$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa File: eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa (raw, json) Hash identifier: g4uYfoibAET5vYZ3Ms/8ABZQ9MpvLZZM9AQCtvLOKKo= Subject key identifier: FC:56:89:0E:C5:84:FD:2C:17:4F:39:AD:C4:75:1E:A2:10:24:E9:7D Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584AB4EB762633832AE0CE2DC6C0 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 399381 IP address blocks: 131.201.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:76:26:33:83:2a:e0:ce:2d:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=84c21d5e-6558-4a74-b3a3-01d62a92c124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:43:25:1d:01:fb:43:e8:9d:6c:dd:08:c9: 2a:01:0e:5c:9d:aa:a0:e1:ef:4b:a0:60:5a:e8:79: ef:f3:4e:03:ac:d6:6e:4d:13:c4:67:32:db:52:c5: a6:1a:45:13:c3:b6:9d:ae:09:d3:70:a8:67:1e:23: 24:42:e3:48:b0:02:2f:32:7f:ea:3c:1b:b8:b5:4e: 03:b5:f1:da:2c:26:fc:46:6d:b0:a7:48:92:54:22: 0f:cb:af:27:96:57:96:fa:47:dd:61:51:2d:c7:1e: ec:3e:e3:64:52:68:01:a2:82:f6:c5:0b:1e:2e:2e: 7b:20:c1:84:f5:22:b4:7d:12:3e:7f:d0:3b:80:fa: cf:fd:94:6b:e9:31:53:f0:93:44:88:82:bc:0e:91: a2:eb:f5:79:4c:ac:dc:f9:6c:78:8c:ac:5e:c8:35: c9:1a:e8:3a:d4:31:ca:f5:51:6c:ae:98:e5:6b:10: 15:25:5e:a0:eb:a1:ad:7a:a4:1f:fd:f6:d1:d4:d3: d3:30:94:f8:9b:88:e8:a6:c9:e1:71:f1:f5:13:0c: 21:93:23:4f:c5:7f:cc:8b:bb:48:a7:b8:dd:1d:ed: 3c:b0:75:11:7f:e9:a4:92:15:ed:4e:b4:15:b0:4e: 56:fe:08:bf:85:bc:35:ba:a3:54:a0:e8:16:02:ce: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:56:89:0E:C5:84:FD:2C:17:4F:39:AD:C4:75:1E:A2:10:24:E9:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:70:6f:5a:ba:9c:a0:ce:3d:10:34:32:6b:30:04:d4:d6:54: 6d:bd:c6:5e:2e:0d:99:4c:fb:1b:1c:7b:4a:99:94:47:c5:4c: 06:bb:46:1b:07:62:d0:7d:23:c0:2a:a7:6a:33:c1:f9:9a:9e: d5:fa:0f:7c:ac:8b:13:f0:90:3d:12:b7:56:02:96:d2:21:04: 8e:00:74:f0:7e:43:26:59:97:e0:41:ad:5c:1c:86:a0:a0:0c: 6a:9d:92:46:3e:17:01:fa:e8:48:1b:fa:7a:ba:0d:71:33:b6: 46:77:24:79:79:a0:d5:15:6c:28:e4:55:12:8d:bf:94:54:23: 7a:e8:01:19:fd:c5:50:ac:18:3b:7f:ac:46:24:0c:bc:a1:47: ae:18:de:d6:3d:1c:39:59:6f:1d:86:8e:2b:9e:b3:03:c7:5d: 9d:45:63:b1:6c:e0:e2:11:9d:f3:1c:dc:62:a6:9b:99:e5:77: 8a:f4:0b:29:33:b9:1c:f1:93:0c:aa:d5:70:56:16:55:40:62: 1f:5b:86:bc:cc:ec:bd:1a:94:a0:08:47:2a:83:83:b7:8d:8a: 31:9c:bc:88:25:26:33:89:1a:7b:cb:5c:48:dd:86:bc:53:7b: 1f:a1:d2:32:21:84:78:3a:14:76:a7:4f:96:bc:77:f5:f9:e2: 8d:ba:90:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063YmM4Mq4M4txsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ODRjMjFkNWUtNjU1OC00YTc0LWIzYTMtMDFkNjJhOTJjMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBxDJR0B+0PonWzdCMkqAQ5cnaqg4e9LoGBa 6Hnv804DrNZuTRPEZzLbUsWmGkUTw7adrgnTcKhnHiMkQuNIsAIvMn/qPBu4tU4D tfHaLCb8Rm2wp0iSVCIPy68nlleW+kfdYVEtxx7sPuNkUmgBooL2xQseLi57IMGE 9SK0fRI+f9A7gPrP/ZRr6TFT8JNEiIK8DpGi6/V5TKzc+Wx4jKxeyDXJGug61DHK 9VFsrpjlaxAVJV6g66GteqQf/fbR1NPTMJT4m4jopsnhcfH1EwwhkyNPxX/Mi7tI p7jdHe08sHURf+mkkhXtTrQVsE5W/gi/hbw1uqNUoOgWAs50gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxWiQ7FhP0sF085rcR1HqIQJOl9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvZWI5ZmNmZWMtNTc3OC0z NzQ5LWI4M2UtYzRlODRjN2ZiYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZwb1q6nKDOPRA0MmswBNTWVG29xl4uDZlM+xsce0qZlEfFTAa7RhsH YtB9I8Aqp2ozwfmantX6D3ysixPwkD0St1YCltIhBI4AdPB+QyZZl+BBrVwchqCg DGqdkkY+FwH66Egb+nq6DXEztkZ3JHl5oNUVbCjkVRKNv5RUI3roARn9xVCsGDt/ rEYkDLyhR64Y3tY9HDlZbx2GjiueswPHXZ1FY7Fs4OIRnfMc3GKmm5nld4r0Cykz uRzxkwyq1XBWFlVAYh9bhrzM7L0alKAIRyqDg7eNijGcvIglJjOJGnvLXEjdhrxT ex+h0jIhhHg6FHanT5a8d/X54o26kCU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:41:52 2025 by rpki-client