$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/356c8f2a-ddf8-3359-a978-aa8ad00d9ae0.roa File: 356c8f2a-ddf8-3359-a978-aa8ad00d9ae0.roa (raw, json) Hash identifier: n0PblFYoIM5uymfjpU7nbmdirjohlabOj48qw9dcS70= Subject key identifier: E5:80:32:12:97:D6:9F:3F:97:3A:41:9B:52:ED:5E:1D:FF:A2:8F:52 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B3C51B6F42B63345CCB2E4780 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/356c8f2a-ddf8-3359-a978-aa8ad00d9ae0.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 131.229.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b6:f4:2b:63:34:5c:cb:2e:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=0963760d-4495-4ea7-b543-96597c32a4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:e6:5f:84:13:3c:b1:85:a5:a9:8d:39:32: 0b:b3:7b:90:2d:f7:7b:6f:22:8d:88:47:c0:29:71: c9:19:e2:dd:dd:0d:77:5c:18:57:3b:88:ce:36:e0: 3c:10:bd:08:65:b0:fb:20:7a:2e:11:b5:be:fc:81: af:8d:e0:b8:82:b0:a3:9e:1d:d8:ea:44:b0:78:c8: 6e:e9:9e:4d:59:8d:c2:58:2d:ff:98:49:0e:8b:66: 88:94:8d:1c:30:02:b3:fd:8d:b9:a7:bb:72:a4:58: 9a:b0:86:c9:d8:36:ec:71:8b:0e:12:4e:be:77:ae: f8:97:bc:77:ea:6b:d2:19:20:38:87:37:6f:de:c2: 7a:42:8b:14:73:3a:ad:df:60:7c:4e:ef:03:37:52: 2a:1f:5f:be:96:38:33:34:cb:fd:61:cb:5b:91:ac: ba:37:21:35:d4:2b:28:66:e3:e6:ce:02:e7:fd:bc: 52:fd:28:93:33:5e:2f:dd:e4:f4:30:2f:af:61:46: fa:d2:87:e6:f0:b3:b2:c5:9d:cc:49:67:55:07:fa: 39:b0:84:df:5b:05:f6:44:03:76:06:8f:72:64:ea: 74:13:48:7d:0a:d0:3b:80:a4:47:80:aa:7a:d5:50: 20:aa:66:51:7a:e3:f6:04:78:f1:d3:06:6e:4a:8d: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:80:32:12:97:D6:9F:3F:97:3A:41:9B:52:ED:5E:1D:FF:A2:8F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/356c8f2a-ddf8-3359-a978-aa8ad00d9ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:2b:ea:b3:cb:02:19:fa:75:39:f7:be:bc:65:b9:3c:39:b5: 99:14:bf:b8:e8:52:aa:f0:c4:6b:e0:c1:ce:4b:e5:6a:5c:95: 13:0a:87:05:3f:5d:d7:ab:1b:f8:8b:af:9f:63:bb:6b:56:c1: 53:c2:6b:b5:9a:2a:1b:e2:c4:52:6d:08:0e:c0:bf:f5:41:d6: bd:2d:0d:da:5a:7b:81:17:02:58:d0:46:84:21:69:8b:c8:d7: 2a:d4:7c:be:03:61:23:1d:f0:c8:67:db:16:69:31:f1:02:ec: 83:11:c4:01:c4:24:ca:1e:3f:52:60:ac:73:53:94:ff:73:de: 38:bc:8a:c0:7d:c6:ee:b9:ad:aa:6e:2a:85:0c:8e:59:13:f8: 48:ce:b1:ee:7f:bd:c1:a2:a5:79:9b:44:21:26:c9:5f:9c:ff: c6:cc:fc:fb:3d:29:12:c5:ad:7b:ef:a9:b1:14:c3:31:a1:3c: ef:81:a5:6a:57:da:a1:d2:45:f6:81:30:0a:c8:c5:79:7b:a6: 8f:d5:43:a7:f1:ed:a7:0f:b4:e6:99:5c:2f:d7:70:5c:2b:ed: 52:94:21:e6:47:f0:09:87:7c:9e:df:66:a6:eb:90:33:02:ec: 1c:30:d7:5a:5b:73:e5:45:62:b8:cd:21:31:bb:8a:ba:71:f2: f9:a4:60:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Ubb0K2M0XMsuR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk MDk2Mzc2MGQtNDQ5NS00ZWE3LWI1NDMtOTY1OTdjMzJhNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDfmX4QTPLGFpamNOTILs3uQLfd7byKNiEfA KXHJGeLd3Q13XBhXO4jONuA8EL0IZbD7IHouEbW+/IGvjeC4grCjnh3Y6kSweMhu 6Z5NWY3CWC3/mEkOi2aIlI0cMAKz/Y25p7typFiasIbJ2DbscYsOEk6+d674l7x3 6mvSGSA4hzdv3sJ6QosUczqt32B8Tu8DN1IqH1++ljgzNMv9Yctbkay6NyE11Cso ZuPmzgLn/bxS/SiTM14v3eT0MC+vYUb60ofm8LOyxZ3MSWdVB/o5sITfWwX2RAN2 Bo9yZOp0E0h9CtA7gKRHgKp61VAgqmZReuP2BHjx0wZuSo2fJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWAMhKX1p8/lzpBm1LtXh3/oo9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzU2YzhmMmEtZGRmOC0z MzU5LWE5NzgtYWE4YWQwMGQ5YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0r6rPLAhn6dTn3vrxluTw5tZkUv7joUqrwxGvgwc5L5WpclRMKhwU/ XderG/iLr59ju2tWwVPCa7WaKhvixFJtCA7Av/VB1r0tDdpae4EXAljQRoQhaYvI 1yrUfL4DYSMd8Mhn2xZpMfEC7IMRxAHEJMoeP1JgrHNTlP9z3ji8isB9xu65rapu KoUMjlkT+EjOse5/vcGipXmbRCEmyV+c/8bM/Ps9KRLFrXvvqbEUwzGhPO+BpWpX 2qHSRfaBMArIxXl7po/VQ6fx7acPtOaZXC/XcFwr7VKUIeZH8AmHfJ7fZqbrkDMC 7Bww11pbc+VFYrjNITG7irpx8vmkYCw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:28 2025 by rpki-client