$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7af865f2-4504-3b1d-9084-2d5383aad8ec.roa File: 7af865f2-4504-3b1d-9084-2d5383aad8ec.roa (raw, json) Hash identifier: 4AAGg/zpMMO1+DW8JTJYWTnoSc2rkYngrVVlhjLOG1w= Subject key identifier: 77:EB:93:7F:CB:A3:5C:CF:A1:D1:0E:9E:96:CE:6A:C9:39:B5:AD:49 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B87B21695ADF74BB50713EB40 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7af865f2-4504-3b1d-9084-2d5383aad8ec.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 131.229.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:16:95:ad:f7:4b:b5:07:13:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=a7f0940e-325d-43f1-9e89-12a3eaad7fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:91:b4:a1:43:47:5b:ca:e1:45:a9:04:2f:2c: f6:de:b2:04:ca:52:5e:a7:1f:51:31:74:50:b7:07: 37:37:29:6c:e0:cc:bb:59:3d:95:b4:d5:2a:bc:6d: 31:ad:7e:01:2c:24:7c:ab:fa:05:46:f1:ba:de:53: 45:1d:4e:55:a0:dd:3a:72:57:35:7e:d9:c3:1d:36: ce:17:1a:b9:aa:a1:46:b9:f9:5b:2d:f1:78:51:d5: c1:af:87:42:1c:f2:00:36:30:7b:37:de:bb:ce:a2: a6:50:6d:c1:4f:b2:1c:22:be:07:7f:6a:65:ec:23: 9f:2b:23:b1:a7:0d:33:d9:e5:95:5f:b5:52:76:b2: 24:60:8b:22:4d:1b:28:dd:cb:6e:d4:c3:bb:5b:d8: 24:9b:8a:e8:d3:1a:7d:df:83:03:54:50:53:89:4a: 6b:52:da:e3:41:0f:7c:cc:c0:48:92:ef:57:f0:00: e0:f7:15:ea:74:74:b6:3e:ce:cb:26:28:1a:d4:91: 7c:e8:5e:e8:4b:eb:d3:d9:98:d0:b8:d6:1a:64:b8: 8d:78:c3:f8:9c:f9:2b:9e:ee:fa:5c:0c:50:5a:80: 69:de:12:6c:98:d4:ff:28:90:88:5b:1e:c3:48:d3: c1:cd:37:83:7e:77:ae:08:cd:ef:21:59:79:67:87: 38:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EB:93:7F:CB:A3:5C:CF:A1:D1:0E:9E:96:CE:6A:C9:39:B5:AD:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7af865f2-4504-3b1d-9084-2d5383aad8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ef:4f:5f:4c:95:78:84:d9:0b:2a:5e:6d:e5:bf:33:15:0e: b5:37:a4:54:47:d4:2f:fe:ac:ec:5a:b1:e4:0e:1d:f8:26:cd: 24:a4:b6:6a:8b:93:c6:91:f4:57:fc:d6:41:13:82:58:42:3b: 68:52:b7:ae:93:0a:ef:82:83:bd:73:9f:4b:22:2a:16:8d:09: bd:92:86:cf:15:b6:b6:52:92:ac:26:70:fa:79:27:49:76:19: dd:98:a1:a9:43:2f:40:62:86:ff:8d:3f:96:d7:99:8f:7c:c9: c1:0a:79:ca:e3:2b:ce:2e:5c:11:ab:7e:31:91:26:ce:d4:2f: 04:0c:7d:35:b4:71:74:c7:3b:6a:7c:c9:55:ea:36:67:18:61: 35:e0:24:8e:03:d0:7e:e3:f2:e3:40:39:d7:0e:cd:ba:ca:b0: 75:18:9a:d7:1e:1c:ae:15:db:49:d7:c0:83:4c:a7:59:ff:0d: 47:fc:44:25:63:39:42:26:96:dc:90:a7:ee:1b:a0:d9:63:74: 1f:6e:7f:18:3d:d7:a3:e0:12:64:bc:8e:b7:46:98:31:ee:3c: a8:02:c6:58:f2:9b:90:ed:61:b3:fc:a1:e7:5f:e7:c6:48:26: 58:ef:b5:6b:46:99:0d:e2:d4:20:06:01:ce:f6:53:00:fc:dd: c0:81:43:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHshaVrfdLtQcT60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YTdmMDk0MGUtMzI1ZC00M2YxLTllODktMTJhM2VhYWQ3ZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZG0oUNHW8rhRakELyz23rIEylJepx9RMXRQ twc3Nyls4My7WT2VtNUqvG0xrX4BLCR8q/oFRvG63lNFHU5VoN06clc1ftnDHTbO Fxq5qqFGuflbLfF4UdXBr4dCHPIANjB7N967zqKmUG3BT7IcIr4Hf2pl7COfKyOx pw0z2eWVX7VSdrIkYIsiTRso3ctu1MO7W9gkm4ro0xp934MDVFBTiUprUtrjQQ98 zMBIku9X8ADg9xXqdHS2Ps7LJiga1JF86F7oS+vT2ZjQuNYaZLiNeMP4nPkrnu76 XAxQWoBp3hJsmNT/KJCIWx7DSNPBzTeDfneuCM3vIVl5Z4c4gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfrk3/Lo1zPodEOnpbOask5ta1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvN2FmODY1ZjItNDUwNC0z YjFkLTkwODQtMmQ1MzgzYWFkOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHvT19MlXiE2QsqXm3lvzMVDrU3pFRH1C/+rOxaseQOHfgmzSSktmqL k8aR9Ff81kETglhCO2hSt66TCu+Cg71zn0siKhaNCb2Shs8VtrZSkqwmcPp5J0l2 Gd2YoalDL0Bihv+NP5bXmY98ycEKecrjK84uXBGrfjGRJs7ULwQMfTW0cXTHO2p8 yVXqNmcYYTXgJI4D0H7j8uNAOdcOzbrKsHUYmtceHK4V20nXwINMp1n/DUf8RCVj OUImltyQp+4boNljdB9ufxg916PgEmS8jrdGmDHuPKgCxljym5DtYbP8oedf58ZI JljvtWtGmQ3i1CAGAc72UwD83cCBQ+w= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:01 2025 by rpki-client