$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa File: fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa (raw, json) Hash identifier: t64cmhRdy+X6KlWRkTWKK9VkDgp40qlqUwBHPyk2cmA= Subject key identifier: EA:F8:12:11:4C:B7:DA:9C:F5:63:82:E0:4C:56:41:CA:29:36:D1:09 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584EED5243C6606A0906D4104A80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 31898 IP address blocks: 131.229.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:43:c6:60:6a:09:06:d4:10:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=84aeb52f-0af5-4e31-b41f-2edb765fd13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:4f:ad:05:27:a4:74:2c:1e:be:c1:1e:be: ae:da:ca:50:da:19:02:6e:a1:f9:2a:81:19:27:07: 02:eb:bd:b3:61:04:e1:8d:2b:eb:47:eb:21:ed:d4: 72:c1:83:db:94:7c:37:96:6e:83:8a:b5:ff:fc:8f: 38:50:01:a5:4c:68:f5:13:df:fc:5f:8b:58:38:76: a6:92:85:8e:10:75:06:ff:ff:da:f9:a1:08:b5:de: e2:77:73:58:93:40:b4:c4:41:8d:61:f3:81:27:7d: d3:40:9c:b3:c1:ba:1e:72:8a:d7:aa:a8:53:ac:d0: b6:83:9a:64:1b:94:73:96:bc:51:2a:9f:5b:57:a8: 2d:ca:c0:58:20:63:e4:9f:eb:80:ea:40:99:12:c0: fa:e6:58:f0:4b:ec:64:68:6d:4e:59:00:86:bd:f7: 33:c3:e8:05:3c:71:c3:26:dd:81:0d:6c:c0:a0:59: aa:de:65:cb:d4:3f:36:2e:49:e2:fa:e6:c8:80:9b: 12:e4:a5:70:02:8b:15:a5:58:e3:c2:af:34:a9:20: 62:cd:a5:65:3e:36:f9:59:8c:68:50:cd:f0:14:74: 7b:0b:c0:47:6d:3f:1f:04:33:28:68:f8:57:d5:c8: 35:95:2b:d3:ec:b2:4a:bf:3b:0d:4f:93:50:a6:af: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F8:12:11:4C:B7:DA:9C:F5:63:82:E0:4C:56:41:CA:29:36:D1:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/fa0a8ae4-ec06-31e8-aa64-940d8289715a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7b:a0:32:bb:c9:bf:44:01:e9:8d:50:2f:4f:2b:f2:7e:0e: ac:cb:0b:99:15:ba:26:0d:9f:79:ca:59:6a:ba:1b:16:a1:f6: f7:99:f2:f1:ca:1c:46:02:69:f8:11:96:89:03:f7:a3:23:70: fe:92:61:15:f3:49:e7:db:74:80:ac:da:ba:d0:c2:05:6f:e1: 0e:01:b5:bf:48:3b:4d:3f:77:c4:78:75:da:87:e1:e3:e1:18: db:63:29:58:5c:c4:53:f4:25:b6:2e:fc:b6:37:dd:43:a9:26: c8:bc:31:38:be:c9:89:55:1b:0b:b4:a6:1b:50:b3:b8:2e:fa: be:e7:f6:0c:d1:03:57:f6:3f:a4:97:38:43:a1:ed:be:04:13: 76:54:62:26:14:1e:1e:00:20:b4:75:fe:39:24:a1:a0:cd:d6: 26:41:db:ee:cc:58:88:eb:00:06:9c:e8:77:23:a6:19:e0:8d: 6f:83:fc:f2:b9:24:ac:51:b8:68:a5:74:2d:9a:57:fa:93:ad: c7:13:3a:a7:7d:8f:bd:55:16:f3:6b:f4:3e:64:5c:01:fc:18: b0:da:60:a8:32:b1:f5:3a:e0:a5:a7:4f:98:70:47:7d:02:ed: 20:43:27:c2:6b:b8:8d:4b:63:bf:13:58:eb:39:7d:97:71:23: 35:4c:48:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUkPGYGoJBtQQSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ODRhZWI1MmYtMGFmNS00ZTMxLWI0MWYtMmVkYjc2NWZkMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPpPrQUnpHQsHr7BHr6u2spQ2hkCbqH5KoEZ JwcC672zYQThjSvrR+sh7dRywYPblHw3lm6DirX//I84UAGlTGj1E9/8X4tYOHam koWOEHUG///a+aEItd7id3NYk0C0xEGNYfOBJ33TQJyzwboecorXqqhTrNC2g5pk G5RzlrxRKp9bV6gtysBYIGPkn+uA6kCZEsD65ljwS+xkaG1OWQCGvfczw+gFPHHD Jt2BDWzAoFmq3mXL1D82Lkni+ubIgJsS5KVwAosVpVjjwq80qSBizaVlPjb5WYxo UM3wFHR7C8BHbT8fBDMoaPhX1cg1lSvT7LJKvzsNT5NQpq8asQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr4EhFMt9qc9WOC4ExWQcopNtEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZmEwYThhZTQtZWMwNi0z MWU4LWFhNjQtOTQwZDgyODk3MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ17oDK7yb9EAemNUC9PK/J+DqzLC5kVuiYNn3nKWWq6Gxah9veZ8vHK HEYCafgRlokD96MjcP6SYRXzSefbdICs2rrQwgVv4Q4Btb9IO00/d8R4ddqH4ePh GNtjKVhcxFP0JbYu/LY33UOpJsi8MTi+yYlVGwu0phtQs7gu+r7n9gzRA1f2P6SX OEOh7b4EE3ZUYiYUHh4AILR1/jkkoaDN1iZB2+7MWIjrAAac6HcjphngjW+D/PK5 JKxRuGildC2aV/qTrccTOqd9j71VFvNr9D5kXAH8GLDaYKgysfU64KWnT5hwR30C 7SBDJ8JruI1LY78TWOs5fZdxIzVMSHA= -----END CERTIFICATE-----Generated at Sat Sep 19 02:16:36 2026 by rpki-client