$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/056f684a-9f40-304e-b207-89ede216d915.roa File: 056f684a-9f40-304e-b207-89ede216d915.roa (raw, json) Hash identifier: Pgl8WLe5xWf2XHHg3+PwSo5gZleTRbHBMejMMRuNvKk= Subject key identifier: C0:D7:87:24:C1:2E:DB:14:AD:AF:E8:47:84:93:44:39:B9:DB:B8:03 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584BB19283B238B5515B6E15A280 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/056f684a-9f40-304e-b207-89ede216d915.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 203724 IP address blocks: 131.229.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:83:b2:38:b5:51:5b:6e:15:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=68fdbabe-13e0-4018-a71c-2960550a83b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:56:65:4b:8e:15:f9:08:a6:60:e4:92:90:a1: 28:67:1d:b4:f9:fe:00:8c:05:d0:50:8d:35:29:17: fa:4a:96:e9:0b:b6:10:c9:fe:66:f3:15:22:15:98: a6:ff:7f:c1:4e:15:a6:6e:28:64:57:30:f3:69:90: 14:44:62:02:64:49:9a:98:6b:fb:e7:d7:37:2c:8c: b5:25:0f:53:5d:fb:71:c5:12:ed:f1:c6:1d:53:cf: cf:54:74:2c:18:f6:71:c1:23:2d:55:86:b5:a7:25: 3f:f4:da:73:c2:6e:f4:cf:62:60:ce:e0:f9:ed:9c: 61:eb:b6:ad:61:e4:e9:5a:3c:3f:b8:8e:8e:5d:a8: 26:af:9c:41:e9:dd:07:b4:bc:6d:d4:2c:f8:55:15: 2f:f2:1a:76:15:c0:7a:15:57:cb:b3:fc:00:22:f9: 87:12:16:a9:f5:a4:16:ea:9c:c3:42:bb:18:e9:ac: 5a:4f:ee:29:9b:05:7f:e2:ac:6a:c3:2b:4b:0d:e7: be:90:d9:6f:3e:08:7e:3d:b4:1e:87:49:15:5c:4c: e6:49:54:d4:1f:67:ce:37:86:24:82:f9:f7:3f:d4: 0e:64:c4:da:63:b0:35:b7:dd:24:84:ab:7f:26:4b: 59:26:31:c4:ef:67:e1:ab:65:a6:98:65:29:03:38: b9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D7:87:24:C1:2E:DB:14:AD:AF:E8:47:84:93:44:39:B9:DB:B8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/056f684a-9f40-304e-b207-89ede216d915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:33:96:44:09:53:44:95:36:7f:d0:dc:41:01:8b:22:c3:39: b6:30:99:43:fc:a1:a8:99:aa:de:3c:57:ec:ff:f7:b0:5d:30: df:7b:c8:b5:87:5a:5f:80:10:7f:b2:4a:08:2b:c1:db:7c:81: 02:c2:74:7f:7f:d0:d9:d1:ec:56:2c:70:e7:2e:5e:75:ff:3f: ff:cc:f6:40:93:78:8a:af:c5:94:a4:2a:5b:07:36:ed:d4:18: e1:f5:b3:0c:13:c5:42:7c:e7:33:00:98:8c:aa:1f:d5:f9:76: e6:e8:17:64:d9:65:96:5c:eb:c4:44:4a:88:07:d8:d9:70:13: 57:80:da:f1:a5:00:eb:2e:e4:9f:ec:fa:ca:3e:1c:dc:70:16: ce:25:39:b6:e2:04:cb:fa:2a:0e:39:4d:3e:1f:50:e3:c3:a2: fb:f8:d9:e3:1a:1b:71:57:64:cc:d7:4d:82:f4:33:a4:2f:55: fa:d3:46:e6:a1:22:71:2f:67:ce:1a:22:23:c6:be:47:7d:26: 1c:22:d3:0d:00:3f:55:c9:91:bc:da:4e:3c:b9:87:4b:56:87: 77:b9:84:ae:81:7f:30:41:27:84:10:96:3b:9b:0a:47:18:39: 7e:12:fd:fc:56:64:f7:b4:40:aa:86:dd:74:c0:73:46:87:05: 90:9f:e8:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkoOyOLVRW24VooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NjhmZGJhYmUtMTNlMC00MDE4LWE3MWMtMjk2MDU1MGE4M2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilZlS44V+QimYOSSkKEoZx20+f4AjAXQUI01 KRf6SpbpC7YQyf5m8xUiFZim/3/BThWmbihkVzDzaZAURGICZEmamGv759c3LIy1 JQ9TXftxxRLt8cYdU8/PVHQsGPZxwSMtVYa1pyU/9Npzwm70z2JgzuD57Zxh67at YeTpWjw/uI6OXagmr5xB6d0HtLxt1Cz4VRUv8hp2FcB6FVfLs/wAIvmHEhap9aQW 6pzDQrsY6axaT+4pmwV/4qxqwytLDee+kNlvPgh+PbQeh0kVXEzmSVTUH2fON4Yk gvn3P9QOZMTaY7A1t90khKt/JktZJjHE72fhq2WmmGUpAzi5qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDXhyTBLtsUra/oR4STRDm527gDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMDU2ZjY4NGEtOWY0MC0z MDRlLWIyMDctODllZGUyMTZkOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0zlkQJU0SVNn/Q3EEBiyLDObYwmUP8oaiZqt48V+z/97BdMN97yLWH Wl+AEH+ySggrwdt8gQLCdH9/0NnR7FYscOcuXnX/P//M9kCTeIqvxZSkKlsHNu3U GOH1swwTxUJ85zMAmIyqH9X5duboF2TZZZZc68RESogH2NlwE1eA2vGlAOsu5J/s +so+HNxwFs4lObbiBMv6Kg45TT4fUOPDovv42eMaG3FXZMzXTYL0M6QvVfrTRuah InEvZ84aIiPGvkd9Jhwi0w0AP1XJkbzaTjy5h0tWh3e5hK6BfzBBJ4QQljubCkcY OX4S/fxWZPe0QKqG3XTAc0aHBZCf6IQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:22:21 2025 by rpki-client