$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b9d1f238-e380-318c-aefa-b30a2a011b44.roa File: b9d1f238-e380-318c-aefa-b30a2a011b44.roa (raw, json) Hash identifier: oKqoWmrgVaEwigSf7sR274WH0CiQuGl1/GEEJ5WwaGY= Subject key identifier: E8:04:18:D0:93:6D:C1:7D:8C:90:71:08:B6:28:6D:99:A9:E2:A5:35 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D71A5283287F072DFD7DF6A80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b9d1f238-e380-318c-aefa-b30a2a011b44.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 203724 IP address blocks: 131.229.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:28:32:87:f0:72:df:d7:df:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=0417fa12-7c9c-41da-ab19-74f2ffca59ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:b4:80:e6:d5:60:10:ee:e9:6f:b9:08:c6: 01:90:e7:ac:ee:ba:ae:ed:91:6a:5e:ee:d3:f0:51: eb:14:1a:72:2d:81:13:12:e0:67:a6:6e:e0:41:a3: 4f:cb:55:16:a6:cd:80:c4:01:65:5c:f0:6f:c0:57: f4:e1:13:41:ac:44:38:f8:76:a1:cf:72:bd:af:a7: 53:ed:a6:9b:56:87:7c:66:63:64:be:fc:a9:ed:89: 94:96:47:ce:42:94:a9:be:0a:12:82:09:2a:94:9d: e6:9e:a9:81:08:f5:2c:95:68:77:83:17:83:62:ac: 3c:93:4d:be:b8:02:55:ae:a0:30:11:f0:47:91:3e: 50:fb:3c:c2:9b:f5:1c:8f:57:69:3e:0c:c6:ca:15: 5d:b3:b0:30:8a:5f:0e:1a:9c:5b:5f:60:2a:91:60: 8b:ac:6b:83:58:c8:61:16:3f:9f:34:61:23:90:ec: c0:74:e0:71:c0:aa:21:2f:79:90:91:cf:60:59:7e: 43:33:b8:db:47:9d:70:09:ba:5b:76:c2:55:3c:ea: c2:53:ba:9a:60:22:7d:f6:a6:c1:ea:0f:cb:15:fb: 5b:3b:1f:54:29:78:25:58:db:cd:46:a4:3d:42:a8: 0b:77:0b:4c:dd:79:6e:ff:6c:b9:f1:d6:d8:33:f2: a6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:04:18:D0:93:6D:C1:7D:8C:90:71:08:B6:28:6D:99:A9:E2:A5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b9d1f238-e380-318c-aefa-b30a2a011b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:cc:c6:45:d5:c0:db:fc:1a:35:7e:6f:94:64:d7:c4:1c:dc: 34:97:51:39:7d:c2:f4:12:6b:0d:ee:0e:55:73:c9:0e:d9:20: 1b:a3:4a:35:d6:09:8e:40:14:e8:16:d6:9d:5c:a8:5f:dc:a7: eb:3a:19:61:9d:e3:4d:57:5c:86:e9:7e:f0:2d:ac:59:82:d5: 3c:11:3c:4f:b7:2a:a8:80:c8:2d:6e:84:af:9a:a5:4f:f1:e6: 0a:42:ae:ab:97:09:ec:fb:79:4f:5d:bd:b0:4f:5d:05:1b:24: 2c:ba:80:40:2d:ff:92:9a:1a:f5:42:9d:42:2f:ea:b7:26:f9: 50:45:96:5f:47:19:a8:22:46:18:10:c3:35:6c:95:37:83:6b: 43:72:62:90:5a:fa:53:5d:48:76:66:98:d7:4f:c1:4a:20:65: a8:31:5c:ce:b0:31:8d:93:da:25:5f:1e:7f:e5:50:65:c5:93: d0:cd:e6:97:48:a6:7a:80:8f:b5:23:30:d5:31:a9:b6:01:51: 5a:30:f1:9e:2e:67:de:64:80:3b:94:41:08:39:01:a2:33:7c: 53:fb:b6:11:8f:15:4f:66:7a:09:54:f2:66:e8:dc:9c:d4:05: 90:dc:a2:59:9b:fa:2e:b1:6a:a1:c5:a8:07:78:99:b1:bd:10: d4:84:b6:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSgyh/By39ffaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk MDQxN2ZhMTItN2M5Yy00MWRhLWFiMTktNzRmMmZmY2E1OWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhC0gObVYBDu6W+5CMYBkOes7rqu7ZFqXu7T 8FHrFBpyLYETEuBnpm7gQaNPy1UWps2AxAFlXPBvwFf04RNBrEQ4+Hahz3K9r6dT 7aabVod8ZmNkvvyp7YmUlkfOQpSpvgoSggkqlJ3mnqmBCPUslWh3gxeDYqw8k02+ uAJVrqAwEfBHkT5Q+zzCm/Ucj1dpPgzGyhVds7Awil8OGpxbX2AqkWCLrGuDWMhh Fj+fNGEjkOzAdOBxwKohL3mQkc9gWX5DM7jbR51wCbpbdsJVPOrCU7qaYCJ99qbB 6g/LFftbOx9UKXglWNvNRqQ9QqgLdwtM3Xlu/2y58dbYM/KmIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgEGNCTbcF9jJBxCLYobZmp4qU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYjlkMWYyMzgtZTM4MC0z MThjLWFlZmEtYjMwYTJhMDExYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/MxkXVwNv8GjV+b5Rk18Qc3DSXUTl9wvQSaw3uDlVzyQ7ZIBujSjXW CY5AFOgW1p1cqF/cp+s6GWGd401XXIbpfvAtrFmC1TwRPE+3KqiAyC1uhK+apU/x 5gpCrquXCez7eU9dvbBPXQUbJCy6gEAt/5KaGvVCnUIv6rcm+VBFll9HGagiRhgQ wzVslTeDa0NyYpBa+lNdSHZmmNdPwUogZagxXM6wMY2T2iVfHn/lUGXFk9DN5pdI pnqAj7UjMNUxqbYBUVow8Z4uZ95kgDuUQQg5AaIzfFP7thGPFU9meglU8mbo3JzU BZDcolmb+i6xaqHFqAd4mbG9ENSEtqo= -----END CERTIFICATE-----Generated at Mon Apr 13 17:14:35 2026 by rpki-client