$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d17d5ae8-be36-35af-ac50-557daa251272.roa File: d17d5ae8-be36-35af-ac50-557daa251272.roa (raw, json) Hash identifier: CrDiP1jk/QSLwU/xP+jvdqxf8403zu1XA+fEAATwVCY= Subject key identifier: C7:A0:48:C0:17:4E:A0:38:B7:C7:E8:F7:73:C6:9E:CB:AC:07:21:DF Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584F49744B207508139ADE922680 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d17d5ae8-be36-35af-ac50-557daa251272.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 131.229.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:4b:20:75:08:13:9a:de:92:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=182ca75b-e044-49a0-9be5-559451ffe9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:e5:02:4c:ea:9e:d4:81:51:d8:eb:ce:8f: 33:c6:2c:95:d4:00:bb:18:f4:7f:c4:6f:51:c9:83: 0b:06:68:41:de:c7:c9:bc:e8:e5:82:de:4c:0b:b1: bd:d5:fc:b7:21:68:e8:47:59:a9:2a:b4:56:8b:c2: ff:05:3f:22:53:11:3d:be:a5:87:a5:d9:72:8f:e7: 71:d4:a4:d1:46:2e:6f:b7:3c:aa:67:f0:6d:38:e8: 58:b6:44:3c:00:7b:86:2e:f2:b6:86:d5:3f:db:0c: 10:e6:57:5c:72:28:49:ed:ed:2b:db:50:07:d6:ca: 19:ed:8e:e1:12:ab:c0:70:d8:73:21:4a:a6:3a:a3: f9:d3:70:01:14:87:18:d7:8e:18:89:a4:98:f7:7a: dc:d5:11:fa:a5:33:ea:1a:1e:0a:41:7e:bb:44:52: 33:1d:14:01:60:1f:8f:17:68:e4:5d:99:ba:fe:fa: 1c:3c:72:63:e7:fe:46:3f:da:59:83:55:28:96:00: d2:12:8e:8d:a6:bf:e5:a4:fb:70:65:63:a6:96:04: a0:e8:41:c7:9b:7d:3f:f0:bf:5f:e0:f1:04:a6:8e: 9d:ea:36:6c:a1:f1:73:06:a5:2b:63:ed:a8:01:bb: 68:13:ca:a5:38:3b:93:9c:89:16:eb:6b:ae:d0:84: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A0:48:C0:17:4E:A0:38:B7:C7:E8:F7:73:C6:9E:CB:AC:07:21:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d17d5ae8-be36-35af-ac50-557daa251272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6c:65:32:a2:05:4a:48:2c:eb:8f:e9:9e:29:21:ec:5e:c0: 57:cd:a9:94:1c:74:fd:16:b0:28:a6:35:c4:77:58:51:05:31: af:44:07:ba:b5:87:08:9d:2b:f9:8e:44:fc:90:da:2a:38:5a: 6f:2e:8d:13:8b:db:ea:06:d9:34:08:75:8c:37:aa:07:60:02: 4b:c8:d3:f7:1a:17:bb:89:ea:d8:3b:e6:ba:b9:4e:93:a2:f0: bc:29:17:12:75:8c:f2:81:af:4e:8f:2d:75:19:a4:91:a6:ff: 9d:64:9e:2d:ca:d5:b2:ec:9b:18:cf:62:d0:86:bf:8b:00:f3: 51:58:96:a2:b9:b8:ed:fe:3a:1e:53:3a:4e:04:59:c5:64:89: 5c:d5:95:31:d9:85:51:e9:11:35:0e:52:d5:ef:b6:4d:ef:d2: 2e:08:1c:ff:b1:ec:c7:77:4e:27:cf:33:6d:20:cb:3d:e5:9d: 33:83:93:1b:ac:cf:3b:f4:7c:d8:31:cb:3a:69:2c:29:56:83: 0b:c8:40:48:da:91:52:49:d5:08:38:2b:2e:af:44:43:8c:88: 9c:7a:65:85:5b:b7:d2:72:40:88:3d:36:76:a1:38:53:77:69: 8d:34:ea:a8:ff:22:9d:f7:27:a9:27:a6:09:4a:36:26:e9:69: 1b:69:48:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEsgdQgTmt6SJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTgyY2E3NWItZTA0NC00OWEwLTliZTUtNTU5NDUxZmZlOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjLlAkzqntSBUdjrzo8zxiyV1AC7GPR/xG9R yYMLBmhB3sfJvOjlgt5MC7G91fy3IWjoR1mpKrRWi8L/BT8iUxE9vqWHpdlyj+dx 1KTRRi5vtzyqZ/BtOOhYtkQ8AHuGLvK2htU/2wwQ5ldccihJ7e0r21AH1soZ7Y7h EqvAcNhzIUqmOqP503ABFIcY144YiaSY93rc1RH6pTPqGh4KQX67RFIzHRQBYB+P F2jkXZm6/vocPHJj5/5GP9pZg1UolgDSEo6Npr/lpPtwZWOmlgSg6EHHm30/8L9f 4PEEpo6d6jZsofFzBqUrY+2oAbtoE8qlODuTnIkW62uu0ITa2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMegSMAXTqA4t8fo93PGnsusByHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZDE3ZDVhZTgtYmUzNi0z NWFmLWFjNTAtNTU3ZGFhMjUxMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1sZTKiBUpILOuP6Z4pIexewFfNqZQcdP0WsCimNcR3WFEFMa9EB7q1 hwidK/mORPyQ2io4Wm8ujROL2+oG2TQIdYw3qgdgAkvI0/caF7uJ6tg75rq5TpOi 8LwpFxJ1jPKBr06PLXUZpJGm/51kni3K1bLsmxjPYtCGv4sA81FYlqK5uO3+Oh5T Ok4EWcVkiVzVlTHZhVHpETUOUtXvtk3v0i4IHP+x7Md3TifPM20gyz3lnTODkxus zzv0fNgxyzppLClWgwvIQEjakVJJ1Qg4Ky6vREOMiJx6ZYVbt9JyQIg9NnahOFN3 aY006qj/Ip33J6knpglKNibpaRtpSO4= -----END CERTIFICATE-----Generated at Tue Sep 29 13:36:48 2026 by rpki-client