$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b9d1f238-e380-318c-aefa-b30a2a011b44.roa File: b9d1f238-e380-318c-aefa-b30a2a011b44.roa (raw, json) Hash identifier: uD9jEb+dUaR2Ky/+DECK2h57bkf9U14QzNktJ2e84Pw= Subject key identifier: 30:98:DB:3E:0F:53:04:28:CF:71:5E:4E:56:2D:B8:C3:95:E5:C0:52 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584BB192860E1D2E094D7EED1F80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b9d1f238-e380-318c-aefa-b30a2a011b44.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 203724 IP address blocks: 131.229.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:86:0e:1d:2e:09:4d:7e:ed:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=8d156f99-559a-49ba-b495-7aa90358d9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:3a:35:c3:e4:23:f5:20:5e:c4:33:02:96: 09:1b:d3:29:7e:c0:42:8e:03:86:23:1a:7b:d3:75: a1:89:60:9e:d8:6f:6b:5b:d0:11:fc:e4:e7:0f:e2: 37:04:b5:a2:da:ca:1c:d1:bd:82:f4:e1:22:b1:a4: 23:93:50:3a:35:77:a0:f1:53:e1:aa:71:45:8a:7c: f5:8d:f9:92:70:7f:0e:f3:a1:b2:9c:be:7b:74:a6: 28:90:68:66:dd:95:40:ed:82:05:5a:58:f6:11:c1: 39:76:79:3c:f9:75:3a:ca:9e:1c:7d:54:8f:2d:b5: 4f:22:34:9c:72:6c:24:56:4d:59:8b:77:1e:f6:99: 83:84:26:86:6b:ae:69:55:76:38:8e:0b:57:1d:59: 2f:a0:90:b6:b1:71:4b:b0:7c:93:87:1d:1b:0f:78: a0:2f:11:42:60:23:e8:91:8e:bf:e0:d9:54:93:4e: d3:14:c5:7d:85:9b:16:4f:d0:dc:3b:40:1b:f6:53: e2:a5:ca:b0:f9:3e:12:d7:16:bc:03:14:15:57:ca: ee:c7:da:e7:d7:b4:04:f7:9d:ea:33:11:08:e0:92: 41:0e:fb:f1:74:a4:ea:6a:42:a8:a4:97:8f:cb:25: 64:54:1e:46:29:4a:61:2c:9a:a6:f4:65:6a:45:d7: 82:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:98:DB:3E:0F:53:04:28:CF:71:5E:4E:56:2D:B8:C3:95:E5:C0:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b9d1f238-e380-318c-aefa-b30a2a011b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:84:c0:11:a9:44:d7:1b:a2:98:7d:6f:51:55:2a:55:2a:1c: fe:55:99:ef:a8:7c:45:7f:92:fa:76:02:90:2b:b1:9d:7e:9c: 58:c9:83:48:82:b9:34:4a:fa:8d:67:01:cd:81:84:fd:83:a9: 5b:9b:a5:cf:5a:8a:17:73:2c:f0:f2:e1:59:d4:75:29:81:7f: 3b:d0:d5:76:b1:bf:d2:26:e6:42:62:86:8a:32:58:6c:c4:7b: 9d:52:4a:9a:6a:72:4b:b3:74:fb:fe:8d:ac:22:4d:5d:69:41: a5:2a:d6:b3:89:78:91:b5:aa:e8:98:61:b0:9d:31:02:a0:3f: 70:21:c5:2f:bb:ff:92:0f:42:00:b3:5f:69:42:dc:53:50:f9: ac:26:90:d3:20:22:e8:c1:2b:9a:a4:34:22:c0:df:90:5c:65: 61:f8:cb:d0:0a:2f:64:31:75:05:10:f9:08:20:5a:3d:79:d0: 0f:db:3b:11:c6:97:43:d8:a2:18:8e:75:b2:6c:d8:4c:bf:61: a7:cd:a9:68:5c:b4:d5:96:fc:92:a6:d3:dc:05:84:55:5e:ea: 18:2c:5c:72:30:3a:9c:9d:13:28:8c:8d:ef:fd:05:b9:15:1c: d4:0f:20:5d:2b:26:58:06:f0:72:87:b3:08:59:dc:16:d4:40: 3f:a8:76:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkoYOHS4JTX7tH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OGQxNTZmOTktNTU5YS00OWJhLWI0OTUtN2FhOTAzNThkOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSg6NcPkI/UgXsQzApYJG9MpfsBCjgOGIxp7 03WhiWCe2G9rW9AR/OTnD+I3BLWi2soc0b2C9OEisaQjk1A6NXeg8VPhqnFFinz1 jfmScH8O86GynL57dKYokGhm3ZVA7YIFWlj2EcE5dnk8+XU6yp4cfVSPLbVPIjSc cmwkVk1Zi3ce9pmDhCaGa65pVXY4jgtXHVkvoJC2sXFLsHyThx0bD3igLxFCYCPo kY6/4NlUk07TFMV9hZsWT9DcO0Ab9lPipcqw+T4S1xa8AxQVV8rux9rn17QE953q MxEI4JJBDvvxdKTqakKopJePyyVkVB5GKUphLJqm9GVqRdeCDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCY2z4PUwQoz3FeTlYtuMOV5cBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYjlkMWYyMzgtZTM4MC0z MThjLWFlZmEtYjMwYTJhMDExYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWEwBGpRNcboph9b1FVKlUqHP5Vme+ofEV/kvp2ApArsZ1+nFjJg0iC uTRK+o1nAc2BhP2DqVubpc9aihdzLPDy4VnUdSmBfzvQ1Xaxv9Im5kJihooyWGzE e51SSppqckuzdPv+jawiTV1pQaUq1rOJeJG1quiYYbCdMQKgP3AhxS+7/5IPQgCz X2lC3FNQ+awmkNMgIujBK5qkNCLA35BcZWH4y9AKL2QxdQUQ+QggWj150A/bOxHG l0PYohiOdbJs2Ey/YafNqWhctNWW/JKm09wFhFVe6hgsXHIwOpydEyiMje/9BbkV HNQPIF0rJlgG8HKHswhZ3BbUQD+odqc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:49 2025 by rpki-client