$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d3354b2e-cd15-393e-95db-1d4518a7600e.roa File: d3354b2e-cd15-393e-95db-1d4518a7600e.roa (raw, json) Hash identifier: t3kK7X/VX84gqWWHDE9Fg2yicjsPfUrQApzRifGd1G0= Subject key identifier: 81:9A:28:0F:8B:2B:E5:B6:B2:4E:C6:C7:28:E4:68:B4:A2:F5:B3:B6 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584EED51F8AA067AACC1DE18D7C0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d3354b2e-cd15-393e-95db-1d4518a7600e.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 203724 IP address blocks: 131.229.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:f8:aa:06:7a:ac:c1:de:18:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=7c53bbca-eb08-4e2e-8698-b1e292b0c7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:1a:b1:8b:38:0e:d7:65:1c:99:1b:0a:dc: 9a:0f:2c:cc:fe:c6:fb:90:05:3e:d5:28:8f:30:33: 04:50:27:c0:00:73:76:1c:19:04:2c:23:1e:27:9a: 53:57:b6:8d:dc:4b:c0:d5:4f:62:ca:ef:11:fe:f4: 92:9e:83:58:9e:29:fe:c1:93:24:da:74:44:45:31: 0b:87:fa:be:b8:f1:48:af:09:d2:5a:76:88:08:79: 3e:e6:4a:3f:27:53:71:24:bb:f8:fb:68:35:21:1e: a5:19:7c:88:ef:8b:09:af:54:b1:3c:e0:d3:3a:8c: 42:27:ae:87:25:1b:56:88:25:df:70:c8:f2:c8:aa: d3:da:9a:c0:7c:cb:f8:83:37:20:8a:46:3b:28:7b: e7:09:28:ea:1a:be:64:51:b9:11:56:4c:40:ba:7b: a2:fd:0a:eb:0a:8c:fc:d7:21:09:05:c9:1f:12:43: e4:ae:0f:5d:24:96:ef:90:9c:f3:d7:77:82:56:29: 53:82:57:d5:4a:4e:53:b2:56:52:96:a4:c3:54:c2: 34:5e:d7:5b:6d:37:cd:f7:30:33:45:8b:79:51:40: 7b:56:0c:91:eb:a3:95:e5:4a:0e:c6:14:46:24:72: 50:c0:95:d1:b4:4b:bf:69:89:05:21:a1:29:72:3c: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9A:28:0F:8B:2B:E5:B6:B2:4E:C6:C7:28:E4:68:B4:A2:F5:B3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d3354b2e-cd15-393e-95db-1d4518a7600e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:df:fe:ad:4b:a6:b1:aa:47:23:57:8e:44:9c:cc:da:5e:00: 63:ef:d3:e3:15:1b:4b:11:17:06:2f:83:92:dc:b6:ad:5f:96: b3:9b:f5:d4:b8:6f:b9:a3:99:3c:21:f3:e9:e2:2d:f1:a5:cc: a2:eb:57:e3:ae:4d:fa:8c:81:00:7f:f9:12:f3:68:3d:96:24: ca:4b:ea:31:40:ca:8d:7c:e6:11:04:5d:27:c4:ab:2c:9c:90: a1:8b:49:37:d0:f0:b3:90:4a:e0:6e:7c:b5:67:ee:15:ba:cb: d5:f6:48:12:15:dd:c9:0e:e3:9f:72:12:d2:30:bc:ed:62:03: 4e:e0:9a:f6:cf:e1:07:66:4f:ab:ba:ee:37:89:63:d9:04:f8: b2:af:ae:e9:6a:ed:a7:63:bd:0b:39:77:22:22:5c:f2:7a:f9: 91:24:b0:c7:06:d8:1b:ea:45:0e:94:a9:5b:8c:88:a9:5a:18: 09:7a:4d:2a:56:9a:4d:20:b7:96:42:35:0e:6a:6f:ac:82:9b: 1f:c7:0c:b9:cd:27:80:3f:b3:51:b2:00:16:25:e2:d5:31:d7: 09:57:6e:3e:7b:71:54:f9:ec:b7:90:5c:5a:0d:a9:b6:c1:95: 13:c6:df:ca:eb:39:52:38:2d:bd:84:d9:ad:6c:42:9f:dc:c1: ff:bb:37:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfiqBnqswd4Y18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk N2M1M2JiY2EtZWIwOC00ZTJlLTg2OTgtYjFlMjkyYjBjN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjIasYs4DtdlHJkbCtyaDyzM/sb7kAU+1SiP MDMEUCfAAHN2HBkELCMeJ5pTV7aN3EvA1U9iyu8R/vSSnoNYnin+wZMk2nRERTEL h/q+uPFIrwnSWnaICHk+5ko/J1NxJLv4+2g1IR6lGXyI74sJr1SxPODTOoxCJ66H JRtWiCXfcMjyyKrT2prAfMv4gzcgikY7KHvnCSjqGr5kUbkRVkxAunui/QrrCoz8 1yEJBckfEkPkrg9dJJbvkJzz13eCVilTglfVSk5TslZSlqTDVMI0XtdbbTfN9zAz RYt5UUB7VgyR66OV5UoOxhRGJHJQwJXRtEu/aYkFIaEpcjyPPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGaKA+LK+W2sk7GxyjkaLSi9bO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZDMzNTRiMmUtY2QxNS0z OTNlLTk1ZGItMWQ0NTE4YTc2MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDf/q1LprGqRyNXjkSczNpeAGPv0+MVG0sRFwYvg5Lctq1flrOb9dS4 b7mjmTwh8+niLfGlzKLrV+OuTfqMgQB/+RLzaD2WJMpL6jFAyo185hEEXSfEqyyc kKGLSTfQ8LOQSuBufLVn7hW6y9X2SBIV3ckO459yEtIwvO1iA07gmvbP4QdmT6u6 7jeJY9kE+LKvrulq7adjvQs5dyIiXPJ6+ZEksMcG2BvqRQ6UqVuMiKlaGAl6TSpW mk0gt5ZCNQ5qb6yCmx/HDLnNJ4A/s1GyABYl4tUx1wlXbj57cVT57LeQXFoNqbbB lRPG38rrOVI4Lb2E2a1sQp/cwf+7Nwc= -----END CERTIFICATE-----Generated at Sat Sep 19 02:16:06 2026 by rpki-client