$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ba2a6430-d0f1-3341-bb52-90eb72839b2e.roa File: ba2a6430-d0f1-3341-bb52-90eb72839b2e.roa (raw, json) Hash identifier: HsArRIOWjwPyeGUt8kUGUMEkgMIkfGPf4SIr4Z8sW18= Subject key identifier: 97:21:38:A3:CF:B4:22:9A:8A:5B:DB:46:6F:4E:09:46:DD:D4:7B:D4 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D0D425F537D4A9D12AA654C80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ba2a6430-d0f1-3341-bb52-90eb72839b2e.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 203724 IP address blocks: 131.229.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:5f:53:7d:4a:9d:12:aa:65:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=ad58f769-d4f4-4310-9220-50cba9d81359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d2:1e:18:c3:86:f6:e8:4b:a2:ac:31:80:8b: b9:65:08:4e:bb:29:42:2b:d1:27:78:2c:da:7b:49: 05:67:22:f6:fd:f9:9f:c9:97:77:08:e7:db:57:ed: 51:f5:ae:4b:db:2f:45:ea:38:06:bc:14:8f:63:16: 1d:96:e4:c6:6a:79:f3:fd:80:6b:cd:e0:60:47:a9: ba:f4:dc:c6:58:61:99:dd:62:05:26:bb:a9:c7:c3: d3:97:de:32:fa:4f:28:40:2d:87:ee:a5:fd:c2:23: a0:5e:94:dc:2b:38:fa:0a:9d:6f:f6:5d:6d:9c:d8: f0:ef:8a:6c:4b:56:b4:73:2a:68:84:18:6c:f8:ff: 0b:b9:83:c6:f4:45:b8:7e:5b:26:0c:95:75:4d:06: 2b:cb:4e:7f:d4:a2:10:06:77:9a:24:18:24:c4:db: de:42:7b:a8:39:05:53:8f:e9:4f:08:2e:c1:d2:75: b1:68:4c:47:b2:6a:8b:d4:c1:2f:04:c1:ae:5a:b3: b0:ae:92:61:d8:6c:7d:82:6f:77:36:4c:e8:25:6c: 67:2a:f7:ff:ea:30:57:50:ff:8d:47:fd:dd:88:8f: 8b:d8:c4:34:ff:27:9e:50:21:d9:29:67:d7:3a:3e: ef:60:b5:54:c3:bd:58:9d:ad:89:c8:82:37:be:6f: 32:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:21:38:A3:CF:B4:22:9A:8A:5B:DB:46:6F:4E:09:46:DD:D4:7B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ba2a6430-d0f1-3341-bb52-90eb72839b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:39:a3:64:f2:bf:85:07:71:62:63:51:00:29:2f:cf:c2:3e: d3:a9:92:25:94:f6:88:59:68:ec:96:b8:37:89:51:24:a5:5d: 15:a3:92:14:25:aa:e1:98:1f:cd:dd:ee:ee:e3:73:04:dc:3e: da:35:3b:68:69:51:87:6c:ce:1c:b5:e3:72:eb:f1:73:df:75: a9:c5:81:04:88:a7:ae:30:2b:f5:7d:06:fb:8e:91:29:d9:1e: 85:ce:d5:82:41:dd:a6:2e:e6:11:16:21:9c:f5:fe:ad:6e:c7: eb:f3:de:8f:8f:16:84:36:16:9b:cf:6f:4a:09:bb:31:e5:75: 68:d6:18:0c:91:90:7e:b2:89:32:9e:32:4c:6f:b3:90:dd:b6: 7f:68:54:0c:d8:74:55:2e:a9:33:7a:9e:71:11:10:4c:6e:b9: 56:74:a3:13:24:7c:60:03:6d:fd:10:37:f8:b7:5d:ed:f4:e6: 43:c5:3d:d7:d1:7c:29:39:2f:49:f1:1b:6f:18:26:ff:9c:bc: 19:47:7e:70:49:74:b2:61:a1:a7:55:fa:78:66:2b:33:27:48: e0:2f:b4:fe:19:7c:6e:01:d3:84:0d:98:63:8b:41:9e:0c:00: 21:0e:28:50:d2:0a:02:58:23:59:70:84:de:f0:d3:53:93:d1: d8:78:d8:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQl9TfUqdEqplTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk YWQ1OGY3NjktZDRmNC00MzEwLTkyMjAtNTBjYmE5ZDgxMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9IeGMOG9uhLoqwxgIu5ZQhOuylCK9EneCza e0kFZyL2/fmfyZd3COfbV+1R9a5L2y9F6jgGvBSPYxYdluTGannz/YBrzeBgR6m6 9NzGWGGZ3WIFJrupx8PTl94y+k8oQC2H7qX9wiOgXpTcKzj6Cp1v9l1tnNjw74ps S1a0cypohBhs+P8LuYPG9EW4flsmDJV1TQYry05/1KIQBneaJBgkxNveQnuoOQVT j+lPCC7B0nWxaExHsmqL1MEvBMGuWrOwrpJh2Gx9gm93NkzoJWxnKvf/6jBXUP+N R/3diI+L2MQ0/yeeUCHZKWfXOj7vYLVUw71Yna2JyII3vm8yNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJchOKPPtCKailvbRm9OCUbd1HvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYmEyYTY0MzAtZDBmMS0z MzQxLWJiNTItOTBlYjcyODM5YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY5o2Tyv4UHcWJjUQApL8/CPtOpkiWU9ohZaOyWuDeJUSSlXRWjkhQl quGYH83d7u7jcwTcPto1O2hpUYdszhy143Lr8XPfdanFgQSIp64wK/V9BvuOkSnZ HoXO1YJB3aYu5hEWIZz1/q1ux+vz3o+PFoQ2FpvPb0oJuzHldWjWGAyRkH6yiTKe Mkxvs5Ddtn9oVAzYdFUuqTN6nnEREExuuVZ0oxMkfGADbf0QN/i3Xe305kPFPdfR fCk5L0nxG28YJv+cvBlHfnBJdLJhoadV+nhmKzMnSOAvtP4ZfG4B04QNmGOLQZ4M ACEOKFDSCgJYI1lwhN7w01OT0dh42Jw= -----END CERTIFICATE-----Generated at Thu Mar 26 04:14:45 2026 by rpki-client