$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337/8d45b4be-6ac8-3007-91f0-eb6e5e612224.roa File: 8d45b4be-6ac8-3007-91f0-eb6e5e612224.roa (raw, json) Hash identifier: oe+0d+z6NYbn0jqFai0QyqVkK9jkHrjJadgsrSFYDD4= Subject key identifier: 2D:EC:B6:6D:38:39:27:07:B0:D3:96:96:5A:A3:AA:D4:76:C2:0A:E0 Certificate issuer: /CN=9a2e3f1b-2744-4836-add1-df84bd7c8337 Certificate serial: 010D0C9F4328584F9007B559B9FD0197AF871D80 Authority key identifier: 4B:39:5C:8D:E5:8A:59:F9:50:0E:C8:79:C5:10:09:45:BE:46:B4:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337/8d45b4be-6ac8-3007-91f0-eb6e5e612224.roa Signing time: Tue 20 Oct 2026 07:47:23 +0000 ROA not before: Tue 20 Oct 2026 07:47:23 +0000 ROA not after: Mon 18 Jan 2027 08:47:23 +0000 asID: 400130 IP address blocks: 131.143.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337/9a2e3f1b-2744-4836-add1-df84bd7c8337.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337/9a2e3f1b-2744-4836-add1-df84bd7c8337.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:07:b5:59:b9:fd:01:97:af:87:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a2e3f1b-2744-4836-add1-df84bd7c8337 Validity Not Before: Oct 20 07:47:23 2026 GMT Not After : Jan 18 08:47:23 2027 GMT Subject: CN=5e7d01ad-4ab6-4f2d-8ba5-7774c833fe26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:40:a6:9a:cd:44:dd:03:5d:20:9e:ed:d7: c5:f0:74:d7:cb:54:af:64:af:93:d5:7e:32:a1:62: cb:c5:fd:9c:ff:6d:17:1e:03:46:7e:e5:4f:aa:4c: d9:6d:06:44:52:49:33:72:53:24:c8:18:fe:8f:6c: e9:6f:a2:0f:1b:8a:ae:21:80:f3:ab:85:64:e0:54: cb:de:7f:06:1f:a7:61:ad:94:ce:dd:0f:98:ff:bb: 29:56:3d:bd:a7:7a:49:e8:20:02:d5:d7:2e:a5:e6: e6:13:a0:8c:2d:27:c3:96:e6:f3:2c:bd:06:ef:a4: a4:aa:33:82:56:6b:8a:10:51:65:94:a8:20:75:71: 2c:d8:32:3b:a0:50:e6:d7:4e:fb:c4:d0:cd:24:22: aa:a5:79:12:c7:d6:d4:b8:43:e3:bb:08:e3:e1:d3: 16:f8:4e:fb:39:48:95:f7:eb:22:78:31:81:6c:03: 99:1a:46:75:fd:e5:9b:d2:d5:c4:cb:df:d7:6e:aa: d4:ef:0b:df:24:86:7f:5a:c8:23:42:3b:ff:f1:bb: 30:94:9c:00:71:a1:67:79:aa:42:4e:a2:be:5d:c6: fd:cd:53:4b:bc:09:6b:f1:7f:e2:40:fd:9a:e0:c9: 68:7b:87:0a:2b:06:6c:17:59:9f:0d:50:e8:f5:ec: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EC:B6:6D:38:39:27:07:B0:D3:96:96:5A:A3:AA:D4:76:C2:0A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337/8d45b4be-6ac8-3007-91f0-eb6e5e612224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337/9a2e3f1b-2744-4836-add1-df84bd7c8337.crl X509v3 Authority Key Identifier: keyid:4B:39:5C:8D:E5:8A:59:F9:50:0E:C8:79:C5:10:09:45:BE:46:B4:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337.cer sbgp-ipAddrBlock: critical IPv4: 131.143.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:ff:4a:43:2f:e3:9a:22:7f:f1:a7:20:d5:dc:f2:f1:10:ba: cd:8e:cb:ca:08:2b:9e:73:ab:2e:dc:62:e9:0c:64:5a:7c:b6: 9e:f5:83:4a:4f:61:5b:cc:e9:21:be:fb:1c:b1:7e:a5:c5:5f: 18:ea:50:9d:b0:76:a8:af:33:f3:27:4a:26:84:09:09:de:a3: 0c:aa:7c:34:f9:0c:e4:97:38:2b:dc:f2:36:3d:0c:7b:9d:ed: 44:b7:d0:13:52:00:05:e9:7d:03:ca:05:98:2c:35:a3:8b:95: f6:4d:65:3f:89:89:3f:a0:87:0d:d1:f6:09:62:d9:b4:58:07: dd:cc:fb:e7:b7:77:2e:91:21:54:f7:95:00:45:7b:34:fe:66: 61:4c:17:85:5c:3e:eb:db:3a:b6:ef:c1:cb:a1:03:2e:1c:da: bd:12:1d:a4:fc:f0:04:c1:50:5c:a8:7e:99:ed:39:8c:71:db: 6a:8a:46:08:5a:95:5b:af:1b:42:fc:74:7b:f3:12:20:78:f0: f1:1d:47:2b:2c:c4:39:25:4a:25:03:8c:80:8b:cb:e6:e5:a4: 7c:d5:22:fa:46:72:38:2e:fc:5c:68:65:33:4d:0d:e7:9a:68: 96:20:18:ec:be:c9:38:3c:6c:64:fd:87:ff:c5:ea:75:78:37: 3b:aa:4f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QB7VZuf0Bl6+HHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEyZTNmMWItMjc0NC00ODM2LWFkZDEtZGY4NGJkN2M4 MzM3MB4XDTI2MTAyMDA3NDcyM1oXDTI3MDExODA4NDcyM1owLzEtMCsGA1UEAxMk NWU3ZDAxYWQtNGFiNi00ZjJkLThiYTUtNzc3NGM4MzNmZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYRApprNRN0DXSCe7dfF8HTXy1SvZK+T1X4y oWLLxf2c/20XHgNGfuVPqkzZbQZEUkkzclMkyBj+j2zpb6IPG4quIYDzq4Vk4FTL 3n8GH6dhrZTO3Q+Y/7spVj29p3pJ6CAC1dcupebmE6CMLSfDlubzLL0G76SkqjOC VmuKEFFllKggdXEs2DI7oFDm1077xNDNJCKqpXkSx9bUuEPjuwjj4dMW+E77OUiV 9+sieDGBbAOZGkZ1/eWb0tXEy9/XbqrU7wvfJIZ/WsgjQjv/8bswlJwAcaFneapC TqK+Xcb9zVNLvAlr8X/iQP2a4Mloe4cKKwZsF1mfDVDo9ex1HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3stm04OScHsNOWllqjqtR2wgrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85YTJl M2YxYi0yNzQ0LTQ4MzYtYWRkMS1kZjg0YmQ3YzgzMzcvOGQ0NWI0YmUtNmFjOC0z MDA3LTkxZjAtZWI2ZTVlNjEyMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOWEyZTNmMWItMjc0NC00ODM2LWFk ZDEtZGY4NGJkN2M4MzM3LzlhMmUzZjFiLTI3NDQtNDgzNi1hZGQxLWRmODRiZDdj ODMzNy5jcmwwHwYDVR0jBBgwFoAUSzlcjeWKWflQDsh5xRAJRb5GtEIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85YTJlM2YxYi0yNzQ0LTQ4MzYtYWRkMS1kZjg0 YmQ3YzgzMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg49ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALD/SkMv45oif/GnINXc8vEQus2Oy8oIK55zqy7cYukMZFp8tp71g0pP YVvM6SG++xyxfqXFXxjqUJ2wdqivM/MnSiaECQneowyqfDT5DOSXOCvc8jY9DHud 7US30BNSAAXpfQPKBZgsNaOLlfZNZT+JiT+ghw3R9gli2bRYB93M++e3dy6RIVT3 lQBFezT+ZmFMF4VcPuvbOrbvwcuhAy4c2r0SHaT88ATBUFyofpntOYxx22qKRgha lVuvG0L8dHvzEiB48PEdRyssxDklSiUDjICLy+blpHzVIvpGcjgu/FxoZTNNDeea aJYgGOy+yTg8bGT9h//F6nV4NzuqT+M= -----END CERTIFICATE-----Generated at Sun Nov 1 17:32:38 2026 by rpki-client