$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c78fc4d5-9da6-3a09-92fb-d85db2f1e8cd.roa File: c78fc4d5-9da6-3a09-92fb-d85db2f1e8cd.roa (raw, json) Hash identifier: keGyq5VjqMRPPy++x3RbQnkEaQAv7N67p0ewv9ebbNA= Subject key identifier: D9:40:67:7B:71:8F:A5:1B:F6:71:09:8F:55:BC:E1:44:75:0A:9C:C3 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584A6F20735F7B2817C2D0209E00 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c78fc4d5-9da6-3a09-92fb-d85db2f1e8cd.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 31898 IP address blocks: 131.229.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:73:5f:7b:28:17:c2:d0:20:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=c968db86-e0a3-42f7-8ee3-0bf39f097b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:52:66:ad:c9:ce:7e:23:3a:f4:69:56:fc: 0c:36:87:54:e0:36:7c:67:a9:09:c9:3f:e3:84:b2: f4:82:ce:7b:30:fd:c8:95:e0:f4:b1:11:cc:ae:f0: eb:3b:90:ce:28:4a:49:04:45:a1:cb:96:f6:97:db: 52:75:62:a1:ed:9e:5c:ac:95:fe:cb:79:f4:bf:71: 4e:8b:2d:1c:98:da:9c:a8:64:d1:b0:08:d5:b3:98: d9:f9:03:6a:ee:3a:fb:e1:c8:a8:5f:25:5e:46:c6: f0:2d:aa:4e:cd:e6:c6:a0:5d:59:0a:33:68:a5:8a: 0a:77:6a:04:c5:e2:33:ad:01:d1:5c:9e:6d:ea:3c: 14:f8:87:01:02:2f:2f:42:ad:73:d0:4d:da:12:73: 81:72:01:65:8a:5b:fe:34:e9:87:62:ec:db:18:4c: 8c:91:ed:38:91:72:d7:1d:aa:ec:97:b5:96:5f:91: 06:ea:0c:ae:ee:ac:ab:3c:38:f8:b6:18:80:8c:ad: 96:27:d5:ac:00:45:06:33:20:dd:27:50:5b:a6:67: f5:c4:87:ba:9d:04:a0:04:fb:7c:2a:0a:e7:37:b9: a7:cf:fb:36:3f:3a:7c:b7:a2:2e:a8:ac:ec:27:6a: 0f:30:9b:e0:6b:a9:01:fb:1b:65:e1:a6:ac:29:34: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:40:67:7B:71:8F:A5:1B:F6:71:09:8F:55:BC:E1:44:75:0A:9C:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c78fc4d5-9da6-3a09-92fb-d85db2f1e8cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:88:3a:a0:a9:0f:12:28:0e:5b:60:8b:85:13:15:cb:28:e9: ba:d8:c8:75:6e:0e:44:ae:eb:48:b8:0a:89:44:f4:1e:7c:6c: da:88:54:4e:31:c3:35:ac:ae:f6:9d:86:a8:1c:c5:a2:5b:31: 1d:19:bc:69:42:55:68:54:60:4d:4d:3d:e5:3b:12:27:fe:6b: 06:c4:ce:c1:72:55:3a:33:cb:2a:1e:d2:90:e7:24:a8:38:5e: 92:ef:8c:ee:cd:d9:1f:49:8b:0c:ad:5f:23:d7:b5:33:d6:1b: 5e:b0:d4:13:6d:ca:de:cb:6f:80:29:59:39:8e:cc:c4:fa:f4: 1f:38:7c:b3:77:b1:9a:51:9e:af:20:10:b7:3c:ee:09:92:d2: 88:d8:a4:2d:8f:d0:02:a3:f0:02:30:0d:68:eb:98:e4:b2:b9: 7b:0b:0e:ef:14:2e:72:55:93:c7:92:0e:7f:b2:b3:28:65:a6: 25:82:ad:94:b2:7b:1e:e1:3f:b1:05:6b:42:2c:fd:75:20:16: f8:ac:da:ae:c1:33:f6:c4:5d:b3:d4:8a:3c:0b:ea:e4:6b:dc: 6e:7d:de:e2:74:92:8e:a2:80:70:bb:48:da:2e:f4:b8:00:58: fb:c9:4d:22:71:0a:c8:1a:bd:47:0c:04:15:88:2d:8b:0f:4e: 4f:57:9a:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIHNfeygXwtAgngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk Yzk2OGRiODYtZTBhMy00MmY3LThlZTMtMGJmMzlmMDk3YjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnChSZq3Jzn4jOvRpVvwMNodU4DZ8Z6kJyT/j hLL0gs57MP3IleD0sRHMrvDrO5DOKEpJBEWhy5b2l9tSdWKh7Z5crJX+y3n0v3FO iy0cmNqcqGTRsAjVs5jZ+QNq7jr74cioXyVeRsbwLapOzebGoF1ZCjNopYoKd2oE xeIzrQHRXJ5t6jwU+IcBAi8vQq1z0E3aEnOBcgFlilv+NOmHYuzbGEyMke04kXLX Harsl7WWX5EG6gyu7qyrPDj4thiAjK2WJ9WsAEUGMyDdJ1Bbpmf1xIe6nQSgBPt8 KgrnN7mnz/s2Pzp8t6IuqKzsJ2oPMJvga6kB+xtl4aasKTQVDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlAZ3txj6Ub9nEJj1W84UR1CpzDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYzc4ZmM0ZDUtOWRhNi0z YTA5LTkyZmItZDg1ZGIyZjFlOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWIOqCpDxIoDltgi4UTFcso6brYyHVuDkSu60i4ColE9B58bNqIVE4x wzWsrvadhqgcxaJbMR0ZvGlCVWhUYE1NPeU7Eif+awbEzsFyVTozyyoe0pDnJKg4 XpLvjO7N2R9JiwytXyPXtTPWG16w1BNtyt7Lb4ApWTmOzMT69B84fLN3sZpRnq8g ELc87gmS0ojYpC2P0AKj8AIwDWjrmOSyuXsLDu8ULnJVk8eSDn+ysyhlpiWCrZSy ex7hP7EFa0Is/XUgFvis2q7BM/bEXbPUijwL6uRr3G593uJ0ko6igHC7SNou9LgA WPvJTSJxCsgavUcMBBWILYsPTk9XmuA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:04:11 2025 by rpki-client