$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa File: 4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa (raw, json) Hash identifier: 7Asq+t39Yo7k/F6pbcDDIAgbmzf/FmFOLm0BIV8ytfw= Subject key identifier: 5F:BF:F2:03:51:27:90:8B:7A:3E:9A:FE:FF:99:07:7A:04:1E:13:E9 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584AB650F8F361043100567B7000 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 399381 IP address blocks: 131.201.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f8:f3:61:04:31:00:56:7b:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=ea41b0fa-5318-4dcd-83b1-7d8129e63c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:8f:18:b8:e9:7b:0b:83:8c:cf:3e:82:91: a1:4b:21:38:95:cc:43:2b:d5:9c:b6:65:80:f2:7d: f7:cc:8f:a8:f4:a1:7c:2e:cf:e5:af:4e:58:93:84: bd:25:60:41:0a:0f:b4:2a:56:52:1d:ff:59:bb:59: 70:21:8c:ac:01:42:80:9f:c7:f2:1c:26:9f:d5:ee: b2:b2:9f:7e:03:ff:0d:3c:7a:41:53:ac:be:4c:6a: bc:bb:41:a9:25:17:0c:b1:33:81:31:a4:91:58:f8: 35:5d:fb:6d:88:71:d3:af:2f:7b:58:8e:29:a4:fc: a0:f5:76:6d:3d:26:fb:49:e8:6b:8b:16:24:cc:c4: ae:5f:82:7a:bb:99:49:a5:64:6e:2e:d9:ee:13:06: 6a:8c:ca:9d:ee:87:f7:7c:7c:e7:89:16:df:57:fe: 64:cd:37:59:f1:68:ab:9c:93:13:59:8f:6f:48:75: e4:46:f5:e8:ef:40:31:7b:64:32:95:63:9c:74:56: c5:01:06:1d:50:17:c1:fb:ca:6d:52:80:a8:7d:65: 8b:da:34:8e:8f:f8:15:6a:2e:f7:cf:56:92:c9:8f: d9:a6:76:e9:25:a3:74:1d:56:25:e3:ec:c5:5d:07: ce:60:36:44:e3:ba:73:ce:95:77:36:52:e4:04:6b: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BF:F2:03:51:27:90:8B:7A:3E:9A:FE:FF:99:07:7A:04:1E:13:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b4:3e:c7:44:5b:d6:7b:29:15:03:12:f2:52:5d:97:14:b8: 61:84:d2:c2:8c:6d:ae:0d:a7:4f:12:29:c8:52:29:dc:b1:8c: 48:53:1a:41:8c:c3:e4:76:43:39:fb:5b:8b:07:f2:01:01:56: fd:f1:b1:94:cf:a9:83:3b:aa:19:43:fd:7a:e6:34:f4:a4:87: b8:93:b1:cf:df:98:27:0c:85:0e:70:7a:5b:02:92:62:10:f0: c0:aa:f4:6c:03:13:df:64:49:d7:14:02:d0:82:a8:7c:fa:b6: 94:c2:6d:71:d2:af:da:a4:8b:45:29:67:6e:cf:ac:60:f0:39: d4:8d:4b:60:87:3f:8c:92:7c:f7:da:91:4a:d5:ba:57:6e:73: c0:e4:5b:36:4a:09:56:14:e7:45:65:54:f4:98:3f:58:20:89: 06:91:a3:41:19:39:97:8d:00:73:ad:04:e7:76:80:9b:13:35: f7:2e:ca:3c:6b:61:ac:60:c9:6c:e2:b7:50:1d:a0:83:fe:62: fb:96:27:90:ae:1c:cd:ec:67:65:e2:83:8c:aa:bc:7d:34:f2: b9:bc:76:07:49:82:53:2d:36:76:0a:3c:85:34:a6:c7:5d:8b: 54:2b:a5:49:e6:3b:ec:d0:b0:39:be:e3:2a:9d:43:79:dc:ee: 47:46:a5:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPjzYQQxAFZ7cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZWE0MWIwZmEtNTMxOC00ZGNkLTgzYjEtN2Q4MTI5ZTYzYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra6PGLjpewuDjM8+gpGhSyE4lcxDK9WctmWA 8n33zI+o9KF8Ls/lr05Yk4S9JWBBCg+0KlZSHf9Zu1lwIYysAUKAn8fyHCaf1e6y sp9+A/8NPHpBU6y+TGq8u0GpJRcMsTOBMaSRWPg1XfttiHHTry97WI4ppPyg9XZt PSb7SehrixYkzMSuX4J6u5lJpWRuLtnuEwZqjMqd7of3fHzniRbfV/5kzTdZ8Wir nJMTWY9vSHXkRvXo70Axe2QylWOcdFbFAQYdUBfB+8ptUoCofWWL2jSOj/gVai73 z1aSyY/ZpnbpJaN0HVYl4+zFXQfOYDZE47pzzpV3NlLkBGvMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+/8gNRJ5CLej6a/v+ZB3oEHhPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvNGQ2MWY1ZDEtY2UzZi0z NzNkLWExNzYtMTJlOGNlZDE4NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO0PsdEW9Z7KRUDEvJSXZcUuGGE0sKMba4Np08SKchSKdyxjEhTGkGM w+R2Qzn7W4sH8gEBVv3xsZTPqYM7qhlD/XrmNPSkh7iTsc/fmCcMhQ5welsCkmIQ 8MCq9GwDE99kSdcUAtCCqHz6tpTCbXHSr9qki0UpZ27PrGDwOdSNS2CHP4ySfPfa kUrVulduc8DkWzZKCVYU50VlVPSYP1ggiQaRo0EZOZeNAHOtBOd2gJsTNfcuyjxr YaxgyWzit1AdoIP+YvuWJ5CuHM3sZ2Xig4yqvH008rm8dgdJglMtNnYKPIU0psdd i1QrpUnmO+zQsDm+4yqdQ3nc7kdGpV8= -----END CERTIFICATE-----Generated at Wed Aug 6 09:28:40 2025 by rpki-client