$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa File: a64bf38f-925a-34bb-b213-9abac238d2a5.roa (raw, json) Hash identifier: qNMRNR1jH0i9xjYTy3jnziu6Ytt7RuqTuPk3HdU6IM0= Subject key identifier: 21:14:D4:D1:AD:39:F8:40:FF:16:10:D6:A1:AC:40:5A:8B:51:1B:14 Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Certificate serial: 010D0C9F4328584D07ACFE508A83298E121BE740 Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 3152 IP address blocks: 131.225.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fe:50:8a:83:29:8e:12:1b:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=0f659e12-b85a-405f-abdd-f3c68ddff4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:45:3d:0c:5b:19:c3:96:ec:0c:70:e0:5c:ed: 7a:70:fd:ef:6d:44:90:51:1c:5d:ce:23:33:b0:8d: c6:04:59:4d:f0:12:93:31:b9:0e:2a:66:6b:43:16: d2:1d:d4:32:ad:a7:5c:13:0b:f1:8a:bb:42:e1:47: 8b:27:1d:65:a2:f9:95:0b:22:eb:75:ce:c6:83:8f: d2:ea:6e:b8:68:cb:21:ef:5f:26:d0:df:c3:f1:06: 41:6e:77:5e:f1:76:86:e8:55:a8:08:4f:d7:ec:be: 22:72:23:4f:9b:07:65:78:e5:6c:7a:48:24:6f:3a: 9e:a1:6a:3d:66:5f:c9:68:de:94:be:2c:40:66:bc: ec:df:ce:ba:35:64:f2:b3:f5:01:c2:80:5d:bf:3e: f8:6f:51:b0:b5:90:31:4d:d2:8a:0e:47:04:bc:1d: be:5f:de:e7:a5:c5:6c:bd:59:44:1a:c5:48:fc:c7: cb:ed:55:d6:56:0c:f2:eb:6e:e6:0e:2c:c2:b9:70: ea:34:ef:8f:05:59:49:69:2c:5e:42:45:39:37:bb: 44:65:23:e7:92:3a:70:6b:e9:d9:ae:9a:31:42:9f: ac:5d:96:29:a5:a3:69:c2:75:70:ce:32:ff:5b:b8: 0b:af:22:c5:40:e1:57:99:91:2c:27:3c:2f:6f:2c: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:14:D4:D1:AD:39:F8:40:FF:16:10:D6:A1:AC:40:5A:8B:51:1B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl X509v3 Authority Key Identifier: keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer sbgp-ipAddrBlock: critical IPv4: 131.225.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:af:0a:cc:a8:d4:ad:74:ce:de:6d:bf:16:ce:3b:83:b5:84: 52:4b:79:20:97:dc:8a:7f:13:8c:90:16:d5:01:39:d9:35:3f: 9b:74:b9:dc:14:e5:2c:18:2c:58:84:21:b4:3a:c9:ba:ca:81: 61:6c:c4:61:40:43:4b:dc:df:75:6b:ac:0d:0b:68:d1:b4:23: 2c:27:fb:04:29:e6:fe:2e:1a:48:df:22:fe:d7:66:21:de:0e: f9:8e:df:25:15:1e:4e:84:69:7e:ed:08:04:83:2e:b6:ba:b9: 48:63:19:37:0f:40:dd:26:04:a7:a5:98:35:77:25:25:1b:4b: 99:b7:9b:7e:9d:c9:5c:d9:b1:ee:7a:76:25:83:7a:cf:ec:6b: 84:82:54:83:53:51:ea:3f:ed:49:c7:24:a2:67:91:57:cf:6f: 28:5a:bd:f1:16:fb:69:5c:d8:f7:e9:86:0c:39:d2:d2:62:f8: dd:88:14:32:0d:69:45:e0:72:c0:2a:5a:32:20:1b:9b:08:10: ac:9a:a5:8e:8e:81:40:f2:63:27:c1:ad:c9:91:bc:e0:7d:fa: 95:ea:8b:6c:54:65:2f:3e:ff:3d:33:cb:ca:71:57:c6:3e:cf: 2c:6e:fb:50:a4:76:39:87:28:4a:b9:14:c3:d7:ab:b1:c5:e9: cc:44:72:fd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0HrP5QioMpjhIb50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx ZTQ5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MGY2NTllMTItYjg1YS00MDVmLWFiZGQtZjNjNjhkZGZmNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UU9DFsZw5bsDHDgXO16cP3vbUSQURxdziMz sI3GBFlN8BKTMbkOKmZrQxbSHdQyradcEwvxirtC4UeLJx1lovmVCyLrdc7Gg4/S 6m64aMsh718m0N/D8QZBbnde8XaG6FWoCE/X7L4iciNPmwdleOVsekgkbzqeoWo9 Zl/JaN6UvixAZrzs3866NWTys/UBwoBdvz74b1GwtZAxTdKKDkcEvB2+X97npcVs vVlEGsVI/MfL7VXWVgzy627mDizCuXDqNO+PBVlJaSxeQkU5N7tEZSPnkjpwa+nZ rpoxQp+sXZYppaNpwnVwzjL/W7gLryLFQOFXmZEsJzwvbywvpwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCEU1NGtOfhA/xYQ1qGsQFqLURsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvYTY0YmYzOGYtOTI1YS0z NGJiLWIyMTMtOWFiYWMyMzhkMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1 NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk N2FhMjFlNDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg+EwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAsa8KzKjUrXTO3m2/Fs47g7WEUkt5IJfcin8TjJAW1QE52TU/m3S53BTl LBgsWIQhtDrJusqBYWzEYUBDS9zfdWusDQto0bQjLCf7BCnm/i4aSN8i/tdmId4O +Y7fJRUeToRpfu0IBIMutrq5SGMZNw9A3SYEp6WYNXclJRtLmbebfp3JXNmx7np2 JYN6z+xrhIJUg1NR6j/tScckomeRV89vKFq98Rb7aVzY9+mGDDnS0mL43YgUMg1p ReBywCpaMiAbmwgQrJqljo6BQPJjJ8GtyZG84H36leqLbFRlLz7/PTPLynFXxj7P LG77UKR2OYcoSrkUw9erscXpzERy/Q== -----END CERTIFICATE-----Generated at Mon Mar 2 12:38:18 2026 by rpki-client