$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/22313cf5-ff39-3c48-950c-695a238acda7.roa File: 22313cf5-ff39-3c48-950c-695a238acda7.roa (raw, json) Hash identifier: 4F6DIeIFJQuQdrw+bTkp7vwzXUk/CRLXjpO3jV2c83M= Subject key identifier: B4:A3:A2:96:75:56:1E:BB:35:66:62:FD:93:26:7A:EA:2B:8A:04:47 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584ACF71111963A539CF3B767180 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/22313cf5-ff39-3c48-950c-695a238acda7.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 203724 IP address blocks: 131.229.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:11:19:63:a5:39:cf:3b:76:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=048e6295-4b25-4a78-a9ce-9b76a6e5a310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:88:5a:0c:52:15:82:86:26:d0:21:ab:64: c1:32:c2:0c:ad:c1:a4:81:85:78:48:87:65:ba:8b: 15:5a:99:8f:1b:0c:bb:0e:1a:c9:04:49:87:0e:41: c9:a9:1a:67:2a:0d:46:7d:f6:70:90:7c:9a:ba:4f: 44:7e:5a:87:5d:2e:c6:62:39:2c:8c:ea:a5:d3:02: e3:b5:84:1f:f7:de:d3:0f:a0:af:56:d8:b5:dd:78: b6:65:2e:4c:9a:70:51:f3:42:49:cc:40:b5:6c:ce: 29:e9:9e:fa:95:92:c9:23:4e:2f:aa:06:b1:34:0c: 39:92:2f:0f:5d:b5:cd:c1:b0:ad:e0:76:14:55:f1: 2a:d5:f0:77:15:ff:ce:cb:2a:5a:48:ff:13:9d:8d: fd:d2:31:28:b7:eb:1e:07:eb:fe:ed:0a:f0:8a:8b: c5:06:4f:ad:d1:f7:88:7e:ac:41:c4:0b:02:62:63: a0:42:1d:29:82:7c:f7:a3:f2:3c:00:1b:e4:35:59: cc:bb:62:4a:4d:e6:ab:0d:2d:4d:aa:f4:1e:22:62: d2:d4:a8:64:8b:78:07:b8:64:39:91:8d:07:24:d1: 8b:01:19:4b:17:69:55:4e:db:c3:89:d2:b1:a9:40: c7:ff:ec:35:6f:c6:d2:a1:36:aa:98:a1:85:e2:67: be:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A3:A2:96:75:56:1E:BB:35:66:62:FD:93:26:7A:EA:2B:8A:04:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/22313cf5-ff39-3c48-950c-695a238acda7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:0e:53:17:a1:97:d0:02:aa:7a:54:8b:c4:f1:1b:50:55:2b: b0:20:18:04:0f:b6:68:b6:e8:7d:ec:08:cf:7c:16:9b:21:59: 30:46:88:de:0f:f1:2a:3c:ae:18:c0:a6:55:cb:0b:c9:2f:ee: a0:07:15:3b:37:fd:40:28:0e:3b:4c:f2:55:1a:e4:5e:08:88: b1:f1:e5:b4:32:de:fc:6d:98:70:aa:80:b8:35:d1:bc:4e:ce: 3a:a0:56:b2:3c:fa:88:a1:55:46:7f:a4:70:4b:0d:c4:d7:e8: 17:8e:f4:79:c7:f9:da:74:32:73:52:ae:be:2b:99:a4:3f:b0: a0:c4:22:35:50:70:fd:a9:90:f2:56:6a:a8:8e:ca:a5:c4:18: b4:f0:a6:ea:03:bc:f9:a1:03:9d:aa:9f:a2:93:9b:74:90:6f: 60:2e:5f:7d:e3:5a:bf:48:48:88:4d:23:38:b9:76:da:f4:92: 63:8c:ef:1e:4b:7d:44:ae:ad:65:c6:5a:6b:36:72:42:df:7d: 4c:59:c8:d6:9f:5c:98:9d:9e:a8:b1:de:78:14:54:d6:7b:2d: 40:d5:16:8e:e6:60:c8:fa:64:4f:ea:46:ed:01:53:8c:de:5e: 85:df:20:36:84:b6:80:3e:e3:36:6d:e4:d0:53:e8:84:13:6c: f5:75:15:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcREZY6U5zzt2cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MDQ4ZTYyOTUtNGIyNS00YTc4LWE5Y2UtOWI3NmE2ZTVhMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX6IWgxSFYKGJtAhq2TBMsIMrcGkgYV4SIdl uosVWpmPGwy7DhrJBEmHDkHJqRpnKg1GffZwkHyauk9EflqHXS7GYjksjOql0wLj tYQf997TD6CvVti13Xi2ZS5MmnBR80JJzEC1bM4p6Z76lZLJI04vqgaxNAw5ki8P XbXNwbCt4HYUVfEq1fB3Ff/OyypaSP8TnY390jEot+seB+v+7QrwiovFBk+t0feI fqxBxAsCYmOgQh0pgnz3o/I8ABvkNVnMu2JKTearDS1NqvQeImLS1Khki3gHuGQ5 kY0HJNGLARlLF2lVTtvDidKxqUDH/+w1b8bSoTaqmKGF4me+5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSjopZ1Vh67NWZi/ZMmeuorigRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMjIzMTNjZjUtZmYzOS0z YzQ4LTk1MGMtNjk1YTIzOGFjZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsOUxehl9ACqnpUi8TxG1BVK7AgGAQPtmi26H3sCM98FpshWTBGiN4P 8So8rhjAplXLC8kv7qAHFTs3/UAoDjtM8lUa5F4IiLHx5bQy3vxtmHCqgLg10bxO zjqgVrI8+oihVUZ/pHBLDcTX6BeO9HnH+dp0MnNSrr4rmaQ/sKDEIjVQcP2pkPJW aqiOyqXEGLTwpuoDvPmhA52qn6KTm3SQb2AuX33jWr9ISIhNIzi5dtr0kmOM7x5L fUSurWXGWms2ckLffUxZyNafXJidnqix3ngUVNZ7LUDVFo7mYMj6ZE/qRu0BU4ze XoXfIDaEtoA+4zZt5NBT6IQTbPV1FSw= -----END CERTIFICATE-----Generated at Sat Aug 23 22:01:50 2025 by rpki-client