$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c8cb6ee4-9156-3357-88f2-3c894607c832.roa File: c8cb6ee4-9156-3357-88f2-3c894607c832.roa (raw, json) Hash identifier: lXk0XORDK4RsRBCjRt+sDp5gI6H1Dg6/dVosPpa0/f0= Subject key identifier: C7:45:6A:F0:BD:1C:F9:74:F5:54:08:5D:3E:4F:D1:9F:57:59:B5:99 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AC8767A65E662FA320918F7C0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c8cb6ee4-9156-3357-88f2-3c894607c832.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 31898 IP address blocks: 131.229.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:7a:65:e6:62:fa:32:09:18:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=810a487a-11c3-4f11-90df-f1f806df7a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:88:78:d2:26:86:c6:fc:a9:f3:71:71:71: f8:d1:18:69:bc:ff:96:69:63:8f:92:fb:26:da:c3: 67:61:51:09:bb:75:e9:1c:d9:40:c3:1f:89:4a:47: 22:91:4d:86:53:09:da:22:7a:96:4f:ee:00:f1:1e: e8:e5:ab:7c:31:6e:ed:de:09:18:54:82:4d:af:91: 63:94:3d:bd:e4:8b:f6:6c:44:63:a4:86:6c:ac:b1: 54:07:02:8d:b9:13:96:37:8b:2f:e4:09:d3:d5:ad: b7:ee:60:84:95:47:98:05:55:58:05:f1:11:b6:db: c9:0b:05:f1:7e:e1:3b:5f:92:a4:d7:e6:8e:2d:81: ba:da:12:78:26:ef:20:15:c9:fb:44:bb:76:d0:81: d1:f6:de:a3:cb:8d:32:c6:05:21:35:7f:b6:59:32: aa:43:ae:a0:cb:08:e8:03:f7:82:c3:8f:0e:65:b4: 12:33:09:1f:bd:05:cf:7a:61:56:b2:85:f3:ad:ea: 2d:ab:1f:0e:14:4f:b9:aa:9c:dd:5f:66:b2:10:06: 9b:91:ad:ff:ba:86:78:d6:a6:ee:af:f6:bd:b8:c7: 93:f0:c0:b4:f7:9c:5b:e8:65:57:66:92:ba:ce:6c: 36:d7:1d:17:07:5f:85:f3:61:1f:06:fc:c0:fb:73: 0d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:45:6A:F0:BD:1C:F9:74:F5:54:08:5D:3E:4F:D1:9F:57:59:B5:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c8cb6ee4-9156-3357-88f2-3c894607c832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9e:66:32:00:d2:2c:2a:d9:81:8a:77:85:3a:b2:02:3a:30: 09:4c:13:73:23:e5:59:33:97:c0:81:d8:e7:51:3a:ed:32:f8: 8c:71:63:35:40:ac:1e:88:d7:d5:2e:2f:79:62:8b:3b:66:4c: c1:b0:80:c6:b3:f2:8c:cb:54:d3:29:d5:0e:86:19:df:e0:21: df:1b:e7:e6:e8:d7:92:ed:fd:80:fc:07:d2:ae:7e:86:8b:45: 4c:5f:d6:ee:33:90:48:ac:eb:00:ee:20:84:00:e4:4f:1b:9c: f7:48:58:61:00:60:fc:89:b0:6c:65:1e:02:b2:a2:63:74:00: 90:8d:ab:f1:4b:36:e8:f2:7e:c1:e8:42:3c:43:10:76:02:06: 26:2a:70:cc:3c:da:d7:07:04:c3:14:ec:d3:53:4f:4b:66:22: 74:15:b9:21:8f:0c:0c:98:3f:b6:5f:e4:b5:bf:e4:86:a2:7c: 60:7e:85:85:c3:1c:76:87:c4:a2:2e:cb:a6:b5:0b:ec:45:a1: 87:40:f0:51:89:1b:62:d5:d3:c8:e4:5c:0a:a9:5c:26:7c:5f: 6d:fc:29:63:8e:63:09:4b:66:a5:cd:1e:79:cf:b3:f1:76:e9: 56:9c:9e:17:70:70:12:c6:cf:49:2c:b0:70:fd:75:81:2a:f3: f9:89:b6:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnpl5mL6MgkY98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ODEwYTQ4N2EtMTFjMy00ZjExLTkwZGYtZjFmODA2ZGY3YTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHCIeNImhsb8qfNxcXH40RhpvP+WaWOPkvsm 2sNnYVEJu3XpHNlAwx+JSkcikU2GUwnaInqWT+4A8R7o5at8MW7t3gkYVIJNr5Fj lD295Iv2bERjpIZsrLFUBwKNuROWN4sv5AnT1a237mCElUeYBVVYBfERttvJCwXx fuE7X5Kk1+aOLYG62hJ4Ju8gFcn7RLt20IHR9t6jy40yxgUhNX+2WTKqQ66gywjo A/eCw48OZbQSMwkfvQXPemFWsoXzreotqx8OFE+5qpzdX2ayEAabka3/uoZ41qbu r/a9uMeT8MC095xb6GVXZpK6zmw21x0XB1+F82EfBvzA+3MNbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdFavC9HPl09VQIXT5P0Z9XWbWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYzhjYjZlZTQtOTE1Ni0z MzU3LTg4ZjItM2M4OTQ2MDdjODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWeZjIA0iwq2YGKd4U6sgI6MAlME3Mj5Vkzl8CB2OdROu0y+IxxYzVA rB6I19UuL3liiztmTMGwgMaz8ozLVNMp1Q6GGd/gId8b5+bo15Lt/YD8B9KufoaL RUxf1u4zkEis6wDuIIQA5E8bnPdIWGEAYPyJsGxlHgKyomN0AJCNq/FLNujyfsHo QjxDEHYCBiYqcMw82tcHBMMU7NNTT0tmInQVuSGPDAyYP7Zf5LW/5IaifGB+hYXD HHaHxKIuy6a1C+xFoYdA8FGJG2LV08jkXAqpXCZ8X238KWOOYwlLZqXNHnnPs/F2 6VacnhdwcBLGz0kssHD9dYEq8/mJtls= -----END CERTIFICATE-----Generated at Wed Aug 20 08:00:53 2025 by rpki-client