783HkuecMhYGRz+zheGtB8ATyCuz8VoMDdm/XiDek8G862IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABMYmDWwZDIdVa9WmgBYcU5BqXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMGI1NGZhODgtYzhiZi0z OWY5LWI1YTgtYTQxMjQ5ZDgyMDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqMRx1r7qaM8qrNV7eL0P8pAblqAhNVELTrhQOV3jYChOI8aJjYN1yR 4i6q2/bv3RJnRUBvoAs9p9dM6RbmuTJpvc72lbOCabdaOfaZRTFyu7Bu3ewxlL9r itQrXyNMkgoLnjijJJophtCJThU3Pidj5P+7tVJLdlk0Xt+lmxPYPMSKF5vQg660 va3D2Rf+C8cnjnsy2K4H/z60eubkcHjTfLI814KEjCJbRrSYDSUYXzgFBxAyvbnF 7jP9RUXSrrUAWdFXR80UBrbSMbiIduJdcjh7crx3mrCJ581e4m3/v66j9ZMOHJax GfNysMwBSaBgfWhyMZP6PdTjxWU6lfU= -----END CERTIFICATE-----Generated at Wed Aug 20 12:04:09 2025 by rpki-client