$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa File: d294f045-3323-3f7a-bd57-473408d74726.roa (raw, json) Hash identifier: 3u3MupIEMM6shhIY47Qzi6iSFZzeCTTelNlI+pk0YDw= Subject key identifier: 13:B2:F4:7F:9F:28:E2:7E:29:97:26:D1:4A:46:D8:00:94:EA:EF:DB Certificate issuer: /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Certificate serial: 010D0C9F4328584F549DA30B099A0D37DBF7B500 Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 2728 IP address blocks: 131.143.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a3:0b:09:9a:0d:37:db:f7:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=64121459-0041-4dbc-928d-82d081e2a477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:44:0d:fe:17:28:7f:38:3d:b9:eb:b1:92: e3:98:6b:51:c9:9c:14:18:1b:2c:0e:06:12:e4:78: 6e:e9:78:6a:f2:48:5f:d0:05:4f:b0:05:18:93:45: ef:d5:71:f6:b4:e6:76:5a:cc:50:91:8b:ab:3d:1b: 3d:ac:42:3a:12:9e:9f:6f:28:3c:84:b5:ca:93:94: be:14:dc:f7:95:b9:d4:9a:58:4c:79:5f:2a:a5:b8: 0d:0b:2f:d9:05:b6:29:23:4e:c4:a7:38:85:7b:69: 2e:61:18:f5:2d:46:3b:a1:69:09:7a:1f:32:db:32: c9:ed:a2:d7:0f:8f:0b:ef:4b:1d:2f:ed:c9:83:44: fa:9b:07:82:71:9d:34:84:d9:3b:cc:b3:3b:5b:40: 28:e7:af:8e:68:7f:da:ac:70:44:a3:da:ee:07:2e: e0:ba:55:6f:86:17:f8:12:55:df:97:7c:01:65:a0: cb:76:22:1d:06:b5:f7:ea:73:88:5b:51:7d:fc:ec: 1e:a2:54:2d:ff:fa:cd:40:a1:e5:22:d2:6e:7a:85: 19:79:90:e3:86:7c:44:13:e3:87:da:77:ad:0d:be: a8:34:7c:ae:dd:07:ae:73:ba:8d:3e:08:2e:e1:63: a6:1e:55:61:48:fa:10:cf:f9:0b:bc:cb:ad:42:be: 73:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B2:F4:7F:9F:28:E2:7E:29:97:26:D1:4A:46:D8:00:94:EA:EF:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl X509v3 Authority Key Identifier: keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer sbgp-ipAddrBlock: critical IPv4: 131.143.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:17:31:2a:2e:0e:1e:9c:42:19:40:30:0f:b3:b5:b8:c8:5f: f5:06:c3:c5:ff:07:af:00:09:64:7d:60:1f:e9:f1:ef:79:4c: 18:fe:7b:14:9e:a8:48:bc:c1:3d:ec:38:d1:26:56:ab:a7:2e: 62:47:30:12:43:02:d1:5f:60:60:6b:e0:cc:d3:a8:ed:b0:1b: 4f:3b:36:b4:e4:73:e9:12:50:49:29:a4:33:16:bd:86:38:c8: da:91:90:d4:08:60:5f:2b:37:5e:57:07:b6:14:c4:73:77:78: fb:c0:b8:ff:35:a2:39:4d:a6:0a:1c:ba:8a:1c:ab:84:ee:85: f6:73:30:28:91:7f:a2:45:85:b9:9e:91:a9:be:e9:89:84:5a: 39:9f:7c:9e:8b:aa:d7:86:53:30:5b:74:3d:3b:fc:80:3c:c9: a9:14:7b:10:43:9b:93:14:fc:75:fb:8e:ae:3f:c8:f6:17:50: cf:82:fe:3e:7e:16:fc:9c:97:3d:30:76:78:ee:20:d2:8d:82: 43:47:55:cd:21:a2:53:05:4b:2b:db:58:e5:d2:a8:32:01:07: 92:43:aa:7f:96:a1:91:fd:35:44:7c:31:0a:2f:c6:8e:95:69: 03:54:9c:00:d5:f8:8c:0b:c1:cf:eb:ba:cc:69:32:63:b1:b9: cb:06:da:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaMLCZoNN9v3tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q4ZGVmZjctNmJlOS00ZDE2LTgzNDktOWY2NDM5Nzc1 YjBhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NjQxMjE0NTktMDA0MS00ZGJjLTkyOGQtODJkMDgxZTJhNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDhEDf4XKH84PbnrsZLjmGtRyZwUGBssDgYS 5Hhu6Xhq8khf0AVPsAUYk0Xv1XH2tOZ2WsxQkYurPRs9rEI6Ep6fbyg8hLXKk5S+ FNz3lbnUmlhMeV8qpbgNCy/ZBbYpI07EpziFe2kuYRj1LUY7oWkJeh8y2zLJ7aLX D48L70sdL+3Jg0T6mweCcZ00hNk7zLM7W0Ao56+OaH/arHBEo9ruBy7gulVvhhf4 ElXfl3wBZaDLdiIdBrX36nOIW1F9/OweolQt//rNQKHlItJueoUZeZDjhnxEE+OH 2netDb6oNHyu3Qeuc7qNPggu4WOmHlVhSPoQz/kLvMutQr5zFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOy9H+fKOJ+KZcm0UpG2ACU6u/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDhk ZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0Mzk3NzViMGEvZDI5NGYwNDUtMzMyMy0z ZjdhLWJkNTctNDczNDA4ZDc0NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4ZGVmZjctNmJlOS00ZDE2LTgz NDktOWY2NDM5Nzc1YjBhL2NkOGRlZmY3LTZiZTktNGQxNi04MzQ5LTlmNjQzOTc3 NWIwYS5jcmwwHwYDVR0jBBgwFoAUzhQlAW3FZ7kkMlbx3Mqao7fddM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDhkZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0 Mzk3NzViMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg4/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4XMSouDh6cQhlAMA+ztbjIX/UGw8X/B68ACWR9YB/p8e95TBj+exSe qEi8wT3sONEmVqunLmJHMBJDAtFfYGBr4MzTqO2wG087NrTkc+kSUEkppDMWvYY4 yNqRkNQIYF8rN15XB7YUxHN3ePvAuP81ojlNpgocuoocq4TuhfZzMCiRf6JFhbme kam+6YmEWjmffJ6LqteGUzBbdD07/IA8yakUexBDm5MU/HX7jq4/yPYXUM+C/j5+ Fvyclz0wdnjuINKNgkNHVc0holMFSyvbWOXSqDIBB5JDqn+WoZH9NUR8MQovxo6V aQNUnADV+IwLwc/rusxpMmOxucsG2oA= -----END CERTIFICATE-----Generated at Wed Oct 14 11:53:34 2026 by rpki-client