$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f1d1e2a6-bc2c-3404-a22f-ad5efe4b328c.roa File: f1d1e2a6-bc2c-3404-a22f-ad5efe4b328c.roa (raw, json) Hash identifier: /8WvcHPLQcCbXphbSs2onN4+L5UXe0y+ls9QZnH3v3U= Subject key identifier: 18:C9:1A:50:EC:A6:43:3B:44:D9:66:34:D2:87:1C:0B:4E:8B:93:06 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B4D11BFD9D39F91898EEDB500 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f1d1e2a6-bc2c-3404-a22f-ad5efe4b328c.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203724 IP address blocks: 131.229.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:bf:d9:d3:9f:91:89:8e:ed:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=35c7ff86-e0a2-4928-8204-51688d1d1d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e6:56:40:76:06:9b:31:eb:71:e7:cf:21:63: 43:4d:de:51:a7:5f:28:15:b9:ee:dc:a8:64:4f:d0: e5:b9:82:a4:ea:99:e1:e2:a6:fc:13:4e:2f:67:35: f2:dc:98:4a:f2:6d:a6:20:ae:ea:9b:f5:4b:95:a5: e1:a5:e5:58:70:1c:c8:19:14:f2:ae:0b:54:e1:f2: 53:c0:a4:d2:b0:a7:5f:05:58:d2:66:fa:ec:7a:e6: 4a:f5:47:c5:72:06:74:59:4f:be:a5:f9:2a:5f:7b: 51:4e:20:30:2b:ec:57:c8:7c:92:e1:34:ff:97:fa: c4:e6:9e:2c:64:fb:a4:01:7c:22:7e:e0:d5:5e:7c: ca:80:8c:de:a0:a4:77:42:88:7a:87:14:39:26:3d: 70:2c:6c:6e:28:70:aa:19:b1:9f:74:53:2c:aa:f0: 1d:85:fd:0f:39:5c:98:79:e6:36:34:30:e3:27:7a: 83:f0:eb:50:3e:60:7e:45:75:4d:26:74:62:55:8d: b0:9a:45:f1:44:9b:ad:ba:54:8f:52:c9:87:40:f3: 7a:09:b9:38:97:1c:97:03:4f:18:0d:53:f0:a1:8f: c8:5b:f7:29:52:1f:59:67:22:7a:12:77:61:ff:4d: 3f:5d:a7:a7:71:1e:3d:c5:53:c4:22:45:9c:2a:d4: ce:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C9:1A:50:EC:A6:43:3B:44:D9:66:34:D2:87:1C:0B:4E:8B:93:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f1d1e2a6-bc2c-3404-a22f-ad5efe4b328c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b6:85:76:9c:65:ee:d6:c4:0f:4f:0c:ef:7a:31:90:97:16: 8b:02:6f:b2:5b:73:f0:0f:0e:14:4c:f1:25:12:00:c3:35:50: e5:d8:17:0d:2f:81:d4:07:e2:51:41:64:ca:7a:77:bd:70:22: ba:0b:16:39:ca:d7:1b:7e:ec:e0:4a:71:25:13:37:fa:80:a7: 1d:a0:dd:6c:6f:f0:98:f6:eb:d5:2c:08:f4:08:00:a6:f7:f4: 7d:f5:05:ab:67:14:9e:5e:33:0c:34:6c:5f:78:d4:5f:cb:c8: 19:9b:44:da:06:1d:4a:a1:54:37:9b:ce:cc:3f:86:0d:72:d1: f3:dc:11:18:09:f5:1d:5a:7c:c8:c6:3d:de:b7:b7:45:a5:05: 1d:64:47:0c:b2:72:c2:8c:1f:43:a9:27:e7:ed:d2:a2:36:02: e6:6d:34:f5:ce:ec:fd:1b:57:eb:46:64:0a:f2:7e:b1:8b:70: 27:c0:e5:51:14:f3:c6:48:43:51:2f:af:a2:64:4a:6c:f0:73: ec:8d:bc:d1:9d:aa:25:a3:a5:c9:5f:52:6b:e5:fa:2c:60:52: d2:90:df:11:68:a5:78:f9:cb:6b:f1:6a:f4:43:c5:dc:0c:b7: ae:b7:4a:3a:b1:9a:c9:82:19:12:8d:a7:cb:6f:6f:66:7f:a7: 19:e4:ac:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEb/Z05+RiY7ttQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MzVjN2ZmODYtZTBhMi00OTI4LTgyMDQtNTE2ODhkMWQxZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuZWQHYGmzHrcefPIWNDTd5Rp18oFbnu3Khk T9DluYKk6pnh4qb8E04vZzXy3JhK8m2mIK7qm/VLlaXhpeVYcBzIGRTyrgtU4fJT wKTSsKdfBVjSZvrseuZK9UfFcgZ0WU++pfkqX3tRTiAwK+xXyHyS4TT/l/rE5p4s ZPukAXwifuDVXnzKgIzeoKR3Qoh6hxQ5Jj1wLGxuKHCqGbGfdFMsqvAdhf0POVyY eeY2NDDjJ3qD8OtQPmB+RXVNJnRiVY2wmkXxRJutulSPUsmHQPN6Cbk4lxyXA08Y DVPwoY/IW/cpUh9ZZyJ6Endh/00/XaencR49xVPEIkWcKtTOYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjJGlDspkM7RNlmNNKHHAtOi5MGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZjFkMWUyYTYtYmMyYy0z NDA0LWEyMmYtYWQ1ZWZlNGIzMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy2hXacZe7WxA9PDO96MZCXFosCb7Jbc/APDhRM8SUSAMM1UOXYFw0v gdQH4lFBZMp6d71wIroLFjnK1xt+7OBKcSUTN/qApx2g3Wxv8Jj269UsCPQIAKb3 9H31BatnFJ5eMww0bF941F/LyBmbRNoGHUqhVDebzsw/hg1y0fPcERgJ9R1afMjG Pd63t0WlBR1kRwyycsKMH0OpJ+ft0qI2AuZtNPXO7P0bV+tGZAryfrGLcCfA5VEU 88ZIQ1Evr6JkSmzwc+yNvNGdqiWjpclfUmvl+ixgUtKQ3xFopXj5y2vxavRDxdwM t663SjqxmsmCGRKNp8tvb2Z/pxnkrEg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:30:24 2025 by rpki-client