$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b9d1f238-e380-318c-aefa-b30a2a011b44.roa File: b9d1f238-e380-318c-aefa-b30a2a011b44.roa (raw, json) Hash identifier: yraOxBHLW9FMad7l7SCXasBKcy7KAE9Qog0uxN08u78= Subject key identifier: D8:E9:42:47:AC:B5:6F:5C:0D:8E:65:B6:D5:E2:21:B9:71:AE:96:BE Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AD0D66895EAC7E01629EE7D00 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b9d1f238-e380-318c-aefa-b30a2a011b44.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 203724 IP address blocks: 131.229.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:68:95:ea:c7:e0:16:29:ee:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=262c0661-2a36-4326-afd1-d4ceecd8510b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:63:5b:3b:d4:a3:9b:34:e7:d1:a7:e6:56:40: 96:12:e9:a2:ff:38:c9:94:1e:e7:65:86:9a:e7:4c: 08:90:8d:f2:71:01:c6:72:c4:23:54:1d:e1:27:fe: 86:7f:70:af:b8:5f:8a:52:d4:8a:63:4d:b2:a6:de: 59:d7:98:f7:22:a3:15:c0:10:a5:08:1a:55:f4:5d: 9e:7e:02:09:3e:17:74:7f:4c:6d:89:4e:a9:7d:e7: 53:6b:1d:ab:6a:2e:5e:87:a7:f8:93:3a:36:01:22: dc:93:37:77:9c:51:62:76:3c:c3:14:f4:27:df:e5: 5f:4c:10:31:a6:df:a9:16:20:be:a9:19:06:a1:9e: f3:0b:5c:3e:48:91:6c:be:f0:71:7a:d6:df:34:90: 0d:72:d2:0b:5b:a9:5a:c8:38:1c:9c:7e:d2:a6:bd: fd:45:ff:b0:1c:0e:09:21:fc:7d:64:e6:0e:90:e5: 1a:6a:30:24:14:2f:65:d9:74:ab:7b:98:cd:b0:a3: 8d:80:bb:09:fd:6f:dd:bf:02:8f:21:4b:7f:c0:29: f3:d2:e6:d4:08:33:e5:56:af:36:f4:46:20:c7:a6: 05:4c:13:28:ca:ed:c3:eb:7b:be:db:5d:49:f9:c2: ce:b8:38:0e:6d:8a:e0:ab:b4:92:33:27:2e:7f:ef: a5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E9:42:47:AC:B5:6F:5C:0D:8E:65:B6:D5:E2:21:B9:71:AE:96:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b9d1f238-e380-318c-aefa-b30a2a011b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:25:02:66:e6:c9:a9:fc:82:fc:53:42:1e:4f:3c:fa:8e:10: e3:b3:6b:eb:6f:3a:38:db:c4:8c:9e:ef:11:72:28:6f:e4:18: 59:9d:99:d0:e9:2c:42:96:ce:0a:5d:cd:58:12:de:c3:3f:ef: 42:19:08:1f:88:ae:db:cf:d5:2b:4d:62:d2:f8:18:37:6d:bd: 85:03:c8:65:91:5e:fb:58:1f:60:20:6b:61:26:47:d2:23:6d: 7b:a1:b6:d1:23:d8:35:b6:4d:b2:8b:44:8a:64:3a:89:cc:8b: 79:a7:95:dd:5c:4a:67:22:43:e5:98:0c:f0:3d:b7:1e:b8:8e: 36:ea:70:1d:5b:3e:67:09:a6:15:3a:05:31:b1:33:27:5a:8e: 62:dd:23:6a:1f:7d:ee:26:6e:1e:34:4d:36:b7:b5:e0:85:fe: 5a:92:1a:c7:fe:c1:bd:7f:cc:4e:af:8e:43:1a:21:70:ef:1e: 44:77:a5:4e:49:82:cd:a4:85:2a:7b:b3:63:d0:f2:16:f9:bf: bd:0e:47:be:5d:e5:20:21:1b:f3:1d:41:2c:20:26:98:20:1f: cf:ec:3b:f3:5f:ed:a7:92:ac:6c:57:fb:2c:85:14:3e:43:84: 2e:ee:e8:5c:e5:20:a8:82:9f:7e:e3:fc:dc:49:33:47:54:53: 84:d9:45:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1miV6sfgFinufQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MjYyYzA2NjEtMmEzNi00MzI2LWFmZDEtZDRjZWVjZDg1MTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWNbO9SjmzTn0afmVkCWEumi/zjJlB7nZYaa 50wIkI3ycQHGcsQjVB3hJ/6Gf3CvuF+KUtSKY02ypt5Z15j3IqMVwBClCBpV9F2e fgIJPhd0f0xtiU6pfedTax2rai5eh6f4kzo2ASLckzd3nFFidjzDFPQn3+VfTBAx pt+pFiC+qRkGoZ7zC1w+SJFsvvBxetbfNJANctILW6layDgcnH7Spr39Rf+wHA4J Ifx9ZOYOkOUaajAkFC9l2XSre5jNsKONgLsJ/W/dvwKPIUt/wCnz0ubUCDPlVq82 9EYgx6YFTBMoyu3D63u+211J+cLOuDgObYrgq7SSMycuf++lIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjpQkestW9cDY5lttXiIblxrpa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYjlkMWYyMzgtZTM4MC0z MThjLWFlZmEtYjMwYTJhMDExYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4lAmbmyan8gvxTQh5PPPqOEOOza+tvOjjbxIye7xFyKG/kGFmdmdDp LEKWzgpdzVgS3sM/70IZCB+IrtvP1StNYtL4GDdtvYUDyGWRXvtYH2Aga2EmR9Ij bXuhttEj2DW2TbKLRIpkOonMi3mnld1cSmciQ+WYDPA9tx64jjbqcB1bPmcJphU6 BTGxMydajmLdI2offe4mbh40TTa3teCF/lqSGsf+wb1/zE6vjkMaIXDvHkR3pU5J gs2khSp7s2PQ8hb5v70OR75d5SAhG/MdQSwgJpggH8/sO/Nf7aeSrGxX+yyFFD5D hC7u6FzlIKiCn37j/NxJM0dUU4TZRfk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:06:55 2025 by rpki-client