$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44707c37-1c7b-361f-a65a-135816af0615.roa File: 44707c37-1c7b-361f-a65a-135816af0615.roa (raw, json) Hash identifier: Cqjk62l4dgmRuASMj529+eYehVzbaQoi1GeHnLnuwNU= Subject key identifier: D7:34:FF:E2:F1:1A:B0:CE:19:DC:A5:2A:17:24:E2:21:BC:97:2A:8E Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584A6C55C3EF326FC76CBDFE3800 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44707c37-1c7b-361f-a65a-135816af0615.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 203724 IP address blocks: 131.229.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:c3:ef:32:6f:c7:6c:bd:fe:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=f5c5df81-37f8-4871-abeb-8a73ee2a86cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:4d:90:ea:02:48:16:08:e4:a7:8d:94:c5: b1:67:df:78:d8:dc:e4:15:a8:d4:69:bf:dc:ed:24: ae:99:99:ee:3b:98:69:32:c0:5f:ca:2d:dc:f9:a2: 00:ae:f0:28:09:69:3d:38:c1:92:4c:57:6b:d6:4f: 99:17:70:90:14:75:ff:bc:85:af:1e:20:be:db:b2: 4f:3b:78:91:29:0e:f1:25:be:35:12:6f:f3:a3:fd: 50:2a:cc:5e:6a:97:4d:0f:28:6f:a1:94:e7:44:21: 41:95:da:e8:6c:3b:7a:c7:57:3d:02:21:7c:29:fa: 11:cb:40:ec:81:1f:08:3d:fb:6f:b6:85:cc:c8:e5: a1:d1:0b:a6:7e:91:92:9f:b9:85:38:74:17:a2:6f: 01:76:50:35:8c:49:48:5c:23:46:cf:7a:80:8a:b7: f6:3c:37:3e:57:46:98:56:77:de:a3:60:09:60:75: 98:00:51:fc:51:18:3a:fa:b3:aa:46:5f:30:52:e8: b0:87:a7:c1:2c:c5:92:29:e8:12:ba:f7:f4:4d:84: 8e:dd:54:93:6a:20:0b:ee:9e:cf:5c:42:15:87:52: d9:18:0e:ab:9b:44:fd:ab:85:90:92:12:50:01:8f: d4:a7:21:8a:d0:22:e5:c7:a0:80:3f:c3:d9:9d:6d: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:34:FF:E2:F1:1A:B0:CE:19:DC:A5:2A:17:24:E2:21:BC:97:2A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44707c37-1c7b-361f-a65a-135816af0615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:63:23:d7:48:3b:34:e6:30:aa:73:69:6a:62:36:5b:59:11: 30:f0:ae:ab:c2:ca:6d:80:9f:fd:9a:d6:35:bb:9b:c5:b4:2c: bc:d1:fe:ae:ef:47:88:88:7e:53:2a:51:4d:29:c4:23:e2:0c: 0a:b0:42:8b:d3:be:9e:79:20:d8:c1:f6:a0:21:ed:0a:96:15: b8:34:8c:74:fd:87:79:e8:72:62:5b:d5:bc:06:be:52:d4:89: 96:ce:3e:8d:8f:ec:01:98:14:8b:00:6b:03:bc:e2:c9:ca:65: 2d:b2:43:f1:c6:93:23:9f:a0:54:39:24:42:de:d0:c1:3c:78: 54:0e:ac:90:55:74:f2:f0:d5:c7:26:70:78:a8:4e:da:a9:d3: e8:9e:47:b4:b1:02:7f:27:36:a0:a8:2e:55:d5:00:40:a8:31: 78:78:56:2d:e5:18:ca:bd:50:cf:b7:af:d3:44:86:fc:10:92: 72:14:12:62:f8:c9:2b:f1:93:48:17:29:a3:52:96:4f:f8:4c: 3d:8f:86:27:93:de:30:ec:c7:b1:b4:8d:75:74:0d:e6:c9:f9: 27:18:1a:39:b2:6c:32:cf:1d:e7:5d:18:a0:7c:2b:68:81:a5: b5:cd:d6:cc:03:6c:4b:f9:40:1c:8e:0c:8d:36:3e:5e:10:72: 6d:c5:aa:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcPvMm/HbL3+OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjVjNWRmODEtMzdmOC00ODcxLWFiZWItOGE3M2VlMmE4NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S1NkOoCSBYI5KeNlMWxZ9942NzkFajUab/c 7SSumZnuO5hpMsBfyi3c+aIArvAoCWk9OMGSTFdr1k+ZF3CQFHX/vIWvHiC+27JP O3iRKQ7xJb41Em/zo/1QKsxeapdNDyhvoZTnRCFBldrobDt6x1c9AiF8KfoRy0Ds gR8IPftvtoXMyOWh0QumfpGSn7mFOHQXom8BdlA1jElIXCNGz3qAirf2PDc+V0aY Vnfeo2AJYHWYAFH8URg6+rOqRl8wUuiwh6fBLMWSKegSuvf0TYSO3VSTaiAL7p7P XEIVh1LZGA6rm0T9q4WQkhJQAY/UpyGK0CLlx6CAP8PZnW17kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc0/+LxGrDOGdylKhck4iG8lyqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNDQ3MDdjMzctMWM3Yi0z NjFmLWE2NWEtMTM1ODE2YWYwNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+W/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGljI9dIOzTmMKpzaWpiNltZETDwrqvCym2An/2a1jW7m8W0LLzR/q7v R4iIflMqUU0pxCPiDAqwQovTvp55INjB9qAh7QqWFbg0jHT9h3nocmJb1bwGvlLU iZbOPo2P7AGYFIsAawO84snKZS2yQ/HGkyOfoFQ5JELe0ME8eFQOrJBVdPLw1ccm cHioTtqp0+ieR7SxAn8nNqCoLlXVAECoMXh4Vi3lGMq9UM+3r9NEhvwQknIUEmL4 ySvxk0gXKaNSlk/4TD2PhieT3jDsx7G0jXV0DebJ+ScYGjmybDLPHeddGKB8K2iB pbXN1swDbEv5QByODI02Pl4Qcm3FqlE= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:16 2025 by rpki-client