$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/a36775dc-21a9-3010-a61d-2eea3636aea2.roa File: a36775dc-21a9-3010-a61d-2eea3636aea2.roa (raw, json) Hash identifier: iDc00kXA5QMxDFxJwPIdG3iYtL7tQx6KIIWLLPw81ck= Subject key identifier: 70:C1:AD:07:EA:2C:39:61:BE:B6:E9:72:59:46:EF:0B:68:87:08:6A Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584F4972BEC3106B6B17F6F41C00 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/a36775dc-21a9-3010-a61d-2eea3636aea2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203724 IP address blocks: 131.229.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:be:c3:10:6b:6b:17:f6:f4:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a116e8f1-ce76-4844-9e04-aa182a9282ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:24:e4:86:91:f2:66:e4:a6:0a:34:34:c3: c2:6a:94:fa:39:e8:d8:f2:2f:41:54:b7:76:40:b8: 1b:2f:96:c3:f2:a7:a9:e8:66:0c:5c:74:dd:76:97: 25:eb:03:8e:76:30:67:fe:b8:c9:cf:bb:19:36:c0: 32:db:40:2f:8f:c0:38:33:ab:15:34:ec:ce:9d:8e: 9b:9d:7e:f5:b3:4a:3d:65:70:93:0b:8c:d9:12:28: 46:e3:e3:b7:13:57:06:a4:2c:e1:20:12:5c:d2:47: 64:cc:31:e5:7d:c1:76:5e:0a:21:c8:d8:a7:37:39: a3:b9:3f:65:c3:0b:71:b0:76:da:e7:14:be:10:a8: 59:ee:c3:69:3a:3f:85:5a:1d:aa:b7:bb:b1:50:ae: c6:97:09:91:8c:e5:3b:f8:b6:cd:13:8b:4b:9a:b6: b6:26:45:42:53:2d:25:2d:1e:00:a6:1f:88:4f:ea: 9b:8a:45:1d:49:1e:eb:b0:0c:14:c4:00:2c:34:5a: 3a:95:6e:b1:7d:f5:d6:5e:77:b4:c6:23:75:ea:b4: de:eb:01:bb:d6:df:2a:c3:58:36:a4:e0:71:ba:db: 9b:c1:7c:21:cb:36:82:67:4f:91:d3:e5:41:46:91: f6:da:29:de:38:d7:5c:6e:e7:c7:2a:95:da:90:1e: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C1:AD:07:EA:2C:39:61:BE:B6:E9:72:59:46:EF:0B:68:87:08:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/a36775dc-21a9-3010-a61d-2eea3636aea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:dd:6b:11:46:0c:a3:1a:15:4c:2e:f6:e8:ec:12:2c:76:17: 48:ea:51:30:10:6b:f3:16:1c:bd:ab:21:a5:60:b9:bb:e6:af: f0:10:d8:ec:aa:40:95:df:b1:5f:32:69:53:e3:aa:35:6e:f0: 0b:b7:6e:2a:d5:72:e6:12:78:10:f7:32:7d:ec:10:20:3c:5c: 5a:06:87:26:4f:a6:cd:d8:e6:ca:cb:0a:df:da:44:d8:02:46: 92:51:b1:a3:7d:82:fe:8e:3d:19:2a:f2:9b:24:c0:b2:3a:48: 59:01:db:69:24:72:1d:3c:96:bc:17:c5:31:39:6e:6b:eb:47: 71:cf:e9:24:3a:8d:61:09:53:84:03:84:c4:f2:71:06:60:23: 25:55:32:7b:61:bc:11:10:75:a4:57:6d:a1:77:6b:02:e6:bd: ec:ac:44:59:2b:df:03:96:82:a0:9c:2d:1d:7b:d9:2f:21:68: 62:bb:a6:a5:e1:b3:3d:49:2e:0b:1a:4d:8c:87:24:71:14:9c: 6a:a9:17:0f:76:06:45:cb:ea:58:35:18:55:b2:f9:d5:a9:c9: 87:fc:e7:74:95:d6:dc:e1:63:a0:cd:fa:66:ad:54:07:52:5c: c7:5f:eb:6c:24:35:06:a3:49:41:4f:0d:c6:1e:7c:f2:bf:d3: d6:18:26:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcr7DEGtrF/b0HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTExNmU4ZjEtY2U3Ni00ODQ0LTllMDQtYWExODJhOTI4MmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz34k5IaR8mbkpgo0NMPCapT6OejY8i9BVLd2 QLgbL5bD8qep6GYMXHTddpcl6wOOdjBn/rjJz7sZNsAy20Avj8A4M6sVNOzOnY6b nX71s0o9ZXCTC4zZEihG4+O3E1cGpCzhIBJc0kdkzDHlfcF2XgohyNinNzmjuT9l wwtxsHba5xS+EKhZ7sNpOj+FWh2qt7uxUK7GlwmRjOU7+LbNE4tLmra2JkVCUy0l LR4Aph+IT+qbikUdSR7rsAwUxAAsNFo6lW6xffXWXne0xiN16rTe6wG71t8qw1g2 pOBxutubwXwhyzaCZ0+R0+VBRpH22ineONdcbufHKpXakB602QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDBrQfqLDlhvrbpcllG7wtohwhqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYTM2Nzc1ZGMtMjFhOS0z MDEwLWE2MWQtMmVlYTM2MzZhZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbdaxFGDKMaFUwu9ujsEix2F0jqUTAQa/MWHL2rIaVgubvmr/AQ2Oyq QJXfsV8yaVPjqjVu8Au3birVcuYSeBD3Mn3sECA8XFoGhyZPps3Y5srLCt/aRNgC RpJRsaN9gv6OPRkq8pskwLI6SFkB22kkch08lrwXxTE5bmvrR3HP6SQ6jWEJU4QD hMTycQZgIyVVMnthvBEQdaRXbaF3awLmveysRFkr3wOWgqCcLR172S8haGK7pqXh sz1JLgsaTYyHJHEUnGqpFw92BkXL6lg1GFWy+dWpyYf853SV1tzhY6DN+matVAdS XMdf62wkNQajSUFPDcYefPK/09YYJpg= -----END CERTIFICATE-----Generated at Sun Sep 27 14:22:20 2026 by rpki-client