$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/3b5bd1a4-025f-3d96-9564-ea6d6e10e93b.roa File: 3b5bd1a4-025f-3d96-9564-ea6d6e10e93b.roa (raw, json) Hash identifier: Lw1W+dZMTnBWVB7e363bswu6j4sZTRjAqmzyel82vf4= Subject key identifier: 09:3D:1D:53:F7:3F:59:65:AA:95:7E:57:FD:A8:91:FF:91:03:5B:E9 Certificate issuer: /CN=5b640257-7947-43c1-997a-0af58a465bdc Certificate serial: 010D0C9F4328584D32D4DAAC32F6BFDBD7C58200 Authority key identifier: E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/3b5bd1a4-025f-3d96-9564-ea6d6e10e93b.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 131.143.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:da:ac:32:f6:bf:db:d7:c5:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b640257-7947-43c1-997a-0af58a465bdc Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=84a4f516-7af8-4386-9651-4405d1823837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2f:73:0f:a2:d7:d8:d6:84:a4:c2:d3:e0:c4: 65:5d:7f:95:b3:f7:f9:12:0c:d4:27:75:51:cf:36: 53:16:df:0e:98:69:47:dd:d2:86:e8:c1:aa:26:a9: 24:06:3f:a2:cf:23:b2:1c:95:40:ed:7b:96:8e:c4: 04:2f:3f:fc:53:95:00:ac:38:ea:57:23:42:b6:a8: b8:c4:2d:8e:94:60:1e:d8:b8:8c:3b:5a:d0:0f:ce: 82:83:76:e3:3f:18:c7:1c:2e:c5:7f:24:92:da:ad: 0d:59:60:ac:50:16:b7:fe:b4:be:45:e3:cf:7e:cc: 28:49:56:7d:59:7a:a9:d5:d9:fb:cc:ae:48:4d:8b: 4f:e8:db:a1:5f:c2:29:9e:3a:fd:c8:34:7f:e7:b5: 1c:0d:6f:a9:ea:b4:2f:95:7f:88:40:3a:29:60:d7: e1:62:bf:0e:5e:f4:46:ca:6a:4f:b6:97:b4:10:5b: aa:ea:72:ff:2e:68:ba:96:ca:33:86:66:d8:de:5e: a6:f3:ef:3e:f3:8d:7c:b4:4b:91:b3:de:41:1b:32: 27:17:19:69:0b:14:86:09:e0:d4:69:93:78:0e:cb: 15:7f:57:bf:56:ad:a8:a3:28:83:6d:d7:5f:c8:2a: ca:c8:5c:4f:c6:70:57:d3:2d:16:7e:a5:e8:29:39: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3D:1D:53:F7:3F:59:65:AA:95:7E:57:FD:A8:91:FF:91:03:5B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/3b5bd1a4-025f-3d96-9564-ea6d6e10e93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl X509v3 Authority Key Identifier: keyid:E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer sbgp-ipAddrBlock: critical IPv4: 131.143.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:95:6e:53:52:bf:02:32:52:d3:63:2a:68:e0:c0:06:c3:62: 52:9c:74:65:c5:f3:5b:a3:d0:54:45:6b:ce:24:19:83:d1:4f: f2:d8:97:fe:f4:af:62:a1:6d:20:a3:3e:fd:b6:95:c8:0b:b3: 1f:be:ee:5a:75:5a:5d:a2:48:f4:72:d3:e4:c9:49:7a:a6:9b: 13:b9:67:20:b9:31:cd:22:04:e8:48:d5:6e:a4:0a:d3:8a:6f: ef:39:2a:44:3e:1a:d9:95:cb:97:1e:fb:b2:db:8a:66:b2:c5: a7:87:f9:36:bc:ff:47:0a:bc:27:54:70:78:e2:79:4d:11:36: 93:b4:0e:fb:fa:4f:3e:f4:ff:51:95:66:59:08:9b:1a:c8:21: 82:86:0e:02:33:be:28:dc:e0:3a:93:48:55:64:d5:58:e4:aa: 54:75:b5:08:fc:22:7a:71:52:b5:b8:10:f9:29:aa:32:51:23: 0b:87:8f:37:1d:b7:3e:9d:e9:54:ea:e3:1c:6a:b9:e5:a8:06: a1:ee:2d:0c:e5:a6:5a:b7:9c:e3:dd:13:30:87:b2:23:b3:0b: 56:e0:7d:d9:4e:38:02:71:e8:72:28:17:ba:50:b5:f2:14:e8: 12:7b:ea:c8:16:d4:f6:ab:e1:d2:f8:03:e3:7c:b3:ae:ea:19: 69:48:fe:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1NqsMva/29fFggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI2NDAyNTctNzk0Ny00M2MxLTk5N2EtMGFmNThhNDY1 YmRjMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk ODRhNGY1MTYtN2FmOC00Mzg2LTk2NTEtNDQwNWQxODIzODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy9zD6LX2NaEpMLT4MRlXX+Vs/f5EgzUJ3VR zzZTFt8OmGlH3dKG6MGqJqkkBj+izyOyHJVA7XuWjsQELz/8U5UArDjqVyNCtqi4 xC2OlGAe2LiMO1rQD86Cg3bjPxjHHC7FfySS2q0NWWCsUBa3/rS+RePPfswoSVZ9 WXqp1dn7zK5ITYtP6NuhX8Ipnjr9yDR/57UcDW+p6rQvlX+IQDopYNfhYr8OXvRG ympPtpe0EFuq6nL/Lmi6lsozhmbY3l6m8+8+8418tEuRs95BGzInFxlpCxSGCeDU aZN4DssVf1e/Vq2ooyiDbddfyCrKyFxPxnBX0y0WfqXoKTmojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk9HVP3P1llqpV+V/2okf+RA1vpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0 MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1OGE0NjViZGMvM2I1YmQxYTQtMDI1Zi0z ZDk2LTk1NjQtZWE2ZDZlMTBlOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWI2NDAyNTctNzk0Ny00M2MxLTk5 N2EtMGFmNThhNDY1YmRjLzViNjQwMjU3LTc5NDctNDNjMS05OTdhLTBhZjU4YTQ2 NWJkYy5jcmwwHwYDVR0jBBgwFoAU5TA8mq0PRPce48E8LRscUfUcNMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1 OGE0NjViZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeVblNSvwIyUtNjKmjgwAbDYlKcdGXF81uj0FRFa84kGYPRT/LYl/70 r2KhbSCjPv22lcgLsx++7lp1Wl2iSPRy0+TJSXqmmxO5ZyC5Mc0iBOhI1W6kCtOK b+85KkQ+GtmVy5ce+7LbimayxaeH+Ta8/0cKvCdUcHjieU0RNpO0Dvv6Tz70/1GV ZlkImxrIIYKGDgIzvijc4DqTSFVk1VjkqlR1tQj8InpxUrW4EPkpqjJRIwuHjzcd tz6d6VTq4xxqueWoBqHuLQzlplq3nOPdEzCHsiOzC1bgfdlOOAJx6HIoF7pQtfIU 6BJ76sgW1Par4dL4A+N8s67qGWlI/gA= -----END CERTIFICATE-----Generated at Thu Mar 19 12:34:03 2026 by rpki-client