$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fd15ccc9-32f8-3016-a12a-56fcd6ccd2a6.roa File: fd15ccc9-32f8-3016-a12a-56fcd6ccd2a6.roa (raw, json) Hash identifier: ypxqTyclfmAIQAwddJ580x1cOsYazPeRRpCvQSpoLww= Subject key identifier: 5D:3B:22:61:7A:D4:4B:53:B4:E6:96:A6:31:A1:FB:4E:F8:83:24:B9 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584BB19260902D8B236C7A04DC98 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fd15ccc9-32f8-3016-a12a-56fcd6ccd2a6.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 203724 IP address blocks: 131.229.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:60:90:2d:8b:23:6c:7a:04:dc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=75108821-9887-43e8-9793-3dd5e4e0f8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a2:36:41:87:0a:60:4e:34:fc:7a:44:a3:28: 72:b5:84:97:86:63:0f:12:b5:24:50:d1:dd:7a:0b: 91:31:f9:35:3d:e2:06:e9:e0:29:af:63:37:81:a4: 32:6c:7e:fe:62:4c:23:98:a1:3b:b9:63:e6:8e:2b: c9:02:b6:ab:07:ca:98:62:30:2d:16:bd:14:cb:9f: 88:93:54:1b:e2:7f:6a:b2:7c:e8:6c:15:a6:9a:66: 58:31:73:a1:a4:62:84:03:e5:bb:01:a2:d5:5e:5f: 8f:3f:8b:65:e6:e4:85:54:e9:13:3d:53:b6:7d:a4: 4f:e1:7f:36:84:2b:26:e0:e2:73:ce:a5:54:24:7d: 29:74:b5:e3:af:1e:48:64:6d:f4:38:4d:b3:d7:d7: f7:11:50:25:8e:97:0e:9d:41:f1:ae:d4:86:a7:59: 62:66:fe:a6:b9:bb:d0:51:23:35:e2:15:ea:3b:93: e6:c4:c0:8e:ec:6e:06:7a:3e:6a:6b:30:b9:57:17: bf:a3:b1:45:d0:16:66:74:6b:5c:f4:64:6a:1c:09: 47:db:0c:bb:9f:64:87:6c:23:fd:ea:24:79:9f:9c: ec:7e:86:e9:61:52:bd:d8:50:a0:7a:3f:cf:b2:c1: 38:db:b3:de:42:12:55:f9:d4:cd:ad:8b:70:f8:45: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3B:22:61:7A:D4:4B:53:B4:E6:96:A6:31:A1:FB:4E:F8:83:24:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fd15ccc9-32f8-3016-a12a-56fcd6ccd2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:91:34:90:89:ca:6c:27:fc:20:6b:1e:32:95:b3:ac:42:d6: 42:37:9c:9d:a6:ae:c9:6a:10:2b:6f:bd:4d:dd:23:aa:9c:ce: 07:07:ea:48:21:78:28:ef:f5:05:92:55:f9:03:e6:7f:1e:f5: 87:93:e9:6f:eb:2b:99:71:b3:97:ab:23:5d:2d:17:41:45:7a: 0d:8b:3b:45:de:31:0a:7b:af:3a:34:20:9e:6a:6d:ec:b4:27: c2:c9:42:76:8d:5e:f6:90:3b:39:b8:d6:8b:8b:cd:fa:72:f8: 24:94:5f:92:b0:f3:2b:71:12:cd:64:96:a2:4b:5f:f6:cc:0f: 60:d5:c5:4a:49:e0:75:65:1a:4b:5a:54:cb:7f:e0:65:0e:0a: a3:0c:5d:4b:f7:28:0b:63:e3:2a:d3:e7:7e:93:80:72:cd:48: 6f:40:a8:56:6e:d7:10:75:19:ae:fa:cf:fb:69:a6:76:0b:56: 4f:24:00:01:66:27:db:4a:22:76:60:4e:93:f1:eb:5a:7d:b4: 99:77:05:a7:4e:5a:9b:c9:d9:81:1c:84:aa:a3:99:7a:3b:00: 9a:5a:18:99:0f:20:0c:eb:3d:b5:0e:68:74:dd:5f:4e:94:e3: e0:39:89:8e:ce:db:23:4f:45:11:6e:a1:74:31:3f:24:c5:6f: 90:f7:64:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmCQLYsjbHoE3JgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NzUxMDg4MjEtOTg4Ny00M2U4LTk3OTMtM2RkNWU0ZTBmOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKI2QYcKYE40/HpEoyhytYSXhmMPErUkUNHd eguRMfk1PeIG6eApr2M3gaQybH7+YkwjmKE7uWPmjivJArarB8qYYjAtFr0Uy5+I k1Qb4n9qsnzobBWmmmZYMXOhpGKEA+W7AaLVXl+PP4tl5uSFVOkTPVO2faRP4X82 hCsm4OJzzqVUJH0pdLXjrx5IZG30OE2z19f3EVAljpcOnUHxrtSGp1liZv6mubvQ USM14hXqO5PmxMCO7G4Gej5qazC5Vxe/o7FF0BZmdGtc9GRqHAlH2wy7n2SHbCP9 6iR5n5zsfobpYVK92FCgej/PssE427PeQhJV+dTNrYtw+EUVCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF07ImF61EtTtOaWpjGh+074gyS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZmQxNWNjYzktMzJmOC0z MDE2LWExMmEtNTZmY2Q2Y2NkMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaRNJCJymwn/CBrHjKVs6xC1kI3nJ2mrslqECtvvU3dI6qczgcH6kgh eCjv9QWSVfkD5n8e9YeT6W/rK5lxs5erI10tF0FFeg2LO0XeMQp7rzo0IJ5qbey0 J8LJQnaNXvaQOzm41ouLzfpy+CSUX5Kw8ytxEs1klqJLX/bMD2DVxUpJ4HVlGkta VMt/4GUOCqMMXUv3KAtj4yrT536TgHLNSG9AqFZu1xB1Ga76z/tppnYLVk8kAAFm J9tKInZgTpPx61p9tJl3BadOWpvJ2YEchKqjmXo7AJpaGJkPIAzrPbUOaHTdX06U 4+A5iY7O2yNPRRFuoXQxPyTFb5D3ZHo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:41:22 2025 by rpki-client