$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa File: 28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa (raw, json) Hash identifier: Mcj5XztJEhuEHnUM2uXJLCcociCIVF7baEZThK1VjA0= Subject key identifier: A4:23:15:62:01:32:7B:79:25:F7:99:2B:F6:F9:A5:31:49:F0:41:7C Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D44FA255A538BC5EFB5AD3B40 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 131.229.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:25:5a:53:8b:c5:ef:b5:ad:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=9342a83e-1aeb-4f72-be96-283505e6e47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:40:4b:db:a5:dd:c8:f4:4c:15:ef:65:57:ad: fa:42:73:df:7e:b4:fe:ad:eb:b9:66:a8:35:59:54: 76:3e:8b:24:ff:34:ca:fb:81:55:bf:83:bb:d4:ea: f3:6a:ae:d9:22:55:5a:21:53:c6:4a:43:65:cb:27: cb:52:4d:46:db:be:f8:58:b1:81:31:41:aa:43:63: 50:a0:95:14:d3:47:23:f3:ca:ad:9f:fd:48:65:4d: f8:58:9d:4d:9e:37:65:96:2d:f6:24:99:9b:12:55: 78:65:a1:82:6b:1e:72:31:67:87:fe:44:c5:39:b8: b1:39:a7:3f:42:8b:ef:2b:30:ab:3d:88:bb:e4:16: 18:ba:92:62:2b:fe:45:a4:cd:ef:6b:28:d8:d1:fc: b1:b3:08:b0:63:a3:30:5a:c8:d4:b5:9c:a7:fc:49: e8:f5:3a:81:de:83:3b:d0:e5:9b:a4:01:c9:ce:61: e6:8a:e1:04:a9:38:d2:ef:fb:d3:31:2a:bf:8a:29: fc:86:57:f3:db:c9:f9:f1:71:c3:c5:eb:cf:a8:0f: c0:dd:7c:80:bb:ac:eb:ea:ad:b2:b3:f9:b4:3f:30: 5b:52:97:6a:1d:07:a4:ce:17:ab:0a:64:34:9b:2f: c8:6b:89:01:c6:f3:06:04:1d:ae:db:c1:5b:ca:39: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:23:15:62:01:32:7B:79:25:F7:99:2B:F6:F9:A5:31:49:F0:41:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:63:25:23:f2:96:05:2d:b6:9b:64:c0:02:62:bf:c3:cc:8b: 00:18:f7:13:e5:6f:d6:ce:8d:6b:b0:0a:f2:a3:f8:de:d2:ab: a6:d5:6d:b8:85:3d:44:da:ef:31:04:94:74:e8:46:1e:d9:83: bd:23:da:43:43:bf:1e:af:84:ce:79:3e:0c:fc:a5:3e:ae:6d: a8:35:4c:8f:62:00:04:a0:1c:d2:82:93:ce:10:7c:b7:d6:13: 73:62:68:df:9a:7c:f1:5f:a1:c1:11:e1:9c:ca:fe:32:de:1b: 52:ee:96:f8:4a:7f:a2:1e:ff:83:22:c2:6e:23:dc:fb:24:85: 05:61:99:08:a3:6a:ab:32:9b:cc:33:2b:b7:02:46:16:d3:a5: 6f:b6:be:bc:42:45:24:41:eb:59:58:d0:12:d7:3a:c5:a4:7a: 17:c2:4c:33:96:56:66:69:e3:6e:bc:9e:9c:85:8a:f4:bb:94: 31:65:f6:31:fc:61:ee:09:27:68:a9:27:8f:f0:e0:1f:93:ba: a5:e3:6b:88:90:0b:a3:ee:01:a2:20:df:c3:94:8b:d1:19:9c: a1:03:29:af:e3:6b:6b:ca:9b:3e:b8:da:27:a5:97:be:d9:d1: 0a:50:73:03:2d:3d:ee:2e:76:35:88:4c:2e:7c:50:00:58:b0: ff:d3:29:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+iVaU4vF77WtO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTM0MmE4M2UtMWFlYi00ZjcyLWJlOTYtMjgzNTA1ZTZlNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0BL26XdyPRMFe9lV636QnPffrT+reu5Zqg1 WVR2Posk/zTK+4FVv4O71Orzaq7ZIlVaIVPGSkNlyyfLUk1G2774WLGBMUGqQ2NQ oJUU00cj88qtn/1IZU34WJ1Nnjdlli32JJmbElV4ZaGCax5yMWeH/kTFObixOac/ QovvKzCrPYi75BYYupJiK/5FpM3vayjY0fyxswiwY6MwWsjUtZyn/Eno9TqB3oM7 0OWbpAHJzmHmiuEEqTjS7/vTMSq/iin8hlfz28n58XHDxevPqA/A3XyAu6zr6q2y s/m0PzBbUpdqHQekzherCmQ0my/Ia4kBxvMGBB2u28Fbyjm1IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQjFWIBMnt5JfeZK/b5pTFJ8EF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMjhjNzhjYWEtODBmZS0z ZWY4LThjOWItYzk4ZDcxM2VhZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1jJSPylgUttptkwAJiv8PMiwAY9xPlb9bOjWuwCvKj+N7Sq6bVbbiF PUTa7zEElHToRh7Zg70j2kNDvx6vhM55Pgz8pT6ubag1TI9iAASgHNKCk84QfLfW E3NiaN+afPFfocER4ZzK/jLeG1LulvhKf6Ie/4Miwm4j3PskhQVhmQijaqsym8wz K7cCRhbTpW+2vrxCRSRB61lY0BLXOsWkehfCTDOWVmZp4268npyFivS7lDFl9jH8 Ye4JJ2ipJ4/w4B+TuqXja4iQC6PuAaIg38OUi9EZnKEDKa/ja2vKmz642iell77Z 0QpQcwMtPe4udjWITC58UABYsP/TKSA= -----END CERTIFICATE-----Generated at Thu Mar 26 03:49:25 2026 by rpki-client