$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/785140a7-bbb7-374c-ba3f-70ccac456248.roa File: 785140a7-bbb7-374c-ba3f-70ccac456248.roa (raw, json) Hash identifier: gTYLSliiF7lXktpLU/CdlspF5SdKtB6MjPc9lbjpnlQ= Subject key identifier: E2:F0:BC:44:B4:D9:D4:05:67:D4:E3:16:28:2E:1B:C4:60:C1:D6:92 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584EA794554D82F5B75333F601C0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/785140a7-bbb7-374c-ba3f-70ccac456248.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 31898 IP address blocks: 131.229.128.0/24 maxlen: 24 131.229.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:55:4d:82:f5:b7:53:33:f6:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=eab5ac49-2e2a-4a09-b9e7-c0cf38622fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7a:06:ad:49:6d:97:8c:01:b8:ec:85:4a:0f: c2:c7:64:9e:03:4e:d1:b0:65:d3:9a:b1:fc:1d:ba: e1:4c:cc:3f:34:e7:5b:7a:60:1a:28:f0:60:43:eb: e1:27:db:9b:f4:5a:98:29:9b:ae:17:ee:36:de:e2: 28:2d:1a:49:19:07:87:7b:4f:81:02:17:bd:bb:37: a3:53:1d:24:24:dd:49:31:92:49:d6:1a:8b:93:c9: 94:e2:b9:ae:c7:c2:3a:de:95:27:72:5c:db:b1:94: 3f:0c:f5:76:9b:0e:b0:d7:34:47:68:ad:50:00:25: 02:18:85:5d:10:d0:40:52:9d:bb:15:84:1b:9b:37: 1a:51:c9:4f:5c:a1:6f:7b:84:fc:83:de:86:cc:24: 06:60:9f:6e:75:b5:48:c6:69:02:a5:cd:95:64:e3: ed:6f:7a:83:d3:fd:40:cd:79:57:8d:f3:3a:60:8d: 12:bc:82:a9:59:9b:e5:37:00:95:75:3d:3c:8d:6f: 31:4d:51:11:7d:0b:b7:bc:67:25:60:ba:61:90:8f: 34:db:b5:66:31:91:4e:5b:58:47:ba:22:1c:67:a0: 92:e8:0d:44:9b:cc:50:66:1c:68:a9:51:c9:47:4f: 20:bf:cb:01:d0:5d:da:e4:1a:94:6b:71:3d:f6:33: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F0:BC:44:B4:D9:D4:05:67:D4:E3:16:28:2E:1B:C4:60:C1:D6:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/785140a7-bbb7-374c-ba3f-70ccac456248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.128.0/24 131.229.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d8:36:28:b4:51:27:7a:78:4e:27:85:51:ed:2f:cb:3c:46: c5:40:33:37:0b:eb:8a:4b:65:33:c8:6a:42:e3:d7:e3:3d:60: ff:eb:cc:e0:5d:85:85:a5:cb:05:57:2f:fc:c9:74:6f:ea:1a: 05:cd:b2:db:f4:2d:25:67:9d:28:60:36:54:5a:39:85:37:c8: 56:5a:ee:14:8b:c6:5b:8b:2b:99:a5:cb:69:9f:03:a3:2d:99: 1f:a6:95:f1:d5:fa:3d:1d:1c:8a:a1:27:a1:aa:3c:ea:06:49: 90:3d:df:00:1a:3a:06:19:90:74:41:87:c7:b5:f6:25:54:89: 5d:62:8e:f8:9d:22:dc:5f:dd:cb:7c:96:17:d1:1d:cc:5b:79: 9e:2d:32:da:cf:25:0b:0f:f3:79:6b:36:f2:9c:68:85:04:ba: ad:67:98:f8:d8:40:cf:df:a9:1c:f4:d8:22:4b:dd:b7:e5:3a: 25:cd:6c:26:3f:41:44:d9:ee:e9:09:19:79:01:e9:55:fd:2e: b0:b6:81:5b:93:1b:43:cf:dd:ce:a5:70:9c:35:a9:15:7c:76: 22:19:b4:25:16:ef:48:52:ce:2e:ed:ab:ae:d1:0e:a7:cc:65: 58:1d:ab:06:32:07:4f:35:9f:d8:ce:60:c3:05:28:0c:e5:8e: 21:e6:eb:04 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nlFVNgvW3UzP2AcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWFiNWFjNDktMmUyYS00YTA5LWI5ZTctYzBjZjM4NjIyZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXoGrUltl4wBuOyFSg/Cx2SeA07RsGXTmrH8 HbrhTMw/NOdbemAaKPBgQ+vhJ9ub9FqYKZuuF+423uIoLRpJGQeHe0+BAhe9uzej Ux0kJN1JMZJJ1hqLk8mU4rmux8I63pUnclzbsZQ/DPV2mw6w1zRHaK1QACUCGIVd ENBAUp27FYQbmzcaUclPXKFve4T8g96GzCQGYJ9udbVIxmkCpc2VZOPtb3qD0/1A zXlXjfM6YI0SvIKpWZvlNwCVdT08jW8xTVERfQu3vGclYLphkI8027VmMZFOW1hH uiIcZ6CS6A1Em8xQZhxoqVHJR08gv8sB0F3a5BqUa3E99jMnuwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOLwvES02dQFZ9TjFiguG8RgwdaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNzg1MTQwYTctYmJiNy0z NzRjLWJhM2YtNzBjY2FjNDU2MjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg+WAAwQA g+WEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGLYNii0USd6eE4nhVHtL8s8RsVAMzcL64pLZTPIakLj1+M9 YP/rzOBdhYWlywVXL/zJdG/qGgXNstv0LSVnnShgNlRaOYU3yFZa7hSLxluLK5ml y2mfA6MtmR+mlfHV+j0dHIqhJ6GqPOoGSZA93wAaOgYZkHRBh8e19iVUiV1ijvid Itxf3ct8lhfRHcxbeZ4tMtrPJQsP83lrNvKcaIUEuq1nmPjYQM/fqRz02CJL3bfl OiXNbCY/QUTZ7ukJGXkB6VX9LrC2gVuTG0PP3c6lcJw1qRV8diIZtCUW70hSzi7t q67RDqfMZVgdqwYyB081n9jOYMMFKAzljiHm6wQ= -----END CERTIFICATE-----Generated at Sat Sep 19 04:32:55 2026 by rpki-client