$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/0caed4e8-f782-3ee5-8a69-1c07dd5aa104.roa File: 0caed4e8-f782-3ee5-8a69-1c07dd5aa104.roa (raw, json) Hash identifier: NuISEo7Z8TYOu0OnrLi32HCiY2x7lDNBHp8k5DE7L/4= Subject key identifier: 54:8A:71:AC:09:C9:0F:B4:46:D5:D5:C5:A6:58:57:D8:37:37:CA:EB Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AD0D668837B01F848079B2500 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/0caed4e8-f782-3ee5-8a69-1c07dd5aa104.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 203724 IP address blocks: 131.229.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:68:83:7b:01:f8:48:07:9b:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=c68de26d-d891-4919-991a-6f56fa0905c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:81:87:7c:80:27:b1:cc:e3:65:71:7c:08: c7:56:26:04:63:60:98:e5:a9:ad:db:77:0c:15:57: 4c:5a:76:52:34:78:27:7d:77:d7:3a:8a:39:d9:a4: e9:3d:3c:0d:75:78:ff:63:db:14:a7:a4:3a:e2:f1: 50:f4:4c:fe:b4:a7:d0:20:30:03:8a:a3:19:c2:25: ea:63:0a:cf:a1:b5:7a:d8:d0:9a:25:ef:13:8a:27: 7b:47:8d:ef:34:b3:97:cf:b4:2b:d7:e1:a7:45:f7: cc:8c:f6:86:03:f7:99:cd:6b:6f:86:3a:c6:6c:21: aa:2d:2c:9b:e4:07:99:64:c7:22:cc:b9:ad:71:53: 4b:e8:08:88:46:c7:e2:bd:eb:db:f7:e9:27:b3:3f: 4c:ee:9f:92:04:1b:e1:16:51:8e:f4:da:9e:ca:82: 89:9c:50:50:64:bb:f7:01:7d:1f:2c:93:33:f8:80: 4b:96:88:0e:ee:bd:22:12:d0:17:b0:3f:e7:4a:c4: db:cb:ba:e1:86:90:ef:26:a6:18:90:e9:ba:ba:f7: 03:25:94:65:cd:91:3f:d0:2d:d6:6c:6f:69:dc:08: fa:51:f3:36:4b:0d:22:96:e8:e3:f2:98:d9:49:6d: 46:c1:c8:ce:fc:c6:9a:e5:00:36:c4:d9:80:db:0d: 03:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8A:71:AC:09:C9:0F:B4:46:D5:D5:C5:A6:58:57:D8:37:37:CA:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/0caed4e8-f782-3ee5-8a69-1c07dd5aa104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:70:27:50:2e:d6:08:c1:14:1e:48:1d:92:76:32:aa:97:1e: f4:fc:56:3f:91:e0:2c:61:3e:f3:98:af:40:aa:5e:b1:53:02: 5c:fa:bb:fc:f0:5d:e6:52:6e:df:df:91:4a:ff:cb:04:db:45: 7d:b2:ec:17:0e:23:5c:cc:85:18:f1:59:da:bd:fa:53:cd:7f: 4c:25:1a:eb:0e:86:24:6f:90:e3:e5:6a:13:b8:79:ab:b9:20: 1d:1e:4a:a8:a6:e6:a3:9a:6c:1d:0a:a8:8b:15:a3:8a:33:06: d2:30:89:80:62:fb:bd:76:3c:a4:57:89:b0:5f:f4:3f:23:07: 47:a1:58:0d:54:75:91:e1:f8:74:f1:6d:c2:6e:d2:93:4d:e0: 68:c5:76:4a:22:1f:01:4f:fc:39:b9:ac:56:2b:3b:ea:53:bf: db:69:da:e9:bc:bd:d6:2d:f7:56:8d:2b:6c:f6:6b:3e:ba:f0: 77:cd:34:be:22:80:cc:00:c7:fb:a0:d5:af:3e:b2:4d:8f:7c: e7:4e:60:09:c1:9d:1f:41:17:a5:ca:99:71:46:ba:ac:fd:c0: ed:af:6b:66:06:2f:66:59:2c:a5:1f:30:c2:ec:01:22:04:7c: 00:cf:3b:b8:41:7e:83:cc:cd:90:9f:6d:fa:97:f3:f3:85:c3: e7:2b:0a:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1miDewH4SAebJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YzY4ZGUyNmQtZDg5MS00OTE5LTk5MWEtNmY1NmZhMDkwNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmWBh3yAJ7HM42VxfAjHViYEY2CY5amt23cM FVdMWnZSNHgnfXfXOoo52aTpPTwNdXj/Y9sUp6Q64vFQ9Ez+tKfQIDADiqMZwiXq YwrPobV62NCaJe8Tiid7R43vNLOXz7Qr1+GnRffMjPaGA/eZzWtvhjrGbCGqLSyb 5AeZZMcizLmtcVNL6AiIRsfivevb9+knsz9M7p+SBBvhFlGO9NqeyoKJnFBQZLv3 AX0fLJMz+IBLlogO7r0iEtAXsD/nSsTby7rhhpDvJqYYkOm6uvcDJZRlzZE/0C3W bG9p3Aj6UfM2Sw0ilujj8pjZSW1GwcjO/Maa5QA2xNmA2w0DaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSKcawJyQ+0RtXVxaZYV9g3N8rrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMGNhZWQ0ZTgtZjc4Mi0z ZWU1LThhNjktMWMwN2RkNWFhMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRwJ1Au1gjBFB5IHZJ2MqqXHvT8Vj+R4CxhPvOYr0CqXrFTAlz6u/zw XeZSbt/fkUr/ywTbRX2y7BcOI1zMhRjxWdq9+lPNf0wlGusOhiRvkOPlahO4eau5 IB0eSqim5qOabB0KqIsVo4ozBtIwiYBi+712PKRXibBf9D8jB0ehWA1UdZHh+HTx bcJu0pNN4GjFdkoiHwFP/Dm5rFYrO+pTv9tp2um8vdYt91aNK2z2az668HfNNL4i gMwAx/ug1a8+sk2PfOdOYAnBnR9BF6XKmXFGuqz9wO2va2YGL2ZZLKUfMMLsASIE fADPO7hBfoPMzZCfbfqX8/OFw+crCng= -----END CERTIFICATE-----Generated at Wed Aug 20 11:53:00 2025 by rpki-client