$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ddaf04d4-9457-3b81-8980-050f77953123.roa File: ddaf04d4-9457-3b81-8980-050f77953123.roa (raw, json) Hash identifier: UkGQ9ShSRnhs7+okAPcc/8s9yx7RAXu142gLT+9a0II= Subject key identifier: 1B:E1:F6:E4:3F:03:18:1A:2C:AE:6B:DC:B9:F3:30:B1:54:B5:77:9E Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584ED864868AE09CA0D1EB9A8980 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ddaf04d4-9457-3b81-8980-050f77953123.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 16509 IP address blocks: 131.229.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:86:8a:e0:9c:a0:d1:eb:9a:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=5f4fb9c9-d743-4353-9b00-4749a45b1783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6a:42:07:0b:ff:35:09:be:2a:c6:45:e4:b2: e4:48:86:da:0e:dd:36:f8:4d:ab:06:98:8a:5f:57: 26:4a:1e:09:13:a1:14:53:e5:2c:bf:00:cb:ee:a8: 8c:c6:74:79:39:d4:ec:12:69:04:d5:e3:6a:ae:0d: 0c:2d:f9:b6:25:66:9d:62:16:7f:8d:97:82:3b:31: af:6a:27:96:8a:7e:ce:1a:ff:ff:c5:35:bb:77:39: 84:e5:49:2c:d2:8f:aa:ba:0e:0a:38:08:b4:e7:37: 42:99:5d:0f:51:ed:2c:c7:43:91:bb:fb:4c:65:35: 18:b5:32:0e:9e:3d:95:36:dc:5f:4e:2c:58:62:33: d9:18:9c:74:77:74:40:27:43:7c:ec:fd:33:7d:c1: 90:46:c3:66:3f:76:d3:7d:c7:de:3e:77:2d:70:d0: 2b:5c:1b:2d:32:fc:37:56:68:a6:91:9c:16:f5:89: 41:14:ee:c4:c2:6e:74:8f:1a:1c:d3:69:86:e7:5e: a9:3d:19:be:c9:9e:48:46:ee:74:0e:13:a8:46:b3: 55:cb:19:1c:e3:f9:f4:b8:62:ad:f1:8b:9e:e2:50: a3:85:42:bc:13:66:5d:bd:db:db:f5:51:32:08:eb: 59:f5:e5:58:39:20:71:fe:5f:b2:0e:02:c6:cf:fb: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E1:F6:E4:3F:03:18:1A:2C:AE:6B:DC:B9:F3:30:B1:54:B5:77:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ddaf04d4-9457-3b81-8980-050f77953123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f4:a5:55:76:6d:cc:7b:61:fa:2c:09:af:1a:84:5b:ca:94: 2f:51:87:aa:26:8f:0b:b0:af:8b:8c:ec:e0:39:77:f7:1c:b1: 57:7e:26:7d:fa:6b:78:2e:50:4d:2f:ba:74:db:50:bc:25:63: ec:b3:0f:fe:3b:5a:41:b2:3e:df:b1:9c:c5:4b:01:b0:dc:f1: 70:0f:50:16:ab:7a:9d:c5:e3:3e:12:fe:e2:54:06:26:85:ac: 5b:41:b4:8c:13:b3:24:e4:7a:ff:ac:65:8e:60:b6:a2:97:2e: 20:ec:3b:5a:6d:7d:25:a8:00:75:96:25:c2:ee:ec:ca:46:3a: e3:fd:6d:4b:98:db:5a:a6:45:10:a8:65:06:c9:a9:c5:0c:36: e6:61:c4:9a:7c:ca:a2:45:26:d6:21:78:80:d2:46:b3:13:59: 7a:7c:62:39:60:69:12:1f:f3:60:24:70:06:0a:d3:37:c9:44: b0:fd:4f:db:20:41:8b:36:cf:db:fa:ce:46:e7:48:02:3a:9f: 71:ab:35:1b:db:7b:8b:5e:f2:e5:69:55:7e:a0:e0:89:8f:3b: 14:c0:ac:38:1b:20:e8:e2:7d:a8:46:02:d0:b9:f3:fd:ea:d8: 30:f8:af:c8:ea:c1:80:ad:d5:ba:26:19:48:72:35:ff:63:4c: a6:de:a8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZIaK4Jyg0euaiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NWY0ZmI5YzktZDc0My00MzUzLTliMDAtNDc0OWE0NWIxNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimpCBwv/NQm+KsZF5LLkSIbaDt02+E2rBpiK X1cmSh4JE6EUU+UsvwDL7qiMxnR5OdTsEmkE1eNqrg0MLfm2JWadYhZ/jZeCOzGv aieWin7OGv//xTW7dzmE5Uks0o+qug4KOAi05zdCmV0PUe0sx0ORu/tMZTUYtTIO nj2VNtxfTixYYjPZGJx0d3RAJ0N87P0zfcGQRsNmP3bTfcfePnctcNArXBstMvw3 VmimkZwW9YlBFO7Ewm50jxoc02mG516pPRm+yZ5IRu50DhOoRrNVyxkc4/n0uGKt 8Yue4lCjhUK8E2Zdvdvb9VEyCOtZ9eVYOSBx/l+yDgLGz/uxLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvh9uQ/AxgaLK5r3LnzMLFUtXeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZGRhZjA0ZDQtOTQ1Ny0z YjgxLTg5ODAtMDUwZjc3OTUzMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn0pVV2bcx7YfosCa8ahFvKlC9Rh6omjwuwr4uM7OA5d/ccsVd+Jn36 a3guUE0vunTbULwlY+yzD/47WkGyPt+xnMVLAbDc8XAPUBarep3F4z4S/uJUBiaF rFtBtIwTsyTkev+sZY5gtqKXLiDsO1ptfSWoAHWWJcLu7MpGOuP9bUuY21qmRRCo ZQbJqcUMNuZhxJp8yqJFJtYheIDSRrMTWXp8YjlgaRIf82AkcAYK0zfJRLD9T9sg QYs2z9v6zkbnSAI6n3GrNRvbe4te8uVpVX6g4ImPOxTArDgbIOjifahGAtC58/3q 2DD4r8jqwYCt1bomGUhyNf9jTKbeqH0= -----END CERTIFICATE-----Generated at Sat Sep 19 02:18:44 2026 by rpki-client