$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/1e7a4490-7ec9-3d8f-b404-5d132c61e066.roa File: 1e7a4490-7ec9-3d8f-b404-5d132c61e066.roa (raw, json) Hash identifier: EdFsfszoiWC643Qy1Ld6AXXyaK5VaWjOYsqniDsy+Bw= Subject key identifier: C7:23:BF:97:22:AE:A4:3D:18:21:4C:7B:38:30:E2:70:5E:ED:3D:03 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584BB19281F37C6C13182599D8C8 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/1e7a4490-7ec9-3d8f-b404-5d132c61e066.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 203724 IP address blocks: 131.229.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:81:f3:7c:6c:13:18:25:99:d8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=6094ae1d-8c22-4272-8634-e04a0c22df2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:72:f6:f1:ce:1b:9e:ff:0f:88:8e:db:d9:ab: 7b:c9:47:56:1b:19:60:83:08:13:3f:6d:ed:bd:b0: e5:69:8a:9d:ee:17:62:ed:a3:8f:31:e5:7c:6f:3d: 02:37:4d:61:2c:76:fb:75:37:e3:61:21:67:1a:3c: a6:d9:ce:57:68:02:7d:df:32:73:1f:7f:6c:89:c0: d6:9d:ed:fb:f2:d9:c8:6b:f1:9c:81:c2:55:7c:c9: 23:7a:c4:81:f0:11:69:30:5b:af:fe:99:d0:7e:6a: b4:70:84:69:78:e4:03:3b:2b:5a:47:63:8f:90:00: 72:ca:4a:d6:8c:94:18:a4:49:92:5d:ee:e6:3e:fb: ed:31:91:0a:f0:b7:03:ac:be:0e:c1:02:45:2e:f2: 74:ed:b8:99:1d:5c:53:33:3c:75:d7:11:fe:9d:c8: 15:93:73:79:59:4a:2c:9e:96:7f:8c:5a:33:2e:ac: 61:b2:ee:c6:5f:df:e3:95:07:60:95:f6:89:5b:26: e7:2b:ea:09:88:b1:4a:8d:1b:b5:71:5b:55:e8:5a: d8:1b:37:4d:ab:de:d1:ee:e6:27:68:3b:83:ee:b8: e9:7f:8e:fc:da:37:0e:75:1c:6a:3c:63:a5:b7:78: 54:95:a8:60:23:80:af:46:80:98:0c:af:ce:e2:e2: a4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:23:BF:97:22:AE:A4:3D:18:21:4C:7B:38:30:E2:70:5E:ED:3D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/1e7a4490-7ec9-3d8f-b404-5d132c61e066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:0d:53:3f:c8:31:ec:b3:a0:70:12:de:23:86:45:0d:85:05: 09:db:86:99:e6:65:ce:c3:c7:44:55:d3:57:2c:db:65:0a:95: f7:0a:bb:f6:41:b2:e6:28:b8:7c:f8:bd:03:0a:10:e5:04:2f: 36:cc:ea:66:33:60:17:c0:ca:e0:fb:c1:3c:37:08:6e:24:a5: fd:1d:40:4c:49:e2:40:86:d9:32:55:52:a2:83:c3:e5:cf:c4: c6:3e:80:1f:04:f5:53:1b:1d:42:0d:56:36:52:09:63:b8:0e: 14:7f:d2:49:71:4c:5d:a8:1a:b8:c0:76:f7:79:06:f8:29:c1: e5:46:16:eb:13:99:32:4c:d9:b3:01:96:b3:20:2d:b9:ec:79: 11:5d:03:29:e8:6a:5e:e3:54:24:6e:96:ed:37:70:6c:41:f1: b7:97:6f:4d:15:a5:70:37:96:99:d3:f4:33:ab:d4:6b:51:74: db:08:3c:a8:4d:de:c9:83:ed:51:e1:66:71:88:51:29:15:10: 79:41:1e:d5:6d:3b:85:5a:d1:0d:bd:a5:dd:5d:7b:fb:68:48: c0:fa:8e:4e:08:c3:c1:dd:ab:83:1b:15:85:43:58:c7:62:86: 7e:17:09:10:e3:da:f4:ee:df:37:64:38:b4:54:e1:14:98:0c: c9:20:07:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkoHzfGwTGCWZ2MgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NjA5NGFlMWQtOGMyMi00MjcyLTg2MzQtZTA0YTBjMjJkZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknL28c4bnv8PiI7b2at7yUdWGxlggwgTP23t vbDlaYqd7hdi7aOPMeV8bz0CN01hLHb7dTfjYSFnGjym2c5XaAJ93zJzH39sicDW ne378tnIa/GcgcJVfMkjesSB8BFpMFuv/pnQfmq0cIRpeOQDOytaR2OPkAByykrW jJQYpEmSXe7mPvvtMZEK8LcDrL4OwQJFLvJ07biZHVxTMzx11xH+ncgVk3N5WUos npZ/jFozLqxhsu7GX9/jlQdglfaJWybnK+oJiLFKjRu1cVtV6FrYGzdNq97R7uYn aDuD7rjpf4782jcOdRxqPGOlt3hUlahgI4CvRoCYDK/O4uKkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcjv5cirqQ9GCFMezgw4nBe7T0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMWU3YTQ0OTAtN2VjOS0z ZDhmLWI0MDQtNWQxMzJjNjFlMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALsNUz/IMeyzoHAS3iOGRQ2FBQnbhpnmZc7Dx0RV01cs22UKlfcKu/ZB suYouHz4vQMKEOUELzbM6mYzYBfAyuD7wTw3CG4kpf0dQExJ4kCG2TJVUqKDw+XP xMY+gB8E9VMbHUINVjZSCWO4DhR/0klxTF2oGrjAdvd5BvgpweVGFusTmTJM2bMB lrMgLbnseRFdAynoal7jVCRulu03cGxB8beXb00VpXA3lpnT9DOr1GtRdNsIPKhN 3smD7VHhZnGIUSkVEHlBHtVtO4Va0Q29pd1de/toSMD6jk4Iw8Hdq4MbFYVDWMdi hn4XCRDj2vTu3zdkOLRU4RSYDMkgB/0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:45:02 2025 by rpki-client