$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa File: 14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa (raw, json) Hash identifier: 5uWcUDJ+ZHqn/hBdZc3Ix7OLIMD3LlPiR0KZ35xr8us= Subject key identifier: 96:BA:DB:13:31:50:6D:48:71:6A:B0:14:D9:CE:59:08:23:FF:4B:A4 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584BB02CFAAB440908366F856200 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 203724 IP address blocks: 131.229.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:fa:ab:44:09:08:36:6f:85:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=172a415f-e51a-4f68-9c21-1adf9ff7923e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4a:b5:ad:ae:69:13:10:54:12:a3:da:a9:9f: d4:e9:72:17:75:66:7a:5e:32:2d:a7:98:4e:19:05: 77:88:09:0f:fd:ff:a1:69:59:65:38:af:3f:2c:12: d7:10:62:c6:da:de:7e:94:98:98:f2:e9:64:9a:1a: 88:01:5b:f6:62:ca:0f:65:81:df:bf:9f:cf:69:de: 7d:48:09:28:d0:1b:bc:d9:fe:c1:91:cc:72:d6:cc: 2b:8b:d7:da:de:26:ae:e4:48:11:42:f9:4c:c3:85: 6f:ed:72:62:4e:33:72:dc:09:0c:4c:5a:26:20:3e: 69:ec:bc:42:07:66:03:33:1d:39:90:d1:d7:c0:30: a2:4f:80:7f:7f:51:aa:79:3d:16:c7:50:b4:50:a5: 5e:f9:32:35:ce:4b:3c:29:ed:75:0c:b3:f2:eb:f1: d7:87:ac:32:2b:1f:68:50:a9:d8:fb:d3:97:dc:56: 6a:91:a3:5e:35:57:c9:86:e1:68:70:b0:4b:22:94: d9:35:6f:8e:8b:72:d4:c0:e9:d3:9a:e7:b0:ae:e9: 0a:58:48:31:47:84:c3:18:d6:b6:f1:9d:49:a2:b7: af:cb:38:09:cd:6a:fd:db:80:db:5d:c3:e7:e6:d8: c1:bf:5a:12:8f:e0:5c:a0:6d:54:b3:fe:60:9d:c3: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BA:DB:13:31:50:6D:48:71:6A:B0:14:D9:CE:59:08:23:FF:4B:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a9:fb:83:ea:92:7e:87:22:ac:7a:6a:57:1e:4f:98:d7:ab: 89:48:bb:0c:8a:65:d5:52:11:06:9e:30:f5:d9:13:a7:87:af: 6d:46:10:7b:b8:78:82:00:52:6c:44:7f:bc:40:2f:3d:15:57: a9:67:35:65:3b:da:d9:04:ac:55:80:58:57:93:dc:ef:b5:10: 27:8d:d7:25:c1:30:58:21:13:44:46:c1:e4:77:63:11:ed:04: b1:34:fa:72:cf:57:6e:8b:bf:ea:d6:be:17:21:94:ac:56:04: 73:24:82:f8:2e:e0:70:d2:ae:ce:fd:36:d5:f5:f0:82:4a:7a: c6:b3:cd:1f:58:b9:ef:c4:df:fc:7e:4b:f8:65:aa:d7:e8:69: 5c:a9:fd:d4:59:48:84:e8:75:55:22:ab:d9:20:b4:0f:f9:55: 0c:84:ea:f2:c9:67:0b:89:e6:f7:44:54:f2:41:b5:ce:56:16: 13:73:9b:a1:59:3b:fc:5e:a3:ed:c5:00:82:d8:8a:3a:92:17: 95:75:d9:71:94:97:d0:1b:1e:11:10:f4:6e:a9:57:09:6c:6f: 24:8c:87:21:52:ec:55:3e:7c:16:53:09:d4:24:e2:bf:8a:82: 6f:a6:56:0f:38:0e:46:36:76:44:f0:7e:71:00:c7:79:95:2b: 23:48:d1:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLPqrRAkINm+FYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MTcyYTQxNWYtZTUxYS00ZjY4LTljMjEtMWFkZjlmZjc5MjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUq1ra5pExBUEqPaqZ/U6XIXdWZ6XjItp5hO GQV3iAkP/f+haVllOK8/LBLXEGLG2t5+lJiY8ulkmhqIAVv2YsoPZYHfv5/Pad59 SAko0Bu82f7Bkcxy1swri9fa3iau5EgRQvlMw4Vv7XJiTjNy3AkMTFomID5p7LxC B2YDMx05kNHXwDCiT4B/f1GqeT0Wx1C0UKVe+TI1zks8Ke11DLPy6/HXh6wyKx9o UKnY+9OX3FZqkaNeNVfJhuFocLBLIpTZNW+Oi3LUwOnTmuewrukKWEgxR4TDGNa2 8Z1JorevyzgJzWr924DbXcPn5tjBv1oSj+BcoG1Us/5gncPgewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa62xMxUG1IcWqwFNnOWQgj/0ukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMTQwMzRkNWYtMzhjNC0z YjA4LWE2YTUtZjI2MGU2OTQ5YWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+p+4Pqkn6HIqx6alceT5jXq4lIuwyKZdVSEQaeMPXZE6eHr21GEHu4 eIIAUmxEf7xALz0VV6lnNWU72tkErFWAWFeT3O+1ECeN1yXBMFghE0RGweR3YxHt BLE0+nLPV26Lv+rWvhchlKxWBHMkgvgu4HDSrs79NtX18IJKesazzR9Yue/E3/x+ S/hlqtfoaVyp/dRZSITodVUiq9kgtA/5VQyE6vLJZwuJ5vdEVPJBtc5WFhNzm6FZ O/xeo+3FAILYijqSF5V12XGUl9AbHhEQ9G6pVwlsbySMhyFS7FU+fBZTCdQk4r+K gm+mVg84DkY2dkTwfnEAx3mVKyNI0fU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:10:03 2025 by rpki-client