$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa File: 14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa (raw, json) Hash identifier: aD4lOdEFzsamwKBTjGwE+FFFzSKp1tZesJtM530Njvs= Subject key identifier: 6B:DA:53:84:DE:6F:0A:F9:0C:81:9F:90:4C:B7:A1:E0:E8:C6:F2:57 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584ACF71107C30C1AA1D5E4A3E00 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 203724 IP address blocks: 131.229.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:10:7c:30:c1:aa:1d:5e:4a:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=4c4fe906-072c-4625-85d7-367d2a399377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b5:63:bd:e5:56:b1:9e:a2:50:88:e5:fb:ff: ec:06:b8:1b:ae:fc:9a:ca:6c:e1:fb:4a:cf:44:da: 6b:97:8b:95:2f:c3:52:88:f6:a9:e3:8a:00:f8:fa: e9:89:38:75:8f:b4:66:2f:99:c0:d5:a3:17:61:8a: 2c:e3:4b:f1:98:7d:48:e0:c4:48:aa:29:e5:5d:a1: 47:0e:1c:21:3a:2c:4b:0d:4d:e4:fb:91:ac:39:d5: 4d:8b:a4:22:53:69:3f:76:b4:92:7d:bd:cb:f2:1b: 95:61:8e:c2:de:a4:7a:48:64:66:04:eb:52:1b:c6: ad:83:a8:5c:e4:3c:1c:b0:e6:eb:50:c6:2e:dc:36: f1:03:c4:15:ab:5b:7e:d3:9a:b3:65:de:e8:2e:04: d3:a3:b4:10:4a:90:c9:ae:ee:2e:d4:31:19:76:b2: 79:bc:53:1a:4c:b7:ad:a5:07:d8:67:92:55:69:f8: 22:71:d3:06:ec:01:2c:fc:8f:7e:b5:42:ec:cb:30: 9e:dd:1b:91:97:22:3a:b8:26:d7:61:e1:58:f9:bc: 30:54:b1:32:60:90:0f:06:44:48:13:58:a2:3a:51: cc:bf:ee:01:1a:b0:69:1d:76:62:46:ac:32:3b:ee: 25:97:ef:47:5d:63:98:4f:03:9a:34:82:31:65:00: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DA:53:84:DE:6F:0A:F9:0C:81:9F:90:4C:B7:A1:E0:E8:C6:F2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:c4:e6:a0:4b:64:47:9e:0c:45:4a:69:06:40:31:a1:11:fe: 95:fa:67:36:fd:1c:f7:f7:67:fd:e7:17:54:d6:4e:d9:8e:2e: 70:96:2e:a8:13:cd:b6:73:d2:90:df:02:fe:91:c8:6f:21:2f: 02:ab:32:5e:15:d3:bd:28:92:85:d9:ec:70:e0:dd:ea:e6:41: 65:80:65:a9:ff:9f:f7:37:23:ca:42:1c:2c:4c:4c:57:42:68: 44:0d:05:75:53:e1:5b:7f:95:1d:c7:0d:c6:ac:9c:02:ac:98: 86:78:0a:6f:00:be:81:f7:fc:99:d5:de:fa:89:4e:1a:4e:06: 00:e3:3a:14:d1:3d:67:b7:0f:12:03:8e:6e:48:fb:58:a1:b5: 18:42:8b:41:ca:ee:d8:b3:19:06:ba:07:0d:c7:11:53:59:ca: 97:bb:be:57:b2:7c:75:95:9d:cc:d5:0b:c5:1f:1e:9a:87:30: 0c:31:12:d0:40:68:7e:be:b4:16:5d:1c:a8:40:e1:87:e6:94: 4a:64:4b:95:e2:74:80:5d:c9:94:0d:2c:76:cc:b0:c4:3f:3e: 89:1b:02:40:bc:43:d9:ad:16:58:be:63:18:ee:96:19:44:03: e5:c5:66:a8:2d:f8:6a:37:58:d0:6e:59:a2:46:7c:69:03:27: 55:f1:02:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcRB8MMGqHV5KPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NGM0ZmU5MDYtMDcyYy00NjI1LTg1ZDctMzY3ZDJhMzk5Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LVjveVWsZ6iUIjl+//sBrgbrvyaymzh+0rP RNprl4uVL8NSiPap44oA+PrpiTh1j7RmL5nA1aMXYYos40vxmH1I4MRIqinlXaFH DhwhOixLDU3k+5GsOdVNi6QiU2k/drSSfb3L8huVYY7C3qR6SGRmBOtSG8atg6hc 5DwcsObrUMYu3DbxA8QVq1t+05qzZd7oLgTTo7QQSpDJru4u1DEZdrJ5vFMaTLet pQfYZ5JVafgicdMG7AEs/I9+tULsyzCe3RuRlyI6uCbXYeFY+bwwVLEyYJAPBkRI E1iiOlHMv+4BGrBpHXZiRqwyO+4ll+9HXWOYTwOaNIIxZQBMxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvaU4Tebwr5DIGfkEy3oeDoxvJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMTQwMzRkNWYtMzhjNC0z YjA4LWE2YTUtZjI2MGU2OTQ5YWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLE5qBLZEeeDEVKaQZAMaER/pX6Zzb9HPf3Z/3nF1TWTtmOLnCWLqgT zbZz0pDfAv6RyG8hLwKrMl4V070okoXZ7HDg3ermQWWAZan/n/c3I8pCHCxMTFdC aEQNBXVT4Vt/lR3HDcasnAKsmIZ4Cm8AvoH3/JnV3vqJThpOBgDjOhTRPWe3DxID jm5I+1ihtRhCi0HK7tizGQa6Bw3HEVNZype7vleyfHWVnczVC8UfHpqHMAwxEtBA aH6+tBZdHKhA4YfmlEpkS5XidIBdyZQNLHbMsMQ/PokbAkC8Q9mtFli+YxjulhlE A+XFZqgt+Go3WNBuWaJGfGkDJ1XxAoU= -----END CERTIFICATE-----Generated at Wed Aug 20 12:03:56 2025 by rpki-client