$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa File: b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa (raw, json) Hash identifier: SANmDdy9Jau8OLWxQXbw+NRFFcUp55QLfkovRq6oMl4= Subject key identifier: 9E:A4:93:82:C3:EE:B2:6D:67:4D:08:C6:7A:DC:87:46:D2:6F:C7:14 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584F4988AAB1AC2D4156094B9A40 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 131.229.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:aa:b1:ac:2d:41:56:09:4b:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4f225c85-0fc7-4eaa-bae6-5d9e78926ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:e7:3f:e2:20:87:36:8e:72:7c:bd:fe:3e: 15:dc:46:30:ba:5b:6e:f9:2b:5d:2c:42:bb:84:f7: 75:73:50:dc:80:08:af:d3:54:5f:6f:7f:83:ff:ce: c4:0a:a6:4d:8d:3e:a4:92:a3:d1:9b:4e:80:9e:e2: 44:0f:0e:58:4f:f4:e1:df:c1:40:0e:89:f0:6d:27: e4:1d:e0:fe:68:21:b7:6c:36:2f:8c:e4:27:ea:ff: 28:12:26:35:19:b7:aa:e3:05:be:7b:92:ed:af:22: 81:b5:7a:89:8f:d7:71:0f:fa:a3:91:62:7e:6a:c6: 87:47:0f:44:5d:bc:e1:79:4c:9f:e0:23:0e:95:5c: b8:8a:a7:ba:8a:46:7a:4f:bf:37:f5:74:e0:39:53: a1:e7:c3:90:70:df:64:35:cd:57:f3:f5:68:ab:1c: 59:65:fc:21:ed:23:fb:27:f2:91:8f:c0:ca:1e:78: 35:20:12:36:a1:dc:05:dc:7a:68:2c:ee:2a:8b:85: 78:f1:75:8a:32:3d:7e:3b:90:6a:1b:bf:21:2f:07: 47:79:f7:36:b5:08:57:6e:5d:35:77:f9:8f:96:11: f7:a3:c5:d9:23:81:f7:4d:fb:55:c4:3b:63:47:dd: 9f:f6:1b:d3:e1:99:7c:12:14:bb:e0:38:76:14:56: 85:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A4:93:82:C3:EE:B2:6D:67:4D:08:C6:7A:DC:87:46:D2:6F:C7:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b708d8aa-b6ea-3b31-8ccf-efac31e10689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:17:ac:8f:bc:51:ee:b8:11:1e:10:f5:d7:f8:b5:74:86:58: d5:f1:c1:4c:81:6c:d7:dd:9c:9e:76:13:f4:65:9e:a1:20:df: ee:a1:54:e5:4d:08:2f:9b:a2:75:a5:ae:83:b4:6f:e1:4a:9c: f3:2c:bd:48:b2:3b:ff:77:3f:10:b8:39:0f:28:10:4c:9d:59: fc:c1:39:c9:38:e7:dd:d0:67:4c:d2:33:db:15:20:06:92:b4: 52:1b:a0:f8:e6:e7:50:ae:0f:32:cb:a7:5c:af:5b:bc:b5:f6: a0:1e:c6:b5:9e:b8:f2:8a:48:aa:a8:7d:c3:5d:3f:15:6b:24: ed:4b:5f:55:a4:80:25:eb:33:0a:fa:ed:d9:05:6c:60:42:41: 69:ca:74:f2:ad:c8:47:ad:44:88:90:8f:8c:c0:24:e1:75:ed: 23:12:3f:91:f5:2a:55:6d:18:bf:ec:ce:d0:bb:20:cb:a3:9d: d6:8e:b4:44:78:9e:c9:57:7c:a9:70:75:eb:37:6a:dd:b6:6b: 23:ca:b9:50:4f:09:8b:a7:e3:94:6c:b7:a4:69:75:12:c0:16: 50:63:fc:20:79:d4:41:03:d3:d5:4b:20:80:6c:24:a7:2b:ac: d4:8f:f6:7f:1e:ed:f1:e5:07:70:da:4e:9a:00:9c:35:e2:0b: e7:ba:5b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiKqxrC1BVglLmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGYyMjVjODUtMGZjNy00ZWFhLWJhZTYtNWQ5ZTc4OTI2YWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwffnP+IghzaOcny9/j4V3EYwultu+StdLEK7 hPd1c1DcgAiv01Rfb3+D/87ECqZNjT6kkqPRm06AnuJEDw5YT/Th38FADonwbSfk HeD+aCG3bDYvjOQn6v8oEiY1Gbeq4wW+e5LtryKBtXqJj9dxD/qjkWJ+asaHRw9E XbzheUyf4CMOlVy4iqe6ikZ6T7839XTgOVOh58OQcN9kNc1X8/VoqxxZZfwh7SP7 J/KRj8DKHng1IBI2odwF3HpoLO4qi4V48XWKMj1+O5BqG78hLwdHefc2tQhXbl01 d/mPlhH3o8XZI4H3TftVxDtjR92f9hvT4Zl8EhS74Dh2FFaF8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6kk4LD7rJtZ00Ixnrch0bSb8cUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYjcwOGQ4YWEtYjZlYS0z YjMxLThjY2YtZWZhYzMxZTEwNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcXrI+8Ue64ER4Q9df4tXSGWNXxwUyBbNfdnJ52E/RlnqEg3+6hVOVN CC+bonWlroO0b+FKnPMsvUiyO/93PxC4OQ8oEEydWfzBOck4593QZ0zSM9sVIAaS tFIboPjm51CuDzLLp1yvW7y19qAexrWeuPKKSKqofcNdPxVrJO1LX1WkgCXrMwr6 7dkFbGBCQWnKdPKtyEetRIiQj4zAJOF17SMSP5H1KlVtGL/sztC7IMujndaOtER4 nslXfKlwdes3at22ayPKuVBPCYun45Rst6RpdRLAFlBj/CB51EED09VLIIBsJKcr rNSP9n8e7fHlB3DaTpoAnDXiC+e6W1Q= -----END CERTIFICATE-----Generated at Sat Sep 26 05:05:56 2026 by rpki-client