$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9d4097bb-fa1e-33aa-8c34-db994f4f3554.roa File: 9d4097bb-fa1e-33aa-8c34-db994f4f3554.roa (raw, json) Hash identifier: T+g8i8cudlTuUGqyOfUTDESpd4neBuyWAFp0Z1Pi0wg= Subject key identifier: CF:6B:AE:A0:7E:C8:DD:34:7A:30:6F:EA:B3:6E:DB:AB:BF:B7:E3:18 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D71A5271E0E74EAEDCB0A8380 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9d4097bb-fa1e-33aa-8c34-db994f4f3554.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 203724 IP address blocks: 131.229.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:27:1e:0e:74:ea:ed:cb:0a:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=48bee158-7b07-4888-bd95-5aa5387ecca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:b5:94:7c:a8:5f:fe:39:61:25:9c:d6:a5: f0:9a:2c:31:3a:a8:58:e4:b9:e7:15:52:5d:bd:1a: 7b:60:7c:06:91:b5:79:aa:2e:45:d9:df:a8:9b:f4: 5c:98:03:b6:0b:88:71:51:77:cb:b5:28:2d:1e:e2: cb:13:cc:1d:65:93:03:d6:bd:7d:69:3f:1d:06:6b: 89:a9:c8:a4:53:a9:64:0a:50:a7:31:cc:4d:ef:93: 35:06:05:dc:74:c0:dd:48:d9:c6:d4:91:eb:8b:85: f5:52:6c:e7:ea:2a:76:37:ce:3d:34:51:6a:4f:f0: ef:45:b4:2e:b0:92:85:42:24:8a:d0:7b:15:72:4e: 9a:1e:1e:57:06:41:ff:8e:42:7f:fa:ce:a9:04:c6: 09:01:2e:4d:2c:c7:ea:93:97:eb:10:d1:91:43:4d: 05:82:52:42:a8:36:3c:77:7b:6e:b3:42:74:33:ce: 1a:38:ca:87:bf:02:47:19:bf:28:8b:09:07:d3:4c: 7b:41:15:8a:97:11:49:01:9f:81:26:b0:f1:39:5d: da:37:77:ba:bf:e4:8f:0d:ff:e2:ca:c5:21:bb:49: bb:2b:7a:00:7b:33:ac:f4:5b:ab:00:ec:78:76:f1: a3:41:0e:b0:14:6d:46:80:31:3c:55:68:fe:31:25: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6B:AE:A0:7E:C8:DD:34:7A:30:6F:EA:B3:6E:DB:AB:BF:B7:E3:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9d4097bb-fa1e-33aa-8c34-db994f4f3554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e0:fa:75:af:18:2b:69:30:ca:bb:d7:04:3b:99:9f:a6:61: 00:5d:b6:e4:f5:1a:93:a4:c0:61:aa:9b:5a:a3:a4:34:78:1c: 06:4f:bf:06:ae:24:85:5c:e1:05:09:84:d8:2d:ff:59:9b:3d: 6a:e2:42:8a:1a:60:50:47:4f:3f:63:1d:51:60:ce:4e:c7:bd: eb:58:eb:e0:72:cc:00:ee:77:75:ee:57:10:0d:fc:0f:65:e0: 6d:93:01:20:eb:a2:e1:50:9f:d5:f7:f9:89:e1:3d:6d:3d:5b: 94:7f:81:3c:d1:c8:20:ae:b1:e1:7d:c2:30:57:a9:f3:c4:70: 6a:89:28:40:10:af:00:20:26:e5:5b:08:da:7d:c9:cf:e4:34: c4:e8:82:af:3b:de:a2:a7:55:b8:da:84:62:08:7d:a9:bb:5f: 11:61:28:4d:16:f2:7a:e5:d8:8b:41:75:29:07:a0:6c:69:52: 51:a6:3b:ce:ee:9c:e4:c2:98:5f:7c:48:7a:4a:6b:3a:64:53: 0f:23:ce:65:48:41:61:0f:2c:64:76:94:c7:15:aa:47:e4:f9: ee:a2:cb:21:5f:1c:52:48:6e:3a:bb:17:67:9e:64:46:68:09: 2d:d9:15:cb:60:b7:f9:ba:2e:11:fc:25:7f:71:78:44:c8:c3: ff:4c:1e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSceDnTq7csKg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NDhiZWUxNTgtN2IwNy00ODg4LWJkOTUtNWFhNTM4N2VjY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEu1lHyoX/45YSWc1qXwmiwxOqhY5LnnFVJd vRp7YHwGkbV5qi5F2d+om/RcmAO2C4hxUXfLtSgtHuLLE8wdZZMD1r19aT8dBmuJ qcikU6lkClCnMcxN75M1BgXcdMDdSNnG1JHri4X1Umzn6ip2N849NFFqT/DvRbQu sJKFQiSK0HsVck6aHh5XBkH/jkJ/+s6pBMYJAS5NLMfqk5frENGRQ00FglJCqDY8 d3tus0J0M84aOMqHvwJHGb8oiwkH00x7QRWKlxFJAZ+BJrDxOV3aN3e6v+SPDf/i ysUhu0m7K3oAezOs9FurAOx4dvGjQQ6wFG1GgDE8VWj+MSVoQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9rrqB+yN00ejBv6rNu26u/t+MYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvOWQ0MDk3YmItZmExZS0z M2FhLThjMzQtZGI5OTRmNGYzNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+W5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTg+nWvGCtpMMq71wQ7mZ+mYQBdtuT1GpOkwGGqm1qjpDR4HAZPvwau JIVc4QUJhNgt/1mbPWriQooaYFBHTz9jHVFgzk7HvetY6+ByzADud3XuVxAN/A9l 4G2TASDrouFQn9X3+YnhPW09W5R/gTzRyCCuseF9wjBXqfPEcGqJKEAQrwAgJuVb CNp9yc/kNMTogq873qKnVbjahGIIfam7XxFhKE0W8nrl2ItBdSkHoGxpUlGmO87u nOTCmF98SHpKazpkUw8jzmVIQWEPLGR2lMcVqkfk+e6iyyFfHFJIbjq7F2eeZEZo CS3ZFctgt/m6LhH8JX9xeETIw/9MHo4= -----END CERTIFICATE-----Generated at Mon Apr 13 17:14:21 2026 by rpki-client