$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/85f78513-211c-3f43-b104-9b7efdc2db1c.roa File: 85f78513-211c-3f43-b104-9b7efdc2db1c.roa (raw, json) Hash identifier: Mz4FPP8YioX5vGgNMJVSMXo8f7w/mOt92/P9eiy8S4I= Subject key identifier: 45:F1:F9:C7:D8:A8:3A:75:A1:91:B3:E3:AA:5C:50:B3:4C:5E:8B:5F Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849F07A90D2A63D0A74B2FC0280 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/85f78513-211c-3f43-b104-9b7efdc2db1c.roa Signing time: Thu 22 May 2025 16:14:47 +0000 ROA not before: Thu 22 May 2025 16:14:47 +0000 ROA not after: Wed 20 Aug 2025 16:14:47 +0000 asID: 203724 IP address blocks: 131.229.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:7a:90:d2:a6:3d:0a:74:b2:fc:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 22 16:14:47 2025 GMT Not After : Aug 20 16:14:47 2025 GMT Subject: CN=ac828f17-7ef0-472a-a68c-589577ed1d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:f9:f0:fe:29:4d:0f:18:1d:4f:79:56:26: 38:1e:e1:8d:a1:5e:7a:6f:29:8e:c3:81:ff:0e:ef: 02:a9:30:4d:45:d8:56:92:44:ba:bc:ba:03:e4:89: 04:dc:f9:e3:18:9b:22:1c:c8:f0:33:b6:70:60:10: 27:28:9c:0e:99:a9:91:20:f1:f8:cf:62:34:2e:58: 84:35:33:17:84:a7:2f:76:8a:9c:b3:28:91:e5:5c: 54:c4:e0:df:dc:be:7b:e0:e8:90:ef:38:70:1b:d7: bc:6c:27:26:5c:83:4f:d5:35:47:55:ea:89:1f:99: 48:7e:1c:b0:7b:da:8f:8e:ae:5b:86:c4:ba:9c:9a: 2a:1d:89:51:26:70:bf:11:24:9f:e5:98:f4:86:50: 6c:c1:a3:93:ec:61:a7:d5:5c:91:80:f8:19:14:0f: 57:05:84:c9:0f:04:c3:c1:7e:d7:b9:35:39:f3:ef: 76:7f:48:0f:40:86:22:c4:56:84:8c:35:b3:b1:eb: bc:d1:42:74:8c:b0:83:5b:99:d2:ef:df:2f:bd:80: bd:e2:29:3b:b7:c1:2d:5b:27:9d:99:ff:d8:43:85: a2:57:42:61:1c:01:08:4a:aa:55:e7:3f:2f:e1:86: da:e3:2e:23:e4:a3:2a:a7:63:60:05:b0:a1:09:d2: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F1:F9:C7:D8:A8:3A:75:A1:91:B3:E3:AA:5C:50:B3:4C:5E:8B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/85f78513-211c-3f43-b104-9b7efdc2db1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ad:3b:9d:9b:d0:aa:8e:9e:fe:1f:6b:5c:c0:cf:84:9f:5a: 10:55:88:43:4c:98:b6:b2:d3:98:5f:de:80:72:8e:f0:9c:f3: a7:cc:08:75:f2:53:f9:de:5e:fa:69:0f:81:28:73:d1:c3:be: be:a4:b1:0f:11:7e:60:62:53:fd:67:22:af:05:da:24:45:61: c4:fe:6a:53:08:3a:94:ea:37:36:95:54:0e:c3:db:b0:38:2f: 75:60:d9:5e:4f:26:81:f3:a9:cd:17:37:31:4e:d3:dc:16:ab: 92:33:b3:68:4d:f3:9c:8d:71:17:1a:dd:b6:78:7d:25:a7:09: 47:e1:84:18:93:66:10:39:a1:01:c4:42:05:37:22:75:a7:15: d3:87:3e:c0:be:e1:a7:fc:4b:df:03:f3:c3:ff:30:54:b4:30: 83:27:c7:7d:c0:03:52:a1:77:30:56:fb:52:06:e0:03:24:c2: 41:b0:72:48:20:3a:15:c0:b4:ac:7e:5b:ba:ff:3b:46:e7:33: 3e:fa:ce:4e:c6:95:f7:c6:6b:85:b3:4c:f2:1a:a8:64:75:9e: d7:b8:0e:eb:e6:27:12:24:e2:3d:76:9b:4f:d3:97:7c:e6:63: 94:ca:bf:28:c3:a3:3d:a3:90:29:c4:20:dd:24:02:39:28:a0: d7:f5:12:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwepDSpj0KdLL8AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUyMjE2MTQ0N1oXDTI1MDgyMDE2MTQ0N1owLzEtMCsGA1UEAxMk YWM4MjhmMTctN2VmMC00NzJhLWE2OGMtNTg5NTc3ZWQxZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV758P4pTQ8YHU95ViY4HuGNoV56bymOw4H/ Du8CqTBNRdhWkkS6vLoD5IkE3PnjGJsiHMjwM7ZwYBAnKJwOmamRIPH4z2I0LliE NTMXhKcvdoqcsyiR5VxUxODf3L574OiQ7zhwG9e8bCcmXINP1TVHVeqJH5lIfhyw e9qPjq5bhsS6nJoqHYlRJnC/ESSf5Zj0hlBswaOT7GGn1VyRgPgZFA9XBYTJDwTD wX7XuTU58+92f0gPQIYixFaEjDWzseu80UJ0jLCDW5nS798vvYC94ik7t8EtWyed mf/YQ4WiV0JhHAEISqpV5z8v4Yba4y4j5KMqp2NgBbChCdKxcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXx+cfYqDp1oZGz46pcULNMXotfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvODVmNzg1MTMtMjExYy0z ZjQzLWIxMDQtOWI3ZWZkYzJkYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKitO52b0KqOnv4fa1zAz4SfWhBViENMmLay05hf3oByjvCc86fMCHXy U/neXvppD4Eoc9HDvr6ksQ8RfmBiU/1nIq8F2iRFYcT+alMIOpTqNzaVVA7D27A4 L3Vg2V5PJoHzqc0XNzFO09wWq5Izs2hN85yNcRca3bZ4fSWnCUfhhBiTZhA5oQHE QgU3InWnFdOHPsC+4af8S98D88P/MFS0MIMnx33AA1KhdzBW+1IG4AMkwkGwckgg OhXAtKx+W7r/O0bnMz76zk7GlffGa4WzTPIaqGR1nte4DuvmJxIk4j12m0/Tl3zm Y5TKvyjDoz2jkCnEIN0kAjkooNf1EgY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:25:00 2025 by rpki-client