$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/31125309-5805-34c1-9fed-5da19e518d3a.roa File: 31125309-5805-34c1-9fed-5da19e518d3a.roa (raw, json) Hash identifier: oZAtx7dtA7KFIF+WpzdJ5KSr3fryBjCiKGR5SqhAOlI= Subject key identifier: F4:A0:51:36:7D:61:DD:82:B7:4A:E8:66:B4:A0:89:2F:BE:F2:3C:4C Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D0D427EA49C341D8C08D323E0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/31125309-5805-34c1-9fed-5da19e518d3a.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 203724 IP address blocks: 131.229.128.0/24 maxlen: 24 131.229.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:7e:a4:9c:34:1d:8c:08:d3:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=622b3aa9-a395-4062-b587-956fcebe3c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d7:d5:a9:93:d9:2a:fd:aa:a9:12:02:7c:ad: 7a:e9:e3:3c:7b:c3:a3:d6:eb:8d:2c:ad:58:9a:ef: 54:e8:ae:c9:62:5d:df:4b:5b:56:83:d9:f9:c0:02: a4:65:3b:80:6a:26:aa:aa:b9:74:4a:52:63:2b:01: 42:04:a3:22:86:98:b5:90:42:b8:3e:b1:f8:6d:78: 4e:52:73:fa:37:c4:8d:f3:33:60:19:5e:da:14:00: 68:37:0b:d5:1d:ff:24:25:a9:28:9e:69:96:27:69: 7a:1c:2c:ed:e8:64:fd:ab:50:6e:ad:cb:3f:9d:dd: 21:59:8f:e1:58:51:aa:f9:db:f7:f1:73:7a:e0:38: 1d:35:59:07:61:75:b9:51:c7:06:b5:57:d9:94:44: 9f:2a:00:2f:ca:b1:6f:c2:5e:09:05:32:b4:f1:4d: 45:be:f2:97:ba:3f:1f:c4:70:f7:07:bd:07:22:c9: 5d:53:99:6c:10:2e:1d:d3:aa:b0:1b:65:6e:cc:99: 6d:78:b3:4e:f4:61:f3:6f:f9:9a:82:da:7f:fc:31: fa:9c:c8:fd:6a:27:93:f6:b6:1e:25:9f:d4:a8:5c: 15:2d:b5:34:0d:a6:6e:3d:2e:8e:ef:28:f3:bc:e5: 0b:ab:be:80:de:fd:d9:d0:3d:e2:54:30:21:de:6a: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A0:51:36:7D:61:DD:82:B7:4A:E8:66:B4:A0:89:2F:BE:F2:3C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/31125309-5805-34c1-9fed-5da19e518d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.128.0/24 131.229.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4d:48:e1:2c:9f:82:a2:67:aa:b0:bb:40:27:14:6e:c1:ff: 9b:fb:13:44:b2:26:44:72:db:a4:d7:b4:b4:bd:78:ca:43:9c: ba:f0:99:62:0b:d1:47:b6:3d:a6:d5:8f:15:bc:c8:dd:1e:0c: 6b:a0:6c:c1:f2:e6:90:d0:19:54:3c:0b:ac:0b:78:3a:6e:da: 12:56:3d:f5:37:06:b1:ff:9d:4f:0c:ec:10:a9:22:3b:7c:e2: 94:b8:bd:bc:3f:05:1f:d7:ca:9d:d3:d3:1f:37:9e:2e:8d:22: e5:38:34:1f:6e:0e:96:39:c2:ec:86:a2:1d:b5:e6:f4:8e:6f: f5:06:e0:1a:60:be:e9:6b:ea:59:91:d2:1c:a3:fa:72:94:11: be:8d:87:be:cf:35:05:31:c7:74:6c:eb:29:f4:a7:6f:0e:3c: df:20:8c:04:bc:a4:2c:c4:28:fc:cb:43:c9:b7:94:1a:1b:56: 7f:23:c4:f1:c6:b0:98:5a:96:4d:af:1a:2f:da:11:1d:fc:3e: b2:74:99:93:1a:90:3c:9a:b1:c6:c4:0c:1f:4e:c3:35:a2:ac: a4:a1:ee:7a:e2:76:bd:64:a0:25:6c:db:4a:00:ac:55:89:34: ea:0e:5e:81:23:89:9c:b2:a7:d9:d1:d7:40:7a:ea:cb:b9:17: b3:9e:0b:c1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0NQn6knDQdjAjTI+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NjIyYjNhYTktYTM5NS00MDYyLWI1ODctOTU2ZmNlYmUzYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9fVqZPZKv2qqRICfK166eM8e8Oj1uuNLK1Y mu9U6K7JYl3fS1tWg9n5wAKkZTuAaiaqqrl0SlJjKwFCBKMihpi1kEK4PrH4bXhO UnP6N8SN8zNgGV7aFABoNwvVHf8kJakonmmWJ2l6HCzt6GT9q1Burcs/nd0hWY/h WFGq+dv38XN64DgdNVkHYXW5UccGtVfZlESfKgAvyrFvwl4JBTK08U1FvvKXuj8f xHD3B70HIsldU5lsEC4d06qwG2VuzJlteLNO9GHzb/magtp//DH6nMj9aieT9rYe JZ/UqFwVLbU0DaZuPS6O7yjzvOULq76A3v3Z0D3iVDAh3moB2QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPSgUTZ9Yd2Ct0roZrSgiS++8jxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzExMjUzMDktNTgwNS0z NGMxLTlmZWQtNWRhMTllNTE4ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg+WAAwQA g+WEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHBNSOEsn4KiZ6qwu0AnFG7B/5v7E0SyJkRy26TXtLS9eMpD nLrwmWIL0Ue2PabVjxW8yN0eDGugbMHy5pDQGVQ8C6wLeDpu2hJWPfU3BrH/nU8M 7BCpIjt84pS4vbw/BR/Xyp3T0x83ni6NIuU4NB9uDpY5wuyGoh215vSOb/UG4Bpg vulr6lmR0hyj+nKUEb6Nh77PNQUxx3Rs6yn0p28OPN8gjAS8pCzEKPzLQ8m3lBob Vn8jxPHGsJhalk2vGi/aER38PrJ0mZMakDyascbEDB9OwzWirKSh7nridr1koCVs 20oArFWJNOoOXoEjiZyyp9nR10B66su5F7OeC8E= -----END CERTIFICATE-----Generated at Thu Mar 26 17:35:49 2026 by rpki-client