$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/2356dd69-9e73-32bf-9ea7-b58042dec355.roa File: 2356dd69-9e73-32bf-9ea7-b58042dec355.roa (raw, json) Hash identifier: R7W8JPY8yx/ngkgd5IRnkaNYbEFch/vElQivwHQT6wk= Subject key identifier: 36:5F:62:83:2C:C9:63:7F:42:41:AE:AD:D1:48:55:4B:5C:66:F7:59 Certificate issuer: /CN=8f3c7d65-1451-4936-b2db-39ad3eca6bde Certificate serial: 010D0C9F4328584F189798EC07752E1F5A3980C0 Authority key identifier: F2:44:02:53:B8:5A:29:4D:EC:C9:3C:32:AF:A8:BE:68:5D:6C:0C:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/2356dd69-9e73-32bf-9ea7-b58042dec355.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 400637 IP address blocks: 131.143.44.0/23 maxlen: 32 142.147.75.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:98:ec:07:75:2e:1f:5a:39:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3c7d65-1451-4936-b2db-39ad3eca6bde Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=b9e3e5b4-bd47-4af0-84d1-6a60814ea8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:39:c2:97:7c:03:53:0c:ec:61:24:23:5f: 18:b1:da:c5:a4:e1:1e:7c:dd:e8:aa:25:3a:3f:d6: dd:93:6e:a3:bc:75:b9:49:06:da:58:ea:46:7d:2f: b6:9e:32:8c:53:ea:97:b1:46:39:5a:c6:b7:83:7b: 11:e7:4a:d6:17:a7:f5:68:76:a9:52:26:b0:18:ab: f6:88:53:65:6a:24:cd:f4:22:e8:b5:44:5b:63:83: cd:23:2a:b9:89:2a:b5:cd:6d:3a:8f:47:4c:d2:7c: 62:b6:db:76:5a:3a:ba:10:72:1f:0b:2c:f7:6b:e5: f1:61:ad:cc:8d:e3:3a:73:61:89:8c:64:56:11:b0: ca:f4:2d:41:41:73:b4:92:6e:e2:a7:52:7f:3d:75: d5:b1:9a:00:3e:ae:55:e5:3a:3a:43:65:e0:eb:e8: 73:08:5b:a1:df:83:dc:56:53:4f:36:38:9c:e1:4c: 99:1a:32:e7:a2:98:76:07:33:b0:e8:b4:c9:ff:07: af:7e:86:5c:6f:5e:2a:81:8d:af:f7:86:a6:b1:74: b0:3d:29:b8:99:9e:d2:de:44:3a:f5:6b:73:50:65: 20:6d:6f:42:35:93:93:cc:9f:31:cf:a5:8e:16:45: 12:57:c2:42:21:1d:d3:60:4d:f6:15:06:f3:07:ab: ac:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5F:62:83:2C:C9:63:7F:42:41:AE:AD:D1:48:55:4B:5C:66:F7:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/2356dd69-9e73-32bf-9ea7-b58042dec355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.crl X509v3 Authority Key Identifier: keyid:F2:44:02:53:B8:5A:29:4D:EC:C9:3C:32:AF:A8:BE:68:5D:6C:0C:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer sbgp-ipAddrBlock: critical IPv4: 131.143.44.0/23 142.147.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:78:4d:0a:45:47:c5:65:3c:4a:e9:59:1d:f7:32:a5:dd:38: d7:26:90:a9:92:e6:e6:09:9e:0b:04:54:26:20:c3:f8:34:fe: 46:a3:c9:3a:ec:aa:6f:1f:c6:cc:0b:cf:cd:35:5b:4c:99:21: da:69:95:c7:62:35:32:98:26:7f:25:c2:39:ce:06:fc:8e:a5: 50:47:a2:c9:a8:1a:e7:d1:fc:d8:ac:83:81:48:3c:1f:e9:b7: c0:89:bc:86:c9:8a:b6:4b:7a:fe:4d:02:fd:43:c7:95:c4:5e: d7:1e:7d:00:26:f4:62:14:35:98:29:c5:07:c1:87:f8:fa:42: b1:ab:85:55:f1:70:5c:60:7f:f2:2a:a5:c7:70:30:d2:69:72: d2:67:13:ba:4d:e4:5e:e8:7e:a4:70:e8:cc:62:aa:be:cf:bb: 64:f1:70:ab:63:78:3c:0f:ee:0f:21:b4:65:48:3d:de:20:a6: 88:8f:75:14:2f:26:1e:bc:cb:e1:48:40:22:ee:77:6b:7c:05: b9:9f:0a:9d:15:41:b8:66:0c:47:31:ec:73:a5:af:86:18:76: dc:a5:ec:41:53:bc:47:29:ff:02:a3:9e:0e:d7:8f:0d:25:33: c1:e2:8e:4b:7b:f8:47:e5:c4:07:79:c0:c6:12:55:b2:38:0c: be:77:a9:19 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8Yl5jsB3UuH1o5gMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYzYzdkNjUtMTQ1MS00OTM2LWIyZGItMzlhZDNlY2E2 YmRlMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YjllM2U1YjQtYmQ0Ny00YWYwLTg0ZDEtNmE2MDgxNGVhOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz45wpd8A1MM7GEkI18YsdrFpOEefN3oqiU6 P9bdk26jvHW5SQbaWOpGfS+2njKMU+qXsUY5Wsa3g3sR50rWF6f1aHapUiawGKv2 iFNlaiTN9CLotURbY4PNIyq5iSq1zW06j0dM0nxittt2Wjq6EHIfCyz3a+XxYa3M jeM6c2GJjGRWEbDK9C1BQXO0km7ip1J/PXXVsZoAPq5V5To6Q2Xg6+hzCFuh34Pc VlNPNjic4UyZGjLnoph2BzOw6LTJ/wevfoZcb14qgY2v94amsXSwPSm4mZ7S3kQ6 9WtzUGUgbW9CNZOTzJ8xz6WOFkUSV8JCIR3TYE32FQbzB6us7wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDZfYoMsyWN/QkGurdFIVUtcZvdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZjNj N2Q2NS0xNDUxLTQ5MzYtYjJkYi0zOWFkM2VjYTZiZGUvMjM1NmRkNjktOWU3My0z MmJmLTllYTctYjU4MDQyZGVjMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGYzYzdkNjUtMTQ1MS00OTM2LWIy ZGItMzlhZDNlY2E2YmRlLzhmM2M3ZDY1LTE0NTEtNDkzNi1iMmRiLTM5YWQzZWNh NmJkZS5jcmwwHwYDVR0jBBgwFoAU8kQCU7haKU3syTwyr6i+aF1sDEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZjNjN2Q2NS0xNDUxLTQ5MzYtYjJkYi0zOWFk M2VjYTZiZGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBg48sAwQA jpNLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEd4TQpFR8VlPErpWR33MqXdONcmkKmS5uYJngsEVCYgw/g0 /kajyTrsqm8fxswLz801W0yZIdpplcdiNTKYJn8lwjnOBvyOpVBHosmoGufR/Nis g4FIPB/pt8CJvIbJirZLev5NAv1Dx5XEXtcefQAm9GIUNZgpxQfBh/j6QrGrhVXx cFxgf/IqpcdwMNJpctJnE7pN5F7ofqRw6Mxiqr7Pu2TxcKtjeDwP7g8htGVIPd4g poiPdRQvJh68y+FIQCLud2t8BbmfCp0VQbhmDEcx7HOlr4YYdtyl7EFTvEcp/wKj ng7Xjw0lM8Hijkt7+EflxAd5wMYSVbI4DL53qRk= -----END CERTIFICATE-----Generated at Wed Sep 16 15:56:13 2026 by rpki-client