$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c8cb6ee4-9156-3357-88f2-3c894607c832.roa File: c8cb6ee4-9156-3357-88f2-3c894607c832.roa (raw, json) Hash identifier: WJrwn8AnHlb0DKKGQWQA13sECdn6wPuOOu12IntaLOY= Subject key identifier: B2:71:7C:DF:8C:AA:72:91:16:66:8D:C4:F4:0A:1A:60:FF:67:3D:6C Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D6AAA7EEB2D2707F213ADCC80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c8cb6ee4-9156-3357-88f2-3c894607c832.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 131.229.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:7e:eb:2d:27:07:f2:13:ad:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=ab99923c-5ac6-4bac-b0e1-839c3c99cfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:8a:23:4e:e7:43:ac:13:f3:62:ba:5a:45: d7:f0:e4:89:87:55:cf:c7:9b:c7:3b:36:8f:ac:48: d0:a5:d0:92:68:af:a6:0b:d1:75:8c:0b:19:fa:fa: c4:e0:a1:4b:9d:2e:0e:be:be:fb:10:c2:86:2e:75: bc:c5:60:2f:b3:b4:a2:80:a7:2d:32:a9:e5:ad:6f: 8d:57:2b:34:a2:47:ea:d8:ac:a1:b6:29:b9:5c:6f: 4f:81:46:df:cf:fb:46:23:e8:59:2b:27:96:a9:20: f6:e3:b9:fd:78:75:89:c5:8e:3f:6d:78:b1:50:5f: 3e:3f:f4:b6:ad:66:14:da:e6:e8:3e:1f:89:de:7b: 29:5a:2e:f5:53:ab:25:14:9f:c4:3e:98:63:d5:01: 55:2a:f5:06:22:f3:50:b5:3b:c0:27:c0:5c:ac:23: ac:5a:f4:6e:36:de:df:d4:9a:2b:3f:b2:09:fc:e2: d0:f7:b0:4c:f9:c2:a3:c3:8c:eb:50:6b:11:66:13: e4:bb:2b:d1:4f:80:c3:e5:ae:0e:3e:37:10:2c:99: 26:09:cb:78:1b:19:8a:d5:2d:6f:f4:de:70:bd:0b: b7:ed:d9:c3:21:54:97:0c:74:50:69:8c:60:18:c2: e2:7b:40:1c:e4:00:91:1f:73:26:1d:d1:a8:c5:55: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:71:7C:DF:8C:AA:72:91:16:66:8D:C4:F4:0A:1A:60:FF:67:3D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c8cb6ee4-9156-3357-88f2-3c894607c832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:99:b3:cc:1c:0f:49:08:3a:17:b3:76:5c:36:47:b8:62:7b: 20:a6:57:27:53:8a:db:cb:30:de:3f:4a:d0:3d:11:88:13:33: 4e:fa:af:0f:33:ca:30:1f:4c:6f:df:fc:b3:19:40:c9:f7:b3: b1:62:c6:b3:ad:b6:19:99:e0:5a:83:4c:af:c4:d3:2c:a6:61: 4c:39:ce:d5:a8:5e:9d:4c:a7:29:5f:81:03:d9:84:32:12:10: 0b:fb:a3:2d:d4:5a:84:e2:c3:83:01:f7:5b:67:72:d3:24:c9: 6d:46:04:0c:86:e4:d6:36:b4:71:0d:ef:64:10:5c:7e:90:34: 92:53:54:16:11:8c:82:80:e3:ab:f4:de:c8:47:88:30:4b:8c: ff:73:48:4f:3d:95:6b:2e:33:a8:74:c3:c3:02:db:37:c4:f4: c8:38:e9:6c:65:75:52:a3:f1:ed:0a:cd:ed:1d:ea:d0:e7:36: e3:cf:0d:13:1a:ea:3d:90:6f:8c:a7:02:a9:5c:e8:7d:68:e6: 64:e8:20:7d:31:f6:78:99:65:3e:0f:5d:d3:2c:28:71:59:37: dd:ab:6c:e8:0d:d9:1b:b2:77:48:ff:04:35:84:28:3d:4d:d7: 2a:c8:b6:da:12:50:55:97:71:72:1f:a2:3e:fd:08:dc:d3:56: da:cd:ae:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqn7rLScH8hOtzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YWI5OTkyM2MtNWFjNi00YmFjLWIwZTEtODM5YzNjOTljZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujGKI07nQ6wT82K6WkXX8OSJh1XPx5vHOzaP rEjQpdCSaK+mC9F1jAsZ+vrE4KFLnS4Ovr77EMKGLnW8xWAvs7SigKctMqnlrW+N Vys0okfq2Kyhtim5XG9PgUbfz/tGI+hZKyeWqSD247n9eHWJxY4/bXixUF8+P/S2 rWYU2uboPh+J3nspWi71U6slFJ/EPphj1QFVKvUGIvNQtTvAJ8BcrCOsWvRuNt7f 1JorP7IJ/OLQ97BM+cKjw4zrUGsRZhPkuyvRT4DD5a4OPjcQLJkmCct4GxmK1S1v 9N5wvQu37dnDIVSXDHRQaYxgGMLie0Ac5ACRH3MmHdGoxVW7swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJxfN+MqnKRFmaNxPQKGmD/Zz1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYzhjYjZlZTQtOTE1Ni0z MzU3LTg4ZjItM2M4OTQ2MDdjODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGZs8wcD0kIOhezdlw2R7hieyCmVydTitvLMN4/StA9EYgTM076rw8z yjAfTG/f/LMZQMn3s7FixrOtthmZ4FqDTK/E0yymYUw5ztWoXp1MpylfgQPZhDIS EAv7oy3UWoTiw4MB91tnctMkyW1GBAyG5NY2tHEN72QQXH6QNJJTVBYRjIKA46v0 3shHiDBLjP9zSE89lWsuM6h0w8MC2zfE9Mg46WxldVKj8e0Kze0d6tDnNuPPDRMa 6j2Qb4ynAqlc6H1o5mToIH0x9niZZT4PXdMsKHFZN92rbOgN2Ruyd0j/BDWEKD1N 1yrIttoSUFWXcXIfoj79CNzTVtrNrvU= -----END CERTIFICATE-----Generated at Mon Apr 13 14:37:47 2026 by rpki-client