$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d8a1d832-eeb1-352d-9227-c83230088904.roa File: d8a1d832-eeb1-352d-9227-c83230088904.roa (raw, json) Hash identifier: xYzd0VWhop2IlMXfEJfJrWEM8X5333hrLn3Jr+IqKQ0= Subject key identifier: 6A:4C:BA:E1:C5:8E:5C:D9:A5:F7:48:BB:D3:32:DB:68:9B:89:09:F0 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584BB45D0DF91DF00E8D3C5A7100 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d8a1d832-eeb1-352d-9227-c83230088904.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 205272 IP address blocks: 131.229.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:0d:f9:1d:f0:0e:8d:3c:5a:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=778a92cf-fa62-4588-a02f-4e86490b9b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8e:73:ad:4b:da:b3:37:17:65:d0:d2:eb:2c: d7:73:7e:9b:6b:d4:64:fa:02:df:ff:4f:88:33:22: 6b:04:21:52:06:3f:ed:fa:50:45:35:40:73:73:22: 0f:07:3d:a5:e9:46:f5:0a:57:b8:02:24:49:16:55: 61:85:47:3e:a6:16:b0:aa:ff:35:51:19:37:b7:33: a8:64:0a:26:60:ef:4b:4c:71:2c:3f:be:8e:57:db: a6:6b:31:79:8f:0b:e9:2c:7e:ae:3c:f5:bc:a3:82: 8f:ff:9e:02:2e:17:40:d0:30:85:da:d6:77:76:28: 09:3e:ef:d5:20:da:8f:8d:3b:4b:ab:2f:04:b6:4d: d8:88:8a:87:39:e8:0f:3c:91:99:6d:bb:84:4f:41: 46:4d:b8:73:d1:1d:b2:66:fe:ab:39:e6:cf:ab:2f: 60:7b:50:49:64:c7:6e:8b:f0:e3:88:1c:a6:45:e8: e7:be:03:41:f0:ac:f0:9a:12:e9:bf:07:a4:64:e4: 5b:42:81:86:54:73:8c:08:40:c7:e2:3c:74:39:fd: 3e:b0:7c:9f:9d:f2:10:2b:7b:c9:6a:04:f0:f3:90: 79:8d:46:f8:24:36:70:7b:26:9d:cc:16:fa:59:7c: 3c:8f:52:c5:49:73:2c:a2:34:58:d1:b2:0f:21:e1: bb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4C:BA:E1:C5:8E:5C:D9:A5:F7:48:BB:D3:32:DB:68:9B:89:09:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d8a1d832-eeb1-352d-9227-c83230088904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:85:3d:a0:31:f4:17:31:5f:84:02:49:16:fa:92:6f:3a:82: 53:ca:c9:cd:23:75:88:60:e1:ed:76:44:d0:06:ae:e4:d5:8a: 94:69:d4:8e:4a:9d:78:40:60:4f:f9:e4:8a:a9:f7:3f:80:68: fc:4d:77:d0:64:f4:38:2a:37:74:64:10:ed:8f:2d:0d:2e:2a: 41:f7:cb:4e:3d:e6:38:4e:41:6e:ab:ee:92:41:bf:46:50:eb: b0:d6:10:92:41:65:88:7b:88:f9:26:f8:1d:55:4c:fe:01:30: 38:45:61:55:cd:78:96:d5:47:f9:61:4e:9c:ce:b0:5b:ee:9a: 0b:e9:c4:fa:5a:ac:be:a3:a6:0d:f9:48:d9:6e:ba:3c:36:da: 5b:04:0b:ce:b5:8b:43:ba:ac:c9:c5:40:5d:f1:78:48:ba:2d: 29:e3:c4:37:de:e6:ab:bb:3e:4e:94:8d:da:d0:71:bb:11:8f: 06:e9:43:f1:53:ad:0c:a2:83:b0:ab:54:5f:aa:04:f5:07:14: b3:8f:1e:49:f5:5e:c3:97:6b:fc:72:ef:6e:29:0c:0f:ca:f7: 09:65:6d:10:2b:dc:2d:52:2b:84:e3:63:58:7b:9a:e0:54:4c: c4:d8:64:61:da:b1:cc:b0:42:6c:9c:e6:06:27:43:63:3b:b0: 73:71:04:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XQ35HfAOjTxacQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk Nzc4YTkyY2YtZmE2Mi00NTg4LWEwMmYtNGU4NjQ5MGI5YjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA345zrUvaszcXZdDS6yzXc36ba9Rk+gLf/0+I MyJrBCFSBj/t+lBFNUBzcyIPBz2l6Ub1Cle4AiRJFlVhhUc+phawqv81URk3tzOo ZAomYO9LTHEsP76OV9umazF5jwvpLH6uPPW8o4KP/54CLhdA0DCF2tZ3digJPu/V INqPjTtLqy8Etk3YiIqHOegPPJGZbbuET0FGTbhz0R2yZv6rOebPqy9ge1BJZMdu i/DjiBymRejnvgNB8KzwmhLpvwekZORbQoGGVHOMCEDH4jx0Of0+sHyfnfIQK3vJ agTw85B5jUb4JDZweyadzBb6WXw8j1LFSXMsojRY0bIPIeG78QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpMuuHFjlzZpfdIu9My22ibiQnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZDhhMWQ4MzItZWViMS0z NTJkLTkyMjctYzgzMjMwMDg4OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCFPaAx9BcxX4QCSRb6km86glPKyc0jdYhg4e12RNAGruTVipRp1I5K nXhAYE/55Iqp9z+AaPxNd9Bk9DgqN3RkEO2PLQ0uKkH3y0495jhOQW6r7pJBv0ZQ 67DWEJJBZYh7iPkm+B1VTP4BMDhFYVXNeJbVR/lhTpzOsFvumgvpxPparL6jpg35 SNluujw22lsEC861i0O6rMnFQF3xeEi6LSnjxDfe5qu7Pk6UjdrQcbsRjwbpQ/FT rQyig7CrVF+qBPUHFLOPHkn1XsOXa/xy724pDA/K9wllbRAr3C1SK4TjY1h7muBU TMTYZGHascywQmyc5gYnQ2M7sHNxBHQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:24:07 2025 by rpki-client