$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/4d608fce-c19b-307f-afa6-9427c23e01da.roa File: 4d608fce-c19b-307f-afa6-9427c23e01da.roa (raw, json) Hash identifier: 2Zoh2qHYp6spM6mDwqdrI/ITGi71mzndxfVjXLkhog4= Subject key identifier: BF:38:84:02:4C:55:B6:D3:24:BD:D4:26:8B:6F:EC:50:31:E0:84:51 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11F29C8D21B204EC893800 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/4d608fce-c19b-307f-afa6-9427c23e01da.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 131.229.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:f2:9c:8d:21:b2:04:ec:89:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=80eebfc6-c984-4bee-9033-26a3b073a451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:7e:5f:17:56:a2:ce:2d:54:c2:a3:94:04: 9c:1d:cf:91:40:8d:fd:33:52:26:50:09:93:a6:8a: 5e:17:83:44:88:03:b1:94:10:5b:03:db:65:c5:ae: 9e:9d:05:37:f3:70:cd:bc:70:85:c5:0a:e6:72:ac: 87:22:eb:f1:c6:6c:43:2f:ce:ee:51:4b:df:5b:5c: 01:76:e1:2b:e8:db:c9:0b:b7:54:37:bf:bb:cf:65: 09:56:04:50:8b:11:5b:dd:25:6c:60:08:99:a3:b4: 5d:de:a8:af:c1:59:0c:be:51:bd:86:05:3a:19:c1: 45:65:e0:1d:74:bd:43:5c:23:9a:5c:51:83:1b:60: 7e:42:d9:03:ab:c7:9e:af:83:07:9f:aa:ec:89:26: 84:45:76:ad:f0:00:68:3f:d6:23:71:bb:ce:76:74: ac:89:25:01:ba:5e:9d:b1:0b:15:80:b3:81:71:b6: 48:e5:39:62:2f:7e:ac:90:a1:4d:a8:6c:eb:4d:ee: fc:34:5a:a2:59:f8:1c:e3:b9:d5:7f:48:8f:10:26: 02:c2:22:66:28:a1:b1:cb:60:de:87:44:57:c2:00: 78:fc:96:ab:dd:2b:4c:2d:f0:68:62:32:52:75:f8: 02:34:92:41:88:e3:81:09:bf:af:93:d3:9a:cc:e3: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:38:84:02:4C:55:B6:D3:24:BD:D4:26:8B:6F:EC:50:31:E0:84:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/4d608fce-c19b-307f-afa6-9427c23e01da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ad:d2:9c:17:6e:ff:ed:b9:ef:b2:ea:0b:9c:e4:47:4d:93: 04:00:fd:60:18:9f:c2:78:cd:c5:fc:8b:14:7d:be:a7:d6:32: fd:d9:d2:96:1d:99:37:3f:1c:eb:7f:84:a9:9d:eb:21:47:2c: 6f:97:5c:3c:0d:75:e1:eb:a9:85:4e:6f:21:54:c7:d6:ad:4e: dc:dd:b5:43:fd:9b:c7:3d:fe:ed:04:d7:c5:6d:c5:d4:d2:46: d5:37:c7:12:14:09:3a:1f:f0:98:e4:ef:f7:42:87:34:06:98: 66:9a:00:8e:ba:5d:f0:8d:16:e3:0f:88:4b:1b:7f:56:7e:8e: 6c:64:a7:93:43:aa:b3:e1:91:44:99:de:03:dc:bd:50:8d:ac: c8:3c:30:d0:49:3a:d4:8d:00:f4:d8:62:51:b1:7f:61:90:b1: 81:de:d5:e9:63:e9:bc:aa:ea:35:51:88:9a:fc:a8:39:d8:de: aa:b1:18:c6:99:93:3b:e0:04:1f:34:7b:9c:c5:d3:9c:fc:05: 64:d7:56:8d:b7:50:ee:8e:e7:31:e3:e0:33:43:bb:01:7c:9d: 98:cc:3b:97:93:26:6c:6f:92:0d:ac:a3:0b:53:fd:33:d1:70: fb:1f:8f:37:af:ed:6b:3c:32:59:ed:2c:f7:b3:6b:42:23:de: be:42:9f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEfKcjSGyBOyJOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ODBlZWJmYzYtYzk4NC00YmVlLTkwMzMtMjZhM2IwNzNhNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkB+XxdWos4tVMKjlAScHc+RQI39M1ImUAmT popeF4NEiAOxlBBbA9tlxa6enQU383DNvHCFxQrmcqyHIuvxxmxDL87uUUvfW1wB duEr6NvJC7dUN7+7z2UJVgRQixFb3SVsYAiZo7Rd3qivwVkMvlG9hgU6GcFFZeAd dL1DXCOaXFGDG2B+QtkDq8eer4MHn6rsiSaERXat8ABoP9YjcbvOdnSsiSUBul6d sQsVgLOBcbZI5TliL36skKFNqGzrTe78NFqiWfgc47nVf0iPECYCwiJmKKGxy2De h0RXwgB4/Jar3StMLfBoYjJSdfgCNJJBiOOBCb+vk9OazOOGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL84hAJMVbbTJL3UJotv7FAx4IRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNGQ2MDhmY2UtYzE5Yi0z MDdmLWFmYTYtOTQyN2MyM2UwMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCt0pwXbv/tue+y6guc5EdNkwQA/WAYn8J4zcX8ixR9vqfWMv3Z0pYd mTc/HOt/hKmd6yFHLG+XXDwNdeHrqYVObyFUx9atTtzdtUP9m8c9/u0E18VtxdTS RtU3xxIUCTof8Jjk7/dChzQGmGaaAI66XfCNFuMPiEsbf1Z+jmxkp5NDqrPhkUSZ 3gPcvVCNrMg8MNBJOtSNAPTYYlGxf2GQsYHe1elj6byq6jVRiJr8qDnY3qqxGMaZ kzvgBB80e5zF05z8BWTXVo23UO6O5zHj4DNDuwF8nZjMO5eTJmxvkg2sowtT/TPR cPsfjzev7Ws8MlntLPeza0Ij3r5Cn+4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:25 2025 by rpki-client