$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d3354b2e-cd15-393e-95db-1d4518a7600e.roa File: d3354b2e-cd15-393e-95db-1d4518a7600e.roa (raw, json) Hash identifier: 28FWC+VAJIT/ltqPdQi1TZYxgH+EY7nHFkeh6nYpOSQ= Subject key identifier: FD:86:15:52:89:9D:CB:68:B2:8F:DB:E2:F3:09:3E:F1:08:BA:46:75 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584E4AA484089A152D8285C54D00 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d3354b2e-cd15-393e-95db-1d4518a7600e.roa Signing time: Thu 25 Jun 2026 18:29:49 +0000 ROA not before: Thu 25 Jun 2026 18:29:49 +0000 ROA not after: Wed 23 Sep 2026 18:29:49 +0000 asID: 203724 IP address blocks: 131.229.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:a4:84:08:9a:15:2d:82:85:c5:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jun 25 18:29:49 2026 GMT Not After : Sep 23 18:29:49 2026 GMT Subject: CN=4a9168e9-ea40-41cb-af5e-77f49a200a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:0c:4b:fe:a9:9e:eb:8b:12:50:d8:74:3b: e6:83:fe:ed:a2:51:a2:b1:2e:fd:b7:19:bd:92:41: b6:e2:ec:c0:43:4b:00:9c:1c:15:07:ca:c6:fd:5a: 87:86:e9:1a:24:89:6e:27:e3:f4:f2:88:50:6b:d8: 62:33:de:fe:84:a3:46:19:4c:8c:8a:7c:b1:a0:f9: b0:2f:7f:96:a4:89:80:28:93:c4:27:2c:03:ec:f3: b7:52:ec:6d:b8:56:d0:c7:a5:f9:6d:db:71:47:6e: 59:04:01:4a:62:7d:2f:21:ab:d2:90:3c:0c:77:91: 91:91:7b:e7:25:2b:31:cf:58:ca:1c:7e:a1:86:16: 74:68:38:9e:85:44:aa:ce:35:f1:a9:a8:aa:90:ff: 3c:72:eb:85:d2:3a:e6:82:85:7d:c5:25:9e:38:0f: 3c:97:ca:2c:2c:3a:3b:81:6a:17:95:8d:6a:50:5e: fd:01:ee:fc:63:fd:bc:34:85:40:cd:34:eb:1b:74: 7a:d6:29:df:f7:6e:f0:21:60:f7:9f:8b:67:52:fd: 38:77:8c:d4:d4:0d:2f:db:ce:3a:cf:ac:f2:4b:37: f4:01:db:34:31:8f:cd:12:45:fa:6d:61:a9:cd:4e: d6:fb:24:1b:bf:70:33:8c:a1:25:f6:ee:8f:4b:85: b5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:86:15:52:89:9D:CB:68:B2:8F:DB:E2:F3:09:3E:F1:08:BA:46:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d3354b2e-cd15-393e-95db-1d4518a7600e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e7:49:07:96:91:8b:0f:68:17:90:fe:68:b6:31:96:81:c0: d0:71:d5:bd:dd:79:f4:2d:fb:a7:d3:37:7b:16:6d:18:30:f5: 85:4c:57:73:ec:8e:e8:9e:15:76:b2:8e:0f:1d:74:61:8a:76: 39:22:c6:4f:ae:4f:c0:97:dd:41:bd:6d:f4:d0:5d:92:53:9d: ce:dd:14:e2:08:57:60:bb:91:b1:ec:44:df:34:dc:8f:bb:74: fc:b3:bb:e4:b8:fa:1e:0e:fc:81:56:a5:33:50:7b:ef:77:88: 30:76:78:54:11:dd:a3:2d:20:6a:70:0c:36:f4:93:04:39:e6: 03:15:76:64:0d:38:e0:96:2e:9b:77:3e:e9:d7:19:46:c3:ff: 44:28:b3:98:12:64:36:6c:b5:08:23:fa:60:45:17:c1:33:6d: b0:68:b0:c4:43:fc:61:9e:85:16:31:5f:86:5f:5d:94:fc:c5: fe:cb:ba:95:d8:2f:8d:e0:1c:3f:f8:78:df:4b:b8:de:02:c1: 30:20:d7:85:3c:ad:f1:2b:fd:a4:ef:0a:b6:6c:67:30:ee:33: dc:62:cf:a9:87:13:7b:af:ac:85:73:5e:20:6b:5c:94:ff:d4: da:4c:a3:71:cf:70:ab:d0:81:fe:f1:26:29:5c:97:15:0d:bd: f1:bf:45:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5KpIQImhUtgoXFTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDYyNTE4Mjk0OVoXDTI2MDkyMzE4Mjk0OVowLzEtMCsGA1UEAxMk NGE5MTY4ZTktZWE0MC00MWNiLWFmNWUtNzdmNDlhMjAwYTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUIMS/6pnuuLElDYdDvmg/7tolGisS79txm9 kkG24uzAQ0sAnBwVB8rG/VqHhukaJIluJ+P08ohQa9hiM97+hKNGGUyMinyxoPmw L3+WpImAKJPEJywD7PO3UuxtuFbQx6X5bdtxR25ZBAFKYn0vIavSkDwMd5GRkXvn JSsxz1jKHH6hhhZ0aDiehUSqzjXxqaiqkP88cuuF0jrmgoV9xSWeOA88l8osLDo7 gWoXlY1qUF79Ae78Y/28NIVAzTTrG3R61inf927wIWD3n4tnUv04d4zU1A0v2846 z6zySzf0Ads0MY/NEkX6bWGpzU7W+yQbv3AzjKEl9u6PS4W1zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2GFVKJnctoso/b4vMJPvEIukZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZDMzNTRiMmUtY2QxNS0z OTNlLTk1ZGItMWQ0NTE4YTc2MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjnSQeWkYsPaBeQ/mi2MZaBwNBx1b3defQt+6fTN3sWbRgw9YVMV3Ps juieFXayjg8ddGGKdjkixk+uT8CX3UG9bfTQXZJTnc7dFOIIV2C7kbHsRN803I+7 dPyzu+S4+h4O/IFWpTNQe+93iDB2eFQR3aMtIGpwDDb0kwQ55gMVdmQNOOCWLpt3 PunXGUbD/0Qos5gSZDZstQgj+mBFF8EzbbBosMRD/GGehRYxX4ZfXZT8xf7LupXY L43gHD/4eN9LuN4CwTAg14U8rfEr/aTvCrZsZzDuM9xiz6mHE3uvrIVzXiBrXJT/ 1NpMo3HPcKvQgf7xJilclxUNvfG/RQI= -----END CERTIFICATE-----Generated at Mon Jul 20 01:27:23 2026 by rpki-client