$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/cf48509f-d350-38b1-a874-e6f94ecf6ecd.roa File: cf48509f-d350-38b1-a874-e6f94ecf6ecd.roa (raw, json) Hash identifier: sGCRwwQepF9W5xm3ZF10ZcteWAuZwvbs92bpT6vBjFc= Subject key identifier: 9F:45:AA:7D:AF:88:D3:5D:C7:50:25:CB:21:43:17:AF:AE:1A:C5:70 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584F49892DE15C1B77C6942977C0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/cf48509f-d350-38b1-a874-e6f94ecf6ecd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203724 IP address blocks: 131.229.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:2d:e1:5c:1b:77:c6:94:29:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3c5b48d0-9bdf-4ddc-8e73-02ab10f24b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2a:1e:ff:9c:9e:63:7c:69:c8:4c:04:26:77: 34:5a:75:bb:b0:1b:83:2d:ad:90:c4:63:b2:78:66: 83:d1:fb:68:4c:40:34:e8:42:c1:86:73:0f:18:ab: 70:fe:1f:f6:de:aa:67:fa:2d:db:6c:65:83:24:ad: 5d:d8:77:88:6e:28:93:67:12:60:c0:4a:f9:d0:62: 73:a1:c3:01:a4:03:9b:8a:a2:da:24:e0:39:24:80: 63:af:24:c6:94:d7:93:5b:f8:73:6b:2a:b8:90:29: 41:a3:93:f1:21:7a:ec:7c:0e:0a:13:9b:62:29:ac: 26:4a:8b:9f:a9:47:87:d3:33:dd:e0:b6:fd:f7:a7: 36:4a:a3:31:a6:1f:75:60:16:da:bc:83:d4:0c:92: de:fc:2e:5b:4b:e1:70:42:5a:35:17:1c:c3:be:ac: 0f:c2:1f:f7:09:51:d9:87:59:a8:99:eb:08:c1:0c: 91:e4:c4:4c:39:1e:e9:55:73:89:3a:67:25:79:75: f8:46:72:ed:35:7c:d5:47:f6:ef:45:7a:04:77:3e: 57:ba:fa:6e:87:21:84:54:81:f8:b6:30:8b:19:c8: 52:b0:57:af:45:32:36:2b:4b:4a:91:3c:9c:d5:f5: bf:36:25:fd:09:1a:f7:e3:d7:bf:bd:ef:1c:9f:a6: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:45:AA:7D:AF:88:D3:5D:C7:50:25:CB:21:43:17:AF:AE:1A:C5:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/cf48509f-d350-38b1-a874-e6f94ecf6ecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:01:ce:8e:50:0e:19:f8:86:d0:10:4c:84:f0:1d:2a:2a:47: a4:f2:6c:d3:72:76:61:a8:b7:a4:82:1c:1a:00:c8:94:63:37: 2a:8f:17:41:a5:65:ad:49:12:60:df:be:f8:32:fa:2c:3e:6b: 14:c3:bd:10:a3:b7:35:3f:04:ae:11:29:de:67:93:ae:92:0f: e8:08:9b:1c:bc:53:12:8a:48:86:b6:c2:a1:9a:13:cf:90:37: 03:53:39:34:e0:27:f8:be:54:2c:32:f8:be:fd:d3:46:9a:7a: f9:6a:24:5c:bc:90:b7:4d:d4:27:d6:0b:f0:11:d4:4d:78:f7: 44:4c:57:bf:fa:77:72:ef:8a:85:21:c8:17:2b:25:8f:65:c5: 54:07:d6:ac:55:e4:7a:cd:93:c7:96:a4:aa:6b:32:14:54:5b: 17:22:9a:b4:31:5d:ae:2e:f7:3f:3c:d1:5b:2d:03:22:06:48: e8:a9:e9:1d:27:38:45:41:c8:42:92:fd:f1:e1:97:60:d8:ba: 42:a5:7d:b2:0c:0f:69:13:73:5c:84:d1:d2:11:e4:f1:43:02: fc:98:66:3d:5d:84:6b:6d:52:3e:c4:6f:d1:8f:32:15:ee:2f: 73:97:8c:b8:89:4b:67:bc:c2:05:08:03:c2:54:ad:7b:af:72: 41:52:82:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiS3hXBt3xpQpd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2M1YjQ4ZDAtOWJkZi00ZGRjLThlNzMtMDJhYjEwZjI0YjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCoe/5yeY3xpyEwEJnc0WnW7sBuDLa2QxGOy eGaD0ftoTEA06ELBhnMPGKtw/h/23qpn+i3bbGWDJK1d2HeIbiiTZxJgwEr50GJz ocMBpAObiqLaJOA5JIBjryTGlNeTW/hzayq4kClBo5PxIXrsfA4KE5tiKawmSouf qUeH0zPd4Lb996c2SqMxph91YBbavIPUDJLe/C5bS+FwQlo1FxzDvqwPwh/3CVHZ h1momesIwQyR5MRMOR7pVXOJOmcleXX4RnLtNXzVR/bvRXoEdz5XuvpuhyGEVIH4 tjCLGchSsFevRTI2K0tKkTyc1fW/NiX9CRr349e/ve8cn6Y/7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9Fqn2viNNdx1AlyyFDF6+uGsVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvY2Y0ODUwOWYtZDM1MC0z OGIxLWE4NzQtZTZmOTRlY2Y2ZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMBzo5QDhn4htAQTITwHSoqR6TybNNydmGot6SCHBoAyJRjNyqPF0Gl Za1JEmDfvvgy+iw+axTDvRCjtzU/BK4RKd5nk66SD+gImxy8UxKKSIa2wqGaE8+Q NwNTOTTgJ/i+VCwy+L7900aaevlqJFy8kLdN1CfWC/AR1E1490RMV7/6d3LvioUh yBcrJY9lxVQH1qxV5HrNk8eWpKprMhRUWxcimrQxXa4u9z880VstAyIGSOip6R0n OEVByEKS/fHhl2DYukKlfbIMD2kTc1yE0dIR5PFDAvyYZj1dhGttUj7Eb9GPMhXu L3OXjLiJS2e8wgUIA8JUrXuvckFSgt8= -----END CERTIFICATE-----Generated at Sun Sep 27 16:34:26 2026 by rpki-client