$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2b66df92-0069-4b94-a4fa-f9753733781d/9aedcc30-22b0-3f8e-85a7-d804117d4721.roa File: 9aedcc30-22b0-3f8e-85a7-d804117d4721.roa (raw, json) Hash identifier: TZK3vh5BlJiuVXtqVJC1R27hJ/55sBfyK2CtTyCgiCs= Subject key identifier: 9C:CA:E1:74:0B:F5:BA:33:CD:2B:C9:F7:23:FE:53:DD:61:64:A0:DD Certificate issuer: /CN=2b66df92-0069-4b94-a4fa-f9753733781d Certificate serial: 010D0C9F4328584DAD8ED7272FC074B8E2DDFB80 Authority key identifier: F1:F6:F2:06:07:1D:FC:8D:E9:8B:F7:A1:D1:3E:A9:2A:EE:7F:6E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2b66df92-0069-4b94-a4fa-f9753733781d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2b66df92-0069-4b94-a4fa-f9753733781d/9aedcc30-22b0-3f8e-85a7-d804117d4721.roa Signing time: Thu 30 Apr 2026 12:04:14 +0000 ROA not before: Thu 30 Apr 2026 12:04:14 +0000 ROA not after: Wed 29 Jul 2026 12:04:14 +0000 asID: 16509 IP address blocks: 131.143.28.0/24 maxlen: 24 209.209.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2b66df92-0069-4b94-a4fa-f9753733781d/2b66df92-0069-4b94-a4fa-f9753733781d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2b66df92-0069-4b94-a4fa-f9753733781d/2b66df92-0069-4b94-a4fa-f9753733781d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2b66df92-0069-4b94-a4fa-f9753733781d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:8e:d7:27:2f:c0:74:b8:e2:dd:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b66df92-0069-4b94-a4fa-f9753733781d Validity Not Before: Apr 30 12:04:14 2026 GMT Not After : Jul 29 12:04:14 2026 GMT Subject: CN=0aa8751e-ce26-4cb4-8464-4857de298076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:e8:d2:6a:5a:cd:07:f0:a2:d6:ba:64:df: 17:2c:a5:a9:07:7b:3d:b6:bb:0d:ed:1f:63:77:1a: 85:dc:fc:3b:50:d4:bf:72:ed:c5:d0:19:73:26:1f: 8c:44:b5:ae:5c:be:bb:5b:e4:54:00:82:cd:34:60: 5f:5a:75:22:08:8b:47:53:79:44:f5:02:c8:0f:3f: e0:78:00:3f:1e:cc:2f:d5:4a:87:5f:59:b3:db:d7: 40:46:09:49:18:e5:1c:6a:76:cf:ca:39:b6:c2:41: 87:1f:24:c1:9a:4d:a3:4e:77:97:06:1c:3a:63:73: 6e:12:e8:13:c8:c2:5f:3c:b9:ec:22:f0:73:4f:46: 03:f1:ea:de:66:2e:59:d1:fe:68:cc:21:86:e0:27: ea:3d:32:07:b5:d2:29:11:65:6d:cc:d7:68:b9:14: 9b:91:77:eb:bd:0d:e8:38:8b:19:77:cf:08:7e:e0: 50:15:31:cc:e1:e1:c1:3d:4a:06:32:89:9d:00:95: 0c:b8:88:2e:93:28:fd:0e:da:af:76:34:cd:77:dc: cc:e7:00:8f:e2:a2:9f:09:99:94:01:9c:47:c4:0f: 4f:86:7a:ec:f5:70:b2:d8:5d:cc:0a:12:a9:83:af: de:07:03:4c:34:87:6f:3e:7f:59:75:9a:6c:35:67: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CA:E1:74:0B:F5:BA:33:CD:2B:C9:F7:23:FE:53:DD:61:64:A0:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2b66df92-0069-4b94-a4fa-f9753733781d/9aedcc30-22b0-3f8e-85a7-d804117d4721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2b66df92-0069-4b94-a4fa-f9753733781d/2b66df92-0069-4b94-a4fa-f9753733781d.crl X509v3 Authority Key Identifier: keyid:F1:F6:F2:06:07:1D:FC:8D:E9:8B:F7:A1:D1:3E:A9:2A:EE:7F:6E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2b66df92-0069-4b94-a4fa-f9753733781d.cer sbgp-ipAddrBlock: critical IPv4: 131.143.28.0/24 209.209.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4b:cf:8e:ba:b5:30:f7:96:eb:10:6f:7c:b2:f6:f8:5a:d7: 11:9e:93:4d:95:81:17:11:0f:aa:2c:72:35:a9:c0:26:fe:6f: ea:99:19:19:b9:97:29:71:42:38:1f:be:28:4a:a6:b5:f5:31: 48:67:cb:c1:50:66:85:4f:89:ac:fd:44:8c:c7:36:4d:e4:b2: bd:3f:1b:b4:1e:66:9a:74:8f:59:56:a0:e8:e5:cb:35:2d:1e: 47:6d:d3:ff:7e:f8:6d:43:f2:95:ce:62:14:7c:4e:af:aa:2a: 8f:ab:5b:fc:23:c3:55:53:ef:7d:9e:bb:19:70:49:ae:04:83: 24:7c:80:20:d8:8a:a4:e5:b1:15:97:c0:90:72:82:e5:b7:0d: dd:aa:8e:e2:b5:8c:0a:d0:ca:06:35:f3:29:bd:57:90:7f:a3: 24:ba:fc:b6:ab:81:0a:86:5b:89:e9:3e:7b:12:5f:e5:dc:d7: 1b:be:b3:cd:b7:2a:30:15:db:83:2b:be:d8:f4:11:ff:ff:60: 89:de:53:e4:94:cc:3a:15:0f:fd:18:b0:0d:10:f2:99:46:dd: 4f:22:96:19:a9:8e:d7:a6:67:5b:b3:87:02:ce:73:31:f0:d7: 8c:bc:2a:fe:37:bd:ac:d6:2b:59:ae:de:28:38:34:24:c1:4b: c6:3a:a1:52 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2tjtcnL8B0uOLd+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI2NmRmOTItMDA2OS00Yjk0LWE0ZmEtZjk3NTM3MzM3 ODFkMB4XDTI2MDQzMDEyMDQxNFoXDTI2MDcyOTEyMDQxNFowLzEtMCsGA1UEAxMk MGFhODc1MWUtY2UyNi00Y2I0LTg0NjQtNDg1N2RlMjk4MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArALo0mpazQfwota6ZN8XLKWpB3s9trsN7R9j dxqF3Pw7UNS/cu3F0BlzJh+MRLWuXL67W+RUAILNNGBfWnUiCItHU3lE9QLIDz/g eAA/Hswv1UqHX1mz29dARglJGOUcanbPyjm2wkGHHyTBmk2jTneXBhw6Y3NuEugT yMJfPLnsIvBzT0YD8ereZi5Z0f5ozCGG4CfqPTIHtdIpEWVtzNdouRSbkXfrvQ3o OIsZd88IfuBQFTHM4eHBPUoGMomdAJUMuIgukyj9DtqvdjTNd9zM5wCP4qKfCZmU AZxHxA9Phnrs9XCy2F3MChKpg6/eBwNMNIdvPn9ZdZpsNWfxQwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJzK4XQL9bozzSvJ9yP+U91hZKDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yYjY2 ZGY5Mi0wMDY5LTRiOTQtYTRmYS1mOTc1MzczMzc4MWQvOWFlZGNjMzAtMjJiMC0z ZjhlLTg1YTctZDgwNDExN2Q0NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmI2NmRmOTItMDA2OS00Yjk0LWE0 ZmEtZjk3NTM3MzM3ODFkLzJiNjZkZjkyLTAwNjktNGI5NC1hNGZhLWY5NzUzNzMz NzgxZC5jcmwwHwYDVR0jBBgwFoAU8fbyBgcd/I3pi/eh0T6pKu5/bqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yYjY2ZGY5Mi0wMDY5LTRiOTQtYTRmYS1mOTc1 MzczMzc4MWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg48cAwQA 0dEZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHNLz466tTD3lusQb3yy9vha1xGek02VgRcRD6oscjWpwCb+ b+qZGRm5lylxQjgfvihKprX1MUhny8FQZoVPiaz9RIzHNk3ksr0/G7QeZpp0j1lW oOjlyzUtHkdt0/9++G1D8pXOYhR8Tq+qKo+rW/wjw1VT732euxlwSa4EgyR8gCDY iqTlsRWXwJByguW3Dd2qjuK1jArQygY18ym9V5B/oyS6/LargQqGW4npPnsSX+Xc 1xu+s823KjAV24Mrvtj0Ef//YIneU+SUzDoVD/0YsA0Q8plG3U8ilhmpjtemZ1uz hwLOczHw14y8Kv43vazWK1mu3ig4NCTBS8Y6oVI= -----END CERTIFICATE-----Generated at Sun May 3 14:47:49 2026 by rpki-client