$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/69743912-d96a-3cde-adce-182527e7f8da.roa File: 69743912-d96a-3cde-adce-182527e7f8da.roa (raw, json) Hash identifier: gVe4qqjW5svWoGNJN+fW4bdvsDQ0J7hVYQkQcgwvwNY= Subject key identifier: CF:94:B1:2C:5F:DA:7A:2A:E8:67:1D:BF:A4:DA:4D:68:A3:22:F3:48 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AD0D669A1ADE47CB276A3D6F0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/69743912-d96a-3cde-adce-182527e7f8da.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 203724 IP address blocks: 131.229.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:69:a1:ad:e4:7c:b2:76:a3:d6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=c95876f2-dd87-4c2d-a565-6c2f543a846e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:b4:15:f5:0e:a5:75:3a:03:74:14:dd:e4: 63:b5:c4:87:76:d7:da:d9:66:9f:b2:85:2c:37:fd: 2b:09:e7:65:c5:bf:c2:6f:a9:55:da:fa:14:34:07: c8:1a:cb:76:58:65:aa:b2:43:fa:61:60:43:72:97: 52:3e:a8:53:e5:f3:af:43:6d:0c:13:d3:11:c5:49: 28:56:3c:92:5c:89:d9:cf:6f:fd:2d:9c:4f:bb:50: 62:c2:24:51:0f:26:9d:63:28:f9:7e:2c:d4:af:bd: c7:b2:b1:a7:ee:4e:d8:72:30:9d:05:eb:55:e5:08: de:77:eb:39:8d:3a:34:ce:c2:34:0a:8f:df:1a:05: e0:ad:e0:22:28:68:07:fd:a9:dd:0e:6a:be:5a:7c: 64:34:63:60:9c:30:3e:40:d7:89:01:83:90:b7:2c: 97:fb:44:c9:10:ee:e3:4e:88:bb:13:fd:8d:c5:58: 87:88:4c:2e:e1:d0:c1:46:a0:99:5a:dd:3e:2e:f3: 36:2d:0c:2d:bd:6a:68:64:fd:e6:42:5e:9f:2c:ff: 48:16:6a:87:a0:6f:30:a2:3f:c8:34:62:01:97:77: f8:af:34:82:d1:95:54:79:d7:15:77:f0:26:46:46: 66:74:6e:24:1f:43:f5:95:95:3b:1e:fd:90:55:e1: 83:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:94:B1:2C:5F:DA:7A:2A:E8:67:1D:BF:A4:DA:4D:68:A3:22:F3:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/69743912-d96a-3cde-adce-182527e7f8da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:13:82:40:92:65:75:c3:4e:f1:db:3c:7c:9c:66:d2:cb:11: 34:8b:40:33:0d:65:bc:dc:02:85:5f:8e:58:e9:6f:d6:e1:eb: 16:0d:8f:b7:68:92:59:36:be:87:1a:24:69:7e:4d:2d:85:49: 2f:26:a3:91:66:92:be:da:50:86:33:98:c5:16:d2:92:9c:d8: 34:d5:7f:c1:95:45:cb:5c:5d:3a:98:f6:49:40:89:35:67:ab: 75:f8:25:d5:6d:39:a9:6d:f2:9e:8c:fd:69:4d:5e:93:ff:18: ad:36:ed:ed:b5:48:e3:44:5a:4b:30:03:14:a9:f2:1e:2d:05: 40:50:de:3d:3f:18:3d:54:7f:8c:ed:5c:10:92:2f:e3:82:c1: 25:22:2a:15:b9:f9:07:f1:34:c7:d9:8b:8c:d2:4f:6e:f9:49: d7:b1:88:c5:06:33:e9:60:81:b8:0f:6f:fe:01:3e:02:35:08: a2:3a:ec:85:9f:91:0e:67:7c:fd:0b:02:2f:ea:b3:3f:f4:8e: f6:15:09:3d:f4:9f:cf:25:46:56:3d:5d:c8:bd:4f:26:9b:1a: 98:c2:67:19:f5:96:11:04:d4:da:dd:08:ba:bc:92:3a:cb:c1: 22:59:ad:6a:b3:9c:09:79:0e:29:fe:b5:5d:c6:f9:b6:5f:15: a5:82:ae:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mmhreR8snaj1vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk Yzk1ODc2ZjItZGQ4Ny00YzJkLWE1NjUtNmMyZjU0M2E4NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoki0FfUOpXU6A3QU3eRjtcSHdtfa2WafsoUs N/0rCedlxb/Cb6lV2voUNAfIGst2WGWqskP6YWBDcpdSPqhT5fOvQ20ME9MRxUko VjySXInZz2/9LZxPu1BiwiRRDyadYyj5fizUr73HsrGn7k7YcjCdBetV5Qjed+s5 jTo0zsI0Co/fGgXgreAiKGgH/andDmq+WnxkNGNgnDA+QNeJAYOQtyyX+0TJEO7j Toi7E/2NxViHiEwu4dDBRqCZWt0+LvM2LQwtvWpoZP3mQl6fLP9IFmqHoG8woj/I NGIBl3f4rzSC0ZVUedcVd/AmRkZmdG4kH0P1lZU7Hv2QVeGD4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+UsSxf2noq6Gcdv6TaTWijIvNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNjk3NDM5MTItZDk2YS0z Y2RlLWFkY2UtMTgyNTI3ZTdmOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoTgkCSZXXDTvHbPHycZtLLETSLQDMNZbzcAoVfjljpb9bh6xYNj7do klk2vocaJGl+TS2FSS8mo5Fmkr7aUIYzmMUW0pKc2DTVf8GVRctcXTqY9klAiTVn q3X4JdVtOalt8p6M/WlNXpP/GK027e21SONEWkswAxSp8h4tBUBQ3j0/GD1Uf4zt XBCSL+OCwSUiKhW5+QfxNMfZi4zST275SdexiMUGM+lggbgPb/4BPgI1CKI67IWf kQ5nfP0LAi/qsz/0jvYVCT30n88lRlY9Xci9TyabGpjCZxn1lhEE1NrdCLq8kjrL wSJZrWqznAl5Din+tV3G+bZfFaWCrhY= -----END CERTIFICATE-----Generated at Wed Aug 20 11:56:06 2025 by rpki-client