$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/22313cf5-ff39-3c48-950c-695a238acda7.roa File: 22313cf5-ff39-3c48-950c-695a238acda7.roa (raw, json) Hash identifier: HlNfcQU2jzkMbSTNNCOJZGpCVpas/JIqzs/DZxVWLPY= Subject key identifier: 52:AC:8E:BA:0F:0B:77:E5:2F:0E:CE:04:AF:04:D5:32:C0:66:24:BF Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D703FF8EC871FBC5009E59240 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/22313cf5-ff39-3c48-950c-695a238acda7.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 203724 IP address blocks: 131.229.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:f8:ec:87:1f:bc:50:09:e5:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=e84c14c2-5f0c-4dcc-a809-0e16dbe4e770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:7e:0e:80:7a:00:dd:0c:0f:cd:45:5d:bd: ba:69:60:4c:2c:c8:d4:67:66:e9:0d:1c:71:0f:06: e6:f7:4c:16:24:cd:1f:4f:9a:c2:87:91:0c:82:10: d7:ef:84:f0:10:09:f4:f5:81:c6:75:4c:09:90:ea: 52:02:f2:fb:c5:84:44:c8:d3:63:d0:2e:1a:a7:45: c9:5b:01:2a:77:19:9d:19:c8:42:40:49:38:1c:31: 40:45:0b:8a:e2:4a:ce:55:21:ab:cb:9a:b7:61:a1: fc:33:57:44:78:aa:5a:39:37:58:7d:dd:04:c2:06: 8c:e3:f7:1b:db:89:40:b7:00:d9:72:3c:65:13:fe: 39:54:a8:0d:44:16:84:aa:70:a6:90:53:5c:f4:8f: 54:cd:c5:99:6a:0b:40:0e:e5:76:46:57:86:79:bf: 92:8a:fd:74:08:37:e3:51:21:5d:6a:1d:e4:ee:f4: 28:75:28:64:c3:a0:bf:c2:37:6d:51:dc:e7:82:95: 81:98:9e:5c:2a:f2:f6:d0:1f:39:85:09:39:98:f4: b1:f0:9c:8b:ea:4c:8c:3a:a7:6f:ef:a1:60:9f:5a: 4c:70:ab:67:42:ea:40:15:de:32:0b:d5:e4:8d:a8: 85:48:b5:ab:ed:b4:da:d9:9a:bd:2d:23:d8:07:bc: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AC:8E:BA:0F:0B:77:E5:2F:0E:CE:04:AF:04:D5:32:C0:66:24:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/22313cf5-ff39-3c48-950c-695a238acda7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:53:98:ba:ab:c7:e3:7d:23:21:47:7e:c7:0f:6c:f8:33:69: fd:65:83:ec:ac:2e:b8:db:42:d4:47:a2:c5:b8:c9:45:91:90: 87:74:c9:30:b0:67:bd:64:ca:ca:82:88:0d:cd:88:4c:24:5b: 6c:16:43:86:ce:8f:66:88:a4:c7:41:e3:45:65:75:57:1d:a8: 1e:4e:7b:bf:83:8c:77:45:9d:3f:03:0e:df:22:23:cd:84:69: 4d:e6:15:b1:81:33:f4:96:79:21:25:1b:42:3d:c2:65:0d:b1: 64:63:3f:0f:16:5d:88:19:d2:b5:83:6d:c8:59:19:28:05:19: 7a:86:c7:2c:c5:41:aa:a3:80:20:e7:38:78:e0:40:ea:94:b8: 44:b3:1b:75:00:97:5c:75:bd:72:a6:3c:5f:a0:7b:81:cd:9c: 2e:85:36:d5:6f:29:42:e3:fa:25:6d:6b:39:be:cc:94:b2:94: b1:da:2f:7f:17:c3:db:08:ac:95:9f:76:9c:12:70:be:e7:31: 28:ce:4f:df:6a:5b:c0:ad:9c:5f:a4:b8:71:84:5a:28:15:b9: 4c:0f:f5:2a:e6:a4:a4:8b:2d:cd:6c:7d:97:fc:65:ab:2a:8f: 93:fc:a1:43:b1:6d:d6:a8:f6:70:37:97:7c:12:4f:1a:de:07: c4:50:47:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/jshx+8UAnlkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk ZTg0YzE0YzItNWYwYy00ZGNjLWE4MDktMGUxNmRiZTRlNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIJ+DoB6AN0MD81FXb26aWBMLMjUZ2bpDRxx Dwbm90wWJM0fT5rCh5EMghDX74TwEAn09YHGdUwJkOpSAvL7xYREyNNj0C4ap0XJ WwEqdxmdGchCQEk4HDFARQuK4krOVSGry5q3YaH8M1dEeKpaOTdYfd0EwgaM4/cb 24lAtwDZcjxlE/45VKgNRBaEqnCmkFNc9I9UzcWZagtADuV2RleGeb+Siv10CDfj USFdah3k7vQodShkw6C/wjdtUdzngpWBmJ5cKvL20B85hQk5mPSx8JyL6kyMOqdv 76Fgn1pMcKtnQupAFd4yC9XkjaiFSLWr7bTa2Zq9LSPYB7y60wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKsjroPC3flLw7OBK8E1TLAZiS/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMjIzMTNjZjUtZmYzOS0z YzQ4LTk1MGMtNjk1YTIzOGFjZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9TmLqrx+N9IyFHfscPbPgzaf1lg+ysLrjbQtRHosW4yUWRkId0yTCw Z71kysqCiA3NiEwkW2wWQ4bOj2aIpMdB40VldVcdqB5Oe7+DjHdFnT8DDt8iI82E aU3mFbGBM/SWeSElG0I9wmUNsWRjPw8WXYgZ0rWDbchZGSgFGXqGxyzFQaqjgCDn OHjgQOqUuESzG3UAl1x1vXKmPF+ge4HNnC6FNtVvKULj+iVtazm+zJSylLHaL38X w9sIrJWfdpwScL7nMSjOT99qW8CtnF+kuHGEWigVuUwP9SrmpKSLLc1sfZf8Zasq j5P8oUOxbdao9nA3l3wSTxreB8RQRx0= -----END CERTIFICATE-----Generated at Mon Apr 13 17:17:36 2026 by rpki-client