$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/356c8f2a-ddf8-3359-a978-aa8ad00d9ae0.roa File: 356c8f2a-ddf8-3359-a978-aa8ad00d9ae0.roa (raw, json) Hash identifier: lUh0KOM7v3touPmR06I5e6Aj74e8i9POKxq+T9fuaMM= Subject key identifier: 1E:7F:AC:C3:AE:FF:5F:B9:CA:D7:E3:40:D2:B1:88:6F:83:89:DD:28 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584DDD20826E2B35B0AAF7933100 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/356c8f2a-ddf8-3359-a978-aa8ad00d9ae0.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 31898 IP address blocks: 131.229.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:82:6e:2b:35:b0:aa:f7:93:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=0a0382e8-f74e-4a9d-b0bb-146e8ff477a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:34:e2:6b:ed:39:f9:25:87:09:ae:26:2f: e7:b4:eb:be:d1:b2:ab:a7:2a:19:4b:61:b6:71:86: 27:32:dc:8f:d1:8f:f5:60:33:8d:ef:bf:09:1f:90: 13:2a:90:31:8d:2c:a4:72:19:f9:d5:dd:7f:8f:17: 53:8b:80:49:35:c7:0e:38:c0:eb:ca:ce:a9:2a:08: 4a:f2:88:cc:33:43:80:9b:50:d2:da:76:f5:e0:12: 09:2c:3e:33:91:97:ca:85:5f:61:58:f1:4a:d0:86: ef:43:04:47:07:d5:ef:d1:ff:e5:79:a6:a5:48:5f: 72:12:90:2d:01:b7:e0:2b:a4:f1:54:8b:73:2e:39: b6:00:53:e5:c6:7d:31:53:94:2e:a5:80:5d:35:b3: c4:7e:0f:02:05:a4:8d:dc:03:d1:ed:0d:bf:96:5a: 1f:80:4d:48:fd:d6:1b:ec:e0:b0:72:15:1a:c2:b1: 01:c5:3b:4e:1d:eb:ad:7e:ba:17:c1:b1:1a:c6:7c: d7:02:aa:6d:90:6f:86:88:97:f0:cd:62:08:5d:ca: 85:f7:39:15:38:ca:d8:ae:18:a8:5e:24:43:b9:32: 27:38:05:d3:f3:45:8b:41:cc:73:e1:e6:c1:2d:ab: 4a:42:9a:9f:cf:06:d5:e2:0b:f5:b6:4b:72:76:0e: a8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7F:AC:C3:AE:FF:5F:B9:CA:D7:E3:40:D2:B1:88:6F:83:89:DD:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/356c8f2a-ddf8-3359-a978-aa8ad00d9ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6e:c2:78:71:07:a0:56:2d:20:63:48:41:5c:8d:18:95:c8: ce:8d:1a:c1:b2:34:ef:da:25:d7:be:af:f1:06:ff:4b:76:91: e6:f2:b1:33:42:22:5e:61:66:1a:09:d7:d9:22:4c:61:98:ce: 68:2c:1a:1d:f7:95:d8:85:73:a2:f3:cb:23:f0:44:66:73:2d: 79:c2:13:4d:e3:cd:0e:39:96:49:54:fe:c5:3d:bb:69:21:d2: 64:fb:f9:7b:2b:57:ee:e3:76:5d:c0:7e:ad:ae:31:8a:ce:d6: 08:8c:54:64:c2:e9:db:59:fc:70:50:2d:56:c9:9d:dd:dd:20: 01:6e:59:79:37:18:05:6b:ce:1b:d6:14:c4:07:4b:c3:99:45: 2c:8a:84:59:c4:0e:8e:e0:31:f0:14:1c:d7:fd:f1:48:57:90: db:d3:72:fa:0a:80:a5:bf:ea:9d:6c:1a:b0:78:ad:55:46:6a: 0d:42:4f:6b:d0:51:26:68:14:57:28:a9:13:ea:4f:cb:f8:7c: 8d:d2:a6:cc:7e:05:b5:e7:e6:3a:17:e8:68:31:9e:c4:19:39: 62:b3:5f:fe:d4:98:ca:11:a6:9c:0c:f2:97:d4:de:6c:11:47: f1:0d:e0:d4:cc:c1:83:e2:b8:82:68:48:2b:d1:c1:1b:31:ad: 3b:22:b7:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIIJuKzWwqveTMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk MGEwMzgyZTgtZjc0ZS00YTlkLWIwYmItMTQ2ZThmZjQ3N2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkA04mvtOfklhwmuJi/ntOu+0bKrpyoZS2G2 cYYnMtyP0Y/1YDON778JH5ATKpAxjSykchn51d1/jxdTi4BJNccOOMDrys6pKghK 8ojMM0OAm1DS2nb14BIJLD4zkZfKhV9hWPFK0IbvQwRHB9Xv0f/leaalSF9yEpAt AbfgK6TxVItzLjm2AFPlxn0xU5QupYBdNbPEfg8CBaSN3APR7Q2/llofgE1I/dYb 7OCwchUawrEBxTtOHeutfroXwbEaxnzXAqptkG+GiJfwzWIIXcqF9zkVOMrYrhio XiRDuTInOAXT80WLQcxz4ebBLatKQpqfzwbV4gv1tktydg6o/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5/rMOu/1+5ytfjQNKxiG+Did0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzU2YzhmMmEtZGRmOC0z MzU5LWE5NzgtYWE4YWQwMGQ5YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5uwnhxB6BWLSBjSEFcjRiVyM6NGsGyNO/aJde+r/EG/0t2kebysTNC Il5hZhoJ19kiTGGYzmgsGh33ldiFc6LzyyPwRGZzLXnCE03jzQ45lklU/sU9u2kh 0mT7+XsrV+7jdl3Afq2uMYrO1giMVGTC6dtZ/HBQLVbJnd3dIAFuWXk3GAVrzhvW FMQHS8OZRSyKhFnEDo7gMfAUHNf98UhXkNvTcvoKgKW/6p1sGrB4rVVGag1CT2vQ USZoFFcoqRPqT8v4fI3Spsx+BbXn5joX6GgxnsQZOWKzX/7UmMoRppwM8pfU3mwR R/EN4NTMwYPiuIJoSCvRwRsxrTsit60= -----END CERTIFICATE-----Generated at Wed Jun 3 21:02:52 2026 by rpki-client