$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03f1f857-17d7-3f6e-9085-215da844fc94.roa File: 03f1f857-17d7-3f6e-9085-215da844fc94.roa (raw, json) Hash identifier: WcU0ogH38txg1EZidDm4UyVlYM3+gBicdF1T58QrG2U= Subject key identifier: 9E:93:A6:B9:7F:2D:54:0A:6C:FF:40:BF:F1:4D:90:5B:8B:2D:2A:AD Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584EED51F89BEC19CE0FF87EC940 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03f1f857-17d7-3f6e-9085-215da844fc94.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 203724 IP address blocks: 131.229.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:f8:9b:ec:19:ce:0f:f8:7e:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=02915f69-4582-4ed5-8e4c-a7dc2675a8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:8d:d6:c8:61:a7:ac:76:ca:d1:c1:df:bd: cc:e8:db:41:14:07:fe:01:56:0a:7c:91:ad:3c:f1: 5f:9a:d6:93:6c:89:fc:f9:8c:a2:58:0c:df:20:fa: da:e2:02:c9:be:3d:3d:4b:20:6b:7d:10:76:6c:e0: a1:f1:d5:f5:05:98:38:eb:dc:83:7d:29:44:5b:32: 91:e6:6e:af:1b:07:56:ed:be:13:2e:34:52:a6:03: fb:ab:eb:a5:2e:a2:e2:5a:77:db:fb:ba:29:6f:91: f4:33:68:1b:f2:ab:9b:f1:8e:06:d9:72:79:3e:3e: 2c:43:2d:8b:84:a3:f0:73:0f:61:b2:ec:0f:0d:2c: 54:35:9d:8e:ed:0f:70:8e:b8:b8:dd:e5:2b:d6:31: b2:6c:1e:89:d4:c9:31:45:2c:2b:68:1c:df:ae:10: d8:f5:91:24:04:2a:4b:1f:10:5d:d7:91:a2:21:52: 0f:11:66:9a:80:4c:5a:3b:e5:17:65:43:96:ff:79: 94:9a:47:e4:a7:1a:59:8e:1c:aa:72:c1:9f:02:eb: 92:6f:e2:cd:c1:d7:2b:41:96:69:11:39:99:94:b3: c1:a1:35:06:b6:e8:e5:c6:19:ee:5a:11:53:88:77: 9f:00:de:da:5f:3c:e1:33:8a:d0:32:68:d8:76:91: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:A6:B9:7F:2D:54:0A:6C:FF:40:BF:F1:4D:90:5B:8B:2D:2A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03f1f857-17d7-3f6e-9085-215da844fc94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6d:c3:4c:b8:7e:31:da:f9:65:24:2e:19:03:b8:d3:82:45: a1:23:77:d3:ad:41:08:54:9a:06:af:9f:89:b9:19:31:3b:c3: 67:2e:c9:56:0e:4b:c0:6f:36:7b:d9:b9:7f:f7:71:20:9b:60: 31:1a:89:e5:27:cc:a8:7c:d3:6d:13:b3:fa:36:a7:2e:2e:c9: be:15:c3:a9:4f:99:85:30:a5:9c:c0:24:18:0e:68:32:b3:85: 6e:b4:35:4f:b0:48:94:98:8d:bb:5d:d8:81:2c:c6:98:12:51: 53:de:3a:04:ef:29:62:d2:73:e8:1e:a6:19:2f:37:6b:ba:84: 4b:54:df:7c:43:89:b9:4e:7c:04:8e:c6:fc:9b:6a:fa:47:0c: 26:53:74:ea:63:d7:34:e1:b7:96:35:39:00:82:8c:49:72:d3: 4b:43:01:96:2b:ed:97:06:23:5a:2d:99:34:ba:58:19:49:cb: 17:4d:1a:b8:ec:f2:20:98:c3:d4:42:ff:79:56:b0:31:f8:33: e4:54:02:1a:8e:05:09:00:c7:08:90:0d:48:f5:ec:c3:85:06: 7f:3f:e0:cf:4c:9b:f7:5d:b9:88:14:8e:62:9c:25:9f:e2:d8: 7f:a6:2f:86:ff:90:66:11:ad:fe:ef:43:cf:e7:76:92:ad:77: df:9d:14:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfib7BnOD/h+yUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MDI5MTVmNjktNDU4Mi00ZWQ1LThlNGMtYTdkYzI2NzVhOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptKN1shhp6x2ytHB373M6NtBFAf+AVYKfJGt PPFfmtaTbIn8+YyiWAzfIPra4gLJvj09SyBrfRB2bOCh8dX1BZg469yDfSlEWzKR 5m6vGwdW7b4TLjRSpgP7q+ulLqLiWnfb+7opb5H0M2gb8qub8Y4G2XJ5Pj4sQy2L hKPwcw9hsuwPDSxUNZ2O7Q9wjri43eUr1jGybB6J1MkxRSwraBzfrhDY9ZEkBCpL HxBd15GiIVIPEWaagExaO+UXZUOW/3mUmkfkpxpZjhyqcsGfAuuSb+LNwdcrQZZp ETmZlLPBoTUGtujlxhnuWhFTiHefAN7aXzzhM4rQMmjYdpG8jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6Tprl/LVQKbP9Av/FNkFuLLSqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMDNmMWY4NTctMTdkNy0z ZjZlLTkwODUtMjE1ZGE4NDRmYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNtw0y4fjHa+WUkLhkDuNOCRaEjd9OtQQhUmgavn4m5GTE7w2cuyVYO S8BvNnvZuX/3cSCbYDEaieUnzKh8020Ts/o2py4uyb4Vw6lPmYUwpZzAJBgOaDKz hW60NU+wSJSYjbtd2IEsxpgSUVPeOgTvKWLSc+gephkvN2u6hEtU33xDiblOfASO xvybavpHDCZTdOpj1zTht5Y1OQCCjEly00tDAZYr7ZcGI1otmTS6WBlJyxdNGrjs 8iCYw9RC/3lWsDH4M+RUAhqOBQkAxwiQDUj17MOFBn8/4M9Mm/dduYgUjmKcJZ/i 2H+mL4b/kGYRrf7vQ8/ndpKtd9+dFPk= -----END CERTIFICATE-----Generated at Sat Sep 19 02:17:56 2026 by rpki-client