$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ccb508de-80a2-3971-9195-18a03a904fc6.roa File: ccb508de-80a2-3971-9195-18a03a904fc6.roa (raw, json) Hash identifier: VB+Erv3ZK2PMx/Wo3v2PYEDRa8e6RDbw8WVL7u5yFMs= Subject key identifier: 48:F2:EE:79:6D:72:9B:D8:0A:2C:58:E2:22:C6:D9:55:87:49:61:6B Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D0D427EFF26D9C5F3B5C329C0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ccb508de-80a2-3971-9195-18a03a904fc6.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 203724 IP address blocks: 131.229.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:7e:ff:26:d9:c5:f3:b5:c3:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=c15a7fdb-9a41-42dc-b25f-5cde8728543e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:d2:93:ba:1b:49:59:01:bb:44:b6:31:06: df:82:47:82:c4:38:ac:67:0a:85:b9:c2:8b:4d:79: 07:c7:32:b0:26:8e:d0:ad:3d:2b:06:67:c9:09:c2: 9c:65:93:76:90:ce:77:fb:01:4d:eb:ba:0e:19:b2: dc:d3:ca:cf:5a:50:4e:4a:f2:53:da:7b:38:c8:cd: cf:a7:43:3d:e4:0b:6c:3d:9b:2b:e7:37:e8:33:d3: 1e:af:07:a6:88:6e:3d:2f:39:1d:1c:86:f5:77:3f: 91:7b:e5:66:98:c7:82:19:12:b0:b9:21:79:75:22: a2:c4:0f:58:e3:87:bb:e8:97:71:d1:4a:59:66:26: f2:83:7b:ed:17:7e:3d:18:91:0c:58:72:58:56:fc: 70:c2:e2:60:db:11:fc:46:c5:5b:5f:87:34:ac:aa: c2:34:f0:9f:e1:99:6b:0f:f1:73:05:39:e5:4e:a5: 3c:9f:56:38:4b:78:9c:86:75:20:5c:af:26:55:1c: 58:e2:05:c7:3c:57:94:22:b2:1a:22:02:5b:66:2a: b5:cc:90:7e:b3:d8:54:60:44:0a:c5:86:69:4a:dd: 08:b6:31:2c:6d:cc:76:3e:bc:75:d8:f0:ed:db:aa: 84:00:f7:9b:b4:f8:5b:9d:db:57:e8:37:3c:60:39: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F2:EE:79:6D:72:9B:D8:0A:2C:58:E2:22:C6:D9:55:87:49:61:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ccb508de-80a2-3971-9195-18a03a904fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e7:24:f0:b2:4f:43:06:67:33:a4:f5:b7:72:72:9a:5c:4a: e0:6d:d4:74:85:c4:b8:8a:ec:a7:0f:1a:7f:a5:84:43:eb:13: 5f:47:6e:9a:0d:fb:03:bd:b1:ab:35:95:20:8a:34:ea:61:5b: 36:6a:f4:d7:3e:6b:0d:05:c6:83:f4:e5:95:01:89:91:d3:42: 49:8a:eb:03:7a:51:2a:87:5d:2f:4f:0c:84:04:5f:7c:4f:c5: 2a:fe:e2:42:ab:98:71:61:92:c1:a6:3b:e0:f9:43:4b:27:97: 5b:a5:4c:ae:b6:83:87:a5:78:42:c4:02:3f:66:86:12:f4:f6: 38:24:93:c4:ac:dc:b2:d8:20:a9:a5:67:de:d2:98:29:08:9b: c9:75:05:e7:2a:78:d6:24:e4:13:46:68:f5:24:2f:50:89:af: 15:9f:9d:16:78:04:77:d2:ec:4a:70:06:94:fc:62:65:33:45: 56:1e:30:c5:d2:34:6d:31:52:4f:b4:cc:c5:7e:90:7e:e3:75: 63:29:ff:92:f7:63:e8:4b:1c:c3:72:52:21:54:6a:15:9e:eb: 8c:77:63:df:46:3d:0d:a5:d6:40:7c:96:40:75:ae:5f:a3:78: bd:bb:16:c5:1f:ec:51:57:74:6e:7c:f3:1b:95:2f:8e:b5:dc: 02:53:14:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQn7/JtnF87XDKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk YzE1YTdmZGItOWE0MS00MmRjLWIyNWYtNWNkZTg3Mjg1NDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTbSk7obSVkBu0S2MQbfgkeCxDisZwqFucKL TXkHxzKwJo7QrT0rBmfJCcKcZZN2kM53+wFN67oOGbLc08rPWlBOSvJT2ns4yM3P p0M95AtsPZsr5zfoM9MerwemiG49LzkdHIb1dz+Re+VmmMeCGRKwuSF5dSKixA9Y 44e76Jdx0UpZZibyg3vtF349GJEMWHJYVvxwwuJg2xH8RsVbX4c0rKrCNPCf4Zlr D/FzBTnlTqU8n1Y4S3ichnUgXK8mVRxY4gXHPFeUIrIaIgJbZiq1zJB+s9hUYEQK xYZpSt0ItjEsbcx2Prx12PDt26qEAPebtPhbndtX6Dc8YDnGKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjy7nltcpvYCixY4iLG2VWHSWFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvY2NiNTA4ZGUtODBhMi0z OTcxLTkxOTUtMThhMDNhOTA0ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXnJPCyT0MGZzOk9bdycppcSuBt1HSFxLiK7KcPGn+lhEPrE19HbpoN +wO9sas1lSCKNOphWzZq9Nc+aw0FxoP05ZUBiZHTQkmK6wN6USqHXS9PDIQEX3xP xSr+4kKrmHFhksGmO+D5Q0snl1ulTK62g4eleELEAj9mhhL09jgkk8Ss3LLYIKml Z97SmCkIm8l1BecqeNYk5BNGaPUkL1CJrxWfnRZ4BHfS7EpwBpT8YmUzRVYeMMXS NG0xUk+0zMV+kH7jdWMp/5L3Y+hLHMNyUiFUahWe64x3Y99GPQ2l1kB8lkB1rl+j eL27FsUf7FFXdG588xuVL4613AJTFKM= -----END CERTIFICATE-----Generated at Thu Mar 26 12:28:11 2026 by rpki-client