$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa File: fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa (raw, json) Hash identifier: 8EH2JhREOglMiK/wp0DnOeuaIkBKKkIndIAPOQj5qcI= Subject key identifier: 32:4C:E2:E0:26:1D:5D:AB:80:21:CA:31:67:D9:3B:22:63:2F:66:E2 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AC8767A9B98734AF24BBFD100 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 31898 IP address blocks: 131.229.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:7a:9b:98:73:4a:f2:4b:bf:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=31d9dcec-ec05-4763-9936-7dc6a34bbce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:75:72:8a:b5:6c:f6:9b:cc:c0:5c:04:88: 46:cf:de:54:ef:73:94:71:49:db:0f:8d:78:69:8a: ac:eb:63:a0:a1:97:9c:92:f9:4c:c6:d9:2a:ee:27: 49:06:8f:20:ea:9a:b5:33:dd:1b:ee:96:36:d2:60: c8:8e:79:e5:4f:8c:ac:3b:a3:44:75:33:69:13:d2: 6d:c8:0f:9b:e8:41:98:fb:2b:61:b6:0b:37:2e:16: 93:22:c5:f8:e0:f0:35:a5:a3:b8:f7:a9:6b:26:6b: 56:d0:fc:46:ca:bb:20:20:b0:2b:ee:db:b5:8a:12: ad:8b:d3:f1:40:83:ff:d1:1c:d1:28:79:54:cd:48: b5:80:e9:1e:83:14:c9:9a:30:88:2b:00:2e:19:f3: 69:9b:1f:14:43:22:7d:c3:15:77:27:d1:d4:7e:f2: c0:52:60:5a:e7:e0:9b:d7:c8:96:25:d4:f0:33:f3: b3:ff:96:dd:e8:6a:47:59:b9:94:ae:1b:35:68:0d: dc:b4:09:ec:5b:2b:a4:31:56:75:6d:e4:6a:3f:1c: d1:05:76:a1:f1:b5:f7:07:3a:71:88:4c:46:0b:c9: fd:c0:04:89:41:44:af:12:35:56:95:90:3b:67:d3: 44:a9:9a:4f:5d:23:48:f9:5a:b5:01:91:ae:92:46: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4C:E2:E0:26:1D:5D:AB:80:21:CA:31:67:D9:3B:22:63:2F:66:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f1:dc:b9:fd:35:c9:35:26:12:a9:dd:e3:d5:07:56:36:47: f2:db:26:a8:a7:25:2d:fe:c1:37:8c:e2:ae:87:c1:34:77:15: 95:e6:e2:6f:a0:2b:cf:e5:2c:ca:a7:0d:56:66:1a:af:d8:a0: 11:e5:57:db:92:50:55:df:63:55:e0:4e:26:92:e4:6b:fc:92: 9b:7d:9b:92:d6:05:64:a9:31:bb:c5:7b:b9:31:f5:1a:9e:da: a7:f2:42:2a:7d:f2:df:8c:00:89:d4:c8:35:b7:ea:a0:13:11: 12:09:85:0b:65:9b:fd:78:15:df:bf:a5:55:2c:d2:73:e0:f1: 12:73:fd:7c:e0:0c:20:39:23:9e:1b:c7:7f:73:6d:56:f4:60: 85:2b:cc:78:57:f1:9c:6e:43:e9:f5:5f:83:db:5b:63:06:c9: 4a:3b:b3:13:ec:e7:18:60:b1:0a:3b:c6:de:83:d3:47:ba:7f: e9:7e:77:77:c2:1d:b2:11:a3:8c:aa:13:d8:88:29:41:f7:77: d0:c1:8d:04:3e:c3:48:3c:fd:6c:44:e9:fe:97:1e:8b:11:ae: 2a:7a:dc:d5:7e:cf:96:fc:6e:6c:2a:fa:b7:3b:9c:04:cc:11: 45:7b:1e:90:c2:e3:0c:ae:00:c3:f0:1a:8c:ff:2a:4a:89:af: 06:31:bf:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnqbmHNK8ku/0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzFkOWRjZWMtZWMwNS00NzYzLTk5MzYtN2RjNmEzNGJiY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCJ1coq1bPabzMBcBIhGz95U73OUcUnbD414 aYqs62OgoZeckvlMxtkq7idJBo8g6pq1M90b7pY20mDIjnnlT4ysO6NEdTNpE9Jt yA+b6EGY+ythtgs3LhaTIsX44PA1paO496lrJmtW0PxGyrsgILAr7tu1ihKti9Px QIP/0RzRKHlUzUi1gOkegxTJmjCIKwAuGfNpmx8UQyJ9wxV3J9HUfvLAUmBa5+Cb 18iWJdTwM/Oz/5bd6GpHWbmUrhs1aA3ctAnsWyukMVZ1beRqPxzRBXah8bX3Bzpx iExGC8n9wASJQUSvEjVWlZA7Z9NEqZpPXSNI+Vq1AZGukkYT6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJM4uAmHV2rgCHKMWfZOyJjL2biMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZmEwYThhZTQtZWMwNi0z MWU4LWFhNjQtOTQwZDgyODk3MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzx3Ln9Nck1JhKp3ePVB1Y2R/LbJqinJS3+wTeM4q6HwTR3FZXm4m+g K8/lLMqnDVZmGq/YoBHlV9uSUFXfY1XgTiaS5Gv8kpt9m5LWBWSpMbvFe7kx9Rqe 2qfyQip98t+MAInUyDW36qATERIJhQtlm/14Fd+/pVUs0nPg8RJz/XzgDCA5I54b x39zbVb0YIUrzHhX8ZxuQ+n1X4PbW2MGyUo7sxPs5xhgsQo7xt6D00e6f+l+d3fC HbIRo4yqE9iIKUH3d9DBjQQ+w0g8/WxE6f6XHosRrip63NV+z5b8bmwq+rc7nATM EUV7HpDC4wyuAMPwGoz/KkqJrwYxv5Q= -----END CERTIFICATE-----Generated at Wed Aug 20 07:56:29 2025 by rpki-client