$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa File: 895fff21-ab62-3bfa-989a-a161b089ba1f.roa (raw, json) Hash identifier: rernq9ytjIVCe98DfD2bF3oCIak/A7JMxmzywitXgtU= Subject key identifier: 3E:B3:4B:35:BB:B4:EF:CD:78:C6:DE:03:03:9D:35:30:F1:C1:14:23 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B84E79B2063A437B7B8A442E0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 131.229.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:9b:20:63:a4:37:b7:b8:a4:42:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=ea2859ec-a909-40f3-a605-51a6469fee55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:ef:c2:cc:c5:1e:3a:0f:be:47:99:06:18: 5b:f3:2e:75:9b:aa:cb:b7:f4:b4:78:2d:7c:34:b1: 25:75:0c:d4:07:b7:52:62:37:0d:7c:1c:0f:a6:7c: 38:a7:01:ed:3d:7b:0b:c5:52:46:f6:91:02:0b:12: e2:c8:ce:85:38:4a:70:ff:fd:46:6f:a0:54:b9:2d: 63:6e:83:46:33:26:7b:1c:1a:56:dd:c4:38:fb:be: f3:85:c2:2a:aa:3a:ee:29:5c:e0:27:84:b1:7a:b0: ac:83:98:98:b0:90:a0:c4:54:9b:12:36:a6:e9:71: ee:1c:99:9e:56:cb:10:97:78:ac:10:b8:77:47:19: 09:03:04:fa:fa:e2:cc:1c:f5:77:99:11:b7:82:f1: 95:ba:b2:69:0d:a8:3f:05:68:c0:85:c5:6f:aa:c7: 44:df:23:76:6c:d1:e6:ec:15:e1:82:a5:6e:d7:13: 20:7d:83:17:ee:1c:3a:d5:16:b9:ff:29:e5:d4:8d: 96:1e:b9:dc:7d:d6:f0:a8:c1:77:8e:3a:22:77:6a: 4a:62:44:7a:8b:4e:fa:bc:fe:56:ad:73:26:f1:ea: 04:81:ca:4c:67:7f:88:ab:7c:54:69:80:ec:ae:fc: b3:a2:2b:dc:22:09:6f:59:15:ae:ab:7c:a0:0b:fc: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B3:4B:35:BB:B4:EF:CD:78:C6:DE:03:03:9D:35:30:F1:C1:14:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2b:55:cf:6c:52:f5:ec:14:a2:ae:04:f1:59:02:c4:ed:91: 55:90:74:44:10:f2:66:9e:45:9c:68:0b:ad:dc:d7:a9:64:10: 28:48:61:2f:26:ad:60:2b:68:9d:d4:2f:27:44:09:c2:1c:b0: 0a:79:2e:aa:2f:49:0e:e2:df:05:33:f8:5a:fa:80:6c:6e:c0: b7:05:51:2b:92:9e:d7:88:ea:29:7f:26:97:74:8d:9f:2b:70: 97:0e:9b:c3:d8:e6:da:01:87:e2:04:4b:1e:eb:75:57:46:da: 84:1d:bc:ce:cd:77:07:a5:ab:f1:f0:00:1f:0f:d6:4c:36:f9: 1a:41:e3:8b:4f:b1:7d:27:34:a8:5d:08:5a:ff:10:1a:68:f2: a4:e8:51:0f:55:f6:9f:6a:da:c4:7d:d3:6e:18:d4:b1:67:57: 29:65:5e:81:d0:61:f3:c5:1b:dd:57:92:1b:10:c2:d2:5d:c7: 68:84:8f:a7:0b:6d:47:4d:e7:95:3e:1a:1a:f8:89:b7:8a:61: f3:f8:ba:35:ec:89:75:c1:04:84:33:31:c0:39:0b:16:bf:f3: ed:6c:a2:55:02:b7:f6:94:78:58:99:ac:7c:3a:09:21:5f:d8: 1e:6c:36:40:d6:5c:a5:85:13:cd:13:33:7c:7a:d8:84:ed:2c: b6:b3:4e:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE55sgY6Q3t7ikQuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZWEyODU5ZWMtYTkwOS00MGYzLWE2MDUtNTFhNjQ2OWZlZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSHvwszFHjoPvkeZBhhb8y51m6rLt/S0eC18 NLEldQzUB7dSYjcNfBwPpnw4pwHtPXsLxVJG9pECCxLiyM6FOEpw//1Gb6BUuS1j boNGMyZ7HBpW3cQ4+77zhcIqqjruKVzgJ4SxerCsg5iYsJCgxFSbEjam6XHuHJme VssQl3isELh3RxkJAwT6+uLMHPV3mRG3gvGVurJpDag/BWjAhcVvqsdE3yN2bNHm 7BXhgqVu1xMgfYMX7hw61Ra5/ynl1I2WHrncfdbwqMF3jjoid2pKYkR6i076vP5W rXMm8eoEgcpMZ3+Iq3xUaYDsrvyzoivcIglvWRWuq3ygC/xorQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6zSzW7tO/NeMbeAwOdNTDxwRQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvODk1ZmZmMjEtYWI2Mi0z YmZhLTk4OWEtYTE2MWIwODliYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcrVc9sUvXsFKKuBPFZAsTtkVWQdEQQ8maeRZxoC63c16lkEChIYS8m rWAraJ3ULydECcIcsAp5LqovSQ7i3wUz+Fr6gGxuwLcFUSuSnteI6il/Jpd0jZ8r cJcOm8PY5toBh+IESx7rdVdG2oQdvM7Ndwelq/HwAB8P1kw2+RpB44tPsX0nNKhd CFr/EBpo8qToUQ9V9p9q2sR9024Y1LFnVyllXoHQYfPFG91XkhsQwtJdx2iEj6cL bUdN55U+Ghr4ibeKYfP4ujXsiXXBBIQzMcA5Cxa/8+1solUCt/aUeFiZrHw6CSFf 2B5sNkDWXKWFE80TM3x62ITtLLazTqE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:03:21 2025 by rpki-client