$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f491afe6-427d-3ed7-a1ac-57984529ca36.roa File: f491afe6-427d-3ed7-a1ac-57984529ca36.roa (raw, json) Hash identifier: Y1PEZ0++bygfayvsEFWN+O1SKWL3+TV7Z1Jjtd5bIdk= Subject key identifier: EE:9C:B2:B3:3C:D2:33:63:FF:0E:A0:22:B3:94:D6:7B:2D:AD:4C:60 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584EC7A1E863D73A16112C7E0B00 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f491afe6-427d-3ed7-a1ac-57984529ca36.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 131.229.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:e8:63:d7:3a:16:11:2c:7e:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=7bc00daf-a1c2-4a91-b83c-8fc5fc4eee9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:43:1a:7c:f4:b5:90:c3:24:4e:9c:e6:bf:0f: 5d:50:36:c4:c2:c8:19:b2:20:dc:a7:65:f2:69:0a: 86:b0:72:f8:5c:60:75:ea:a5:0a:1c:fa:ef:ed:23: 69:fe:48:6c:5e:99:db:2f:71:57:c1:97:00:76:e4: c4:f3:73:9d:71:9d:8f:a1:d6:84:7f:f9:65:27:fa: e3:ee:e5:e3:b4:92:e7:d1:2d:df:9a:52:d4:b1:af: f5:3c:f2:7a:75:ec:12:96:1c:45:e6:a8:df:cc:40: 6f:a7:27:ab:9c:d3:2d:a4:cf:2f:e3:dc:ce:e4:84: b6:f1:ef:d1:30:eb:df:b4:ad:1e:90:80:6b:30:4b: fc:de:cf:a7:8d:93:cf:8c:34:b0:f9:3e:85:78:87: 1f:01:6a:01:5f:78:89:dd:78:59:73:61:ce:2e:e3: 4f:23:31:3d:4f:65:41:35:41:32:00:9b:6c:fc:c3: 5b:8a:a4:4f:df:3b:f6:23:20:2d:68:0e:82:93:0e: f8:af:dc:0c:be:11:a3:e6:87:d8:b0:40:ce:5d:42: e6:ee:b5:da:28:2d:73:cc:0a:d4:4c:4c:76:61:a5: 4e:d6:b2:9a:67:e3:42:4b:ad:87:47:b9:04:a9:84: 01:8d:7d:dd:91:72:4a:3d:be:2e:17:7e:90:37:cb: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9C:B2:B3:3C:D2:33:63:FF:0E:A0:22:B3:94:D6:7B:2D:AD:4C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f491afe6-427d-3ed7-a1ac-57984529ca36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b9:6b:6f:62:db:88:ff:43:de:2c:1e:24:94:ec:ef:0f:b9: 02:68:43:c2:24:5d:df:2f:b5:2e:69:c8:14:c8:df:d2:72:34: 1d:14:7a:c9:a0:ca:80:5e:16:c3:b5:49:cd:d1:94:3c:1e:b8: 12:86:32:14:57:3c:b0:3c:3e:d8:6b:05:52:1e:79:f9:a5:39: 86:40:de:fd:b8:f4:35:a9:ae:fe:e7:8d:0e:c0:11:5d:17:b1: 3d:bb:aa:6f:ba:95:74:a8:4f:ea:f1:1f:e3:ed:34:58:f6:e2: 28:6a:3b:6e:d5:99:65:db:3a:c0:1c:cd:70:06:d1:19:cd:cb: f2:76:eb:d0:06:0c:9e:83:0d:3b:c2:07:a6:cb:f1:9b:9d:2e: 6d:ef:9d:08:82:cb:09:92:25:3e:7f:22:a0:35:ac:88:23:ea: 9e:47:7c:a9:dc:90:52:24:7f:3f:1c:2e:e4:ec:82:98:1c:cf: 47:e7:19:9a:a2:44:fb:18:76:ac:34:30:ec:29:12:46:d7:9e: ff:df:4b:19:28:a6:64:48:60:83:c0:35:23:1f:38:35:c9:55: 38:27:7d:f1:bc:0c:bc:5e:dc:e0:e2:73:dd:d8:b6:90:7a:3f: d0:c2:e1:06:a9:af:ef:c7:19:7c:6a:40:a2:e3:0d:cd:10:20: 7f:d9:53:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Hoehj1zoWESx+CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk N2JjMDBkYWYtYTFjMi00YTkxLWI4M2MtOGZjNWZjNGVlZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUMafPS1kMMkTpzmvw9dUDbEwsgZsiDcp2Xy aQqGsHL4XGB16qUKHPrv7SNp/khsXpnbL3FXwZcAduTE83OdcZ2PodaEf/llJ/rj 7uXjtJLn0S3fmlLUsa/1PPJ6dewSlhxF5qjfzEBvpyernNMtpM8v49zO5IS28e/R MOvftK0ekIBrMEv83s+njZPPjDSw+T6FeIcfAWoBX3iJ3XhZc2HOLuNPIzE9T2VB NUEyAJts/MNbiqRP3zv2IyAtaA6Ckw74r9wMvhGj5ofYsEDOXULm7rXaKC1zzArU TEx2YaVO1rKaZ+NCS62HR7kEqYQBjX3dkXJKPb4uF36QN8t4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6csrM80jNj/w6gIrOU1nstrUxgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZjQ5MWFmZTYtNDI3ZC0z ZWQ3LWExYWMtNTc5ODQ1MjljYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa5a29i24j/Q94sHiSU7O8PuQJoQ8IkXd8vtS5pyBTI39JyNB0Uesmg yoBeFsO1Sc3RlDweuBKGMhRXPLA8PthrBVIeefmlOYZA3v249DWprv7njQ7AEV0X sT27qm+6lXSoT+rxH+PtNFj24ihqO27VmWXbOsAczXAG0RnNy/J269AGDJ6DDTvC B6bL8ZudLm3vnQiCywmSJT5/IqA1rIgj6p5HfKnckFIkfz8cLuTsgpgcz0fnGZqi RPsYdqw0MOwpEkbXnv/fSxkopmRIYIPANSMfODXJVTgnffG8DLxe3ODic93YtpB6 P9DC4Qapr+/HGXxqQKLjDc0QIH/ZU0Y= -----END CERTIFICATE-----Generated at Sat Sep 19 03:23:31 2026 by rpki-client