$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/52d47736-96b4-336a-8064-d064e05e3001.roa File: 52d47736-96b4-336a-8064-d064e05e3001.roa (raw, json) Hash identifier: AvOxq/ZC9EQPZbUBBF1cQQ5ulM5a3WzIIzrGY7Ps3uY= Subject key identifier: F3:8A:EC:CA:65:E4:32:57:2C:A4:E0:D9:94:17:41:82:1B:BE:93:C2 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AA2C6386AFB5C307A03025300 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/52d47736-96b4-336a-8064-d064e05e3001.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 131.229.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:38:6a:fb:5c:30:7a:03:02:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=b565a5ac-91cc-438d-b450-136bd4764d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:a7:c8:06:57:35:82:5c:1a:a9:f1:1c:51: 8c:3c:e4:46:7c:6b:7b:b7:13:8a:30:a2:42:a9:73: 45:3b:ac:71:57:c2:fc:e1:21:e4:58:e0:66:60:6a: af:bd:4a:83:70:d1:ae:62:28:49:2d:aa:96:a1:45: 29:20:f2:87:3b:ce:4a:08:d6:98:0e:6b:a7:b3:85: 3b:41:c0:54:27:f3:c2:ec:d7:f8:29:3e:30:19:d1: bc:1c:8a:6e:2b:44:6e:e0:ae:1f:21:79:0a:4f:bc: 24:ab:7d:88:14:4b:72:79:d1:ce:25:37:58:2b:4e: e8:66:eb:ca:05:b1:0c:87:23:3b:00:17:4d:9b:92: 49:b0:97:d7:0b:22:61:69:71:9f:90:9e:04:be:74: 13:6d:f7:1e:db:ae:5e:04:56:a5:b9:a4:3a:8f:26: 1c:b0:9c:47:1a:08:71:c1:79:08:17:54:9b:a3:0b: d2:50:ae:86:94:07:c0:68:8c:6e:c3:b7:28:8a:68: a1:fa:a0:9b:ed:65:96:e0:b9:65:d9:c1:1b:77:d5: fb:3a:1a:26:27:06:94:b2:94:c6:f3:49:db:eb:61: f6:1b:e7:07:a4:c3:b1:f7:01:ff:04:6e:65:6f:f9: c6:ce:45:85:e6:d6:1b:8e:12:ab:c4:1a:76:63:6d: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8A:EC:CA:65:E4:32:57:2C:A4:E0:D9:94:17:41:82:1B:BE:93:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/52d47736-96b4-336a-8064-d064e05e3001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:10:45:77:cd:47:10:f5:fb:7b:47:bf:9c:23:0b:df:68:35: 13:03:ef:73:12:7e:74:95:71:a9:26:6e:31:85:23:79:11:59: fa:18:5f:b7:13:04:c0:ae:d9:dd:29:72:d0:85:6c:b3:67:ab: c9:2b:73:d1:ab:64:97:dc:25:b8:4a:a2:05:d1:68:fc:11:8e: 62:a4:d9:95:75:97:46:d7:b9:3a:02:e8:14:72:97:d7:b8:05: 6c:f0:b0:5e:fc:db:ff:4c:97:80:10:63:c7:c5:35:15:ef:fc: 72:6f:60:62:b8:09:8e:38:69:e1:0f:db:cc:c3:85:37:ab:e7: a1:23:c9:74:ca:ed:ff:27:32:82:1a:70:14:0a:d7:ec:2a:fb: 07:9f:7b:78:be:ff:c6:28:f6:04:ac:fb:81:ce:c6:e5:7a:91: 80:83:b3:f6:10:95:f6:f5:bf:eb:c5:3d:c2:89:64:c3:49:4e: 32:c6:39:24:55:64:0e:e0:79:5c:60:38:f8:05:80:59:90:fb: 3c:34:5d:82:08:a1:35:1d:b2:4c:73:dd:8f:03:5a:98:86:66: 1e:b7:bd:57:dc:cd:b8:75:20:7a:3d:7e:13:99:41:a5:df:d5: cd:ee:1b:a4:67:c5:99:47:93:62:4c:2d:32:76:71:51:e8:a6: f8:1e:3b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqixjhq+1wwegMCUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk YjU2NWE1YWMtOTFjYy00MzhkLWI0NTAtMTM2YmQ0NzY0ZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCanyAZXNYJcGqnxHFGMPORGfGt7txOKMKJC qXNFO6xxV8L84SHkWOBmYGqvvUqDcNGuYihJLaqWoUUpIPKHO85KCNaYDmuns4U7 QcBUJ/PC7Nf4KT4wGdG8HIpuK0Ru4K4fIXkKT7wkq32IFEtyedHOJTdYK07oZuvK BbEMhyM7ABdNm5JJsJfXCyJhaXGfkJ4EvnQTbfce265eBFaluaQ6jyYcsJxHGghx wXkIF1SbowvSUK6GlAfAaIxuw7coimih+qCb7WWW4Lll2cEbd9X7OhomJwaUspTG 80nb62H2G+cHpMOx9wH/BG5lb/nGzkWF5tYbjhKrxBp2Y20MPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOK7Mpl5DJXLKTg2ZQXQYIbvpPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNTJkNDc3MzYtOTZiNC0z MzZhLTgwNjQtZDA2NGUwNWUzMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUQRXfNRxD1+3tHv5wjC99oNRMD73MSfnSVcakmbjGFI3kRWfoYX7cT BMCu2d0pctCFbLNnq8krc9GrZJfcJbhKogXRaPwRjmKk2ZV1l0bXuToC6BRyl9e4 BWzwsF782/9Ml4AQY8fFNRXv/HJvYGK4CY44aeEP28zDhTer56EjyXTK7f8nMoIa cBQK1+wq+wefe3i+/8Yo9gSs+4HOxuV6kYCDs/YQlfb1v+vFPcKJZMNJTjLGOSRV ZA7geVxgOPgFgFmQ+zw0XYIIoTUdskxz3Y8DWpiGZh63vVfczbh1IHo9fhOZQaXf 1c3uG6RnxZlHk2JMLTJ2cVHopvgeOz0= -----END CERTIFICATE-----Generated at Wed Aug 6 04:07:50 2025 by rpki-client