$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b8e7a832-b563-35ca-a4f1-da9b58d25854.roa File: b8e7a832-b563-35ca-a4f1-da9b58d25854.roa (raw, json) Hash identifier: Lb8BSQqqFurxdsVJxQzXTViWxN4x7fZNE5CVDbxIUMU= Subject key identifier: F6:42:7B:A1:EA:A6:75:61:02:DC:A7:E8:2D:71:00:88:11:50:21:D7 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B84E76B1396B075592A0D0980 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b8e7a832-b563-35ca-a4f1-da9b58d25854.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 131.229.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6b:13:96:b0:75:59:2a:0d:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=b3047412-fe41-4b90-ab81-85a56ecd22b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d4:fc:6a:41:b2:9c:3f:ff:e9:f7:8c:55:f8: c2:30:b9:d5:bf:45:5a:ad:81:c5:c5:b7:77:14:69: 51:14:da:3f:e0:85:d1:3d:15:d3:77:e1:2d:93:42: 90:ba:4d:b8:50:93:d8:2a:49:98:89:4b:6b:0c:4a: e8:50:63:e6:e2:41:8e:bc:3c:f4:60:f0:54:b8:6b: 98:b4:6c:28:de:7f:af:f5:68:25:c0:99:84:db:64: b5:5b:5f:62:20:ec:aa:a9:1a:4e:9a:67:7b:1b:f4: 42:ab:12:63:21:86:33:1c:74:38:1d:46:a8:81:03: 08:05:4f:89:07:a1:53:e0:90:84:2d:cc:dc:0c:40: 76:84:68:d5:a7:f4:9d:f7:73:dd:fd:45:e5:3b:b4: c3:5f:90:ac:11:9a:de:5f:61:17:ec:e8:00:c1:1a: fa:5c:2b:a2:14:65:f7:36:98:22:99:3f:b9:f0:37: 4a:e7:a2:50:0f:11:c4:68:3c:2d:58:8b:e3:fa:e9: 9e:b5:58:d0:b3:61:5a:5c:7a:80:74:30:fe:b5:be: 45:df:43:a0:0e:e5:da:7c:b9:44:2b:86:26:35:7b: bc:82:1f:12:8d:75:15:d4:87:b9:26:1e:6b:a4:61: 24:81:bd:82:d8:fd:b9:19:53:06:cc:0b:db:bc:ec: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:42:7B:A1:EA:A6:75:61:02:DC:A7:E8:2D:71:00:88:11:50:21:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b8e7a832-b563-35ca-a4f1-da9b58d25854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:8b:c5:c0:cd:5f:c5:46:06:c0:c9:25:b8:cd:a8:11:0f:6e: cd:36:60:2e:1e:8b:47:67:e6:2e:eb:c2:8b:09:9e:e4:27:b5: 51:36:67:53:d1:c2:54:c7:7c:78:8b:10:99:35:00:3f:d4:8f: e2:59:d0:6a:a2:6f:db:0a:65:c4:9a:a2:30:cf:7d:e3:c5:89: 03:40:55:e3:75:f3:93:31:93:bf:28:89:f1:d5:ab:cf:89:a1: c2:2e:5e:80:d6:db:9d:34:4b:3c:05:be:73:1d:2c:f7:0d:be: f4:18:ae:c3:b0:ed:d8:fc:d1:df:45:d8:67:8b:d9:92:ef:51: e5:d4:5e:a3:b4:50:df:d9:86:71:b4:3e:6d:13:be:7a:55:fd: 13:72:20:a5:c1:83:5e:c2:4e:fd:22:6c:a7:ed:29:0c:2a:48: 7f:4f:50:13:0a:e4:b6:44:1d:85:4c:06:cc:53:f0:c8:3d:44: 46:d1:f2:2b:ee:49:16:2a:48:90:ce:44:20:f3:4e:95:cf:66: f0:7e:83:69:36:28:45:e5:4f:21:73:14:94:b0:9f:59:8c:89: d5:da:80:92:24:f4:ae:4e:61:c5:48:8f:fa:f0:f6:eb:d2:b7: 0b:b7:93:86:90:54:1b:0d:ea:17:89:07:ea:4b:f8:61:84:a2: 3d:07:89:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52sTlrB1WSoNCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YjMwNDc0MTItZmU0MS00YjkwLWFiODEtODVhNTZlY2QyMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNT8akGynD//6feMVfjCMLnVv0VarYHFxbd3 FGlRFNo/4IXRPRXTd+Etk0KQuk24UJPYKkmYiUtrDEroUGPm4kGOvDz0YPBUuGuY tGwo3n+v9WglwJmE22S1W19iIOyqqRpOmmd7G/RCqxJjIYYzHHQ4HUaogQMIBU+J B6FT4JCELczcDEB2hGjVp/Sd93Pd/UXlO7TDX5CsEZreX2EX7OgAwRr6XCuiFGX3 NpgimT+58DdK56JQDxHEaDwtWIvj+umetVjQs2FaXHqAdDD+tb5F30OgDuXafLlE K4YmNXu8gh8SjXUV1Ie5Jh5rpGEkgb2C2P25GVMGzAvbvOzGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZCe6HqpnVhAtyn6C1xAIgRUCHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYjhlN2E4MzItYjU2My0z NWNhLWE0ZjEtZGE5YjU4ZDI1ODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGLxcDNX8VGBsDJJbjNqBEPbs02YC4ei0dn5i7rwosJnuQntVE2Z1PR wlTHfHiLEJk1AD/Uj+JZ0Gqib9sKZcSaojDPfePFiQNAVeN185Mxk78oifHVq8+J ocIuXoDW2500SzwFvnMdLPcNvvQYrsOw7dj80d9F2GeL2ZLvUeXUXqO0UN/ZhnG0 Pm0TvnpV/RNyIKXBg17CTv0ibKftKQwqSH9PUBMK5LZEHYVMBsxT8Mg9REbR8ivu SRYqSJDORCDzTpXPZvB+g2k2KEXlTyFzFJSwn1mMidXagJIk9K5OYcVIj/rw9uvS twu3k4aQVBsN6heJB+pL+GGEoj0HicI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:02 2025 by rpki-client