$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e6dc5f98-d845-320d-9fb5-5f975c26c511.roa File: e6dc5f98-d845-320d-9fb5-5f975c26c511.roa (raw, json) Hash identifier: XDb7D6ELdPsC9Z/YXif10UHVy4DwDHOMHipqppspOAs= Subject key identifier: B9:6D:5B:77:F8:80:BD:02:6B:4B:AE:B5:92:AA:32:88:D9:3A:00:16 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11F36DCA8D954D97B5B000 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e6dc5f98-d845-320d-9fb5-5f975c26c511.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203724 IP address blocks: 131.229.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:f3:6d:ca:8d:95:4d:97:b5:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=23ae5557-c3ee-4235-a4d8-bb36f74b6502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ba:cd:11:55:a7:20:ea:6b:f0:9a:13:85:19: 71:dc:ce:df:e3:6c:92:2b:ec:56:af:cd:b0:f1:fb: 20:e7:1f:9b:8a:e4:99:ed:a5:42:e0:87:d6:c8:75: 84:9e:73:21:fd:94:0f:59:55:28:0d:23:a2:21:5a: 5c:e1:c2:f8:f3:47:2a:2b:e8:06:9f:cf:7c:da:c0: 6a:94:07:56:3a:a7:e9:31:f0:1e:92:a6:46:9a:f7: a7:a3:35:00:08:cb:ed:de:56:dd:46:a1:d6:82:d3: cd:ce:11:c0:b6:bf:84:d2:f8:4a:19:45:4d:b9:0c: 54:71:88:3f:39:b4:ef:3f:44:5e:7a:40:97:8c:3f: cf:4d:98:d4:0a:87:28:3a:43:28:9b:fd:56:5b:f1: 26:4f:86:72:8f:bf:ba:b1:c2:a5:77:59:01:eb:b5: 26:b9:7e:65:8a:f9:16:58:b9:ee:f5:a1:c1:70:92: bc:7a:4d:b2:4b:8f:9a:d1:a5:7e:fa:53:d3:7d:2e: 6b:07:8b:cb:9a:f8:af:ed:b4:02:92:aa:ad:17:0c: 6c:cf:8b:a0:86:ee:31:af:90:b9:aa:32:35:9a:8a: a3:ae:eb:6e:eb:62:7f:b6:be:d2:ee:e6:cb:d6:7e: 5b:82:02:de:2e:c8:c8:8f:e9:61:74:79:14:11:28: 01:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6D:5B:77:F8:80:BD:02:6B:4B:AE:B5:92:AA:32:88:D9:3A:00:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e6dc5f98-d845-320d-9fb5-5f975c26c511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:2d:d8:b8:66:cb:b5:ce:aa:1a:de:9a:cc:76:21:00:52:ed: 44:10:e3:c9:91:c3:22:b7:38:8c:4e:99:44:ac:3f:ae:8a:32: 0f:29:bc:c9:8b:44:1f:b9:03:57:3c:97:ab:67:4f:93:b0:4d: 47:b0:86:2c:40:30:1f:f4:f2:fc:3a:b7:ff:24:2f:2e:8c:75: b3:6d:d0:87:7f:ef:36:7d:1c:77:9b:28:e7:bd:94:16:da:90: 18:15:ca:05:36:3c:cb:08:aa:0d:79:e0:91:4d:fb:59:4a:ef: 4c:4b:67:63:bf:f8:14:bb:3b:d0:cb:63:22:5a:15:d3:16:a8: 5f:cd:28:d1:b4:51:7a:eb:07:82:fd:3d:38:e0:76:5f:28:6a: 76:ef:c9:75:d6:f1:f1:6d:8e:d2:1f:08:7e:83:8c:65:62:3d: 9e:a0:99:8b:56:d2:ed:fc:2f:f0:41:9c:0e:87:3e:00:7d:4b: 19:5c:8d:8a:96:81:84:e2:52:0f:6a:79:57:9b:63:13:28:55: 64:28:b3:8c:5e:2a:29:ee:95:7f:52:53:a1:a1:5e:ea:07:c0: 31:d0:a0:14:e5:26:ef:04:65:a0:10:b7:6d:73:b8:ac:a7:6b: 47:69:d6:f0:ce:d2:fa:4c:d6:ff:b3:58:b2:27:40:b2:be:b1: 95:b4:65:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEfNtyo2VTZe1sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MjNhZTU1NTctYzNlZS00MjM1LWE0ZDgtYmIzNmY3NGI2NTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirrNEVWnIOpr8JoThRlx3M7f42ySK+xWr82w 8fsg5x+biuSZ7aVC4IfWyHWEnnMh/ZQPWVUoDSOiIVpc4cL480cqK+gGn8982sBq lAdWOqfpMfAekqZGmvenozUACMvt3lbdRqHWgtPNzhHAtr+E0vhKGUVNuQxUcYg/ ObTvP0ReekCXjD/PTZjUCocoOkMom/1WW/EmT4Zyj7+6scKld1kB67UmuX5livkW WLnu9aHBcJK8ek2yS4+a0aV++lPTfS5rB4vLmviv7bQCkqqtFwxsz4ughu4xr5C5 qjI1moqjrutu62J/tr7S7ubL1n5bggLeLsjIj+lhdHkUESgBtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLltW3f4gL0Ca0uutZKqMojZOgAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZTZkYzVmOTgtZDg0NS0z MjBkLTlmYjUtNWY5NzVjMjZjNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwt2Lhmy7XOqhremsx2IQBS7UQQ48mRwyK3OIxOmUSsP66KMg8pvMmL RB+5A1c8l6tnT5OwTUewhixAMB/08vw6t/8kLy6MdbNt0Id/7zZ9HHebKOe9lBba kBgVygU2PMsIqg154JFN+1lK70xLZ2O/+BS7O9DLYyJaFdMWqF/NKNG0UXrrB4L9 PTjgdl8oanbvyXXW8fFtjtIfCH6DjGViPZ6gmYtW0u38L/BBnA6HPgB9SxlcjYqW gYTiUg9qeVebYxMoVWQos4xeKinulX9SU6GhXuoHwDHQoBTlJu8EZaAQt21zuKyn a0dp1vDO0vpM1v+zWLInQLK+sZW0ZRg= -----END CERTIFICATE-----Generated at Wed Nov 5 03:41:39 2025 by rpki-client