$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c8921a3d-dea5-3e6a-b221-c11c8c2046b9.roa File: c8921a3d-dea5-3e6a-b221-c11c8c2046b9.roa (raw, json) Hash identifier: ra7wnIYZFkgSMcsqc7M/gDA4tNHiqgz11iAR6SSQnOI= Subject key identifier: E2:CD:94:F9:4C:33:5C:E4:3E:84:48:20:D1:AF:2D:6B:2A:57:1E:9E Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AD0D669B53DB69F1C5D3AD580 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c8921a3d-dea5-3e6a-b221-c11c8c2046b9.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 203724 IP address blocks: 131.229.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:69:b5:3d:b6:9f:1c:5d:3a:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=495ede28-b745-45be-aa2a-7915aa38a01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:84:0e:e9:be:51:3e:09:3e:f8:af:d9:ce: 1d:49:70:1b:9b:e3:ff:1a:de:e1:c5:89:27:d2:83: ab:7a:8f:aa:5a:d3:f9:e4:78:bf:5b:f3:f8:9c:2a: f4:d1:53:98:cc:3f:25:0f:c9:5a:e1:dc:c3:15:26: a6:14:57:a7:ad:0f:67:e4:e5:da:b3:51:55:ed:bc: 61:20:12:a0:7f:37:ae:32:51:6d:e1:28:96:17:bb: 0c:25:d0:30:d4:90:41:72:28:c8:68:91:47:91:af: 8d:04:b2:1b:54:84:26:26:55:c3:62:66:dd:60:51: dc:d5:45:30:b5:ab:a7:5e:ae:3b:47:9e:e6:6e:37: d6:c5:06:a9:99:5f:98:9c:62:84:f9:1b:d5:05:aa: e4:e2:c0:85:95:d8:72:53:5a:03:e9:96:20:f9:ee: e5:4c:2e:6b:96:1b:d4:41:aa:e9:ef:08:c3:f7:e7: 27:03:62:04:44:36:87:66:21:f5:d6:8d:c4:8a:d2: 7e:7b:84:2f:1f:3b:39:ed:7c:ed:69:fa:11:87:b9: d5:36:42:b6:32:c3:0b:02:6f:55:21:69:48:dc:4b: 4d:d0:39:96:ff:fc:b1:00:5a:19:27:b8:1b:64:53: 46:f4:18:3e:08:ab:96:42:c2:ef:0e:2f:7c:0a:d3: 73:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CD:94:F9:4C:33:5C:E4:3E:84:48:20:D1:AF:2D:6B:2A:57:1E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c8921a3d-dea5-3e6a-b221-c11c8c2046b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e0:2e:a8:54:8f:c9:f6:72:45:5f:3d:e2:f4:55:07:e5:f4: 06:f9:68:f8:46:29:96:1f:a5:c8:11:20:18:16:16:98:51:70: a4:45:e5:08:ab:c5:ec:6a:1f:3c:f6:5e:a6:99:fc:67:51:4e: 80:b5:7d:3d:9e:ce:88:a0:ff:10:47:30:33:43:dc:3b:fb:e0: 01:c2:9b:40:1d:a1:38:d3:f5:d9:7a:f6:78:1a:56:d6:61:da: 56:5c:c0:c0:ba:3e:f9:c8:85:99:af:48:c9:63:2f:f4:78:8a: 20:81:f8:ce:5d:89:ad:5b:9a:5a:13:a6:41:11:04:ea:ff:bd: e2:49:2b:4e:6c:61:2a:1e:17:2a:83:e8:18:5c:29:ec:af:60: 24:0b:a4:52:c7:bb:87:cd:29:01:3c:2f:7e:4e:2e:b4:08:ed: 3c:ad:9c:74:52:00:57:8c:05:c4:9f:cd:a6:fb:17:3d:aa:db: 91:8a:d1:5c:a3:8f:29:7f:91:1e:1f:c1:4d:a6:dd:95:35:6b: 4c:2d:e9:18:08:63:20:d9:b5:be:fc:ed:e7:fc:c4:d2:db:af: 87:f1:06:20:30:3d:ee:aa:86:55:6b:67:ec:19:c1:76:7e:ff: c6:18:26:02:2f:e3:93:0d:be:f2:bf:1e:98:83:14:81:6c:75: 98:9b:35:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mm1PbafHF061YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NDk1ZWRlMjgtYjc0NS00NWJlLWFhMmEtNzkxNWFhMzhhMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli6EDum+UT4JPviv2c4dSXAbm+P/Gt7hxYkn 0oOreo+qWtP55Hi/W/P4nCr00VOYzD8lD8la4dzDFSamFFenrQ9n5OXas1FV7bxh IBKgfzeuMlFt4SiWF7sMJdAw1JBBcijIaJFHka+NBLIbVIQmJlXDYmbdYFHc1UUw taunXq47R57mbjfWxQapmV+YnGKE+RvVBark4sCFldhyU1oD6ZYg+e7lTC5rlhvU Qarp7wjD9+cnA2IERDaHZiH11o3EitJ+e4QvHzs57XztafoRh7nVNkK2MsMLAm9V IWlI3EtN0DmW//yxAFoZJ7gbZFNG9Bg+CKuWQsLvDi98CtNznQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLNlPlMM1zkPoRIINGvLWsqVx6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYzg5MjFhM2QtZGVhNS0z ZTZhLWIyMjEtYzExYzhjMjA0NmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfgLqhUj8n2ckVfPeL0VQfl9Ab5aPhGKZYfpcgRIBgWFphRcKRF5Qir xexqHzz2XqaZ/GdRToC1fT2ezoig/xBHMDND3Dv74AHCm0AdoTjT9dl69ngaVtZh 2lZcwMC6PvnIhZmvSMljL/R4iiCB+M5dia1bmloTpkERBOr/veJJK05sYSoeFyqD 6BhcKeyvYCQLpFLHu4fNKQE8L35OLrQI7TytnHRSAFeMBcSfzab7Fz2q25GK0Vyj jyl/kR4fwU2m3ZU1a0wt6RgIYyDZtb787ef8xNLbr4fxBiAwPe6qhlVrZ+wZwXZ+ /8YYJgIv45MNvvK/HpiDFIFsdZibNfY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:46 2025 by rpki-client