$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa File: 32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa (raw, json) Hash identifier: /Sp7+ssrR8O4EAX0656xY4xGbpQOMZRl/Yx+rFBcwdE= Subject key identifier: E3:BE:11:D4:4E:26:2B:41:50:B4:E6:88:81:44:0F:74:42:C0:48:88 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D0D427EEEE129CB97F26BAAC0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 203724 IP address blocks: 131.229.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:7e:ee:e1:29:cb:97:f2:6b:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=ceaf611b-d4e5-4561-a270-d7156361f6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:9e:f6:17:7c:70:04:e9:39:e5:53:3a:fc: da:de:a4:bb:e0:8e:8f:0b:c1:1d:6c:5b:28:5c:6f: 2e:08:ed:be:bc:ce:d6:6a:cb:0e:1f:17:58:43:9a: 34:ec:7a:f9:39:81:8f:2b:b2:8b:05:25:6d:78:f6: cb:a9:b9:cb:a7:4f:d1:8f:bb:2e:6e:38:6f:da:08: 41:e4:e2:2f:39:cf:b8:e4:0d:5f:d9:62:47:7f:b6: fa:16:97:ce:19:f3:04:67:39:8f:2e:74:5d:3b:7c: a6:6b:44:c5:39:92:e7:8c:15:38:7c:be:75:2c:0e: 4e:85:a5:82:72:37:86:30:ff:7d:ef:24:e2:09:29: a0:5b:d5:9c:b1:0f:4e:19:b3:f3:36:4c:e7:35:38: 58:12:1d:97:18:f7:df:62:87:d9:57:9e:30:21:35: cc:95:0d:83:90:17:47:cb:9f:cf:fe:71:40:1a:b8: 7f:10:79:36:35:21:07:32:9e:7a:51:bc:73:6f:2b: 6b:d7:31:91:21:67:60:ab:7a:2e:4c:01:ad:e6:d6: c2:49:76:81:4e:a1:3d:e8:ed:f1:26:91:56:35:b5: 94:34:a1:f3:6c:52:2c:ae:f3:1f:d4:17:1d:24:6f: 7c:bc:1a:ce:14:6b:fe:19:1d:a5:5b:35:33:2b:06: ef:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BE:11:D4:4E:26:2B:41:50:B4:E6:88:81:44:0F:74:42:C0:48:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:1c:de:d4:49:5d:14:37:1a:9d:27:63:30:01:06:ee:06:b1: 10:7f:33:16:bd:13:6b:e7:2c:ed:fa:c4:6c:b6:ce:9d:d7:47: f6:ad:05:44:ae:80:36:d8:d8:2d:e7:21:4c:ca:a1:ae:4b:12: f5:a7:12:be:ea:24:10:04:17:45:7f:a9:d5:86:bd:ff:ce:73: cd:0b:47:17:f2:94:aa:c2:3d:7a:5f:49:20:38:b4:7a:a2:28: 0d:e4:08:36:09:d4:51:48:48:ba:96:23:02:f7:c1:a8:e3:87: f5:89:26:a6:bb:cd:07:e6:97:aa:eb:28:5d:7a:d7:e7:0b:d6: 3a:60:5b:d8:5f:a2:99:5c:29:d4:e1:7f:81:d9:66:32:16:f2: 4a:27:02:fa:8b:02:2b:f8:55:32:8d:72:1b:c6:fe:3a:c0:88: 56:d5:d4:55:ee:bd:c9:75:b2:94:60:ab:f7:2f:91:27:5d:ea: 4a:83:98:47:93:11:3c:c4:ec:a0:2d:89:ed:5d:3f:b5:17:a1: 04:e0:4f:a9:37:ef:4c:c1:a0:6f:29:b5:17:5b:72:69:90:c5: 52:c5:21:4c:9e:a2:12:86:2d:4e:97:77:9e:18:b5:97:2c:87: 82:4b:33:7c:ef:e6:f7:28:a7:a7:99:6c:b6:d6:49:03:5a:a5: 22:97:00:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQn7u4SnLl/JrqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk Y2VhZjYxMWItZDRlNS00NTYxLWEyNzAtZDcxNTYzNjFmNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1qe9hd8cATpOeVTOvza3qS74I6PC8EdbFso XG8uCO2+vM7WassOHxdYQ5o07Hr5OYGPK7KLBSVtePbLqbnLp0/Rj7subjhv2ghB 5OIvOc+45A1f2WJHf7b6FpfOGfMEZzmPLnRdO3yma0TFOZLnjBU4fL51LA5OhaWC cjeGMP997yTiCSmgW9WcsQ9OGbPzNkznNThYEh2XGPffYofZV54wITXMlQ2DkBdH y5/P/nFAGrh/EHk2NSEHMp56Ubxzbytr1zGRIWdgq3ouTAGt5tbCSXaBTqE96O3x JpFWNbWUNKHzbFIsrvMf1BcdJG98vBrOFGv+GR2lWzUzKwbvwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOO+EdROJitBULTmiIFED3RCwEiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzJiZTg1NzAtZDFhYS0z MTk1LWIxZjMtNTJkOGU1MWQ4YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8c3tRJXRQ3Gp0nYzABBu4GsRB/Mxa9E2vnLO36xGy2zp3XR/atBUSu gDbY2C3nIUzKoa5LEvWnEr7qJBAEF0V/qdWGvf/Oc80LRxfylKrCPXpfSSA4tHqi KA3kCDYJ1FFISLqWIwL3wajjh/WJJqa7zQfml6rrKF161+cL1jpgW9hfoplcKdTh f4HZZjIW8konAvqLAiv4VTKNchvG/jrAiFbV1FXuvcl1spRgq/cvkSdd6kqDmEeT ETzE7KAtie1dP7UXoQTgT6k370zBoG8ptRdbcmmQxVLFIUyeohKGLU6Xd54YtZcs h4JLM3zv5vcop6eZbLbWSQNapSKXADw= -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:11 2026 by rpki-client