$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9b8f0aef-b4b1-3f32-8480-62e5a5906b18.roa File: 9b8f0aef-b4b1-3f32-8480-62e5a5906b18.roa (raw, json) Hash identifier: 80A7edeeWba2Pb01ZnY2JP/RLwH+/C5U3C3SXgW0fG4= Subject key identifier: 8D:98:69:D3:1A:A2:4D:B2:99:8B:A1:DC:DE:65:D3:51:F2:CA:B3:77 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D0D42813265BA99A09A289BC0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9b8f0aef-b4b1-3f32-8480-62e5a5906b18.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 31898 IP address blocks: 131.229.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:81:32:65:ba:99:a0:9a:28:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=48ae7dba-61e4-44c1-94ce-226534bf3577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:00:51:22:b5:60:25:a4:75:86:51:1d:14: 47:78:9c:24:29:06:9b:a0:56:0c:95:9a:7c:2c:72: 73:49:89:cf:f5:6f:a3:39:25:52:08:23:79:54:4f: c3:76:5f:8c:4d:b0:11:e1:44:c6:96:e4:39:64:bc: 63:a9:26:81:f2:16:c9:b5:04:23:3e:e6:aa:40:80: 9a:b0:22:95:52:b5:e1:19:39:92:cb:d3:29:57:21: 55:75:a0:19:d5:f6:34:61:da:15:27:37:17:5a:4d: c2:dd:7b:dc:c9:75:99:7c:57:ed:90:2a:47:07:02: 8f:0d:b7:9b:0b:8b:2f:45:0c:2d:62:cb:90:21:9d: 27:aa:65:55:dc:18:57:2a:80:e0:49:42:10:bb:e1: e4:4e:c3:d1:80:96:c8:8c:1d:66:92:8d:01:78:c8: 1f:cd:e3:d9:4a:d5:34:ba:50:60:a6:f1:52:7e:4f: b9:6e:98:cf:aa:de:01:06:83:97:e9:c6:c3:35:1b: 63:3d:08:ec:a9:41:28:1c:fe:dd:8e:a9:06:76:57: 1b:ba:e9:93:d9:47:b0:53:dd:d4:74:38:fa:3b:eb: ee:ba:cf:8d:a4:b7:f1:d2:7c:d6:09:64:23:8d:b2: 7c:84:9b:17:63:10:43:20:36:f4:e6:3d:da:04:4c: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:98:69:D3:1A:A2:4D:B2:99:8B:A1:DC:DE:65:D3:51:F2:CA:B3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9b8f0aef-b4b1-3f32-8480-62e5a5906b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cc:92:8b:1a:82:89:da:1e:3c:b7:bb:b6:1a:c5:2a:c1:48: fa:b9:06:1f:ea:75:08:75:99:0a:53:b1:36:7d:5e:a1:91:17: cd:ba:b4:be:14:a9:7e:ec:c1:37:f3:6b:30:82:33:9f:ed:01: ce:5c:71:eb:81:32:57:7a:e7:c4:f1:1a:4f:52:4c:04:2a:85: 6d:03:b3:6d:1d:11:21:57:a0:f4:be:84:d7:54:e3:ad:97:d3: a9:06:38:17:a3:3b:01:97:47:12:41:f0:5b:2c:bd:fb:8f:ae: af:8e:18:bc:be:2e:fd:c1:3c:15:d5:39:c8:bc:6e:59:2f:cc: 76:66:6c:08:66:bb:56:05:24:7b:0b:dc:42:cb:fa:a2:90:e6: bf:4a:62:41:b7:8b:96:b3:d3:37:b5:82:9d:24:ef:5e:2e:cc: 5d:2b:f9:ea:3c:1d:8e:16:2e:6f:04:18:62:65:83:9b:d7:d1: 83:52:fc:21:5c:d5:d2:7f:4b:3f:b2:b0:10:3b:cf:39:44:ec: fa:04:98:e7:06:4a:fb:b7:cb:26:93:06:21:0d:fc:f9:3f:2e: d0:59:64:8b:fd:33:a7:65:80:25:a6:d3:53:f8:97:af:c7:c1: c9:14:52:6c:42:c7:f6:3d:69:51:44:85:1a:50:bd:b6:07:f4: 9b:53:75:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQoEyZbqZoJoom8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NDhhZTdkYmEtNjFlNC00NGMxLTk0Y2UtMjI2NTM0YmYzNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhYAUSK1YCWkdYZRHRRHeJwkKQaboFYMlZp8 LHJzSYnP9W+jOSVSCCN5VE/Ddl+MTbAR4UTGluQ5ZLxjqSaB8hbJtQQjPuaqQICa sCKVUrXhGTmSy9MpVyFVdaAZ1fY0YdoVJzcXWk3C3XvcyXWZfFftkCpHBwKPDbeb C4svRQwtYsuQIZ0nqmVV3BhXKoDgSUIQu+HkTsPRgJbIjB1mko0BeMgfzePZStU0 ulBgpvFSfk+5bpjPqt4BBoOX6cbDNRtjPQjsqUEoHP7djqkGdlcbuumT2UewU93U dDj6O+vuus+NpLfx0nzWCWQjjbJ8hJsXYxBDIDb05j3aBEx0iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2YadMaok2ymYuh3N5l01HyyrN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvOWI4ZjBhZWYtYjRiMS0z ZjMyLTg0ODAtNjJlNWE1OTA2YjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLMkosagonaHjy3u7YaxSrBSPq5Bh/qdQh1mQpTsTZ9XqGRF826tL4U qX7swTfzazCCM5/tAc5cceuBMld658TxGk9STAQqhW0Ds20dESFXoPS+hNdU462X 06kGOBejOwGXRxJB8FssvfuPrq+OGLy+Lv3BPBXVOci8blkvzHZmbAhmu1YFJHsL 3ELL+qKQ5r9KYkG3i5az0ze1gp0k714uzF0r+eo8HY4WLm8EGGJlg5vX0YNS/CFc 1dJ/Sz+ysBA7zzlE7PoEmOcGSvu3yyaTBiEN/Pk/LtBZZIv9M6dlgCWm01P4l6/H wckUUmxCx/Y9aVFEhRpQvbYH9JtTdSg= -----END CERTIFICATE-----Generated at Thu Mar 26 04:27:50 2026 by rpki-client