$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7af865f2-4504-3b1d-9084-2d5383aad8ec.roa File: 7af865f2-4504-3b1d-9084-2d5383aad8ec.roa (raw, json) Hash identifier: hQ3HPnPxsm7Bm2lMGXLJFOX9mi6BbqbKl25qRLnAt24= Subject key identifier: 65:12:A7:48:DC:36:41:E0:C0:CA:61:1C:C5:0C:18:E4:1B:7D:B6:5C Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AA6F61EFE11BBD208ADE2B700 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7af865f2-4504-3b1d-9084-2d5383aad8ec.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 131.229.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:1e:fe:11:bb:d2:08:ad:e2:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=c4f02c68-de55-4ffd-9ffb-0629c4a856cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e2:76:d4:a6:8e:52:54:14:6a:0b:c5:ef:71: 00:a4:5f:be:45:73:ed:c7:7d:f6:93:9a:0d:62:9d: 06:69:4c:57:1d:64:9f:89:73:a6:dc:19:a1:7e:06: e3:ea:62:ce:31:40:f5:75:51:e1:e6:d6:5e:ae:db: f4:2d:8f:bf:8e:d1:bf:b4:b5:4c:17:e2:e6:55:6b: 19:5b:14:a9:e9:5e:b3:01:f7:29:52:17:00:93:04: b3:26:76:c7:81:65:04:66:67:33:9f:ae:3a:ed:61: 0c:48:45:ba:60:cc:fb:38:e4:e6:f6:88:85:43:9b: 15:06:43:43:9f:00:37:4f:a6:40:ad:d1:0d:e4:9e: c8:5f:3c:5f:30:e1:9e:3c:8a:ec:e3:bc:ee:f0:09: a9:e5:36:75:6b:76:a8:84:68:48:a6:bf:24:6c:54: f3:a0:a0:20:60:66:dd:fa:16:32:49:b7:51:b3:91: 63:b8:28:d3:ed:32:b1:f5:48:59:d3:be:fd:ae:7a: 0b:a3:3e:ab:cf:b6:19:ef:e0:96:ee:37:d5:cf:55: a4:41:eb:30:92:71:e8:dc:96:15:ba:71:55:fd:29: 12:81:6c:bb:d5:3f:f8:fa:ba:88:e2:b8:01:8a:d0: e4:35:b4:a4:98:99:17:29:85:41:95:7c:79:54:09: a4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:12:A7:48:DC:36:41:E0:C0:CA:61:1C:C5:0C:18:E4:1B:7D:B6:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7af865f2-4504-3b1d-9084-2d5383aad8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:51:e9:17:25:75:ed:6b:c2:06:25:9f:4c:17:57:9c:3b:10: b0:07:f0:8f:46:3a:70:d5:99:cb:cc:11:e0:3e:5b:fa:b7:00: e4:f2:e6:a7:54:b0:4d:70:34:42:0f:83:d7:66:bd:3a:76:86: 3c:21:1f:83:b5:34:21:04:82:08:48:37:b0:ef:6e:dd:87:2c: d7:30:b3:90:c6:b6:e3:1c:7b:36:12:99:54:f4:7c:aa:7e:24: b6:f0:12:5f:64:83:94:72:44:f7:f8:70:d5:e9:fc:9b:98:97: 0c:16:33:ee:02:e9:a6:bc:b8:3a:86:f0:83:56:57:e9:f1:bd: 52:c0:4a:cd:15:10:02:25:c4:a0:7c:17:1a:5d:3b:66:8e:69: 90:07:31:fe:d3:f7:2a:15:3f:53:e4:ca:01:c4:23:f2:e9:e6: 8a:fe:82:52:26:bc:2f:bf:de:8f:b9:0c:95:7c:87:c4:f8:ea: 14:86:38:2e:1c:88:22:df:9e:b0:2a:e3:14:5d:86:26:d3:98: f7:29:67:12:34:26:ad:e6:d5:16:cf:54:e2:fe:5d:9b:a1:3d: e9:7c:65:75:52:70:34:3b:ab:0a:d1:c0:7f:ec:4c:3b:4f:66: ad:6f:68:7a:c3:96:3b:59:3c:d4:9e:23:df:29:38:37:69:b7: 5b:6b:a9:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9h7+EbvSCK3itwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk YzRmMDJjNjgtZGU1NS00ZmZkLTlmZmItMDYyOWM0YTg1NmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+J21KaOUlQUagvF73EApF++RXPtx332k5oN Yp0GaUxXHWSfiXOm3Bmhfgbj6mLOMUD1dVHh5tZertv0LY+/jtG/tLVMF+LmVWsZ WxSp6V6zAfcpUhcAkwSzJnbHgWUEZmczn6467WEMSEW6YMz7OOTm9oiFQ5sVBkND nwA3T6ZArdEN5J7IXzxfMOGePIrs47zu8Amp5TZ1a3aohGhIpr8kbFTzoKAgYGbd +hYySbdRs5FjuCjT7TKx9UhZ0779rnoLoz6rz7YZ7+CW7jfVz1WkQeswknHo3JYV unFV/SkSgWy71T/4+rqI4rgBitDkNbSkmJkXKYVBlXx5VAmk7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUSp0jcNkHgwMphHMUMGOQbfbZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvN2FmODY1ZjItNDUwNC0z YjFkLTkwODQtMmQ1MzgzYWFkOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1R6Rclde1rwgYln0wXV5w7ELAH8I9GOnDVmcvMEeA+W/q3AOTy5qdU sE1wNEIPg9dmvTp2hjwhH4O1NCEEgghIN7Dvbt2HLNcws5DGtuMcezYSmVT0fKp+ JLbwEl9kg5RyRPf4cNXp/JuYlwwWM+4C6aa8uDqG8INWV+nxvVLASs0VEAIlxKB8 FxpdO2aOaZAHMf7T9yoVP1PkygHEI/Lp5or+glImvC+/3o+5DJV8h8T46hSGOC4c iCLfnrAq4xRdhibTmPcpZxI0Jq3m1RbPVOL+XZuhPel8ZXVScDQ7qwrRwH/sTDtP Zq1vaHrDljtZPNSeI98pODdpt1trqZA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:57 2025 by rpki-client