$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa File: 28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa (raw, json) Hash identifier: 98e1ydRripKTA7tZpu7FdIvbR5xwJ7SQ5wCvBHaVcnc= Subject key identifier: C8:41:3E:CD:AE:E1:17:83:EF:9A:92:45:03:DB:C3:CD:60:E7:EE:0E Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584F698D6BBCD9F4D81F78F43180 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 131.229.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:6b:bc:d9:f4:d8:1f:78:f4:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=dfef5d13-447e-47d6-a544-dc994b64476d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:53:ee:23:15:b9:1b:54:43:10:34:cb:33:fc: c9:ab:5f:bd:a4:9b:5b:b4:a0:24:9f:28:20:ab:4b: 6c:70:85:9f:6d:73:b5:a8:e4:52:8d:1e:a1:b6:ce: 2b:9c:7a:af:91:16:f9:83:34:be:a0:49:d0:f2:46: d7:57:72:5a:6e:85:c6:f3:bd:44:00:ea:6d:ff:95: d8:9b:2e:8a:96:a3:33:11:22:74:c1:06:08:0d:0f: 15:f4:ff:90:ff:ef:3a:f0:89:8e:b6:eb:66:b0:7f: 27:2a:04:0e:d4:58:04:4d:2b:35:9b:2a:cb:29:3f: 47:77:f7:74:78:bf:11:80:1e:1b:64:94:3f:22:7f: 3a:b7:c9:63:c9:ea:fc:88:e7:8b:61:cc:28:ec:1a: 20:c0:3a:b7:15:4a:aa:f4:96:55:32:c2:8e:80:72: b0:ec:d5:2d:af:10:00:47:70:e2:d3:05:1c:cd:27: 4e:29:11:6b:d2:46:d6:2b:68:15:8c:b2:59:8b:b3: da:50:a6:3d:bf:3c:65:78:d9:e1:eb:02:50:ee:84: 83:c4:ac:f1:6a:df:7d:24:4f:b5:a6:ba:fc:27:68: b8:1b:ed:bc:17:17:9c:5c:eb:3b:f2:4a:c8:0e:2a: 19:dc:9c:ee:22:fd:c5:ac:44:0e:9d:df:31:e3:ac: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:41:3E:CD:AE:E1:17:83:EF:9A:92:45:03:DB:C3:CD:60:E7:EE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0c:38:7c:50:ce:2e:0e:71:a3:fb:4c:09:6c:10:e0:20:62: 7f:aa:a3:e7:20:c9:4c:69:ff:e6:6e:20:76:3d:51:f3:ed:22: f5:0a:00:51:c6:12:dd:66:3b:ce:0a:9c:71:1f:70:49:65:66: f9:b1:7a:7d:de:c0:9b:bd:15:67:f9:42:bb:68:dc:6b:23:bf: bc:13:34:de:61:8c:68:71:9a:6d:ea:09:88:99:1f:da:6f:08: e5:15:42:13:4e:e2:09:60:21:d8:e4:b7:40:ef:34:fe:24:9b: aa:6a:03:9f:40:e7:5d:97:3d:c0:ab:1b:bb:4f:b2:b6:6c:c8: 7f:e8:5a:a5:6d:9b:d7:4a:9a:a5:a8:56:e3:d7:5b:57:72:cb: 1b:fd:2b:53:51:8d:3c:ed:db:52:f0:9d:89:c5:dd:2f:18:b1: 12:71:eb:b0:c5:c7:6e:65:d7:8e:00:72:d3:36:a5:a9:67:a7: 94:82:97:4a:6d:99:6d:e8:8e:c4:78:11:b6:05:fb:f9:5f:f4: c8:c5:e5:1d:82:c1:cd:10:a9:a5:6d:8a:44:d8:2a:79:56:bb: b1:05:06:01:b3:e7:0a:5c:8f:13:e3:73:7a:a1:7a:1b:c0:ba: 1a:8e:47:a5:d8:ae:76:ca:0e:1b:55:c8:c1:f7:28:86:37:ef: 34:89:8d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjWu82fTYH3j0MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZGZlZjVkMTMtNDQ3ZS00N2Q2LWE1NDQtZGM5OTRiNjQ0NzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lPuIxW5G1RDEDTLM/zJq1+9pJtbtKAknygg q0tscIWfbXO1qORSjR6hts4rnHqvkRb5gzS+oEnQ8kbXV3JaboXG871EAOpt/5XY my6KlqMzESJ0wQYIDQ8V9P+Q/+868ImOtutmsH8nKgQO1FgETSs1myrLKT9Hd/d0 eL8RgB4bZJQ/In86t8ljyer8iOeLYcwo7BogwDq3FUqq9JZVMsKOgHKw7NUtrxAA R3Di0wUczSdOKRFr0kbWK2gVjLJZi7PaUKY9vzxleNnh6wJQ7oSDxKzxat99JE+1 prr8J2i4G+28FxecXOs78krIDioZ3JzuIv3FrEQOnd8x46wtLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhBPs2u4ReD75qSRQPbw81g5+4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMjhjNzhjYWEtODBmZS0z ZWY4LThjOWItYzk4ZDcxM2VhZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoMOHxQzi4OcaP7TAlsEOAgYn+qo+cgyUxp/+ZuIHY9UfPtIvUKAFHG Et1mO84KnHEfcEllZvmxen3ewJu9FWf5Qrto3Gsjv7wTNN5hjGhxmm3qCYiZH9pv COUVQhNO4glgIdjkt0DvNP4km6pqA59A512XPcCrG7tPsrZsyH/oWqVtm9dKmqWo VuPXW1dyyxv9K1NRjTzt21LwnYnF3S8YsRJx67DFx25l144ActM2palnp5SCl0pt mW3ojsR4EbYF+/lf9MjF5R2Cwc0QqaVtikTYKnlWu7EFBgGz5wpcjxPjc3qhehvA uhqOR6XYrnbKDhtVyMH3KIY37zSJjXs= -----END CERTIFICATE-----Generated at Sat Oct 10 10:00:18 2026 by rpki-client