$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa File: fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa (raw, json) Hash identifier: RteI7d4HnMP+bRFGwmJMQf94ef/6mJFIvY5iDyf15vE= Subject key identifier: 17:7B:23:F3:F0:F6:CB:53:4B:17:28:DF:CF:D2:A2:81:99:6E:BD:11 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584C8A0C5C9721FD515E5D60C6A0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 31898 IP address blocks: 131.229.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:5c:97:21:fd:51:5e:5d:60:c6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=8e914b6e-f0b8-486c-8855-5e11d68b5c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:91:92:b9:92:a9:67:8f:c2:0d:4c:41:62: 37:00:fb:e6:ce:39:db:7f:b7:9a:75:4a:33:4f:00: 6a:03:d8:86:f2:8e:a9:1a:29:31:23:05:fd:56:96: 6c:51:5a:52:e7:de:6c:0c:7a:55:31:7f:64:14:6e: 37:ff:1e:da:a3:74:3e:a9:90:c0:3e:91:c5:fb:bd: b8:71:30:cd:f8:a5:83:d0:dd:36:3d:bd:fc:b3:56: 16:ca:e6:6b:36:8a:c6:8d:7a:0e:06:ed:be:c7:1e: 18:a1:93:19:8d:6e:05:bf:a5:9e:ac:81:df:9e:b9: d8:3b:12:83:9c:5e:ce:b4:1b:31:84:7e:0c:2b:89: de:f4:5d:53:dd:ea:c6:2a:e9:db:e0:46:38:3c:ac: d8:60:59:ca:7c:da:c0:3b:92:9d:c6:f7:3c:88:71: 0e:df:70:ab:75:88:79:21:de:04:1b:52:cc:0c:48: 35:63:60:a6:f7:e0:64:91:b9:e0:21:73:ca:ea:cd: c5:b6:5a:5e:41:5b:11:23:fa:33:23:ed:ec:6b:9d: f8:93:49:88:a6:ba:5c:81:16:ef:40:7f:86:1c:44: ba:a4:51:69:01:da:ab:17:f2:85:87:61:d2:0d:cf: a7:13:42:7c:38:d0:5b:a0:63:5b:9f:03:93:0e:d6: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7B:23:F3:F0:F6:CB:53:4B:17:28:DF:CF:D2:A2:81:99:6E:BD:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c5:37:1a:38:4a:15:a5:4e:fe:4d:1c:ba:d7:04:13:3f:91: ac:6e:3a:98:3f:09:ce:c5:4a:48:9c:a7:ef:bf:84:3e:b1:5f: e2:6e:b5:cb:77:4d:69:51:d5:ca:77:c8:03:63:99:4a:29:8b: bb:b6:e2:89:f0:00:af:0c:c0:a2:78:ac:bd:df:77:c2:2b:9a: ec:49:c2:22:74:29:4f:a3:c4:cf:e8:42:d4:ae:35:93:dc:9b: 53:3d:43:c3:31:8f:31:56:43:24:54:dc:a6:5c:bf:20:19:b3: c9:02:32:ca:40:48:12:fb:6e:17:d5:fb:b3:c2:37:b3:ad:13: 44:fe:18:87:b1:a9:67:ae:d8:08:cf:7b:7a:af:d9:35:6b:aa: 67:b6:89:2d:85:55:99:03:2c:01:78:ac:49:da:89:02:3e:18: 80:44:17:df:38:69:48:4d:9d:21:ad:92:ce:67:65:9c:49:52: 4b:05:b6:0f:7f:38:02:36:b6:c9:19:0f:19:a1:1d:0f:d1:8a: 89:da:06:4c:1f:c2:c0:b0:ed:89:30:1e:f6:c9:df:ea:82:fa: 32:c8:dc:de:e0:3e:46:18:63:c0:7b:bc:27:14:46:e7:76:d7: 9c:b3:20:6b:fa:a7:97:1c:af:ae:5a:94:5b:2c:15:9b:fa:a3: 73:fa:bd:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDFyXIf1RXl1gxqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk OGU5MTRiNmUtZjBiOC00ODZjLTg4NTUtNWUxMWQ2OGI1YzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aeRkrmSqWePwg1MQWI3APvmzjnbf7eadUoz TwBqA9iG8o6pGikxIwX9VpZsUVpS595sDHpVMX9kFG43/x7ao3Q+qZDAPpHF+724 cTDN+KWD0N02Pb38s1YWyuZrNorGjXoOBu2+xx4YoZMZjW4Fv6WerIHfnrnYOxKD nF7OtBsxhH4MK4ne9F1T3erGKunb4EY4PKzYYFnKfNrAO5Kdxvc8iHEO33CrdYh5 Id4EG1LMDEg1Y2Cm9+BkkbngIXPK6s3FtlpeQVsRI/ozI+3sa534k0mIprpcgRbv QH+GHES6pFFpAdqrF/KFh2HSDc+nE0J8ONBboGNbnwOTDtYnQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd7I/Pw9stTSxco38/SooGZbr0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZmEwYThhZTQtZWMwNi0z MWU4LWFhNjQtOTQwZDgyODk3MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHFNxo4ShWlTv5NHLrXBBM/kaxuOpg/Cc7FSkicp++/hD6xX+Jutct3 TWlR1cp3yANjmUopi7u24onwAK8MwKJ4rL3fd8IrmuxJwiJ0KU+jxM/oQtSuNZPc m1M9Q8MxjzFWQyRU3KZcvyAZs8kCMspASBL7bhfV+7PCN7OtE0T+GIexqWeu2AjP e3qv2TVrqme2iS2FVZkDLAF4rEnaiQI+GIBEF984aUhNnSGtks5nZZxJUksFtg9/ OAI2tskZDxmhHQ/RionaBkwfwsCw7YkwHvbJ3+qC+jLI3N7gPkYYY8B7vCcURud2 15yzIGv6p5ccr65alFssFZv6o3P6vRw= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:10 2026 by rpki-client