$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/0caed4e8-f782-3ee5-8a69-1c07dd5aa104.roa File: 0caed4e8-f782-3ee5-8a69-1c07dd5aa104.roa (raw, json) Hash identifier: JWAoS4g9t5nF1Hw4Rsf0wc8HvGWW6JsJ5z7Jhx8Jnjc= Subject key identifier: 52:3D:65:1E:CA:AE:9D:83:F4:AB:0A:51:7D:A0:B9:FC:C4:50:EC:17 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D71A526C5ACB4F1B8398C6280 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/0caed4e8-f782-3ee5-8a69-1c07dd5aa104.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 203724 IP address blocks: 131.229.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:26:c5:ac:b4:f1:b8:39:8c:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=4ced52cd-6853-4087-ac57-f0d68c9c2849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:34:f2:60:58:d8:a9:db:f4:0a:66:26:3e: a4:a0:21:95:31:1d:76:cf:ea:e5:ed:cb:5c:eb:f3: da:6a:f7:6f:7f:c3:5f:ec:09:f4:18:3d:72:c9:65: e6:3b:ad:cd:a7:1e:75:3e:2b:72:ab:2b:1e:47:b0: ee:48:69:e5:10:32:6c:ca:50:14:c4:3c:d4:c4:cc: 08:2b:05:ff:40:8c:a2:41:01:1c:68:1c:79:b9:04: 81:88:af:8c:4f:60:a1:b6:5d:d1:ce:62:46:54:be: be:6f:f7:38:dc:26:f2:60:21:09:d8:5c:78:67:55: 53:3d:c8:09:e1:a0:fc:c9:ea:29:e5:ae:61:af:0a: 6e:8c:43:e4:80:b7:4f:9e:7a:eb:bc:6a:8b:75:eb: d5:d7:d5:1b:86:4a:71:79:eb:a7:dd:b0:62:db:a3: dd:d8:d2:be:d9:47:2d:d0:76:c7:b4:7d:2a:8d:65: d3:84:7d:f8:1f:16:76:9c:e5:49:76:6d:ce:2a:6f: d1:11:29:09:7a:d8:38:c0:eb:ad:5a:9e:d7:55:c4: 28:26:27:9f:15:58:37:5a:56:66:f7:50:75:46:cb: 64:4f:86:e5:6f:28:91:e5:b2:bf:08:eb:6d:b2:7b: fa:52:aa:7c:68:74:f8:0c:a6:a5:c2:69:22:ac:5c: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3D:65:1E:CA:AE:9D:83:F4:AB:0A:51:7D:A0:B9:FC:C4:50:EC:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/0caed4e8-f782-3ee5-8a69-1c07dd5aa104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7e:5b:32:31:08:90:47:84:15:72:04:30:f9:f9:70:c5:b9: b1:56:a2:80:31:ea:c5:e4:08:58:a5:de:77:39:0e:6b:8d:af: 35:cd:3e:59:e0:31:4e:15:e6:a3:fe:c4:06:60:c8:7e:a0:ce: 5f:17:50:e6:11:f6:4d:e4:61:84:1e:cb:26:99:c6:3c:24:c4: f1:cf:3a:7d:92:61:7c:77:ab:cc:a4:42:ba:75:a9:00:28:0e: 78:89:c6:5e:cb:cf:6e:16:0d:42:f1:b4:2d:a5:7c:ab:32:ac: 53:c3:c5:81:e8:c3:2a:fc:80:e5:1b:ac:d4:7a:6b:21:c2:e2: ce:58:8c:fb:be:d8:06:05:23:14:82:19:cb:b3:39:83:88:ee: 73:c4:e6:d4:4e:50:f9:4e:25:8c:52:40:00:12:30:66:9e:87: 7a:d9:82:af:56:19:ff:64:f2:e3:50:3e:1a:fa:a9:55:74:9f: 3d:c3:04:43:5a:4e:de:fe:44:ce:e4:a5:77:c5:53:f5:50:86: 94:b9:f1:5d:90:37:9b:99:33:d6:71:36:15:52:bc:31:8f:40: d8:45:0a:bf:dd:87:a6:b3:01:f1:46:38:fb:1c:aa:ef:58:a9: f0:3c:ab:cd:0c:c8:0b:72:3f:13:be:50:56:1f:41:2e:25:fa: 00:b7:5f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSbFrLTxuDmMYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NGNlZDUyY2QtNjg1My00MDg3LWFjNTctZjBkNjhjOWMyODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl408mBY2Knb9ApmJj6koCGVMR12z+rl7ctc 6/Paavdvf8Nf7An0GD1yyWXmO63Npx51PityqyseR7DuSGnlEDJsylAUxDzUxMwI KwX/QIyiQQEcaBx5uQSBiK+MT2Chtl3RzmJGVL6+b/c43CbyYCEJ2Fx4Z1VTPcgJ 4aD8yeop5a5hrwpujEPkgLdPnnrrvGqLdevV19Ubhkpxeeun3bBi26Pd2NK+2Uct 0HbHtH0qjWXThH34HxZ2nOVJdm3OKm/RESkJetg4wOutWp7XVcQoJiefFVg3WlZm 91B1RstkT4blbyiR5bK/COttsnv6Uqp8aHT4DKalwmkirFzwzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFI9ZR7Krp2D9KsKUX2gufzEUOwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMGNhZWQ0ZTgtZjc4Mi0z ZWU1LThhNjktMWMwN2RkNWFhMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9+WzIxCJBHhBVyBDD5+XDFubFWooAx6sXkCFil3nc5DmuNrzXNPlng MU4V5qP+xAZgyH6gzl8XUOYR9k3kYYQeyyaZxjwkxPHPOn2SYXx3q8ykQrp1qQAo DniJxl7Lz24WDULxtC2lfKsyrFPDxYHowyr8gOUbrNR6ayHC4s5YjPu+2AYFIxSC GcuzOYOI7nPE5tROUPlOJYxSQAASMGaeh3rZgq9WGf9k8uNQPhr6qVV0nz3DBENa Tt7+RM7kpXfFU/VQhpS58V2QN5uZM9ZxNhVSvDGPQNhFCr/dh6azAfFGOPscqu9Y qfA8q80MyAtyPxO+UFYfQS4l+gC3X/Y= -----END CERTIFICATE-----Generated at Mon Apr 13 19:33:58 2026 by rpki-client