$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa File: b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa (raw, json) Hash identifier: OQTwXDc1IB0ae4KWHtqtln1MCGuK88hgQKEpO2uOqgg= Subject key identifier: 7F:9A:FB:CE:98:45:A1:D8:1A:7B:29:5A:58:52:42:ED:BE:1C:26:46 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11F2AD5397F34342E7D700 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 131.229.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:f2:ad:53:97:f3:43:42:e7:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=fff8e5f8-16ac-429f-95c4-9253d7347a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:e6:11:5e:96:10:e7:1d:f1:f4:1e:82:da: dc:2b:d8:44:93:c0:70:e1:fc:f4:a4:5f:1e:fc:28: ce:22:7e:f5:21:2c:21:be:2a:b7:b2:11:7e:70:2e: 8d:2a:44:15:0a:6e:9d:ff:b5:88:ba:be:c8:a5:4c: 13:50:b6:7d:23:22:e6:fa:a5:2b:8f:14:0f:50:66: 14:d8:b4:18:2c:bb:cf:97:a2:dd:6d:74:57:6e:c5: 86:58:47:35:0b:9a:7d:a0:8b:69:94:6f:73:c6:5f: 16:ad:e4:4b:f7:ae:44:e1:6d:64:8a:26:2e:ad:14: fa:4d:ea:80:da:be:5a:6b:09:01:df:5a:e8:05:22: ae:01:01:ba:12:b0:de:1c:ac:28:bf:1f:38:f1:c0: f2:38:a8:19:66:32:f3:9b:d8:1b:04:84:19:86:89: e7:7b:14:dd:06:92:e5:65:cc:a9:89:4f:6f:9a:d2: 5c:10:f4:19:34:b7:68:b9:f6:4f:86:c6:60:2d:a9: cd:57:f9:56:3c:cc:62:bf:94:2c:04:75:9b:62:05: ea:e7:86:cc:ce:52:b2:ac:9c:72:d8:58:55:37:a9: e3:03:67:46:2f:33:7d:4e:fd:22:5c:05:09:04:e2: 29:33:d3:3e:3c:fc:c3:b1:56:a9:59:a2:c7:70:63: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9A:FB:CE:98:45:A1:D8:1A:7B:29:5A:58:52:42:ED:BE:1C:26:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7a:22:f1:a4:be:d4:07:57:b2:9a:2d:4b:96:89:e0:f8:77: 9f:5b:6f:9c:ec:83:a4:52:d0:d8:f8:ee:fc:3f:9d:ae:30:1f: 44:33:dc:f6:1b:7d:bc:06:8e:41:87:6a:1e:9f:1a:15:84:f0: 15:57:29:db:56:4e:4b:1c:62:6c:3c:24:6f:6d:e8:80:d0:f5: f6:c5:93:bb:74:be:d2:00:20:0c:5e:ce:08:12:1f:c0:c2:ee: e6:c8:b8:44:ee:83:78:6c:ff:3c:23:2f:9b:35:bb:cd:0b:2c: 74:21:6d:21:b1:e7:46:a5:19:ae:bc:12:7b:97:df:36:3e:9d: b1:a4:e3:1a:55:b7:4f:88:bc:14:70:58:69:19:81:b0:7e:b8: 5f:85:dc:9d:d4:28:ae:08:b6:3c:48:80:2e:f1:9e:72:53:23: 90:4e:fe:8c:1e:21:70:d5:ce:ec:bd:8f:25:b2:b7:b7:29:5d: 6b:18:cf:2b:f1:e5:5a:c4:fa:e9:86:4f:6a:da:d6:ee:90:62: d1:5d:0f:9b:3c:5d:35:a7:71:0c:a3:d3:3a:37:b5:11:ff:d8: da:0e:43:75:98:e3:25:b2:2d:27:9a:5e:f9:63:08:f2:c5:a9: d5:9e:3b:88:8c:40:92:5d:17:a8:44:89:54:d0:b4:90:63:3b: 8c:31:3a:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEfKtU5fzQ0Ln1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZmZmOGU1ZjgtMTZhYy00MjlmLTk1YzQtOTI1M2Q3MzQ3YTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAvmEV6WEOcd8fQegtrcK9hEk8Bw4fz0pF8e /CjOIn71ISwhviq3shF+cC6NKkQVCm6d/7WIur7IpUwTULZ9IyLm+qUrjxQPUGYU 2LQYLLvPl6LdbXRXbsWGWEc1C5p9oItplG9zxl8WreRL965E4W1kiiYurRT6TeqA 2r5aawkB31roBSKuAQG6ErDeHKwovx848cDyOKgZZjLzm9gbBIQZhonnexTdBpLl ZcypiU9vmtJcEPQZNLdoufZPhsZgLanNV/lWPMxiv5QsBHWbYgXq54bMzlKyrJxy 2FhVN6njA2dGLzN9Tv0iXAUJBOIpM9M+PPzDsVapWaLHcGOnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+a+86YRaHYGnspWlhSQu2+HCZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYjcwOGQ4YWEtYjZlYS0z YjMxLThjY2YtZWZhYzMxZTEwNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF56IvGkvtQHV7KaLUuWieD4d59bb5zsg6RS0Nj47vw/na4wH0Qz3PYb fbwGjkGHah6fGhWE8BVXKdtWTkscYmw8JG9t6IDQ9fbFk7t0vtIAIAxezggSH8DC 7ubIuETug3hs/zwjL5s1u80LLHQhbSGx50alGa68EnuX3zY+nbGk4xpVt0+IvBRw WGkZgbB+uF+F3J3UKK4ItjxIgC7xnnJTI5BO/oweIXDVzuy9jyWyt7cpXWsYzyvx 5VrE+umGT2ra1u6QYtFdD5s8XTWncQyj0zo3tRH/2NoOQ3WY4yWyLSeaXvljCPLF qdWeO4iMQJJdF6hEiVTQtJBjO4wxOpY= -----END CERTIFICATE-----Generated at Wed Nov 5 12:18:07 2025 by rpki-client