$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/97a022c5-cd14-3a87-9f4c-3417a0307297.roa File: 97a022c5-cd14-3a87-9f4c-3417a0307297.roa (raw, json) Hash identifier: Cx24rtFmSjIWpsA3AQVrBZiF02+F0w3znTW/GCaG+VA= Subject key identifier: 59:61:FB:53:6C:B5:C7:80:D0:13:A5:E8:08:2C:9C:CD:13:B3:7B:27 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AD0D668203E20CFD96FF3C970 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/97a022c5-cd14-3a87-9f4c-3417a0307297.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 203724 IP address blocks: 131.229.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:68:20:3e:20:cf:d9:6f:f3:c9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=39fc3054-0b5c-4002-b370-1291d9deabc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ac:49:57:3f:a7:9e:0e:c4:cf:00:c5:42:9f: ef:aa:fb:6d:80:cc:e2:dd:9d:fa:61:d5:80:c5:fd: d2:7c:d8:12:3e:e9:18:dc:1a:0b:5e:9f:43:72:03: a6:31:cc:10:68:db:d3:8b:20:76:a9:5e:4b:49:f0: f4:05:68:6c:17:e6:56:95:c0:c9:a8:56:0e:d4:de: 6c:fe:cd:d1:5b:75:86:7e:dc:26:14:6f:cc:58:e6: 93:d3:28:ed:f6:8b:f4:42:e4:7f:d8:59:bc:e6:65: e5:6a:86:5a:5d:df:cd:48:09:97:08:26:ec:6c:ac: 42:e7:f7:a0:b0:03:a8:db:b7:c2:a2:4f:c7:bb:7e: b0:68:71:83:ff:14:95:05:88:79:56:0d:56:32:11: 60:13:07:f2:c4:99:b6:2b:a6:d4:4e:32:95:02:0e: 40:6a:d7:61:35:91:7d:28:6b:d1:3d:8e:b9:c0:2c: b5:1d:81:be:96:0c:ca:e3:52:c0:00:28:ad:6a:8d: 60:b2:d5:87:4e:4d:2e:a5:1c:ea:6e:04:8b:76:08: e0:cc:df:18:1a:3e:77:55:ba:48:5a:0d:7f:72:b1: af:77:a3:5e:15:8c:1f:3e:84:52:7b:45:0b:8b:dd: 8b:26:15:b6:2e:9b:fb:e4:d2:6d:19:ae:28:e9:37: 60:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:61:FB:53:6C:B5:C7:80:D0:13:A5:E8:08:2C:9C:CD:13:B3:7B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/97a022c5-cd14-3a87-9f4c-3417a0307297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fc:f2:4a:35:0e:27:1b:1b:c7:b8:e7:4d:68:b9:a5:9a:77: 41:f0:b0:be:6b:1e:99:3b:63:25:9e:cd:c2:a0:05:f8:ab:84: 3f:b3:65:a7:bd:5e:d7:1a:4a:c8:77:5a:5d:39:6a:dc:27:a7: 3a:69:cb:ff:f7:d5:5b:46:29:5b:2d:4c:60:f1:30:17:77:58: e7:04:82:d7:06:b3:ce:6d:4d:2f:c6:20:f6:eb:e6:c2:06:53: 75:d8:6d:1e:77:f4:41:bb:d8:6f:38:78:e8:53:c0:7f:04:a4: 5f:df:1c:7b:1f:e5:71:3a:d7:ef:50:fa:70:59:84:3e:11:8b: 9c:93:7e:84:45:84:8f:14:94:b7:bb:5a:9d:23:c8:16:18:f2: 59:f2:28:41:10:33:74:60:2d:5f:ac:cf:3e:66:16:9a:7f:58: 18:84:f7:5a:48:89:85:ab:26:a1:ed:f4:aa:94:e0:78:2a:2a: 8d:4d:74:b0:49:b0:9c:8b:d9:5d:9f:bc:7e:9e:27:ee:ca:57: e3:89:7e:a5:9a:c4:46:5a:32:9e:39:9f:f5:a1:04:4e:3e:87: 3d:90:c8:d4:bf:4d:8f:00:91:7b:89:d8:b5:98:71:5a:56:c7: 20:a7:33:45:9c:96:91:34:a4:c0:63:d5:15:bd:46:da:ac:56: d3:4e:99:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mggPiDP2W/zyXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MzlmYzMwNTQtMGI1Yy00MDAyLWIzNzAtMTI5MWQ5ZGVhYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaxJVz+nng7EzwDFQp/vqvttgMzi3Z36YdWA xf3SfNgSPukY3BoLXp9DcgOmMcwQaNvTiyB2qV5LSfD0BWhsF+ZWlcDJqFYO1N5s /s3RW3WGftwmFG/MWOaT0yjt9ov0QuR/2Fm85mXlaoZaXd/NSAmXCCbsbKxC5/eg sAOo27fCok/Hu36waHGD/xSVBYh5Vg1WMhFgEwfyxJm2K6bUTjKVAg5AatdhNZF9 KGvRPY65wCy1HYG+lgzK41LAACitao1gstWHTk0upRzqbgSLdgjgzN8YGj53VbpI Wg1/crGvd6NeFYwfPoRSe0ULi92LJhW2Lpv75NJtGa4o6TdgJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlh+1NstceA0BOl6AgsnM0Ts3snMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvOTdhMDIyYzUtY2QxNC0z YTg3LTlmNGMtMzQxN2EwMzA3Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT88ko1DicbG8e4501ouaWad0HwsL5rHpk7YyWezcKgBfirhD+zZae9 XtcaSsh3Wl05atwnpzppy//31VtGKVstTGDxMBd3WOcEgtcGs85tTS/GIPbr5sIG U3XYbR539EG72G84eOhTwH8EpF/fHHsf5XE61+9Q+nBZhD4Ri5yTfoRFhI8UlLe7 Wp0jyBYY8lnyKEEQM3RgLV+szz5mFpp/WBiE91pIiYWrJqHt9KqU4HgqKo1NdLBJ sJyL2V2fvH6eJ+7KV+OJfqWaxEZaMp45n/WhBE4+hz2QyNS/TY8AkXuJ2LWYcVpW xyCnM0WclpE0pMBj1RW9RtqsVtNOmZE= -----END CERTIFICATE-----Generated at Wed Aug 20 12:04:21 2025 by rpki-client