$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa File: 32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa (raw, json) Hash identifier: tF68cdYO9ssq+pj1mN5k8ttvvbc/YoMfG8pwXdbGek8= Subject key identifier: A7:19:EB:34:BC:6B:12:05:B9:3B:12:0F:EB:F6:02:2B:52:61:C5:39 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584F4988EB684DD210E815094F80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203724 IP address blocks: 131.229.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:eb:68:4d:d2:10:e8:15:09:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3fe28a80-ff18-4c41-ae80-60209247f5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6c:74:8a:e3:7a:ad:bd:6e:67:aa:a8:96:3b: 5e:3d:80:f0:08:14:50:4a:db:d0:e2:54:42:22:d2: db:81:a0:62:37:84:ad:99:e7:cc:e5:d4:0d:9b:90: 45:ab:dc:d5:09:b2:91:fe:c1:c5:21:d7:be:dd:79: 47:4f:b2:b7:9b:14:ef:59:a0:a7:f0:29:71:c8:81: 19:65:9c:2d:10:53:85:24:f7:3a:5f:72:53:87:33: 2e:db:15:17:ce:61:36:f4:11:7a:fa:fb:6d:ba:4d: 27:00:6b:dc:92:b8:45:8c:33:a9:7a:45:d2:b2:0f: a3:2d:9c:81:25:0b:03:2e:9a:aa:aa:19:12:69:82: 78:5f:d1:f8:a3:b8:e8:5a:02:df:49:db:56:b0:70: c3:05:1a:d5:24:e2:fe:28:f0:c4:b2:31:c8:2e:df: f9:8c:dd:8b:fc:51:34:70:4c:43:89:81:a6:38:38: b8:5d:48:cb:c5:4e:1b:10:d2:9c:e8:f8:82:29:26: a8:ef:f9:58:85:e3:75:fc:29:7c:9a:a8:91:47:37: 21:a9:2c:72:ec:b4:ec:b7:09:47:c3:5f:1b:8c:f3: 6e:54:25:0d:90:ce:6b:a5:09:b4:5a:48:16:bb:c9: 07:4e:af:0e:f7:8a:d3:9b:73:26:9c:4e:43:d4:56: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:19:EB:34:BC:6B:12:05:B9:3B:12:0F:EB:F6:02:2B:52:61:C5:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/32be8570-d1aa-3195-b1f3-52d8e51d8c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bf:ba:ed:91:3f:bc:fe:ce:d3:a6:45:8a:bd:c4:8c:b0:de: b0:36:89:f9:2c:bd:87:f4:7e:ff:37:df:28:44:c1:9a:63:1a: dc:f5:e6:06:d4:69:22:c4:2e:26:c8:83:c3:d6:7a:18:a2:78: 34:21:da:3d:3a:7e:af:95:9e:50:a3:eb:17:48:ea:0a:95:54: 84:e5:25:56:1b:c0:ab:7e:75:d5:c2:d2:2d:52:e0:ea:95:97: f2:e9:3a:87:9d:2c:97:9e:a6:c6:bc:94:d2:d4:a0:e7:0b:42: 96:07:09:a5:e7:d7:9d:3f:2f:e0:85:55:2c:5e:3b:ec:2c:db: 81:85:a5:a1:82:6c:a2:3a:08:57:ed:39:bf:6f:1b:32:16:70: fb:84:05:3d:3e:98:f8:e4:56:ca:47:45:ea:82:ed:45:91:c3: 17:13:2e:f3:29:42:c9:17:a6:e0:3a:52:2b:9c:d3:e3:8d:54: b2:a2:b7:ad:69:02:11:5e:52:47:21:75:f3:7b:b2:82:a5:59: f2:a9:fc:a6:7b:fa:15:10:0c:a7:63:52:43:4d:ad:6b:e7:d4: fb:63:7b:83:6d:cc:3c:0c:c6:88:71:86:0b:56:1c:4a:1f:05: a2:c4:0a:13:d4:b3:9a:00:21:78:ab:2b:bd:36:9a:f0:3c:67: c6:f5:f2:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiOtoTdIQ6BUJT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ZlMjhhODAtZmYxOC00YzQxLWFlODAtNjAyMDkyNDdmNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmx0iuN6rb1uZ6qoljtePYDwCBRQStvQ4lRC ItLbgaBiN4StmefM5dQNm5BFq9zVCbKR/sHFIde+3XlHT7K3mxTvWaCn8ClxyIEZ ZZwtEFOFJPc6X3JThzMu2xUXzmE29BF6+vttuk0nAGvckrhFjDOpekXSsg+jLZyB JQsDLpqqqhkSaYJ4X9H4o7joWgLfSdtWsHDDBRrVJOL+KPDEsjHILt/5jN2L/FE0 cExDiYGmODi4XUjLxU4bENKc6PiCKSao7/lYheN1/Cl8mqiRRzchqSxy7LTstwlH w18bjPNuVCUNkM5rpQm0WkgWu8kHTq8O94rTm3MmnE5D1FZjdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcZ6zS8axIFuTsSD+v2AitSYcU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzJiZTg1NzAtZDFhYS0z MTk1LWIxZjMtNTJkOGU1MWQ4YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC/uu2RP7z+ztOmRYq9xIyw3rA2ifksvYf0fv833yhEwZpjGtz15gbU aSLELibIg8PWehiieDQh2j06fq+VnlCj6xdI6gqVVITlJVYbwKt+ddXC0i1S4OqV l/LpOoedLJeepsa8lNLUoOcLQpYHCaXn150/L+CFVSxeO+ws24GFpaGCbKI6CFft Ob9vGzIWcPuEBT0+mPjkVspHReqC7UWRwxcTLvMpQskXpuA6Uiuc0+ONVLKit61p AhFeUkchdfN7soKlWfKp/KZ7+hUQDKdjUkNNrWvn1Ptje4NtzDwMxohxhgtWHEof BaLEChPUs5oAIXirK702mvA8Z8b18nw= -----END CERTIFICATE-----Generated at Sat Sep 26 06:47:34 2026 by rpki-client