$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa File: b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa (raw, json) Hash identifier: XW139mJ0EEUCy08W/a9EtgaJ/3LiIArx2taGb4Tsr2A= Subject key identifier: 5A:F0:63:3B:90:11:AB:3E:37:8B:A8:44:72:52:3D:D8:D9:8A:72:5F Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584A6C55C55B7F083FE1C145D280 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 31898 IP address blocks: 131.229.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:c5:5b:7f:08:3f:e1:c1:45:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=3b8d6b5f-bb82-4a49-a305-40bd030dfc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:34:3c:26:cb:6b:60:9f:e9:65:b5:df:0a: a1:b0:28:e6:22:31:ae:96:e6:dd:3b:8c:0e:0b:d5: 59:0f:6c:33:f4:8e:e2:f9:c4:29:c4:60:58:3b:40: 65:04:00:73:01:f1:9d:5a:43:f7:eb:43:d1:22:8e: 8e:6c:22:9e:dc:d2:75:5e:57:f2:e3:c0:49:e6:a5: 1f:51:5b:ef:97:f8:21:83:9c:a0:af:80:1a:ec:23: a6:95:59:e5:d9:c4:67:ad:f7:f5:92:73:4a:df:c2: 2a:13:35:56:2e:aa:ab:22:2c:33:2f:b5:9e:84:15: 78:b6:d3:74:03:1d:30:0d:a5:85:f5:2d:b7:b7:8c: 49:66:92:b9:f4:26:ca:87:10:25:9f:67:f1:81:6f: 5b:a7:5c:f9:fe:cf:a1:e1:2c:c9:57:db:9b:bc:c8: e9:05:f3:a6:c4:d0:7b:7c:90:d3:99:cf:9c:df:c8: 02:5b:7c:b9:8a:73:23:f0:74:2b:54:bd:07:f7:64: b1:84:3a:67:bc:25:16:fc:f4:0b:2d:f2:5f:4e:88: bd:b3:fb:55:2a:55:67:af:70:64:7e:d3:06:12:4e: 50:b3:bc:03:0b:c7:9c:7f:ea:40:0e:d1:95:a1:b9: 18:cd:79:34:16:bc:4e:05:13:94:49:49:f3:9f:b0: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F0:63:3B:90:11:AB:3E:37:8B:A8:44:72:52:3D:D8:D9:8A:72:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:39:1d:e6:bc:20:aa:4d:8e:58:8b:54:65:fa:5b:21:14:1a: 7c:39:cf:db:05:18:df:a0:e2:fa:26:b9:1f:f3:60:df:26:43: 97:d0:45:0a:54:5b:75:2a:46:a0:37:fe:05:64:09:37:6b:53: 5d:fd:78:67:95:b5:02:db:4d:9c:93:c1:55:68:dd:6e:84:58: 62:dd:f1:82:98:90:c3:ef:88:ae:92:d4:48:0c:7c:ee:a9:e7: 92:b3:77:05:08:a8:54:ae:64:7c:25:bb:b4:50:f9:4c:62:70: e2:c3:ae:4a:2a:6f:28:3d:d4:b8:4f:c0:99:02:a9:97:d8:f6: 25:93:ca:2e:7f:d8:cb:3c:9f:d5:c6:95:83:57:45:b9:bb:fe: 74:ff:51:06:18:17:26:4f:cf:16:9b:18:18:df:4f:b9:14:20: 42:71:83:7b:02:a0:e8:35:5e:1d:cc:6a:f5:a5:e8:be:3c:77: 75:7f:88:a9:35:4b:a4:63:3d:b9:75:50:29:14:e8:99:5f:a3: f7:b5:b7:73:01:60:75:0c:68:74:d8:f5:7a:37:ee:69:f7:5d: fc:ce:42:d9:d3:7d:e9:b0:f2:6b:0b:05:ad:98:49:36:71:b1: d6:60:b0:d8:96:6c:7f:ec:0d:48:0b:2d:13:8b:d4:fd:f5:03: 8a:4d:65:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcVbfwg/4cFF0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk M2I4ZDZiNWYtYmI4Mi00YTQ5LWEzMDUtNDBiZDAzMGRmYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0I0PCbLa2Cf6WW13wqhsCjmIjGulubdO4wO C9VZD2wz9I7i+cQpxGBYO0BlBABzAfGdWkP360PRIo6ObCKe3NJ1Xlfy48BJ5qUf UVvvl/ghg5ygr4Aa7COmlVnl2cRnrff1knNK38IqEzVWLqqrIiwzL7WehBV4ttN0 Ax0wDaWF9S23t4xJZpK59CbKhxAln2fxgW9bp1z5/s+h4SzJV9ubvMjpBfOmxNB7 fJDTmc+c38gCW3y5inMj8HQrVL0H92SxhDpnvCUW/PQLLfJfToi9s/tVKlVnr3Bk ftMGEk5Qs7wDC8ecf+pADtGVobkYzXk0FrxOBROUSUnzn7DnOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrwYzuQEas+N4uoRHJSPdjZinJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYjcwOGQ4YWEtYjZlYS0z YjMxLThjY2YtZWZhYzMxZTEwNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc5Hea8IKpNjliLVGX6WyEUGnw5z9sFGN+g4vomuR/zYN8mQ5fQRQpU W3UqRqA3/gVkCTdrU139eGeVtQLbTZyTwVVo3W6EWGLd8YKYkMPviK6S1EgMfO6p 55KzdwUIqFSuZHwlu7RQ+UxicOLDrkoqbyg91LhPwJkCqZfY9iWTyi5/2Ms8n9XG lYNXRbm7/nT/UQYYFyZPzxabGBjfT7kUIEJxg3sCoOg1Xh3MavWl6L48d3V/iKk1 S6RjPbl1UCkU6Jlfo/e1t3MBYHUMaHTY9Xo37mn3XfzOQtnTfemw8msLBa2YSTZx sdZgsNiWbH/sDUgLLROL1P31A4pNZfI= -----END CERTIFICATE-----Generated at Wed Aug 6 05:52:05 2025 by rpki-client