$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa File: 14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa (raw, json) Hash identifier: DNgAfgDq4mvuER8tGbhkUNx+9Z46mUcWVbvipLagdK0= Subject key identifier: B4:CC:D5:F4:78:E8:99:2E:CB:72:39:C2:B3:2A:E2:DC:EE:77:66:F6 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D703FDBAC80FCEC760A214F80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 203724 IP address blocks: 131.229.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:db:ac:80:fc:ec:76:0a:21:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=2c532d1c-a29d-44cf-88a2-b52e598d861a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:42:f0:0a:8f:1b:a0:10:0a:6e:7c:1a:23:ea: a7:39:9e:e9:3e:fb:51:e4:77:d4:55:df:e2:b0:fe: f5:17:61:96:c6:10:45:12:75:70:6a:ec:ab:5c:61: 81:35:94:43:0e:18:83:fa:2d:bb:6b:25:d6:72:22: f7:74:86:be:da:2c:56:31:95:36:68:d2:72:d7:3f: f3:15:96:0e:ea:05:45:9d:e1:85:e0:a0:d6:63:b9: 9a:8c:36:17:5a:02:26:69:2e:50:e2:4c:5a:2f:2c: 12:fe:f7:68:e4:6f:a2:fa:ae:bc:27:06:c0:18:70: 80:49:bf:a6:06:f4:65:2c:96:b2:0c:7d:ba:17:db: dc:9f:a7:66:1c:fe:bc:72:2d:82:28:80:06:99:c2: dc:c4:1c:2f:cc:5a:5d:d2:29:6b:7f:f8:2b:64:87: 93:3d:59:72:a8:f6:01:d6:0e:15:54:65:ab:f6:34: 14:ef:5b:a9:e8:cf:0c:48:ce:7c:b1:67:89:c3:85: 27:1b:1b:5f:0f:7f:43:17:d7:63:05:d7:3f:83:b1: e4:2f:ff:18:4c:33:5e:6b:0f:e2:26:91:c3:b4:87: c7:2a:2c:0e:1a:b4:43:84:d3:3c:77:ad:c0:21:78: ca:fa:bf:29:31:5f:52:82:83:22:6b:00:34:07:32: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CC:D5:F4:78:E8:99:2E:CB:72:39:C2:B3:2A:E2:DC:EE:77:66:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:dd:03:01:5b:71:e1:84:94:1e:28:81:8e:43:48:91:02:68: f1:6a:74:41:59:90:32:30:e2:60:72:e6:c2:6a:d4:69:c3:53: 79:50:47:24:e4:49:ba:69:e3:89:25:95:60:14:d3:c6:8c:b9: 09:60:62:1e:be:3d:1a:35:ea:30:c1:c1:28:4c:b1:22:1b:83: c6:2f:60:8c:ea:34:7c:7f:9f:0d:42:d6:96:dd:b4:b9:59:c6: e1:db:f8:b7:bb:8a:29:8e:ec:5b:dc:e2:26:17:ed:a1:3b:ba: aa:80:80:60:01:34:4a:55:72:67:59:7b:aa:01:d5:08:dd:d6: b9:23:1d:d8:63:23:0f:bc:bc:1a:88:3e:4b:20:4a:12:d2:28: 51:db:a8:79:65:a0:78:84:93:45:32:77:bc:84:fc:91:f7:2d: 24:c4:79:9a:d6:29:22:aa:8d:39:82:ad:20:8c:2a:da:0f:13: 03:0e:5c:39:a0:2f:fe:af:e5:e9:00:46:6b:bb:be:58:d8:07: 46:a8:e6:27:cb:6f:aa:7d:d9:b7:e3:e5:59:71:2a:ba:7c:53: 42:95:f3:8f:e1:92:0f:ae:e4:be:89:a8:43:ea:bb:de:05:ec: fa:6c:3b:a8:62:a0:95:b5:91:14:45:62:f5:d7:da:86:a2:7e: 46:d5:9c:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9usgPzsdgohT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk MmM1MzJkMWMtYTI5ZC00NGNmLTg4YTItYjUyZTU5OGQ4NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkULwCo8boBAKbnwaI+qnOZ7pPvtR5HfUVd/i sP71F2GWxhBFEnVwauyrXGGBNZRDDhiD+i27ayXWciL3dIa+2ixWMZU2aNJy1z/z FZYO6gVFneGF4KDWY7majDYXWgImaS5Q4kxaLywS/vdo5G+i+q68JwbAGHCASb+m BvRlLJayDH26F9vcn6dmHP68ci2CKIAGmcLcxBwvzFpd0ilrf/grZIeTPVlyqPYB 1g4VVGWr9jQU71up6M8MSM58sWeJw4UnGxtfD39DF9djBdc/g7HkL/8YTDNeaw/i JpHDtIfHKiwOGrRDhNM8d63AIXjK+r8pMV9SgoMiawA0BzJ8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTM1fR46Jkuy3I5wrMq4tzud2b2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMTQwMzRkNWYtMzhjNC0z YjA4LWE2YTUtZjI2MGU2OTQ5YWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXdAwFbceGElB4ogY5DSJECaPFqdEFZkDIw4mBy5sJq1GnDU3lQRyTk Sbpp44kllWAU08aMuQlgYh6+PRo16jDBwShMsSIbg8YvYIzqNHx/nw1C1pbdtLlZ xuHb+Le7iimO7Fvc4iYX7aE7uqqAgGABNEpVcmdZe6oB1Qjd1rkjHdhjIw+8vBqI PksgShLSKFHbqHlloHiEk0Uyd7yE/JH3LSTEeZrWKSKqjTmCrSCMKtoPEwMOXDmg L/6v5ekARmu7vljYB0ao5ifLb6p92bfj5VlxKrp8U0KV84/hkg+u5L6JqEPqu94F 7PpsO6hioJW1kRRFYvXX2oaifkbVnOw= -----END CERTIFICATE-----Generated at Mon Apr 13 19:37:47 2026 by rpki-client