$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa File: 895fff21-ab62-3bfa-989a-a161b089ba1f.roa (raw, json) Hash identifier: 7aNy5qxTu0YguRU/f+W9WanE3rpysNoK3Bhidr8Lo7w= Subject key identifier: A4:C7:C1:C9:D5:14:59:8D:EB:EF:6D:10:60:D1:38:B2:FB:E6:9A:EE Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AA42B6C7E7E86E23450FCF000 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 131.229.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:6c:7e:7e:86:e2:34:50:fc:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=b9643759-83a7-4927-8076-fc09c05566e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:a5:65:86:c3:45:8c:ce:90:5e:ca:27:48: 8c:0a:be:a7:7e:cf:26:31:5e:6a:d4:63:88:55:47: 5c:08:eb:67:59:0b:b5:07:bd:1c:0a:94:1f:d8:4f: 99:98:04:00:50:b4:d9:56:f5:1e:e0:9a:0d:7e:a8: 20:0d:5b:19:a9:f0:4b:70:4b:cf:b9:46:e4:02:fc: ea:99:fa:27:e5:86:47:ca:06:e1:20:5b:0a:39:8e: 8e:59:92:53:01:11:0f:20:c8:e7:bf:e3:40:9a:88: a4:9e:21:3d:42:6d:2a:69:0e:47:82:25:c0:e3:b0: 7c:85:2b:3e:1c:f0:79:0b:78:27:fb:51:c4:14:d8: 96:60:bb:02:4c:b0:f9:1d:32:a3:a3:0f:5b:37:4a: 5e:9e:89:3a:01:aa:04:22:f2:0d:c1:9d:3f:09:89: 42:85:78:1e:8d:1b:01:c3:ac:36:28:28:c2:dc:74: ad:d7:ff:64:69:15:0a:f4:82:80:10:6a:93:08:31: c0:46:a0:f3:c5:5c:9f:76:b4:ce:d3:06:c6:3c:4d: 78:36:3f:7d:2e:cf:62:93:42:22:8b:44:02:ed:76: f2:30:49:76:24:3d:b7:b3:4e:3d:a7:a1:d0:a0:ca: 3c:ba:14:03:94:21:2c:80:87:39:d3:de:a8:b9:f3: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C7:C1:C9:D5:14:59:8D:EB:EF:6D:10:60:D1:38:B2:FB:E6:9A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:81:08:f8:67:de:9b:1e:7e:5f:cf:b9:35:4f:7a:ef:f8:6c: f4:b6:35:3c:b0:5f:dd:da:66:62:96:8f:e1:a7:00:34:4e:55: b0:55:f0:08:bc:6d:2d:7d:52:67:c1:07:86:88:0a:ae:a8:1b: 25:1f:a5:b5:66:14:0c:d4:3c:39:16:be:0e:45:19:21:b8:56: 17:ca:2d:95:11:4a:b3:36:8e:a9:b7:d9:b5:16:40:1b:1d:03: 57:04:87:0b:f1:6b:3c:d7:d5:ab:85:9e:f8:20:88:e9:61:7a: da:86:13:3f:d4:c9:97:c4:22:c8:84:8e:42:de:f8:92:39:d5: 12:15:94:86:ba:76:11:5b:46:c5:24:76:51:75:c1:08:a1:1f: 9c:44:cb:7c:ad:1e:ea:6a:ac:3e:c4:34:a7:2c:ff:b6:a4:64: 3c:cb:2a:1a:7b:dc:f0:36:87:f1:a5:72:7b:d7:54:0d:2d:91: 17:c4:86:f5:cf:37:c8:64:e7:79:14:c1:bd:33:73:7d:e0:47: d5:08:97:ba:ef:42:42:47:e6:7b:0d:b0:a6:7f:a7:85:73:3b: 12:dd:a4:89:6e:fa:49:c0:dc:06:59:75:38:32:88:04:46:24: 3b:94:36:f4:c9:34:fa:b2:fe:31:12:36:61:89:c0:49:71:24: c9:85:a7:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK2x+fobiNFD88AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk Yjk2NDM3NTktODNhNy00OTI3LTgwNzYtZmMwOWMwNTU2NmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldelZYbDRYzOkF7KJ0iMCr6nfs8mMV5q1GOI VUdcCOtnWQu1B70cCpQf2E+ZmAQAULTZVvUe4JoNfqggDVsZqfBLcEvPuUbkAvzq mfon5YZHygbhIFsKOY6OWZJTAREPIMjnv+NAmoikniE9Qm0qaQ5HgiXA47B8hSs+ HPB5C3gn+1HEFNiWYLsCTLD5HTKjow9bN0penok6AaoEIvINwZ0/CYlChXgejRsB w6w2KCjC3HSt1/9kaRUK9IKAEGqTCDHARqDzxVyfdrTO0wbGPE14Nj99Ls9ik0Ii i0QC7XbyMEl2JD23s049p6HQoMo8uhQDlCEsgIc5096oufM8dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTHwcnVFFmN6+9tEGDROLL75pruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvODk1ZmZmMjEtYWI2Mi0z YmZhLTk4OWEtYTE2MWIwODliYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKBCPhn3psefl/PuTVPeu/4bPS2NTywX93aZmKWj+GnADROVbBV8Ai8 bS19UmfBB4aICq6oGyUfpbVmFAzUPDkWvg5FGSG4VhfKLZURSrM2jqm32bUWQBsd A1cEhwvxazzX1auFnvggiOlhetqGEz/UyZfEIsiEjkLe+JI51RIVlIa6dhFbRsUk dlF1wQihH5xEy3ytHupqrD7ENKcs/7akZDzLKhp73PA2h/GlcnvXVA0tkRfEhvXP N8hk53kUwb0zc33gR9UIl7rvQkJH5nsNsKZ/p4VzOxLdpIlu+knA3AZZdTgyiARG JDuUNvTJNPqy/jESNmGJwElxJMmFp98= -----END CERTIFICATE-----Generated at Wed Aug 6 00:57:07 2025 by rpki-client