$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/881157e2-6a3b-353b-b75f-cc79e09d064a.roa File: 881157e2-6a3b-353b-b75f-cc79e09d064a.roa (raw, json) Hash identifier: 1FQ8agcO7o1BV13+kX1TrBZy5BcjZwsilP2mFEF1/jw= Subject key identifier: 4E:D1:00:C9:F6:86:29:35:9E:BD:88:7E:B7:63:E3:6F:E4:CB:3B:F7 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584A6C55C6204DE61B1DC5656780 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/881157e2-6a3b-353b-b75f-cc79e09d064a.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 203724 IP address blocks: 131.229.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:c6:20:4d:e6:1b:1d:c5:65:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=ff8826ff-28f7-4dcd-aa3d-17d96275af13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:71:bc:5d:7a:43:6a:3e:0e:bc:41:6e:52: 8a:f1:6c:35:09:20:ad:84:57:be:27:2d:94:c7:bd: 6f:05:35:88:26:0d:d6:c5:d3:e0:12:2c:79:be:ec: 47:60:f3:cb:67:2d:57:42:a6:c8:e6:d4:38:77:06: 20:75:d0:86:28:a0:4c:90:b7:df:18:cb:51:83:1d: 20:40:77:93:1b:0e:94:d6:2d:d5:76:d4:13:5c:21: b2:ac:a4:a6:e1:6d:8e:f4:9f:3f:e0:92:45:c8:d0: 6b:9b:d6:ac:fa:ad:34:62:a8:a7:86:93:f5:fd:44: 6e:e3:63:1a:ff:a0:cb:06:17:ba:51:4a:5a:a6:db: cb:cd:90:5a:6f:b9:2e:9b:65:0e:37:c7:fd:45:cd: 38:e2:17:d5:74:2f:05:c0:66:1d:1f:46:f0:78:8c: 41:79:55:fa:82:c5:b4:27:13:ba:ac:8d:85:4f:9c: 47:9b:bc:cc:0c:8a:d6:59:68:65:3e:69:f6:ec:66: 0e:74:47:0a:23:f6:57:14:17:ed:d5:86:d4:ce:b6: 30:70:13:05:1c:31:48:5f:89:2a:5b:f0:8d:d0:85: 38:e3:f3:32:ad:33:55:05:de:1c:14:2a:d4:ff:c8: 6b:00:be:63:eb:b6:26:03:23:ab:2f:6e:a2:48:0d: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D1:00:C9:F6:86:29:35:9E:BD:88:7E:B7:63:E3:6F:E4:CB:3B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/881157e2-6a3b-353b-b75f-cc79e09d064a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e6:55:d3:26:28:84:ac:44:9b:fa:15:74:41:3e:27:d4:a2: 07:44:2f:8b:b5:a3:91:c6:4b:86:88:80:da:8d:0b:a6:a3:35: 38:af:83:02:e7:a8:59:4c:0b:15:c3:86:82:d4:e9:65:25:6f: 6e:29:66:42:37:eb:48:59:4b:f5:80:2d:f5:a2:5d:6c:41:53: 89:78:f5:72:ee:9b:9d:10:92:d7:53:3f:ff:34:1f:3c:35:7b: 3b:fb:90:8c:7c:8f:3b:ff:70:2d:bf:7d:29:cc:d1:79:a0:5c: 05:51:29:06:49:0b:bc:c5:d0:a3:b4:8c:48:8f:b3:b1:3c:e6: 2f:dc:79:c9:09:04:43:f6:97:93:cf:3a:16:b1:fa:df:10:4c: b7:fb:ee:30:e6:00:bd:5f:70:b0:b5:28:16:ae:eb:87:2a:51: 0d:1f:24:4f:20:28:cb:0c:68:f6:e0:bd:3f:ca:d1:87:3b:c9: 86:41:ff:c6:69:33:1f:b7:57:22:67:b9:18:46:58:d3:af:41: f9:94:22:5a:06:db:71:9f:31:07:95:f5:da:96:7e:37:39:9a: 0a:6a:fc:d5:d1:5e:38:a6:ef:93:fb:54:fa:ca:6b:39:b2:9f: 7f:a5:5a:6b:3c:81:58:18:8f:79:40:a5:0f:48:e4:36:4f:96: 67:e9:9c:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcYgTeYbHcVlZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk ZmY4ODI2ZmYtMjhmNy00ZGNkLWFhM2QtMTdkOTYyNzVhZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1txvF16Q2o+DrxBblKK8Ww1CSCthFe+Jy2U x71vBTWIJg3WxdPgEix5vuxHYPPLZy1XQqbI5tQ4dwYgddCGKKBMkLffGMtRgx0g QHeTGw6U1i3VdtQTXCGyrKSm4W2O9J8/4JJFyNBrm9as+q00YqinhpP1/URu42Ma /6DLBhe6UUpaptvLzZBab7kum2UON8f9Rc044hfVdC8FwGYdH0bweIxBeVX6gsW0 JxO6rI2FT5xHm7zMDIrWWWhlPmn27GYOdEcKI/ZXFBft1YbUzrYwcBMFHDFIX4kq W/CN0IU44/MyrTNVBd4cFCrU/8hrAL5j67YmAyOrL26iSA1lwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7RAMn2hik1nr2Ifrdj42/kyzv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvODgxMTU3ZTItNmEzYi0z NTNiLWI3NWYtY2M3OWUwOWQwNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDmVdMmKISsRJv6FXRBPifUogdEL4u1o5HGS4aIgNqNC6ajNTivgwLn qFlMCxXDhoLU6WUlb24pZkI360hZS/WALfWiXWxBU4l49XLum50QktdTP/80Hzw1 ezv7kIx8jzv/cC2/fSnM0XmgXAVRKQZJC7zF0KO0jEiPs7E85i/ceckJBEP2l5PP Ohax+t8QTLf77jDmAL1fcLC1KBau64cqUQ0fJE8gKMsMaPbgvT/K0Yc7yYZB/8Zp Mx+3VyJnuRhGWNOvQfmUIloG23GfMQeV9dqWfjc5mgpq/NXRXjim75P7VPrKazmy n3+lWms8gVgYj3lApQ9I5DZPlmfpnLw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:21 2025 by rpki-client