
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/785140a7-bbb7-374c-ba3f-70ccac456248.roa
File: 785140a7-bbb7-374c-ba3f-70ccac456248.roa (raw, json)
Hash identifier: cOB7CTS8fQsnwzr9QMHMqXEQkqerRt8vgH77qx1n+ZI=
Subject key identifier: 09:45:29:68:EB:21:9D:4E:BA:CE:16:D4:36:E8:32:38:70:47:B6:2E
Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial: 010D0C9F4328584D0D427DA7FFF1EF018C424680
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/785140a7-bbb7-374c-ba3f-70ccac456248.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 31898
IP address blocks: 131.229.128.0/24 maxlen: 24
131.229.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:7d:a7:ff:f1:ef:01:8c:42:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=404446f5-6737-47eb-9fc1-a60e915c8bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:dc:4e:65:a8:16:e3:98:a7:89:99:4a:ae:
c7:17:2c:cd:af:20:6a:e9:39:c1:70:1a:1e:16:6a:
35:48:9b:fd:c7:b0:b5:08:7f:ab:dd:d8:80:be:25:
1f:0e:c4:43:34:0d:17:e8:2d:8c:0b:be:d6:e4:a9:
88:9c:a7:56:1c:47:34:63:76:f2:bc:4b:f4:a1:81:
ef:de:35:f6:c9:94:42:c6:ac:0a:0c:b9:87:e9:63:
01:33:b0:0e:c3:be:b9:a3:f3:86:3a:19:50:74:ae:
73:87:07:e9:30:c3:15:3a:18:b6:4a:b9:da:dc:69:
10:3f:c2:b4:0f:c7:72:b1:a7:11:d7:57:9c:22:38:
df:b4:b7:17:27:3c:c8:f7:6a:88:f4:28:f2:b2:09:
c3:ff:d6:2e:6f:76:d6:0f:67:c8:fa:70:bc:47:b5:
0d:9b:f0:71:30:35:4d:60:fe:5f:c0:62:2a:db:2e:
e9:26:a8:cf:7d:68:61:3b:c5:2d:38:b6:29:cc:2d:
1a:58:8f:19:9a:ff:af:e0:78:6e:4f:00:9f:a5:c4:
f0:cf:c4:ab:ae:ee:c4:ce:55:c0:5c:77:74:f9:34:
ee:64:a8:82:98:dd:88:f0:02:be:3a:86:9a:d2:fa:
b1:f6:4f:5a:a7:68:67:a0:ff:37:a6:c7:ad:a7:1c:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:45:29:68:EB:21:9D:4E:BA:CE:16:D4:36:E8:32:38:70:47:B6:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/785140a7-bbb7-374c-ba3f-70ccac456248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
X509v3 Authority Key Identifier:
keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
sbgp-ipAddrBlock: critical
IPv4:
131.229.128.0/24
131.229.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:69:c7:0e:84:4c:bd:a2:82:ee:51:df:95:7f:55:9c:42:5a:
fa:37:90:f6:a1:a0:40:c0:80:12:52:6e:95:2a:c1:0a:dd:b8:
83:0a:4e:72:23:dc:8a:99:38:1c:70:01:17:ab:57:69:b8:1a:
e8:39:00:3e:c0:b8:7e:41:5b:ec:56:37:93:8d:fd:2b:e3:7a:
57:21:48:18:cf:f5:5f:4b:b0:e8:c0:12:3c:8a:d5:a7:b6:6a:
c9:1c:17:20:00:c2:21:45:9d:c5:59:64:3b:97:66:5c:e4:c3:
dc:bd:56:df:f8:51:ed:fa:f8:9b:c7:90:59:e2:41:ad:ea:7a:
10:24:1d:d2:c9:5c:78:b6:a5:d9:cb:3e:8f:60:1b:af:d1:26:
9b:5e:09:ff:c3:42:eb:87:a1:2d:24:ad:d6:f9:63:24:a9:fe:
be:42:dd:c0:32:61:ab:a4:b7:31:c1:2d:b1:28:03:cb:5f:35:
1a:90:fb:81:21:ef:49:d0:2a:12:bb:dd:f3:d5:02:15:09:ac:
64:92:d0:95:d8:c6:a7:fa:f4:66:a6:67:17:ff:17:0b:3f:e6:
32:66:bc:8b:d2:dc:e5:36:91:62:ac:18:51:48:10:0e:70:46:
10:7f:1d:41:c1:34:0a:84:dd:ad:2b:28:02:59:50:1f:72:10:
50:04:87:5f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0NQn2n//HvAYxCRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3
Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
NDA0NDQ2ZjUtNjczNy00N2ViLTlmYzEtYTYwZTkxNWM4YmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDncTmWoFuOYp4mZSq7HFyzNryBq6TnBcBoe
Fmo1SJv9x7C1CH+r3diAviUfDsRDNA0X6C2MC77W5KmInKdWHEc0Y3byvEv0oYHv
3jX2yZRCxqwKDLmH6WMBM7AOw765o/OGOhlQdK5zhwfpMMMVOhi2Srna3GkQP8K0
D8dysacR11ecIjjftLcXJzzI92qI9CjysgnD/9Yub3bWD2fI+nC8R7UNm/BxMDVN
YP5fwGIq2y7pJqjPfWhhO8UtOLYpzC0aWI8Zmv+v4HhuTwCfpcTwz8Srru7EzlXA
XHd0+TTuZKiCmN2I8AK+Ooaa0vqx9k9ap2hnoP83psetpxxAYQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAlFKWjrIZ1Ous4W1DboMjhwR7YuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5
MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNzg1MTQwYTctYmJiNy0z
NzRjLWJhM2YtNzBjY2FjNDU2MjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl
ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5
N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll
OGQ4OTdiNzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg+WAAwQA
g+WEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHJpxw6ETL2igu5R35V/VZxCWvo3kPahoEDAgBJSbpUqwQrd
uIMKTnIj3IqZOBxwARerV2m4Gug5AD7AuH5BW+xWN5ON/SvjelchSBjP9V9LsOjA
EjyK1ae2askcFyAAwiFFncVZZDuXZlzkw9y9Vt/4Ue36+JvHkFniQa3qehAkHdLJ
XHi2pdnLPo9gG6/RJpteCf/DQuuHoS0krdb5YySp/r5C3cAyYauktzHBLbEoA8tf
NRqQ+4Eh70nQKhK73fPVAhUJrGSS0JXYxqf69GamZxf/Fws/5jJmvIvS3OU2kWKs
GFFIEA5wRhB/HUHBNAqE3a0rKAJZUB9yEFAEh18=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:24 2026 by rpki-client