$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa File: 309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa (raw, json) Hash identifier: HODytrFUDs+Ybozw89gHAduf+FknVC0u4WGsW2BtfrY= Subject key identifier: 99:E9:1E:44:77:F4:10:84:78:DC:3F:53:F3:0C:8D:8E:EE:D8:B7:9B Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D6AAAAAE09F651A6E8035129C Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 203724 IP address blocks: 131.229.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:aa:e0:9f:65:1a:6e:80:35:12:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=bd41e829-1d6a-48d4-86ba-a763b2b2a3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:69:c6:73:37:40:6f:8b:1c:31:d3:61:10: e3:36:46:ba:9d:c7:e4:16:7e:41:73:be:38:02:0c: fe:28:1a:80:60:3b:4b:95:ea:b9:bb:43:e7:48:5d: b5:5a:5d:05:e9:fc:eb:ce:56:a6:78:8d:d4:63:a7: b7:15:ac:04:e6:0e:ca:50:a6:43:42:83:80:c5:79: 16:44:ad:f5:d8:78:76:6b:4b:b8:07:5c:cc:b7:73: bf:7d:33:f7:e8:1f:f8:92:50:66:e8:3b:92:37:f9: 07:d7:a5:9a:1b:89:0b:2c:fa:6b:fe:5e:65:09:13: e2:f4:f9:ed:56:91:5d:47:33:11:72:0d:b0:3e:88: 9b:c4:57:ef:a1:f7:e3:15:f3:52:ab:d6:75:32:d2: 35:63:1f:13:f0:2b:24:45:0c:12:11:c2:0c:30:01: f4:05:ed:ea:5c:66:9e:f9:28:6b:48:77:cd:65:68: 17:73:ee:f0:18:f7:7a:70:14:e3:f4:4a:77:69:b2: a8:fb:63:01:ad:f3:8e:f1:31:22:8f:56:b2:fa:8c: da:52:9a:91:b2:d9:c6:9e:ff:19:83:d3:c1:20:e5: 18:c4:13:3a:3f:e9:9f:7c:e9:bb:6d:40:26:56:4c: d2:d6:06:dc:ca:bf:a4:84:f7:06:0c:63:7b:ea:b7: 90:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E9:1E:44:77:F4:10:84:78:DC:3F:53:F3:0C:8D:8E:EE:D8:B7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:aa:05:43:61:74:ca:58:41:c8:51:31:7f:1d:66:c2:69:56: 27:d8:0d:38:35:28:39:af:5e:b6:1b:50:92:f5:63:8a:98:c7: 70:7a:ee:6f:18:43:5d:05:61:e4:9a:15:b3:8f:ed:33:68:c0: 1e:7c:48:b4:f6:63:b5:22:00:65:fe:49:3a:4b:d7:52:58:63: fe:47:92:a5:d0:55:c4:24:2d:f9:55:94:f8:d2:56:e6:7e:2a: ae:e9:a4:ae:9a:d3:83:80:3d:c4:2a:f1:e0:cc:aa:59:20:5c: fb:11:74:8b:59:fa:7a:57:14:53:ca:37:1d:4f:79:f3:e8:f8: 54:17:6d:52:ae:37:6a:07:21:50:78:cd:c6:98:e2:85:5f:58: 28:21:4d:60:ae:d7:84:f9:14:39:50:01:a1:9d:f9:a5:e3:ea: 67:fd:f0:cc:5c:50:f7:9f:f3:9b:0d:61:c1:ae:6b:c4:92:ef: 57:6f:e1:5c:ca:58:06:6f:71:0a:64:4e:6a:cf:5f:65:e3:6d: 01:0e:55:9c:1a:02:52:0b:8a:da:08:01:fc:c6:9d:85:1a:1f: 3e:28:35:77:d0:a8:ca:38:b9:a0:75:37:13:9e:fd:4b:6d:a0: da:a6:c7:80:09:aa:a6:de:db:63:4b:28:6a:2a:64:d6:a1:18: 50:20:c8:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqrgn2UaboA1EpwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YmQ0MWU4MjktMWQ2YS00OGQ0LTg2YmEtYTc2M2IyYjJhM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sJpxnM3QG+LHDHTYRDjNka6ncfkFn5Bc744 Agz+KBqAYDtLleq5u0PnSF21Wl0F6fzrzlameI3UY6e3FawE5g7KUKZDQoOAxXkW RK312Hh2a0u4B1zMt3O/fTP36B/4klBm6DuSN/kH16WaG4kLLPpr/l5lCRPi9Pnt VpFdRzMRcg2wPoibxFfvoffjFfNSq9Z1MtI1Yx8T8CskRQwSEcIMMAH0Be3qXGae +ShrSHfNZWgXc+7wGPd6cBTj9Ep3abKo+2MBrfOO8TEij1ay+ozaUpqRstnGnv8Z g9PBIOUYxBM6P+mffOm7bUAmVkzS1gbcyr+khPcGDGN76reQmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnpHkR39BCEeNw/U/MMjY7u2LebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzA5MDY3ZDYtMWE4OS0z NGRlLWExZDgtOGU5ZThmMjEzNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeqBUNhdMpYQchRMX8dZsJpVifYDTg1KDmvXrYbUJL1Y4qYx3B67m8Y Q10FYeSaFbOP7TNowB58SLT2Y7UiAGX+STpL11JYY/5HkqXQVcQkLflVlPjSVuZ+ Kq7ppK6a04OAPcQq8eDMqlkgXPsRdItZ+npXFFPKNx1PefPo+FQXbVKuN2oHIVB4 zcaY4oVfWCghTWCu14T5FDlQAaGd+aXj6mf98MxcUPef85sNYcGua8SS71dv4VzK WAZvcQpkTmrPX2XjbQEOVZwaAlILitoIAfzGnYUaHz4oNXfQqMo4uaB1NxOe/Utt oNqmx4AJqqbe22NLKGoqZNahGFAgyIw= -----END CERTIFICATE-----Generated at Mon Apr 13 18:23:09 2026 by rpki-client