$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5acb62ac-7759-34f6-86e0-892a5a9fa2b5.roa File: 5acb62ac-7759-34f6-86e0-892a5a9fa2b5.roa (raw, json) Hash identifier: ZWmTNvcAn8mU5x+QqtTeVJTmZEaWMVlm3iWTh21UUCc= Subject key identifier: 49:38:F8:DF:B0:7A:AD:16:7D:EF:5F:EA:FA:6A:22:2A:B9:70:B4:A6 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D55BA32D1DF86C1C2670DC800 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5acb62ac-7759-34f6-86e0-892a5a9fa2b5.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 16509 IP address blocks: 131.229.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:32:d1:df:86:c1:c2:67:0d:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3bc7d191-c9dc-43cb-ae0c-47d69d36d333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:01:1b:1a:b3:e5:ac:0c:60:86:af:52:ea:ea: 9c:e3:f8:d1:ac:7b:dd:29:ba:06:ee:d0:3a:e7:6a: 50:e7:44:38:de:cb:d1:5a:c5:2f:87:92:fb:24:35: d1:ed:aa:a5:71:7e:c6:1c:90:ab:6b:72:04:64:8b: d5:80:ae:99:70:47:92:f0:74:2a:3f:e2:82:31:c3: bf:6b:88:8d:71:4c:c4:26:35:c4:54:cd:46:3d:c9: d7:39:42:a6:bb:b5:0d:75:ff:82:23:8d:0b:f1:c7: bf:97:1d:42:5b:1f:26:6c:85:2a:9d:ea:21:1b:9f: 36:6f:64:fa:8d:87:c9:0c:1a:09:50:35:19:f7:f3: 4f:55:89:a8:f2:d6:4a:60:bd:f8:cd:59:bd:04:b4: 66:88:94:d0:14:47:25:b3:5f:d7:9f:0a:78:58:51: 79:d3:99:a4:1b:16:1d:d1:49:80:60:2d:e2:37:09: d0:21:0e:ba:9a:99:91:48:09:cb:8e:9e:28:77:7c: 48:6d:03:ce:62:da:32:84:f7:d3:94:e1:33:72:87: c1:84:17:3e:14:1a:1f:f0:f0:50:34:c6:d8:ab:80: c0:d1:91:d3:81:c3:0a:4b:50:ba:78:a6:90:4c:a2: 45:45:5d:8b:84:b3:4f:f7:5e:d3:1d:59:c8:94:a8: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:38:F8:DF:B0:7A:AD:16:7D:EF:5F:EA:FA:6A:22:2A:B9:70:B4:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5acb62ac-7759-34f6-86e0-892a5a9fa2b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:07:8d:61:90:ea:1f:40:a1:59:5a:d7:11:69:66:18:c3:4f: 22:b9:16:98:22:65:6b:08:c8:4f:08:f4:aa:e0:71:f3:ad:df: 8c:aa:49:df:bc:8f:8e:d1:35:c9:74:e4:96:33:f4:4c:4a:5f: 9d:42:78:d1:d5:72:cd:ee:f7:c7:61:b7:62:d0:34:23:a8:6b: a2:48:83:f1:0e:61:e0:d5:45:e0:33:20:bb:26:26:3b:ea:7f: b8:dc:10:e3:cc:83:bd:88:55:1e:e3:5d:02:6a:c1:35:28:11: 5b:a4:51:ce:1d:fc:19:50:5e:51:bf:fc:dc:ff:cf:d4:b3:d0: dd:4b:6f:ec:24:ff:e3:49:78:20:dd:bb:fc:18:ba:ab:d3:62: 5e:37:9d:2b:c3:1f:b8:e9:c9:2b:2e:e1:20:fb:ed:f0:30:c2: 8c:92:da:15:f1:06:ed:cb:51:9d:82:b3:b9:35:c6:31:bb:e2: 61:fb:b3:a8:59:67:bf:3b:20:c7:06:29:0d:e8:3e:e0:9c:22: 88:c2:bf:ff:4c:d6:94:50:45:09:d7:51:87:c1:88:14:b3:e2: 76:41:e5:8c:b0:28:85:54:7f:ef:d5:f9:98:a8:87:ed:9f:0a: 11:9f:38:a7:26:0c:b2:c1:56:bb:c9:e4:03:ba:0f:3e:98:bc: 48:42:b7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujLR34bBwmcNyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk M2JjN2QxOTEtYzlkYy00M2NiLWFlMGMtNDdkNjlkMzZkMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQEbGrPlrAxghq9S6uqc4/jRrHvdKboG7tA6 52pQ50Q43svRWsUvh5L7JDXR7aqlcX7GHJCra3IEZIvVgK6ZcEeS8HQqP+KCMcO/ a4iNcUzEJjXEVM1GPcnXOUKmu7UNdf+CI40L8ce/lx1CWx8mbIUqneohG582b2T6 jYfJDBoJUDUZ9/NPVYmo8tZKYL34zVm9BLRmiJTQFEcls1/Xnwp4WFF505mkGxYd 0UmAYC3iNwnQIQ66mpmRSAnLjp4od3xIbQPOYtoyhPfTlOEzcofBhBc+FBof8PBQ NMbYq4DA0ZHTgcMKS1C6eKaQTKJFRV2LhLNP917THVnIlKhjtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk4+N+weq0Wfe9f6vpqIiq5cLSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNWFjYjYyYWMtNzc1OS0z NGY2LTg2ZTAtODkyYTVhOWZhMmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0HjWGQ6h9AoVla1xFpZhjDTyK5FpgiZWsIyE8I9KrgcfOt34yqSd+8 j47RNcl05JYz9ExKX51CeNHVcs3u98dht2LQNCOoa6JIg/EOYeDVReAzILsmJjvq f7jcEOPMg72IVR7jXQJqwTUoEVukUc4d/BlQXlG//Nz/z9Sz0N1Lb+wk/+NJeCDd u/wYuqvTYl43nSvDH7jpySsu4SD77fAwwoyS2hXxBu3LUZ2Cs7k1xjG74mH7s6hZ Z787IMcGKQ3oPuCcIojCv/9M1pRQRQnXUYfBiBSz4nZB5YywKIVUf+/V+Zioh+2f ChGfOKcmDLLBVrvJ5AO6Dz6YvEhCt+k= -----END CERTIFICATE-----Generated at Mon Apr 13 17:15:41 2026 by rpki-client