$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa File: fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa (raw, json) Hash identifier: bzxEOJL1roViaDNRs8iKnq3eFLp/tlXkkI3CVNEDefc= Subject key identifier: E4:A3:9A:A5:01:72:D8:E8:56:08:38:BB:A2:4B:EE:7A:7A:4D:F1:AC Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584BA93292A3A33B3B8D9E8D06D0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 31898 IP address blocks: 131.229.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:92:a3:a3:3b:3b:8d:9e:8d:06:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=d45e5d2c-7f78-4f98-acca-ada0ad4e0b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:a2:1f:7f:3f:39:c3:2b:92:3e:94:00:d3: 93:58:3f:84:c5:e1:a8:09:b0:fb:4b:79:50:25:bd: 4e:cd:38:e7:29:5f:da:f1:2b:79:6c:15:bf:da:a8: 08:ae:45:a1:7c:42:25:e5:c8:0a:be:84:a4:57:30: da:1e:51:58:c0:2e:1f:d1:8f:e8:80:4b:1a:f1:b0: 8f:61:71:5c:71:e7:3b:5a:73:25:89:12:68:54:a3: 0a:a7:1e:8e:82:e9:0e:b3:76:af:ed:90:99:77:c4: 9e:fc:42:93:52:d9:25:13:00:51:8d:8d:b9:9a:6f: 53:ac:a2:86:39:3a:e8:55:15:58:bf:3e:b1:b4:f8: 5f:d2:63:08:78:ba:25:5f:1f:33:f9:48:c5:96:5c: c3:5c:75:e4:8c:fc:dc:1f:2e:e7:62:f8:f4:c5:b2: 5c:7c:37:47:76:82:b4:d4:68:fc:df:19:80:2b:d9: e4:10:fd:b2:5a:f8:e6:b3:a2:2f:76:58:fe:1f:e2: 45:b1:4d:c7:2e:76:c9:0f:29:66:4f:87:1e:96:c7: 83:c4:4f:f2:e6:47:21:7d:17:8d:c2:cf:3a:36:b3: 99:70:19:a6:ab:6c:8f:3b:d1:69:b8:73:4e:19:dd: 2a:2e:b3:ab:a0:bf:4d:7c:41:c3:94:70:96:68:1d: 30:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A3:9A:A5:01:72:D8:E8:56:08:38:BB:A2:4B:EE:7A:7A:4D:F1:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:10:84:ed:04:09:9f:aa:dc:fa:f8:2c:1f:48:79:34:10:34: 41:06:b9:cf:8b:a7:29:47:4a:d6:dd:03:29:17:8b:dd:92:ab: c7:45:fd:5b:02:c3:e9:fc:19:3f:4b:4f:42:94:a2:46:a7:d7: eb:a4:89:e5:c7:6d:c8:dd:30:71:ac:28:3f:d2:07:fb:1c:b0: 72:7f:f6:b7:c2:c3:ab:ae:b5:19:e2:de:6a:39:0e:43:18:9a: e8:35:8b:9c:94:78:a0:70:f1:b1:88:99:11:67:5d:7c:9e:5a: 35:da:b6:d1:fc:3f:21:c3:e0:70:33:ac:8b:da:de:49:13:d6: 9a:37:e6:d4:be:9b:77:11:56:fb:94:9f:61:2c:ae:a6:9b:ed: 4c:f4:6f:d4:fc:6f:6a:07:42:23:94:fc:c5:7d:d0:fc:f3:2b: 45:c1:f3:71:1f:90:7e:c7:47:2d:91:93:10:be:51:9a:c1:d4: 7b:b4:e4:8c:e2:ab:7e:2d:c7:84:de:e5:03:fe:48:a1:af:df: 1b:a9:01:31:45:bd:33:54:42:74:e7:d2:d4:0a:3e:9c:ba:4e: c7:54:4f:74:db:1c:ae:61:95:32:19:76:37:f6:9b:f7:e1:fb: 4f:d2:d2:8a:68:d7:94:13:99:b2:02:4d:6b:d9:b2:80:5a:f5: dc:d5:b4:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpKjozs7jZ6NBtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDQ1ZTVkMmMtN2Y3OC00Zjk4LWFjY2EtYWRhMGFkNGUwYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8SiH38/OcMrkj6UANOTWD+ExeGoCbD7S3lQ Jb1OzTjnKV/a8St5bBW/2qgIrkWhfEIl5cgKvoSkVzDaHlFYwC4f0Y/ogEsa8bCP YXFccec7WnMliRJoVKMKpx6OgukOs3av7ZCZd8Se/EKTUtklEwBRjY25mm9TrKKG OTroVRVYvz6xtPhf0mMIeLolXx8z+UjFllzDXHXkjPzcHy7nYvj0xbJcfDdHdoK0 1Gj83xmAK9nkEP2yWvjms6Ivdlj+H+JFsU3HLnbJDylmT4celseDxE/y5kchfReN ws86NrOZcBmmq2yPO9FpuHNOGd0qLrOroL9NfEHDlHCWaB0wRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSjmqUBctjoVgg4u6JL7np6TfGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZmEwYThhZTQtZWMwNi0z MWU4LWFhNjQtOTQwZDgyODk3MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMQhO0ECZ+q3Pr4LB9IeTQQNEEGuc+LpylHStbdAykXi92Sq8dF/VsC w+n8GT9LT0KUokan1+ukieXHbcjdMHGsKD/SB/scsHJ/9rfCw6uutRni3mo5DkMY mug1i5yUeKBw8bGImRFnXXyeWjXattH8PyHD4HAzrIva3kkT1po35tS+m3cRVvuU n2Esrqab7Uz0b9T8b2oHQiOU/MV90PzzK0XB83EfkH7HRy2RkxC+UZrB1Hu05Izi q34tx4Te5QP+SKGv3xupATFFvTNUQnTn0tQKPpy6TsdUT3TbHK5hlTIZdjf2m/fh +0/S0opo15QTmbICTWvZsoBa9dzVtAk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:20 2025 by rpki-client