$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fe8201be-5a1c-30c6-99f9-9a37768e4d93.roa File: fe8201be-5a1c-30c6-99f9-9a37768e4d93.roa (raw, json) Hash identifier: e9/Bf21Xlszwftx/NzjIKCDl2Q0c5SARJPCkUtQ7BXY= Subject key identifier: F8:D8:AC:0B:6E:D0:45:89:86:82:E4:A4:69:77:F2:C5:6E:26:50:93 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AD0D669C68B587C5DFE219280 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fe8201be-5a1c-30c6-99f9-9a37768e4d93.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 203724 IP address blocks: 131.229.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:69:c6:8b:58:7c:5d:fe:21:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=f908cec8-f05a-417b-8b45-653e6356502c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:09:0f:bd:55:94:ec:da:80:ff:77:23:cc:fd: dc:42:52:a7:eb:da:21:20:8b:ce:87:29:63:be:ec: 2b:89:6a:eb:6b:ed:b4:86:cf:2f:c7:b7:d7:5e:fb: 46:53:4a:f7:75:09:c0:93:14:2a:28:ca:3c:16:1a: b8:2a:a7:4a:b7:4f:c0:f7:a0:4a:b9:60:d5:b8:e5: 27:9e:cd:d1:14:c7:cd:31:f2:fb:c2:3d:da:2d:15: 22:f8:8b:e6:0d:30:76:13:d3:a1:93:2d:33:ff:43: fb:52:a4:15:7b:fd:7f:95:93:ef:06:be:cc:41:6e: 6f:02:7e:cc:7f:49:6f:93:b1:a3:f4:3c:0a:35:57: a1:b5:32:c9:c1:1b:3d:69:ca:2a:36:f6:ce:68:ae: 43:31:e8:81:21:bf:1f:0a:9a:d5:41:a9:2b:8b:5b: c2:37:98:60:f8:25:91:d8:8c:18:da:11:08:2e:a1: 9e:d3:e4:7f:ae:6b:e0:60:1e:38:a0:e7:c9:e2:b5: 04:21:aa:c0:c0:d8:ff:36:79:0b:72:aa:e4:92:b9: fe:f5:89:bf:37:19:1d:40:ce:c1:55:d3:4d:a5:04: 39:ea:35:72:a2:74:53:3b:45:2e:02:1f:00:c9:56: a7:3d:69:95:e7:c8:85:e1:6b:98:30:f8:0d:ca:18: 2b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D8:AC:0B:6E:D0:45:89:86:82:E4:A4:69:77:F2:C5:6E:26:50:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fe8201be-5a1c-30c6-99f9-9a37768e4d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:39:33:64:59:f3:5c:02:98:db:81:4f:92:24:0d:c2:2a:1a: 15:93:b8:e0:cb:b1:0b:d0:63:2e:4d:1d:3b:74:2b:fa:e1:4d: b2:02:7f:4a:c6:6b:ba:dc:26:47:23:43:85:c7:5b:22:ff:37: 09:a1:39:03:66:ad:c1:92:41:6a:40:42:ea:87:87:b9:80:88: b4:38:ba:e9:10:1a:d9:f0:9d:58:3e:72:1a:0c:2b:bb:ae:8e: ab:ee:99:ed:37:b5:0f:9d:d2:94:eb:51:1d:06:5e:84:a6:27: 08:8b:23:61:4b:c7:ca:f8:fe:49:ca:6a:93:e8:62:3c:95:1b: 6e:62:f2:37:d5:a2:16:6d:91:9f:1b:7a:cd:42:5b:4f:79:af: 1f:06:63:ae:74:4a:41:5e:d8:62:9a:e4:2a:5a:c4:42:d7:ba: e1:ff:20:90:94:27:3c:99:41:ee:e1:8b:15:45:c7:8b:b2:0f: c8:cd:27:86:cd:9c:e9:99:81:69:52:5c:93:18:7c:78:db:e4: f5:0c:25:cc:59:56:c7:a6:c5:56:7d:8f:7c:57:81:aa:ac:42: f9:c5:96:07:2f:44:6a:87:bd:ec:77:de:02:28:b1:f6:b3:ac: 9f:f6:cc:f7:93:d7:cf:eb:c4:fd:10:bf:66:bf:35:19:c7:4c: 72:7f:37:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mnGi1h8Xf4hkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZjkwOGNlYzgtZjA1YS00MTdiLThiNDUtNjUzZTYzNTY1MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAkPvVWU7NqA/3cjzP3cQlKn69ohIIvOhylj vuwriWrra+20hs8vx7fXXvtGU0r3dQnAkxQqKMo8Fhq4KqdKt0/A96BKuWDVuOUn ns3RFMfNMfL7wj3aLRUi+IvmDTB2E9Ohky0z/0P7UqQVe/1/lZPvBr7MQW5vAn7M f0lvk7Gj9DwKNVehtTLJwRs9acoqNvbOaK5DMeiBIb8fCprVQakri1vCN5hg+CWR 2IwY2hEILqGe0+R/rmvgYB44oOfJ4rUEIarAwNj/NnkLcqrkkrn+9Ym/NxkdQM7B VdNNpQQ56jVyonRTO0UuAh8AyVanPWmV58iF4WuYMPgNyhgrxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjYrAtu0EWJhoLkpGl38sVuJlCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZmU4MjAxYmUtNWExYy0z MGM2LTk5ZjktOWEzNzc2OGU0ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+X3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo5M2RZ81wCmNuBT5IkDcIqGhWTuODLsQvQYy5NHTt0K/rhTbICf0rG a7rcJkcjQ4XHWyL/NwmhOQNmrcGSQWpAQuqHh7mAiLQ4uukQGtnwnVg+choMK7uu jqvume03tQ+d0pTrUR0GXoSmJwiLI2FLx8r4/knKapPoYjyVG25i8jfVohZtkZ8b es1CW095rx8GY650SkFe2GKa5CpaxELXuuH/IJCUJzyZQe7hixVFx4uyD8jNJ4bN nOmZgWlSXJMYfHjb5PUMJcxZVsemxVZ9j3xXgaqsQvnFlgcvRGqHvex33gIosfaz rJ/2zPeT18/rxP0Qv2a/NRnHTHJ/N8k= -----END CERTIFICATE-----Generated at Wed Aug 20 12:03:56 2025 by rpki-client