$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7f264a68-c6bc-3fac-9bfa-a33741dca941.roa File: 7f264a68-c6bc-3fac-9bfa-a33741dca941.roa (raw, json) Hash identifier: MlUosmeJC/HHNB9yr/Il02W2rrOk4ZSZZtbhP7hpxIA= Subject key identifier: 21:24:B8:C2:AD:35:48:16:E2:4E:4B:82:0B:93:49:E8:0D:D8:46:9E Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D0D427E00E91C2AF5794D0700 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7f264a68-c6bc-3fac-9bfa-a33741dca941.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 31898 IP address blocks: 131.229.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:7e:00:e9:1c:2a:f5:79:4d:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=91f4a775-ec68-4063-81e3-18f964c1dea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:78:02:e3:de:b8:b8:6e:e5:0c:cc:fa:ef: 5d:92:7d:b9:2a:d3:a5:27:20:bb:1e:3b:79:be:8e: 79:92:92:3a:22:25:f0:61:3a:b9:f9:ee:5d:36:35: b0:42:87:34:4b:e4:23:1b:76:1f:69:f4:f7:60:fe: c3:af:e5:67:c2:91:e4:74:62:30:70:66:bd:f3:52: e6:81:bb:90:ec:55:8c:6d:b2:94:ad:a3:19:85:da: c5:e4:92:96:15:02:8c:69:61:73:af:ba:19:51:2f: 00:66:2f:61:7b:05:cf:ff:77:5d:d8:d4:59:06:d7: 5a:66:79:db:22:4e:d3:61:3e:5f:cd:67:5a:95:d8: e8:cc:93:7c:96:5e:49:ab:8f:63:b6:ec:2f:f6:49: c1:07:1c:1a:55:ba:59:6b:2f:d5:18:df:91:cb:da: 86:48:d4:e5:ae:cb:2b:6a:61:34:29:84:39:fd:14: bc:aa:18:51:e0:c1:a7:fa:d8:f6:b6:26:56:a7:13: 9e:32:08:9e:58:d8:f0:ea:4a:22:fe:90:f3:0b:6d: 76:e0:f3:a6:9b:e1:2b:af:09:97:98:a2:7c:a9:05: 9a:4c:b1:c8:26:d2:67:d9:91:bc:c7:4b:e4:62:01: 38:05:13:4e:35:9f:3a:d0:bc:80:c6:dc:f6:d3:1f: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:24:B8:C2:AD:35:48:16:E2:4E:4B:82:0B:93:49:E8:0D:D8:46:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7f264a68-c6bc-3fac-9bfa-a33741dca941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ae:f6:59:ed:36:09:97:35:b8:bc:b4:bc:4d:3f:a0:3f:72: fa:f1:82:1a:22:36:38:b4:94:ae:3a:38:0f:0b:c4:19:cd:42: b4:92:88:df:67:93:62:c2:7c:94:c4:34:df:7c:32:d4:70:0a: 6e:95:13:64:87:10:a9:73:3e:f6:54:a0:7b:7b:78:43:a5:d7: 5f:4c:67:88:3b:dd:95:1a:b1:0e:88:31:60:86:51:1a:06:40: 56:47:5d:4d:23:76:38:ee:37:2c:82:c2:9f:e8:93:ce:18:d8: 1e:f4:22:fd:60:1b:ec:24:9e:7d:ba:c8:50:92:a0:04:98:ff: 83:cf:c6:0e:a9:b2:95:d9:7c:57:93:bc:78:4c:04:06:71:68: 23:f7:4f:91:63:cd:d4:e9:d5:a7:00:c1:93:91:e3:52:ef:fa: f1:d3:b9:54:e7:12:f9:51:9a:4e:4e:98:a6:69:9f:27:ee:27: d4:6e:e2:c7:c8:94:90:99:6b:5b:85:b5:58:90:f0:15:ff:64: 6e:5d:c8:28:f8:85:31:65:13:d5:2b:f0:91:75:0e:91:fd:6c: 0b:88:9f:ab:b6:d6:7a:7b:17:a2:3a:a3:de:b9:a2:ed:97:b3: 1a:35:d3:1f:67:33:cf:cf:e3:b2:1d:a1:a9:04:ca:f6:07:d5: e5:9d:5d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQn4A6Rwq9XlNBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk OTFmNGE3NzUtZWM2OC00MDYzLTgxZTMtMThmOTY0YzFkZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBd4AuPeuLhu5QzM+u9dkn25KtOlJyC7Hjt5 vo55kpI6IiXwYTq5+e5dNjWwQoc0S+QjG3YfafT3YP7Dr+VnwpHkdGIwcGa981Lm gbuQ7FWMbbKUraMZhdrF5JKWFQKMaWFzr7oZUS8AZi9hewXP/3dd2NRZBtdaZnnb Ik7TYT5fzWdaldjozJN8ll5Jq49jtuwv9knBBxwaVbpZay/VGN+Ry9qGSNTlrssr amE0KYQ5/RS8qhhR4MGn+tj2tiZWpxOeMgieWNjw6koi/pDzC2124POmm+ErrwmX mKJ8qQWaTLHIJtJn2ZG8x0vkYgE4BRNONZ860LyAxtz20x9WrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEkuMKtNUgW4k5LgguTSegN2EaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvN2YyNjRhNjgtYzZiYy0z ZmFjLTliZmEtYTMzNzQxZGNhOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGu9lntNgmXNbi8tLxNP6A/cvrxghoiNji0lK46OA8LxBnNQrSSiN9n k2LCfJTENN98MtRwCm6VE2SHEKlzPvZUoHt7eEOl119MZ4g73ZUasQ6IMWCGURoG QFZHXU0jdjjuNyyCwp/ok84Y2B70Iv1gG+wknn26yFCSoASY/4PPxg6pspXZfFeT vHhMBAZxaCP3T5FjzdTp1acAwZOR41Lv+vHTuVTnEvlRmk5OmKZpnyfuJ9Ru4sfI lJCZa1uFtViQ8BX/ZG5dyCj4hTFlE9Ur8JF1DpH9bAuIn6u21np7F6I6o965ou2X sxo10x9nM8/P47IdoakEyvYH1eWdXds= -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:22 2026 by rpki-client