$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3e3786ff-db27-3657-92d6-07f0d31a4b86.roa File: 3e3786ff-db27-3657-92d6-07f0d31a4b86.roa (raw, json) Hash identifier: qKcLGBBpvUBy+AzsSOyanOWoeJeOer2dKlMi3v6NLsE= Subject key identifier: CF:7F:05:CD:42:A3:96:2A:87:27:5F:E6:B4:70:80:5E:A1:95:78:F4 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D55BCB7578C11B779191E9880 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3e3786ff-db27-3657-92d6-07f0d31a4b86.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 14618 IP address blocks: 131.229.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b7:57:8c:11:b7:79:19:1e:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=9ac5a358-5229-40b7-aeb5-000cfa466589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ac:14:8d:f6:11:e3:da:2f:48:08:e1:d6:7a: 65:b9:4e:74:ca:e4:43:28:20:50:64:98:f6:d3:e5: 85:71:55:0a:a2:76:49:19:8f:7b:ea:37:6d:ee:dd: d4:9c:7f:9f:ca:7e:05:54:6f:4b:ba:7f:a8:27:f6: 8f:4a:1e:83:9c:43:c6:1e:c3:4a:9a:58:95:93:a5: 0f:80:59:53:fa:58:17:a9:00:2d:c4:b1:12:3a:7f: 7f:11:e1:6f:f8:aa:3d:d1:85:a8:31:51:77:a9:dd: 9f:a0:2b:c5:44:81:f4:6e:2a:c2:57:88:51:d2:be: 58:dc:bc:31:61:f7:d3:81:35:fa:1f:66:94:e1:4b: db:0b:44:ef:a3:51:67:0c:af:0e:e7:29:cf:28:78: 1b:f8:9b:3c:e9:e7:a8:3f:d2:94:03:75:dd:cd:12: 76:1b:2a:9e:43:da:55:dc:64:28:d9:f1:13:1a:ed: 57:d9:4f:1a:fb:24:f4:2e:35:d9:06:37:c7:73:6b: 63:59:39:58:5a:8f:12:d1:f5:8c:9a:7d:49:d2:a1: aa:fa:36:f4:a0:b3:2a:ac:7a:bd:8d:1a:1d:d2:98: c1:1c:7f:14:99:c6:5e:1e:55:51:5c:9b:50:d4:6f: e0:30:0d:0c:be:df:a9:88:62:21:24:22:d0:1d:5d: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7F:05:CD:42:A3:96:2A:87:27:5F:E6:B4:70:80:5E:A1:95:78:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3e3786ff-db27-3657-92d6-07f0d31a4b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7b:04:57:2b:ae:a2:a5:f4:af:7a:4a:7e:eb:da:ca:59:c4: 0a:45:b8:b7:b2:d8:cf:c8:9a:aa:b2:ec:a8:fe:f3:e5:2a:c4: 16:5f:8d:cd:25:b4:0c:eb:74:a7:44:99:1e:92:60:c0:a8:32: ea:9e:20:28:28:e8:68:0d:8e:46:88:5d:be:cb:73:ad:20:ef: 59:f5:f9:94:19:6f:88:a3:ff:23:f2:98:24:21:a9:d0:09:e0: 4a:c9:59:b7:f7:63:45:09:72:8c:c5:49:ff:88:00:66:7b:6c: 6d:08:e2:47:f1:b8:32:b6:ca:57:2c:de:6c:db:7d:50:23:6b: e0:a4:8d:67:d0:53:49:d4:49:72:19:1b:d1:e0:95:fa:dd:f6: 9d:15:e2:d6:46:a4:a8:d3:ba:5e:f2:c6:4a:f7:c5:f8:fa:84: 48:6f:20:30:77:78:4a:9f:85:d5:b5:4d:0b:5f:05:ad:b0:99: a4:3d:da:67:52:20:ce:78:e8:18:9b:07:f5:10:8e:b1:b6:ad: 40:af:ef:98:24:70:4d:41:9a:7e:2e:03:a8:7f:ab:2a:f6:31: 00:13:09:d1:41:ab:fd:c0:59:68:83:2e:5a:be:f8:dc:de:e3: b8:72:08:a3:a0:04:91:23:81:79:ee:92:c0:49:40:b8:7f:67: 22:9d:0c:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLdXjBG3eRkemIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OWFjNWEzNTgtNTIyOS00MGI3LWFlYjUtMDAwY2ZhNDY2NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6wUjfYR49ovSAjh1npluU50yuRDKCBQZJj2 0+WFcVUKonZJGY976jdt7t3UnH+fyn4FVG9Lun+oJ/aPSh6DnEPGHsNKmliVk6UP gFlT+lgXqQAtxLESOn9/EeFv+Ko90YWoMVF3qd2foCvFRIH0birCV4hR0r5Y3Lwx YffTgTX6H2aU4UvbC0Tvo1FnDK8O5ynPKHgb+Js86eeoP9KUA3XdzRJ2GyqeQ9pV 3GQo2fETGu1X2U8a+yT0LjXZBjfHc2tjWTlYWo8S0fWMmn1J0qGq+jb0oLMqrHq9 jRod0pjBHH8UmcZeHlVRXJtQ1G/gMA0Mvt+piGIhJCLQHV2D8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9/Bc1Co5Yqhydf5rRwgF6hlXj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvM2UzNzg2ZmYtZGIyNy0z NjU3LTkyZDYtMDdmMGQzMWE0Yjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+X9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB7BFcrrqKl9K96Sn7r2spZxApFuLey2M/Imqqy7Kj+8+UqxBZfjc0l tAzrdKdEmR6SYMCoMuqeICgo6GgNjkaIXb7Lc60g71n1+ZQZb4ij/yPymCQhqdAJ 4ErJWbf3Y0UJcozFSf+IAGZ7bG0I4kfxuDK2ylcs3mzbfVAja+CkjWfQU0nUSXIZ G9Hglfrd9p0V4tZGpKjTul7yxkr3xfj6hEhvIDB3eEqfhdW1TQtfBa2wmaQ92mdS IM546BibB/UQjrG2rUCv75gkcE1Bmn4uA6h/qyr2MQATCdFBq/3AWWiDLlq++Nze 47hyCKOgBJEjgXnuksBJQLh/ZyKdDI4= -----END CERTIFICATE-----Generated at Mon Apr 13 17:15:40 2026 by rpki-client