$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa File: 309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa (raw, json) Hash identifier: m46/I7NxGYHpb0RS3cvTAuOvm21CpdTlC+2cro94ICU= Subject key identifier: 43:EA:78:AB:57:49:6D:68:4C:E4:CD:B4:E3:49:0E:9C:34:37:EC:39 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584BAA97B2E2E99432AD234C1200 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 203724 IP address blocks: 131.229.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b2:e2:e9:94:32:ad:23:4c:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=2b52fbea-d20e-4bba-9b00-855a752c04f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:75:c3:39:17:b4:15:50:d6:b0:9e:2b:4a:cc: 57:80:4f:66:f3:18:51:00:f7:32:eb:df:09:df:55: b3:52:40:c4:41:d0:93:f4:62:0a:0c:c9:fb:c3:a8: 9e:92:1a:3d:18:77:ec:11:ac:4c:33:fc:a9:57:b1: 9e:f8:d7:6d:24:6e:3d:13:ef:c0:2d:cf:25:d0:27: 6b:05:91:71:84:10:03:52:4e:c3:cd:49:c8:6d:94: a3:73:4f:36:64:fd:ee:4c:01:59:44:ab:8c:64:3a: f5:02:c5:2d:c5:56:05:f3:ab:be:2f:ef:a0:d6:15: 88:04:25:16:1e:b8:2f:ab:c6:15:c6:10:73:57:0e: 57:05:df:30:af:36:d8:92:bf:3b:2b:9d:98:40:30: f2:fa:7f:0b:51:70:4b:eb:d7:f6:d2:a9:47:76:ac: ac:f0:3f:84:70:24:4a:4a:ff:35:5c:b2:57:15:62: 73:bc:03:80:fa:0a:33:bd:be:70:74:2e:9b:a4:08: fd:48:16:e8:a0:1a:ed:0d:64:e6:82:4e:52:73:f6: d2:1c:e7:ed:c6:f3:1e:31:96:05:9d:d0:fb:51:bb: 8f:c4:68:ba:a0:25:5b:89:13:b9:79:ce:40:ce:3f: 0b:2a:a1:8d:70:7b:06:18:99:6e:f5:8b:a1:40:41: 75:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EA:78:AB:57:49:6D:68:4C:E4:CD:B4:E3:49:0E:9C:34:37:EC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ea:4f:b9:38:a0:06:6d:4a:69:f2:3b:77:06:38:01:80:2c: fd:53:ca:9b:3e:52:40:f4:fb:bb:43:2f:29:26:47:f4:be:a4: 0a:f1:49:56:7a:6d:05:c2:be:e9:3b:e7:55:c1:cc:ea:30:32: 42:63:5f:ef:77:9d:82:29:98:cc:dd:f0:68:6a:94:5a:fe:b1: aa:bd:af:ab:d0:8a:17:de:5a:85:2f:f3:4a:16:0e:ee:ac:0a: 68:cc:17:89:a8:ce:8e:27:ab:21:1b:5e:03:1f:da:42:8e:07: cb:52:0f:c8:a6:d8:5e:51:65:ae:d5:c3:ef:46:8a:87:31:b6: b0:7f:5f:90:e1:bb:e3:a3:31:cf:d9:51:a0:ab:c2:39:c9:5f: da:13:a4:1e:2e:87:5e:fe:15:49:63:03:cc:08:6b:8e:5d:77: 9c:c6:79:0a:11:f6:d7:85:45:37:56:63:f5:78:13:9f:ce:c2: 7a:6c:45:48:74:0e:68:b0:8d:c6:46:03:8c:b9:54:91:44:d1: be:56:9a:b5:16:41:80:39:44:e0:01:40:3e:27:a3:3e:ce:e6: 05:9f:85:34:96:7b:ac:0d:77:c8:d0:b4:11:f1:49:ed:e6:94: 48:5e:15:77:93:14:92:3f:78:81:ac:84:e5:3f:44:56:52:d4: c0:ef:de:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7Li6ZQyrSNMEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MmI1MmZiZWEtZDIwZS00YmJhLTliMDAtODU1YTc1MmMwNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3XDORe0FVDWsJ4rSsxXgE9m8xhRAPcy698J 31WzUkDEQdCT9GIKDMn7w6iekho9GHfsEaxMM/ypV7Ge+NdtJG49E+/ALc8l0Cdr BZFxhBADUk7DzUnIbZSjc082ZP3uTAFZRKuMZDr1AsUtxVYF86u+L++g1hWIBCUW Hrgvq8YVxhBzVw5XBd8wrzbYkr87K52YQDDy+n8LUXBL69f20qlHdqys8D+EcCRK Sv81XLJXFWJzvAOA+gozvb5wdC6bpAj9SBbooBrtDWTmgk5Sc/bSHOftxvMeMZYF ndD7UbuPxGi6oCVbiRO5ec5Azj8LKqGNcHsGGJlu9YuhQEF1LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPqeKtXSW1oTOTNtONJDpw0N+w5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzA5MDY3ZDYtMWE4OS0z NGRlLWExZDgtOGU5ZThmMjEzNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHqT7k4oAZtSmnyO3cGOAGALP1Typs+UkD0+7tDLykmR/S+pArxSVZ6 bQXCvuk751XBzOowMkJjX+93nYIpmMzd8GhqlFr+saq9r6vQihfeWoUv80oWDu6s CmjMF4mozo4nqyEbXgMf2kKOB8tSD8im2F5RZa7Vw+9GiocxtrB/X5Dhu+OjMc/Z UaCrwjnJX9oTpB4uh17+FUljA8wIa45dd5zGeQoR9teFRTdWY/V4E5/OwnpsRUh0 DmiwjcZGA4y5VJFE0b5WmrUWQYA5ROABQD4noz7O5gWfhTSWe6wNd8jQtBHxSe3m lEheFXeTFJI/eIGshOU/RFZS1MDv3qA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:37 2025 by rpki-client