$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa File: 895fff21-ab62-3bfa-989a-a161b089ba1f.roa (raw, json) Hash identifier: 4eEcnxVW3oiSMVv6WDFNMPFHBjRuNSnZKPg4TQOW1XA= Subject key identifier: 77:E9:4D:05:6F:1F:3B:2F:2B:B5:90:1E:1D:1E:E1:4F:C2:2C:8D:70 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D44FA604538D20078B8DEC100 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 131.229.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:60:45:38:d2:00:78:b8:de:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=71ec1801-327d-47a9-9999-0ee7eb0fea9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:31:f5:2a:77:bc:b8:a3:2a:1c:47:04:49: 8e:c3:c8:d5:a0:86:df:35:04:7d:68:da:c3:3c:f9: de:6c:55:1f:d6:2b:0d:b9:71:5f:f9:43:98:4e:aa: 9f:cb:00:fb:91:b5:7c:10:d5:77:7f:21:35:59:8d: f2:2c:86:a9:50:23:0e:82:ad:68:fa:8e:d5:92:bf: c3:f0:68:9b:6e:ca:56:93:2a:09:c9:04:ae:39:93: 37:58:67:77:ff:8f:a3:6b:00:21:46:ab:f5:a1:73: 12:5d:3b:f3:0d:7d:7f:fe:5d:bc:26:eb:9d:83:91: f0:8b:29:ec:1c:de:1f:99:6d:67:dc:22:21:49:7b: 4e:17:8e:ba:2e:d0:75:1b:b4:c8:00:b2:ad:8f:e2: 14:e6:54:7f:d7:3e:4d:a7:32:c2:ac:52:ef:a8:2d: 27:25:d9:49:9e:13:bc:36:ac:6b:51:11:1a:15:cc: f7:31:df:ea:23:b4:6e:4c:27:9d:71:26:f5:d4:b4: df:84:b5:27:3a:cb:9b:46:47:e9:4f:01:73:f3:18: 59:f9:4e:29:fd:1f:72:38:68:7a:dd:d5:ff:7c:27: 69:80:35:6d:6b:6b:26:8b:60:be:a6:bb:3e:f5:ec: 01:15:64:93:95:ba:81:c5:52:a3:69:16:27:81:c7: 2f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E9:4D:05:6F:1F:3B:2F:2B:B5:90:1E:1D:1E:E1:4F:C2:2C:8D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:79:bd:af:a5:f7:d5:91:96:89:64:72:d9:75:7d:b3:a6:5b: a5:bd:89:22:6d:e9:30:fa:c7:fb:a3:e8:a5:35:34:0b:9b:a7: af:ff:d5:6b:33:df:b8:53:8c:98:83:d9:05:fc:c2:04:d5:39: ac:d5:f6:30:ef:f5:85:30:f6:87:06:7f:9c:6a:9a:07:3b:47: a9:d8:27:51:d6:98:f8:ae:2c:9f:f8:a0:58:24:3d:00:bb:c6: 23:95:dd:7b:d4:ed:3a:4b:6c:40:e7:c7:69:a1:c5:38:3a:fb: 7f:4e:20:57:8d:a6:b8:75:82:3e:64:41:5c:5c:7d:93:d7:ce: 12:54:c7:29:85:7d:9c:78:d9:cc:85:a6:51:7f:13:63:ab:4b: 14:96:8d:66:fc:1d:b6:dc:1d:8a:b9:76:9e:7f:78:20:5e:9a: 36:0e:f6:40:7e:92:d8:7e:85:ff:5f:67:f1:36:2a:9c:bf:75: 71:8d:91:85:7e:ea:ac:db:13:5b:c8:b0:0c:0f:e3:0b:77:72: 5b:5e:32:50:f6:3b:c2:35:56:35:54:8b:66:96:ea:11:c1:1f: 78:30:a6:6e:a1:09:3d:ba:39:58:4b:be:59:a8:b1:2e:87:e3: 2d:9d:1a:3b:f5:8a:fe:6e:67:65:3a:d7:32:b6:45:39:80:4f: 7f:16:66:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mBFONIAeLjewQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NzFlYzE4MDEtMzI3ZC00N2E5LTk5OTktMGVlN2ViMGZlYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRkx9Sp3vLijKhxHBEmOw8jVoIbfNQR9aNrD PPnebFUf1isNuXFf+UOYTqqfywD7kbV8ENV3fyE1WY3yLIapUCMOgq1o+o7Vkr/D 8GibbspWkyoJyQSuOZM3WGd3/4+jawAhRqv1oXMSXTvzDX1//l28Juudg5Hwiyns HN4fmW1n3CIhSXtOF466LtB1G7TIALKtj+IU5lR/1z5NpzLCrFLvqC0nJdlJnhO8 NqxrUREaFcz3Md/qI7RuTCedcSb11LTfhLUnOsubRkfpTwFz8xhZ+U4p/R9yOGh6 3dX/fCdpgDVta2smi2C+prs+9ewBFWSTlbqBxVKjaRYngccvdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfpTQVvHzsvK7WQHh0e4U/CLI1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvODk1ZmZmMjEtYWI2Mi0z YmZhLTk4OWEtYTE2MWIwODliYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd5va+l99WRlolkctl1fbOmW6W9iSJt6TD6x/uj6KU1NAubp6//1Wsz 37hTjJiD2QX8wgTVOazV9jDv9YUw9ocGf5xqmgc7R6nYJ1HWmPiuLJ/4oFgkPQC7 xiOV3XvU7TpLbEDnx2mhxTg6+39OIFeNprh1gj5kQVxcfZPXzhJUxymFfZx42cyF plF/E2OrSxSWjWb8HbbcHYq5dp5/eCBemjYO9kB+kth+hf9fZ/E2Kpy/dXGNkYV+ 6qzbE1vIsAwP4wt3clteMlD2O8I1VjVUi2aW6hHBH3gwpm6hCT26OVhLvlmosS6H 4y2dGjv1iv5uZ2U61zK2RTmAT38WZps= -----END CERTIFICATE-----Generated at Thu Mar 26 02:05:24 2026 by rpki-client