$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/52d47736-96b4-336a-8064-d064e05e3001.roa File: 52d47736-96b4-336a-8064-d064e05e3001.roa (raw, json) Hash identifier: Wg+LbPrzdxhrplgPKnxTEMdJOxDX3vHxOQ8MoDldSrQ= Subject key identifier: C2:64:03:1C:48:B7:99:54:30:24:A0:21:2C:87:17:E3:AF:39:4A:57 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584EC4D7157E1E089D9077F5BEC0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/52d47736-96b4-336a-8064-d064e05e3001.roa Signing time: Sat 08 Aug 2026 13:00:11 +0000 ROA not before: Sat 08 Aug 2026 13:00:11 +0000 ROA not after: Fri 06 Nov 2026 14:00:11 +0000 asID: 16509 IP address blocks: 131.229.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c4:d7:15:7e:1e:08:9d:90:77:f5:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 8 13:00:11 2026 GMT Not After : Nov 6 14:00:11 2026 GMT Subject: CN=1b632f95-fdc3-4320-a8b5-7ac25cbadb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:b2:cf:c4:c4:a7:9a:61:19:bd:ae:f2:06: fe:9a:6c:71:8d:09:44:ae:e6:1f:ca:6c:86:dc:cb: 86:20:4a:ba:dc:7f:bc:54:6e:48:ac:86:5f:77:b3: 45:d0:64:ef:2f:70:37:09:94:ec:ca:42:2b:58:e5: 5e:b9:fd:33:ea:81:ce:7a:67:60:cd:e6:02:fd:05: aa:7e:f2:fd:f7:52:56:25:b8:7d:96:78:f5:6c:2d: 9f:82:fd:71:e7:65:73:e2:7b:28:f7:53:3e:25:7d: 3a:53:b0:4f:aa:d3:61:a7:ec:e5:7b:8a:4e:17:64: 1f:f8:3b:39:9f:cb:2a:e8:a7:3b:b7:eb:72:1b:a0: f6:82:36:c4:18:55:8f:ac:d8:f2:87:45:df:2c:33: bc:0a:5d:01:73:ae:d6:0a:6c:1c:41:13:90:06:c0: 57:a3:c7:da:fe:bc:a7:2c:6b:eb:1a:df:5d:77:79: 16:b1:ba:b6:a6:9a:73:8e:77:9c:20:ef:0b:cf:f6: 0e:5e:8f:1f:be:5c:82:d0:ad:86:8b:e2:66:2d:b7: 1c:ea:56:87:a5:55:84:c8:d8:46:56:52:cb:02:0d: ff:9b:d0:c0:5b:79:c2:84:b5:ee:15:c5:2a:61:bf: 84:d7:32:7b:96:aa:6d:8b:8b:42:73:8b:57:d7:d9: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:64:03:1C:48:B7:99:54:30:24:A0:21:2C:87:17:E3:AF:39:4A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/52d47736-96b4-336a-8064-d064e05e3001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:90:a0:52:0a:66:97:b0:f4:99:6a:3e:bb:74:83:d9:1b:52: e3:93:92:c4:77:b9:52:9c:58:a3:ed:44:e3:9d:2a:ad:bb:86: 32:e1:1d:7f:7a:8d:87:01:0c:a1:08:36:3b:86:4c:dd:12:47: 36:0e:09:ed:ef:f3:78:d0:2d:7e:93:40:c7:41:eb:14:1a:67: 3e:f0:eb:3f:a8:61:07:df:a3:42:aa:b6:38:76:7b:47:8d:46: 2f:46:42:2f:41:b8:d1:08:1c:e1:29:0a:d3:27:17:28:89:d8: db:f6:e8:46:f5:e6:e0:11:d5:5d:48:0f:57:1b:35:80:76:be: 7d:77:9a:06:09:33:9d:f1:24:6a:98:30:83:35:ee:70:ca:b3: be:36:ad:10:bf:08:f9:38:f3:03:3f:b8:b1:d7:fa:cb:37:4d: b8:de:8e:e8:62:f4:6b:30:68:1a:b4:de:a1:30:83:5c:cd:cf: ee:14:a7:54:5d:5e:53:ea:8e:c5:31:c2:e6:19:71:d8:68:61: 06:19:49:21:b7:07:17:ea:ec:90:d4:17:e0:ee:03:19:1b:51: 44:18:32:9d:41:00:01:5d:1d:f1:07:2b:39:d6:88:bb:f8:cc: 5f:ad:9c:b6:04:22:22:ed:2b:fc:da:ac:c7:60:00:9b:7b:a7: 40:4a:70:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7E1xV+HgidkHf1vsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk MWI2MzJmOTUtZmRjMy00MzIwLWE4YjUtN2FjMjVjYmFkYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfmyz8TEp5phGb2u8gb+mmxxjQlEruYfymyG 3MuGIEq63H+8VG5IrIZfd7NF0GTvL3A3CZTsykIrWOVeuf0z6oHOemdgzeYC/QWq fvL991JWJbh9lnj1bC2fgv1x52Vz4nso91M+JX06U7BPqtNhp+zle4pOF2Qf+Ds5 n8sq6Kc7t+tyG6D2gjbEGFWPrNjyh0XfLDO8Cl0Bc67WCmwcQROQBsBXo8fa/ryn LGvrGt9dd3kWsbq2pppzjnecIO8Lz/YOXo8fvlyC0K2Gi+JmLbcc6laHpVWEyNhG VlLLAg3/m9DAW3nChLXuFcUqYb+E1zJ7lqpti4tCc4tX19kLvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJkAxxIt5lUMCSgISyHF+OvOUpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNTJkNDc3MzYtOTZiNC0z MzZhLTgwNjQtZDA2NGUwNWUzMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuQoFIKZpew9JlqPrt0g9kbUuOTksR3uVKcWKPtROOdKq27hjLhHX96 jYcBDKEINjuGTN0SRzYOCe3v83jQLX6TQMdB6xQaZz7w6z+oYQffo0Kqtjh2e0eN Ri9GQi9BuNEIHOEpCtMnFyiJ2Nv26Eb15uAR1V1ID1cbNYB2vn13mgYJM53xJGqY MIM17nDKs742rRC/CPk48wM/uLHX+ss3Tbjejuhi9GswaBq03qEwg1zNz+4Up1Rd XlPqjsUxwuYZcdhoYQYZSSG3Bxfq7JDUF+DuAxkbUUQYMp1BAAFdHfEHKznWiLv4 zF+tnLYEIiLtK/zarMdgAJt7p0BKcGE= -----END CERTIFICATE-----Generated at Sat Sep 19 02:18:29 2026 by rpki-client