$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f1d1e2a6-bc2c-3404-a22f-ad5efe4b328c.roa File: f1d1e2a6-bc2c-3404-a22f-ad5efe4b328c.roa (raw, json) Hash identifier: N3blKjNOoGRCQMlaPd/NSG+NXkvpugZX0RhQLs9c2tU= Subject key identifier: 31:3F:57:FF:BF:F5:98:19:DA:9F:C2:89:34:14:E1:04:F3:F3:E6:6E Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D0D42488C16555518B6903218 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f1d1e2a6-bc2c-3404-a22f-ad5efe4b328c.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 203724 IP address blocks: 131.229.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:48:8c:16:55:55:18:b6:90:32:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=ba57187d-7748-497b-9d77-174d62f65b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:84:79:ef:22:b6:a6:05:0c:0c:9f:cc:f5: 9d:2d:02:69:ae:98:7a:be:a0:50:37:93:16:25:5a: 6e:97:39:6f:de:c2:97:6f:d1:7d:ab:7a:05:a5:38: 25:2d:b2:3a:7d:43:83:55:06:0d:11:54:d6:37:69: 56:7a:10:fc:60:13:43:22:3c:9f:58:1d:0d:ce:6c: 9a:69:77:95:9d:4f:66:d9:49:cc:e7:39:98:28:76: c7:0d:7d:8b:6f:67:60:2f:f7:e0:9e:3c:78:09:5d: a9:e7:ba:b1:de:50:9f:6a:00:04:7b:a6:b5:1a:ab: ba:c7:c4:04:27:5f:a7:61:4e:2e:0c:4b:fe:50:2e: 5b:7d:e0:3e:d0:e4:1f:93:16:67:cb:9d:49:ba:32: 9c:c8:f0:d4:06:97:5b:bd:07:be:b1:dc:31:95:58: ab:60:c0:c7:b1:8c:15:ba:00:da:69:39:d2:d0:01: 22:70:9c:4f:69:4c:2f:cd:d3:a3:48:9f:30:57:2b: e8:6b:46:3c:6a:ee:0e:5e:4c:4a:c6:fb:26:d7:d3: 44:63:d4:88:73:2e:7a:64:dd:f0:9e:50:ba:f5:7c: 7f:21:0b:b8:96:2a:23:4d:85:ac:8e:3e:01:2e:3e: 14:d3:74:da:d6:bb:fe:00:c3:48:de:e9:a1:bc:fd: bb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3F:57:FF:BF:F5:98:19:DA:9F:C2:89:34:14:E1:04:F3:F3:E6:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f1d1e2a6-bc2c-3404-a22f-ad5efe4b328c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:49:ab:5e:b1:e5:a6:58:e0:1e:62:4f:56:bc:ee:49:a8:0a: ed:37:c3:f2:1b:09:f9:1d:b3:e7:79:5c:3c:37:f6:7e:09:87: f2:62:e5:a6:af:57:b6:d9:d5:22:14:a5:f0:62:c2:e8:4e:1f: c6:90:05:ea:d6:eb:60:87:29:17:04:e2:8c:9c:ff:66:6b:57: 2b:ea:c6:d2:dc:8e:23:5d:1d:2a:42:9c:16:dc:18:14:f1:58: 50:62:24:4d:dc:ee:34:f9:f6:99:dd:5a:d4:69:f7:47:6a:e6: da:51:3c:2c:d6:c4:55:42:f4:e6:d9:9e:0d:b3:45:89:df:c7: de:44:4f:69:e3:87:38:d2:96:5f:7b:20:9d:27:3f:f3:0d:30: 36:0c:e8:cb:22:c1:de:ac:ea:80:6f:ea:95:3e:23:36:5b:95: 03:f7:30:65:d3:30:f6:62:30:fe:c6:ba:7a:c6:75:8d:c1:60: 3d:6c:56:d8:8e:e4:59:99:4a:59:8d:0c:31:a5:f5:65:1f:2b: 42:92:e9:e3:52:95:7c:c0:3b:1d:85:e6:ab:7d:99:cb:15:7d: 28:57:c2:62:36:d2:a4:f2:3f:3e:22:2e:94:c1:37:57:98:09: 7a:3c:45:d2:3e:f9:d4:aa:69:38:0c:a8:cc:1e:6a:69:71:81: 15:69:0e:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQkiMFlVVGLaQMhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk YmE1NzE4N2QtNzc0OC00OTdiLTlkNzctMTc0ZDYyZjY1YjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2OEee8itqYFDAyfzPWdLQJprph6vqBQN5MW JVpulzlv3sKXb9F9q3oFpTglLbI6fUODVQYNEVTWN2lWehD8YBNDIjyfWB0Nzmya aXeVnU9m2UnM5zmYKHbHDX2Lb2dgL/fgnjx4CV2p57qx3lCfagAEe6a1Gqu6x8QE J1+nYU4uDEv+UC5bfeA+0OQfkxZny51JujKcyPDUBpdbvQe+sdwxlVirYMDHsYwV ugDaaTnS0AEicJxPaUwvzdOjSJ8wVyvoa0Y8au4OXkxKxvsm19NEY9SIcy56ZN3w nlC69Xx/IQu4liojTYWsjj4BLj4U03Ta1rv+AMNI3umhvP27cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE/V/+/9ZgZ2p/CiTQU4QTz8+ZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZjFkMWUyYTYtYmMyYy0z NDA0LWEyMmYtYWQ1ZWZlNGIzMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRJq16x5aZY4B5iT1a87kmoCu03w/IbCfkds+d5XDw39n4Jh/Ji5aav V7bZ1SIUpfBiwuhOH8aQBerW62CHKRcE4oyc/2ZrVyvqxtLcjiNdHSpCnBbcGBTx WFBiJE3c7jT59pndWtRp90dq5tpRPCzWxFVC9ObZng2zRYnfx95ET2njhzjSll97 IJ0nP/MNMDYM6Msiwd6s6oBv6pU+IzZblQP3MGXTMPZiMP7GunrGdY3BYD1sVtiO 5FmZSlmNDDGl9WUfK0KS6eNSlXzAOx2F5qt9mcsVfShXwmI20qTyPz4iLpTBN1eY CXo8RdI++dSqaTgMqMweamlxgRVpDnY= -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:10 2026 by rpki-client