$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fb1520b0-4a4f-3f98-a195-c526432f2d68.roa File: fb1520b0-4a4f-3f98-a195-c526432f2d68.roa (raw, json) Hash identifier: fbieuZqn5e4jiWmS6DsO4+I268ZcUIkyQhrXZb/9Wgc= Subject key identifier: 10:52:86:4B:FB:F3:19:52:DF:A8:3F:78:4C:76:DB:DA:2E:C6:75:7B Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AB3862B6E9A4BC818A09F7500 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fb1520b0-4a4f-3f98-a195-c526432f2d68.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 16509 IP address blocks: 131.229.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:2b:6e:9a:4b:c8:18:a0:9f:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=e8adc446-cc1a-4c15-bc77-14d321d70e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5b:94:52:b3:ff:18:cd:fc:7a:0e:a8:e1:c8: f3:9b:11:ed:bc:dd:73:36:b6:ac:d8:e9:58:da:5a: c9:e7:62:6b:21:6e:bc:21:94:b8:53:a4:51:e9:f2: 69:4f:74:7a:ff:4b:a4:28:78:4e:af:65:5d:2a:c0: dc:8d:4a:fe:37:2e:de:0d:81:2f:55:cc:d9:31:48: 71:50:83:b9:3a:dc:55:4a:ed:02:5b:0e:7f:85:33: e0:2b:58:7d:a0:dc:c7:3b:bf:ec:08:2f:cc:cc:26: bd:9d:67:44:c7:f5:9c:31:61:46:6e:cc:65:a5:d6: ae:1a:92:7b:02:e8:70:a0:24:73:a0:97:e8:22:74: 08:a5:f5:fd:13:4b:be:e2:98:d9:80:ba:54:c9:f7: 5e:60:33:3a:a2:5d:8d:11:72:8d:ee:85:19:81:63: 2f:6b:34:3f:3a:4e:7f:df:fd:83:0e:0f:85:8a:c8: 26:0a:84:fe:01:c5:14:44:fa:4b:df:ce:0f:13:ae: 03:5a:a8:3e:44:13:d3:4c:69:f2:4a:05:cb:53:d0: d2:76:32:c1:20:68:d7:f0:0f:c3:3e:19:af:89:7a: 46:7c:bd:94:1f:30:21:c6:3b:27:aa:4c:1f:2f:b0: 78:6b:07:aa:09:44:8c:03:bd:c7:25:11:85:d5:2f: 74:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:52:86:4B:FB:F3:19:52:DF:A8:3F:78:4C:76:DB:DA:2E:C6:75:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fb1520b0-4a4f-3f98-a195-c526432f2d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4e:43:19:ff:10:b3:1a:58:55:2f:99:a9:2a:22:49:d5:1b: 6a:4e:d2:5c:08:c1:7b:bb:4b:a5:6d:b0:e6:6d:e9:fc:70:9f: 77:a3:47:65:39:f2:18:50:c7:7f:5a:c4:15:22:91:07:84:15: a8:2d:c1:0b:97:4f:09:2a:6b:d3:64:09:b8:6a:2a:04:c4:a2: 69:db:72:8d:8c:79:72:a3:15:65:53:77:a3:8a:e4:2d:c5:c7: 15:a4:e3:36:22:31:41:64:e1:83:b7:ec:60:43:94:02:23:60: 23:cb:68:b0:be:66:39:a1:5e:c5:d7:ce:da:0c:91:5b:ea:cb: 27:fe:29:bc:59:7f:a8:f6:83:d6:48:8b:04:44:77:59:0a:e6: 67:db:06:30:ce:c9:38:09:9b:a0:3b:a9:e3:bc:c7:b3:28:6f: e0:fb:92:c8:11:52:cb:fa:47:5a:21:13:2b:13:9a:c0:07:0d: 89:f6:2f:de:0d:9f:fb:60:19:76:61:25:42:f6:c7:df:e7:60: 3e:9f:2d:7e:70:70:a0:18:aa:d0:76:1b:40:0e:96:38:5e:c6: 17:8e:bd:32:f5:a7:55:d1:bf:8a:42:59:4d:b2:df:87:ed:cb: bd:64:25:f3:e6:27:aa:3d:9e:04:0f:26:07:28:4f:4c:68:c6: 3e:f6:e1:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhitumkvIGKCfdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk ZThhZGM0NDYtY2MxYS00YzE1LWJjNzctMTRkMzIxZDcwZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmluUUrP/GM38eg6o4cjzmxHtvN1zNras2OlY 2lrJ52JrIW68IZS4U6RR6fJpT3R6/0ukKHhOr2VdKsDcjUr+Ny7eDYEvVczZMUhx UIO5OtxVSu0CWw5/hTPgK1h9oNzHO7/sCC/MzCa9nWdEx/WcMWFGbsxlpdauGpJ7 AuhwoCRzoJfoInQIpfX9E0u+4pjZgLpUyfdeYDM6ol2NEXKN7oUZgWMvazQ/Ok5/ 3/2DDg+FisgmCoT+AcUURPpL384PE64DWqg+RBPTTGnySgXLU9DSdjLBIGjX8A/D PhmviXpGfL2UHzAhxjsnqkwfL7B4aweqCUSMA73HJRGF1S90ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBShkv78xlS36g/eEx229ouxnV7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZmIxNTIwYjAtNGE0Zi0z Zjk4LWExOTUtYzUyNjQzMmYyZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVOQxn/ELMaWFUvmakqIknVG2pO0lwIwXu7S6VtsOZt6fxwn3ejR2U5 8hhQx39axBUikQeEFagtwQuXTwkqa9NkCbhqKgTEomnbco2MeXKjFWVTd6OK5C3F xxWk4zYiMUFk4YO37GBDlAIjYCPLaLC+ZjmhXsXXztoMkVvqyyf+KbxZf6j2g9ZI iwREd1kK5mfbBjDOyTgJm6A7qeO8x7Mob+D7ksgRUsv6R1ohEysTmsAHDYn2L94N n/tgGXZhJUL2x9/nYD6fLX5wcKAYqtB2G0AOljhexheOvTL1p1XRv4pCWU2y34ft y71kJfPmJ6o9ngQPJgcoT0xoxj724Zs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:07:11 2025 by rpki-client