$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/85f78513-211c-3f43-b104-9b7efdc2db1c.roa File: 85f78513-211c-3f43-b104-9b7efdc2db1c.roa (raw, json) Hash identifier: RBCg4d7MqihpfHHWnvuhz3LMksSvEuuPEmYQVVna9uQ= Subject key identifier: 5F:F2:F6:41:51:FB:6D:7C:B3:D6:5A:AE:9E:60:2B:6D:44:24:67:5D Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AD0D66A4F321E6A3D9B174D00 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/85f78513-211c-3f43-b104-9b7efdc2db1c.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 203724 IP address blocks: 131.229.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:6a:4f:32:1e:6a:3d:9b:17:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=3b04c6b8-2c83-497b-9fea-e56c1f0a9978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:63:0b:ff:98:e9:8c:24:ba:af:a1:8e:5f:a7: 32:d7:25:a7:f5:42:11:00:9a:6b:c9:c8:f9:88:8c: 0b:ca:f8:a2:d5:88:5d:c8:cd:85:f6:56:db:61:cf: 67:b4:4a:eb:ae:96:65:f3:89:29:56:7d:20:3d:9e: a3:e5:e0:cf:8b:85:f5:b5:ac:0d:bc:da:61:68:d1: 7e:b8:d9:35:81:35:3d:76:34:c7:1a:e2:9c:16:03: 4f:72:d7:1a:f4:17:50:c7:7a:40:93:65:1a:ec:d5: d8:04:72:6b:52:e3:60:41:75:1b:22:65:ba:7f:d0: 10:62:f8:01:3b:11:15:c5:15:1a:ef:3f:54:09:8d: b5:da:f4:c8:15:8f:a7:be:0e:c9:af:75:31:99:52: 82:94:84:aa:48:f1:38:2d:30:c1:f9:31:fe:c1:b0: d9:84:2b:df:87:82:4b:85:1f:da:db:7e:2d:6a:45: c8:a8:3a:d7:33:66:f5:c4:7b:de:5f:e6:27:db:7a: dc:e8:29:fe:9c:5b:14:09:9e:29:e4:3e:c2:cc:2d: b1:a9:43:d5:ec:38:ce:9b:9c:73:38:9c:af:60:f8: 5d:50:b5:b3:51:37:6c:4d:01:02:52:c3:36:e3:cb: f6:04:f4:5d:32:5c:07:26:c6:5e:49:aa:ca:2d:8c: 75:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F2:F6:41:51:FB:6D:7C:B3:D6:5A:AE:9E:60:2B:6D:44:24:67:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/85f78513-211c-3f43-b104-9b7efdc2db1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b1:e3:a2:38:c2:12:01:83:2f:19:15:4d:6e:e9:d0:da:27: 4c:14:be:34:d3:ff:5d:56:f7:22:1b:59:19:af:d3:bc:68:d3: 67:20:63:11:4e:e4:03:11:4e:f6:34:f8:ef:7b:69:81:44:b1: a7:ae:fb:cb:0d:b8:f0:d8:bc:5c:80:8b:b9:26:2c:b8:e9:e8: 5d:6c:c4:aa:a8:e9:cf:99:b5:79:5a:d0:37:36:ba:93:01:c9: 1e:cf:ed:ad:65:ba:5a:e1:de:e2:8e:7e:12:5c:d6:6f:14:dd: a9:77:b5:d0:37:5b:45:92:dc:09:75:03:6f:bf:cd:ec:6d:21: 0b:88:64:5c:ad:61:10:bb:50:d0:32:a7:27:72:6b:a5:2b:64: 9b:f1:a9:91:5d:5e:84:01:9a:f8:b0:81:41:a0:5c:dc:51:89: 15:68:96:45:a4:a1:26:3f:20:7c:99:68:20:3a:47:ad:f0:0c: b5:19:b1:5a:8d:1f:dc:bb:3f:12:01:39:c5:7b:a7:78:8a:ff: 77:50:92:c9:31:83:04:b2:66:cb:58:eb:df:e8:4e:55:1c:d0: 9a:26:99:63:22:17:f5:95:da:4f:1a:61:ea:a9:ef:6a:30:b7: c0:2b:83:23:01:25:29:6a:5e:73:83:52:d0:4f:64:6f:12:6c: 7e:5b:55:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mpPMh5qPZsXTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk M2IwNGM2YjgtMmM4My00OTdiLTlmZWEtZTU2YzFmMGE5OTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimML/5jpjCS6r6GOX6cy1yWn9UIRAJprycj5 iIwLyvii1YhdyM2F9lbbYc9ntErrrpZl84kpVn0gPZ6j5eDPi4X1tawNvNphaNF+ uNk1gTU9djTHGuKcFgNPctca9BdQx3pAk2Ua7NXYBHJrUuNgQXUbImW6f9AQYvgB OxEVxRUa7z9UCY212vTIFY+nvg7Jr3UxmVKClISqSPE4LTDB+TH+wbDZhCvfh4JL hR/a234takXIqDrXM2b1xHveX+Yn23rc6Cn+nFsUCZ4p5D7CzC2xqUPV7DjOm5xz OJyvYPhdULWzUTdsTQECUsM248v2BPRdMlwHJsZeSarKLYx1kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/y9kFR+218s9Zarp5gK21EJGddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvODVmNzg1MTMtMjExYy0z ZjQzLWIxMDQtOWI3ZWZkYzJkYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqx46I4whIBgy8ZFU1u6dDaJ0wUvjTT/11W9yIbWRmv07xo02cgYxFO 5AMRTvY0+O97aYFEsaeu+8sNuPDYvFyAi7kmLLjp6F1sxKqo6c+ZtXla0Dc2upMB yR7P7a1lulrh3uKOfhJc1m8U3al3tdA3W0WS3Al1A2+/zextIQuIZFytYRC7UNAy pydya6UrZJvxqZFdXoQBmviwgUGgXNxRiRVolkWkoSY/IHyZaCA6R63wDLUZsVqN H9y7PxIBOcV7p3iK/3dQkskxgwSyZstY69/oTlUc0JommWMiF/WV2k8aYeqp72ow t8ArgyMBJSlqXnODUtBPZG8SbH5bVbQ= -----END CERTIFICATE-----Generated at Wed Aug 20 11:55:32 2025 by rpki-client