$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03457696-a619-3449-8e7f-5c1addc3e3c8.roa File: 03457696-a619-3449-8e7f-5c1addc3e3c8.roa (raw, json) Hash identifier: OYFEHsrpXlJ5R8Mdq1V9GPVTuqF0BuvZYt+3JXAqK/8= Subject key identifier: 88:21:DE:5E:76:79:04:4F:73:D6:9D:5E:8A:F3:3F:42:E4:39:49:37 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D0D427FE7BB79021C5D3B0F80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03457696-a619-3449-8e7f-5c1addc3e3c8.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 203724 IP address blocks: 131.229.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:7f:e7:bb:79:02:1c:5d:3b:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=9439103b-ed05-4b2c-8ab4-e4bdecd32a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:ed:ca:a2:db:f7:ed:65:c1:ad:25:a3:2a: b2:78:1e:f2:c6:9f:18:80:48:fd:a3:29:26:80:f9: dc:65:c4:c9:84:c3:46:12:f9:1e:56:b0:81:ba:a6: 9c:16:13:74:f5:97:86:da:01:91:11:b4:be:54:f0: 11:02:4d:35:ce:e7:bc:fc:96:b9:f2:db:8f:5f:1c: b8:28:89:d0:fb:9b:75:d5:94:d7:64:f2:47:2f:78: 5a:e4:fd:88:49:4f:85:3a:03:aa:ec:3f:da:c3:e2: 6e:e7:46:77:02:8c:20:29:80:dd:70:bf:d2:3b:14: a2:91:d5:ce:92:99:f8:7c:3e:4f:6c:cb:9d:a9:2d: 7c:df:6e:62:91:de:86:2d:91:8f:a3:3e:f6:49:2a: 09:5f:cf:b3:ac:e4:a4:1f:36:b1:f2:c4:9d:ba:8b: c1:c2:e6:dd:b5:69:11:bb:c7:3e:e4:cf:fe:b9:fe: 9d:9a:a4:53:4b:e1:2a:3b:fd:e1:a6:67:c4:ca:9e: a6:fe:09:14:95:b5:c9:b7:14:27:c3:65:9f:db:f2: ea:0a:9a:17:dc:4e:4c:d2:18:25:05:c5:e4:97:7d: 36:68:56:47:57:7c:c2:51:ad:89:e2:83:3d:2e:ce: 1c:44:34:a8:14:de:25:cf:5c:33:85:42:af:c8:7a: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:21:DE:5E:76:79:04:4F:73:D6:9D:5E:8A:F3:3F:42:E4:39:49:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03457696-a619-3449-8e7f-5c1addc3e3c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:35:ac:78:b6:2e:bb:8b:fa:d2:fc:55:cd:6b:4b:55:3a:e1: 81:44:6f:96:64:3f:b9:1b:3d:d7:fb:80:1a:90:d9:b2:6e:5c: 53:87:1f:d7:e1:ce:ba:1a:f9:e7:62:f2:4f:85:d4:02:f5:fe: ea:20:c6:fb:2f:fc:78:4a:8c:08:1e:95:34:19:3a:6e:21:6b: 5b:e6:a2:d5:aa:ed:34:08:1b:5f:bc:5c:c4:02:08:51:b9:19: 9e:cc:27:eb:8d:08:80:62:2d:ec:79:75:bc:f6:91:62:e2:fc: 4c:74:d8:36:34:0b:af:aa:cc:16:ad:29:ff:75:5f:62:ae:ba: b7:36:40:1b:14:65:73:d3:27:bf:3f:7f:a7:bd:00:38:7b:b6: 2b:39:c5:84:f8:e8:8f:ec:47:ea:e6:0a:d3:69:08:73:18:68: 09:4a:34:fa:56:a5:83:e8:49:85:3b:4b:c4:ef:2c:f6:91:c7: 8a:9a:03:00:8e:d7:10:f3:33:59:9d:cc:35:a8:d2:e2:d9:95: c5:5b:88:6d:36:bc:f9:5b:22:bd:45:13:5e:a7:ba:da:fa:af: a2:f1:64:2b:03:78:9c:6c:a0:4c:30:62:45:5e:e1:b8:42:61: 82:a2:16:1c:03:15:85:aa:eb:38:80:e3:54:33:7a:87:43:52: e2:5f:1a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQn/nu3kCHF07D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk OTQzOTEwM2ItZWQwNS00YjJjLThhYjQtZTRiZGVjZDMyYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz3tyqLb9+1lwa0loyqyeB7yxp8YgEj9oykm gPncZcTJhMNGEvkeVrCBuqacFhN09ZeG2gGREbS+VPARAk01zue8/Ja58tuPXxy4 KInQ+5t11ZTXZPJHL3ha5P2ISU+FOgOq7D/aw+Ju50Z3AowgKYDdcL/SOxSikdXO kpn4fD5PbMudqS18325ikd6GLZGPoz72SSoJX8+zrOSkHzax8sSduovBwubdtWkR u8c+5M/+uf6dmqRTS+EqO/3hpmfEyp6m/gkUlbXJtxQnw2Wf2/LqCpoX3E5M0hgl BcXkl302aFZHV3zCUa2J4oM9Ls4cRDSoFN4lz1wzhUKvyHrakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgh3l52eQRPc9adXorzP0LkOUk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMDM0NTc2OTYtYTYxOS0z NDQ5LThlN2YtNWMxYWRkYzNlM2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI1rHi2LruL+tL8Vc1rS1U64YFEb5ZkP7kbPdf7gBqQ2bJuXFOHH9fh zroa+edi8k+F1AL1/uogxvsv/HhKjAgelTQZOm4ha1vmotWq7TQIG1+8XMQCCFG5 GZ7MJ+uNCIBiLex5dbz2kWLi/Ex02DY0C6+qzBatKf91X2Kuurc2QBsUZXPTJ78/ f6e9ADh7tis5xYT46I/sR+rmCtNpCHMYaAlKNPpWpYPoSYU7S8TvLPaRx4qaAwCO 1xDzM1mdzDWo0uLZlcVbiG02vPlbIr1FE16nutr6r6LxZCsDeJxsoEwwYkVe4bhC YYKiFhwDFYWq6ziA41QzeodDUuJfGoI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:59 2026 by rpki-client