$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/fc96cd8d-286c-3fef-8ed9-8a774b2bad6f.roa File: fc96cd8d-286c-3fef-8ed9-8a774b2bad6f.roa (raw, json) Hash identifier: IIxgnyxDi9qNYI/fH8pjoSfnZ1DoutdWNCngzAm3b2A= Subject key identifier: 12:8F:20:D2:03:E6:B9:78:0F:45:C3:4F:D3:A3:4F:94:51:26:B9:E6 Certificate issuer: /CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3 Certificate serial: 010D0C9F4328584F57680B83519120821FF75340 Authority key identifier: 58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/fc96cd8d-286c-3fef-8ed9-8a774b2bad6f.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 54657 IP address blocks: 131.143.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:0b:83:51:91:20:82:1f:f7:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=8dc35c9a-d12e-43e5-8546-46f92de7d1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:57:44:41:c0:5d:f5:18:a3:6d:6f:21:cc:35: f1:a3:d5:84:e6:53:f5:f1:14:bf:0d:59:b3:3e:7b: b2:cd:b7:ab:79:0a:ce:07:d0:77:ae:67:c2:b5:eb: e1:11:04:85:17:d6:25:e2:1b:9d:b5:2c:a7:88:f0: cb:6d:07:08:9a:d8:41:58:a4:95:3f:0d:d2:3f:e8: eb:92:ae:e5:99:7b:06:6d:f5:be:15:19:e7:bf:7c: 96:29:dd:c6:a2:71:12:a5:2b:cc:3a:46:8a:5a:35: 7b:54:bc:8e:d6:02:98:41:55:f0:a2:ac:44:6a:30: fc:22:af:0f:98:69:1c:72:d8:a1:ef:54:62:d9:05: f4:fe:d4:1c:6e:54:20:e2:83:a4:fe:3d:88:28:6c: fc:c4:93:40:0d:1a:af:0d:de:ea:ec:9a:0b:62:64: b5:0e:65:84:8f:29:d8:9b:ae:f0:25:9c:a6:2f:b5: e8:c3:0d:fa:4f:88:8b:1a:f3:94:b5:ea:e4:27:61: de:cb:5a:48:55:50:0e:b7:4d:e0:7e:e3:5c:d9:ab: eb:5c:6c:3a:7b:a5:9e:72:f9:39:f6:eb:1f:0c:71: 9a:65:d6:8a:ac:33:33:71:45:3d:6e:42:f3:60:28: fd:d2:9c:79:3f:80:84:fc:cf:74:f4:76:83:4b:47: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8F:20:D2:03:E6:B9:78:0F:45:C3:4F:D3:A3:4F:94:51:26:B9:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/fc96cd8d-286c-3fef-8ed9-8a774b2bad6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl X509v3 Authority Key Identifier: keyid:58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer sbgp-ipAddrBlock: critical IPv4: 131.143.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a0:6f:92:80:75:14:99:e4:9f:b4:70:88:50:7e:a6:23:e1: ba:ea:93:5c:5f:3e:a5:5a:bf:3d:04:d9:95:03:ef:d5:a2:fb: 73:ba:9c:fb:ce:98:6b:0f:65:3f:04:e0:db:7b:c2:d6:db:7f: 49:69:c9:f5:84:b5:4a:10:a8:96:ae:41:0f:f0:fc:58:0d:14: 02:67:70:9a:bb:dd:b4:2a:0f:f1:4a:e9:c8:64:5b:00:5d:30: af:1f:6d:52:a4:f7:20:92:e8:b5:29:a9:28:5c:cd:6f:46:d4: 26:41:47:61:03:c5:22:c8:16:1b:95:8b:f5:1a:b9:f1:c9:25: f8:d6:51:ad:6d:e1:7a:73:84:5e:33:95:d7:3f:17:fc:40:47: eb:36:99:fe:3f:54:b9:34:0f:ea:f3:da:bb:c6:7f:4d:2a:93: 61:fa:75:53:a9:3a:45:32:01:4a:97:4a:59:f5:49:ac:7e:b0: 3b:f7:bb:17:54:69:b3:6f:12:d0:60:4c:fb:8c:b7:b4:36:fd: 00:8e:2f:b0:31:ac:9c:14:2d:77:d8:6c:49:22:8a:6b:53:ba: 17:a2:9a:45:ef:c1:c5:37:f3:27:cf:ef:6a:3e:2f:de:72:f2: 56:1d:75:e0:a2:76:9d:02:6e:e7:c4:47:b3:48:c7:b8:be:ff: e7:82:e3:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAuDUZEggh/3U0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhlNDc4ODEtNWM2NC00ZmMwLWJmMDMtNWEzOWQwODI3 YmMzMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk OGRjMzVjOWEtZDEyZS00M2U1LTg1NDYtNDZmOTJkZTdkMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31dEQcBd9RijbW8hzDXxo9WE5lP18RS/DVmz PnuyzbereQrOB9B3rmfCtevhEQSFF9Yl4hudtSyniPDLbQcImthBWKSVPw3SP+jr kq7lmXsGbfW+FRnnv3yWKd3GonESpSvMOkaKWjV7VLyO1gKYQVXwoqxEajD8Iq8P mGkcctih71Ri2QX0/tQcblQg4oOk/j2IKGz8xJNADRqvDd7q7JoLYmS1DmWEjynY m67wJZymL7Xoww36T4iLGvOUterkJ2Hey1pIVVAOt03gfuNc2avrXGw6e6Wecvk5 9usfDHGaZdaKrDMzcUU9bkLzYCj90px5P4CE/M909HaDS0eXdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKPINID5rl4D0XDT9OjT5RRJrnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80OGU0 Nzg4MS01YzY0LTRmYzAtYmYwMy01YTM5ZDA4MjdiYzMvZmM5NmNkOGQtMjg2Yy0z ZmVmLThlZDktOGE3NzRiMmJhZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDhlNDc4ODEtNWM2NC00ZmMwLWJm MDMtNWEzOWQwODI3YmMzLzQ4ZTQ3ODgxLTVjNjQtNGZjMC1iZjAzLTVhMzlkMDgy N2JjMy5jcmwwHwYDVR0jBBgwFoAUWOJ2ljppqKVnq6q+5Yl0Q4TG80YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80OGU0Nzg4MS01YzY0LTRmYzAtYmYwMy01YTM5 ZDA4MjdiYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4+9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6gb5KAdRSZ5J+0cIhQfqYj4brqk1xfPqVavz0E2ZUD79Wi+3O6nPvO mGsPZT8E4Nt7wtbbf0lpyfWEtUoQqJauQQ/w/FgNFAJncJq73bQqD/FK6chkWwBd MK8fbVKk9yCS6LUpqShczW9G1CZBR2EDxSLIFhuVi/UaufHJJfjWUa1t4XpzhF4z ldc/F/xAR+s2mf4/VLk0D+rz2rvGf00qk2H6dVOpOkUyAUqXSln1Sax+sDv3uxdU abNvEtBgTPuMt7Q2/QCOL7AxrJwULXfYbEkiimtTuheimkXvwcU38yfP72o+L95y 8lYddeCidp0CbufER7NIx7i+/+eC48I= -----END CERTIFICATE-----Generated at Thu Oct 29 05:47:51 2026 by rpki-client