$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f306628f-6ee8-31e5-8171-e6648dd60d17.roa File: f306628f-6ee8-31e5-8171-e6648dd60d17.roa (raw, json) Hash identifier: 8Xr7LYEGz2hVegI9XpR1ZrR37gxnvyHXxE5yAog7KsQ= Subject key identifier: BD:79:D5:66:C0:40:70:01:83:C6:82:9D:91:0B:AA:72:A1:0E:39:E9 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584ACF711EBC8BD78FAA1FED3780 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f306628f-6ee8-31e5-8171-e6648dd60d17.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 203724 IP address blocks: 131.229.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:1e:bc:8b:d7:8f:aa:1f:ed:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=9d6c997c-77b9-44ed-a92c-ff6818f33652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:8c:c5:d0:74:9c:19:d1:27:85:1b:92:6a: cc:c4:d1:a9:c1:57:b1:0d:bb:24:31:43:1d:b2:44: 23:18:ba:e3:e7:c0:4d:85:9b:89:00:e7:1d:43:f6: 98:ba:fa:0a:02:95:5c:b8:a4:2c:47:b8:18:cb:e4: b1:d9:7f:8f:2d:f8:0b:ad:2b:19:86:65:cc:15:1e: 82:52:00:27:e3:ee:b3:6e:7f:df:d5:d3:09:e6:9a: ac:a7:9e:17:3b:a1:b8:fa:b7:cf:6f:fc:60:17:88: fc:c6:b8:91:e9:ee:de:e2:89:b9:f9:f5:d5:b0:fe: 9e:36:02:51:90:d5:ef:db:6a:78:29:dc:48:24:5b: df:1f:c6:0f:9f:8b:50:a6:89:fe:d6:6a:6a:3a:9d: 06:f0:c2:cd:00:3a:15:d4:96:2a:c3:81:72:21:54: b2:2a:b1:88:ce:36:d7:bd:a6:28:05:95:20:ce:b9: 63:f1:54:f4:5d:a1:8e:0d:81:29:42:3f:8e:04:10: dc:f7:bf:4a:b4:f9:30:3c:a8:15:19:4c:9b:75:17: 87:dc:99:55:a1:45:74:56:85:75:de:e9:a8:e7:c4: 1b:1c:8d:5b:7e:ca:e1:e0:26:9a:cb:41:e3:4b:fc: 87:94:2c:4f:d9:43:bb:3c:71:43:76:94:f1:b1:a8: e6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:79:D5:66:C0:40:70:01:83:C6:82:9D:91:0B:AA:72:A1:0E:39:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f306628f-6ee8-31e5-8171-e6648dd60d17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:da:5c:09:f5:19:0c:c3:da:b8:62:f5:3a:be:f3:4a:80:fc: 87:91:47:3e:b5:88:22:61:0b:5f:aa:24:d5:b4:1b:14:e4:51: 1d:64:30:18:a2:90:97:07:17:45:77:a2:e7:04:6f:49:56:32: 98:8e:1a:7c:4d:42:4d:64:3a:26:fe:92:eb:51:3e:82:37:2f: 24:e0:2f:9b:38:72:8b:6e:22:79:4e:36:e4:54:da:4e:1d:cc: c7:58:e4:1a:72:0f:af:89:bc:fa:00:6e:7b:21:07:91:2e:d0: d7:6e:6c:ac:fb:85:39:68:ef:74:2e:7f:5c:5b:19:0a:d3:67: 1b:cb:50:23:66:11:0e:32:38:8b:2d:69:0e:56:a3:04:9d:8f: 7e:55:89:28:6f:8e:02:af:ae:6d:e8:0c:6e:c1:d4:23:e1:ca: b6:45:24:d8:a5:e9:d9:d2:bc:c6:2b:27:b0:16:af:a0:0d:7a: b0:bd:44:a3:97:63:62:66:fc:fb:14:92:fa:2f:89:03:6f:02: eb:0a:8c:df:74:15:8d:1b:a1:dd:c0:60:e4:14:39:0a:7a:9e: a2:ab:45:21:05:32:de:90:d3:04:81:f8:dc:6a:e7:08:36:65: a2:d6:0d:21:38:fb:02:b2:33:e6:b7:91:e8:ce:7c:f7:a6:e9: 3e:c3:a7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcR68i9ePqh/tN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk OWQ2Yzk5N2MtNzdiOS00NGVkLWE5MmMtZmY2ODE4ZjMzNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDGMxdB0nBnRJ4UbkmrMxNGpwVexDbskMUMd skQjGLrj58BNhZuJAOcdQ/aYuvoKApVcuKQsR7gYy+Sx2X+PLfgLrSsZhmXMFR6C UgAn4+6zbn/f1dMJ5pqsp54XO6G4+rfPb/xgF4j8xriR6e7e4om5+fXVsP6eNgJR kNXv22p4KdxIJFvfH8YPn4tQpon+1mpqOp0G8MLNADoV1JYqw4FyIVSyKrGIzjbX vaYoBZUgzrlj8VT0XaGODYEpQj+OBBDc979KtPkwPKgVGUybdReH3JlVoUV0VoV1 3umo58QbHI1bfsrh4Caay0HjS/yHlCxP2UO7PHFDdpTxsajmzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL151WbAQHABg8aCnZELqnKhDjnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZjMwNjYyOGYtNmVlOC0z MWU1LTgxNzEtZTY2NDhkZDYwZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+W2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXaXAn1GQzD2rhi9Tq+80qA/IeRRz61iCJhC1+qJNW0GxTkUR1kMBii kJcHF0V3oucEb0lWMpiOGnxNQk1kOib+kutRPoI3LyTgL5s4cotuInlONuRU2k4d zMdY5BpyD6+JvPoAbnshB5Eu0NdubKz7hTlo73Quf1xbGQrTZxvLUCNmEQ4yOIst aQ5WowSdj35ViShvjgKvrm3oDG7B1CPhyrZFJNil6dnSvMYrJ7AWr6ANerC9RKOX Y2Jm/PsUkvoviQNvAusKjN90FY0bod3AYOQUOQp6nqKrRSEFMt6Q0wSB+Nxq5wg2 ZaLWDSE4+wKyM+a3kejOfPem6T7Dp9Y= -----END CERTIFICATE-----Generated at Wed Aug 20 11:55:20 2025 by rpki-client