$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03221bad-8ea7-3755-b09a-370c153f1b1d.roa File: 03221bad-8ea7-3755-b09a-370c153f1b1d.roa (raw, json) Hash identifier: OH9iUHiQklpHon5VKpVcqaMPpReAReN2kqGv0zGtmNY= Subject key identifier: B5:C1:4C:3D:C2:CA:8F:0B:A4:BA:20:A3:55:48:82:05:6C:FC:49:72 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D0D424853C2327A6D4A6D1900 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03221bad-8ea7-3755-b09a-370c153f1b1d.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 203724 IP address blocks: 131.229.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:48:53:c2:32:7a:6d:4a:6d:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=03cd304b-68bb-4812-97c8-4faad557a440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:37:81:35:4f:e1:4a:9e:81:d4:31:2a:95: 9b:b4:a8:90:33:8b:dc:e1:48:25:93:50:66:ba:4a: 9d:1d:91:e1:86:38:89:13:8f:77:78:8d:7d:b7:40: 4e:7e:ce:0b:d8:4c:ed:2f:99:fc:89:26:2f:03:38: 91:f6:b7:6b:32:b4:dc:bf:17:e3:93:78:e0:41:89: 58:70:9d:fb:43:37:a3:45:9b:1b:ba:29:d2:5d:74: f6:b2:55:3b:c9:c6:5e:63:38:af:bd:b8:37:e7:b5: 34:aa:f9:58:d1:24:e1:17:89:07:4f:8c:21:41:bc: 40:24:a4:c5:97:c7:b3:58:d8:bc:16:9c:c3:2e:a3: 15:1b:f8:74:13:02:07:0b:04:f0:05:4c:de:36:7f: 8c:6b:20:40:c7:ac:93:53:14:0b:87:1c:94:f4:75: b7:73:c0:e6:9a:dc:f9:1a:0c:b3:39:da:74:bf:d8: fa:e7:b2:96:ca:ce:78:66:bc:47:1a:2e:6d:c1:ef: 90:2f:8c:34:06:8a:40:31:d7:20:d1:d1:28:61:6e: b2:2e:17:f9:6e:5d:bf:78:d2:34:f9:f8:01:fa:c8: ad:25:d3:80:a0:eb:90:3e:05:90:ee:0f:59:2a:7f: 7a:d2:1c:64:74:6e:21:0e:2e:3a:ce:b8:c5:68:2f: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C1:4C:3D:C2:CA:8F:0B:A4:BA:20:A3:55:48:82:05:6C:FC:49:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03221bad-8ea7-3755-b09a-370c153f1b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:03:f2:07:3e:15:0d:ad:73:81:88:65:94:5a:a6:25:c0:11: e3:db:e7:09:c2:45:81:5a:b9:88:01:2d:c7:c5:e7:51:0b:85: c3:40:49:dd:96:53:d2:49:51:1a:05:fa:4c:f3:3b:12:bd:32: 6e:86:09:ae:cd:2f:11:62:f5:6a:46:46:25:47:0b:dd:21:cb: 50:07:38:62:f3:c8:b2:be:79:c4:f7:85:b8:54:19:17:78:9f: 35:2c:64:7f:24:79:81:14:89:5e:95:d1:bd:b3:82:5e:0f:84: 60:b4:3d:7d:9d:32:45:64:80:d4:e5:b5:27:45:5d:fd:0e:fa: 22:e5:7b:13:ee:62:71:16:b4:b0:0b:53:40:f5:f1:3b:f0:4b: 71:c6:77:45:1b:00:43:cc:51:28:a8:30:34:81:30:80:46:60: e1:cb:42:d0:eb:ff:ce:26:eb:d5:1d:a2:fa:c4:bd:9b:57:f1: eb:e9:8c:d0:a7:48:28:93:6a:37:dc:32:fb:ed:ce:0d:83:1d: 53:1e:fd:d3:3a:c7:0d:89:3c:93:a0:d0:70:66:9d:9f:51:f4: 47:19:59:f1:c9:9e:83:81:6a:1e:9e:fd:8a:23:32:6d:e2:d8: 71:c2:39:02:c5:96:93:c5:e8:e5:ee:8e:30:9e:5a:a6:de:0c: 51:21:cc:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQkhTwjJ6bUptGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MDNjZDMwNGItNjhiYi00ODEyLTk3YzgtNGZhYWQ1NTdhNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifM3gTVP4UqegdQxKpWbtKiQM4vc4Uglk1Bm ukqdHZHhhjiJE493eI19t0BOfs4L2EztL5n8iSYvAziR9rdrMrTcvxfjk3jgQYlY cJ37QzejRZsbuinSXXT2slU7ycZeYzivvbg357U0qvlY0SThF4kHT4whQbxAJKTF l8ezWNi8FpzDLqMVG/h0EwIHCwTwBUzeNn+MayBAx6yTUxQLhxyU9HW3c8Dmmtz5 GgyzOdp0v9j657KWys54ZrxHGi5twe+QL4w0BopAMdcg0dEoYW6yLhf5bl2/eNI0 +fgB+sitJdOAoOuQPgWQ7g9ZKn960hxkdG4hDi46zrjFaC8YWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXBTD3Cyo8LpLogo1VIggVs/ElyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMDMyMjFiYWQtOGVhNy0z NzU1LWIwOWEtMzcwYzE1M2YxYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoD8gc+FQ2tc4GIZZRapiXAEePb5wnCRYFauYgBLcfF51ELhcNASd2W U9JJURoF+kzzOxK9Mm6GCa7NLxFi9WpGRiVHC90hy1AHOGLzyLK+ecT3hbhUGRd4 nzUsZH8keYEUiV6V0b2zgl4PhGC0PX2dMkVkgNTltSdFXf0O+iLlexPuYnEWtLAL U0D18TvwS3HGd0UbAEPMUSioMDSBMIBGYOHLQtDr/84m69UdovrEvZtX8evpjNCn SCiTajfcMvvtzg2DHVMe/dM6xw2JPJOg0HBmnZ9R9EcZWfHJnoOBah6e/YojMm3i 2HHCOQLFlpPF6OXujjCeWqbeDFEhzJ8= -----END CERTIFICATE-----Generated at Thu Mar 26 19:04:47 2026 by rpki-client