$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa File: 32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa (raw, json) Hash identifier: M/Vhu0Vfofr4f4gwXvJvcyYYOqi0Z/UOtK9zvpDqtCk= Subject key identifier: 30:6B:29:5C:AF:50:4E:2E:06:AA:6D:D3:DB:77:28:38:33:80:54:09 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584A6C55C7B9037221E9A452ECE0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 203724 IP address blocks: 131.229.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:c7:b9:03:72:21:e9:a4:52:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=55078b65-d51e-4142-9e2b-f28b99b6ed99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:77:31:55:e0:ae:11:64:00:aa:b4:16:16: d9:c0:53:f4:ba:d5:8b:58:de:b4:53:e3:6a:03:61: d4:51:c0:63:9d:3a:85:45:70:d6:a2:83:0d:80:00: 02:4e:f0:32:25:1b:60:f1:4a:20:ad:15:a5:0c:a3: e7:ab:51:5a:a5:1e:5a:a7:94:b0:2e:6c:c5:df:b4: d3:f7:0b:25:d5:0a:88:03:07:39:79:69:45:f7:7c: 78:38:82:80:b9:d3:e1:96:7d:d2:e5:75:fa:23:b6: d3:ea:df:b0:4c:c6:c9:dd:8e:65:bb:54:b8:d2:14: 43:9a:52:f5:ae:05:2f:80:7c:82:18:ef:39:35:af: de:62:09:65:d5:5f:ef:b7:d8:42:03:70:08:b9:65: bd:52:04:75:a8:71:f8:c0:08:b6:67:ea:d6:c9:8a: 8b:24:d7:de:74:10:67:74:79:00:75:7e:5c:06:06: e4:d4:80:9d:7e:6b:dc:83:c1:75:82:40:88:d5:79: 69:e8:17:00:3f:bf:0c:15:b8:4f:66:5b:7b:2f:b7: 73:4e:51:5d:81:c9:14:20:8e:b7:3e:5b:86:28:2c: 71:45:8f:d1:8a:ac:d8:55:1b:37:42:42:2c:29:42: 1e:15:01:cf:65:db:57:94:df:a0:30:a2:21:af:2b: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6B:29:5C:AF:50:4E:2E:06:AA:6D:D3:DB:77:28:38:33:80:54:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:56:fc:d7:ed:42:97:2f:1c:69:7a:4f:04:7c:47:bb:f4:31: 8b:bf:80:79:fa:64:95:f7:df:12:3b:de:87:a4:85:0c:d1:b1: 0e:51:c7:7b:37:12:ec:a6:cc:4b:e2:cf:a5:81:b2:e2:ea:6e: 67:75:5e:27:19:ad:c4:fe:f7:5b:47:d1:62:46:bb:08:02:da: 2d:93:7f:a0:7a:b7:47:2f:91:fd:1e:9c:d0:d2:2f:cc:2e:9a: d3:d4:00:2a:53:39:4a:12:4d:20:fb:3b:36:2f:8d:31:f2:b6: 5f:17:2a:07:ae:3d:23:a8:3a:d3:28:45:ca:dc:65:9c:ad:ed: 35:c7:28:9b:e0:4f:31:a5:d6:87:a3:2a:3b:7b:d8:11:6a:3b: a1:72:a7:ea:79:78:10:f0:ae:d8:3e:99:b6:a6:7d:92:c2:b2: 0e:ad:d9:a0:00:e9:4e:ed:d5:e1:b5:19:63:ce:29:5a:3f:0c: d6:18:de:88:cb:89:17:4e:f2:1a:09:84:5d:76:07:46:fd:39: d8:37:14:b2:f0:01:16:6c:de:b6:50:ce:77:66:f4:21:0e:9c: cb:8a:dd:3c:b2:bf:58:46:8f:99:0f:14:ac:06:82:ff:3f:20: ef:30:92:2f:32:29:5e:5b:1a:46:a8:4c:51:28:73:b7:90:46: 24:08:93:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVce5A3Ih6aRS7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk NTUwNzhiNjUtZDUxZS00MTQyLTllMmItZjI4Yjk5YjZlZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK53MVXgrhFkAKq0FhbZwFP0utWLWN60U+Nq A2HUUcBjnTqFRXDWooMNgAACTvAyJRtg8UogrRWlDKPnq1FapR5ap5SwLmzF37TT 9wsl1QqIAwc5eWlF93x4OIKAudPhln3S5XX6I7bT6t+wTMbJ3Y5lu1S40hRDmlL1 rgUvgHyCGO85Na/eYgll1V/vt9hCA3AIuWW9UgR1qHH4wAi2Z+rWyYqLJNfedBBn dHkAdX5cBgbk1ICdfmvcg8F1gkCI1Xlp6BcAP78MFbhPZlt7L7dzTlFdgckUII63 PluGKCxxRY/RiqzYVRs3QkIsKUIeFQHPZdtXlN+gMKIhrytX6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBrKVyvUE4uBqpt09t3KDgzgFQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzJiZTg1NzAtZDFhYS0z MTk1LWIxZjMtNTJkOGU1MWQ4YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNW/NftQpcvHGl6TwR8R7v0MYu/gHn6ZJX33xI73oekhQzRsQ5Rx3s3 EuymzEviz6WBsuLqbmd1XicZrcT+91tH0WJGuwgC2i2Tf6B6t0cvkf0enNDSL8wu mtPUACpTOUoSTSD7OzYvjTHytl8XKgeuPSOoOtMoRcrcZZyt7TXHKJvgTzGl1oej Kjt72BFqO6Fyp+p5eBDwrtg+mbamfZLCsg6t2aAA6U7t1eG1GWPOKVo/DNYY3ojL iRdO8hoJhF12B0b9Odg3FLLwARZs3rZQzndm9CEOnMuK3Tyyv1hGj5kPFKwGgv8/ IO8wki8yKV5bGkaoTFEoc7eQRiQIk7w= -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:39 2025 by rpki-client