$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/3d309991-deaa-35db-84d5-3b952aeac87c.roa File: 3d309991-deaa-35db-84d5-3b952aeac87c.roa (raw, json) Hash identifier: nyKUqoEgmTaxZOhriZnFE8TUzZfJQaFxQ9U4lGc9uJU= Subject key identifier: 4F:A4:1C:7A:DE:A3:9A:63:E6:84:83:9A:EF:BD:7A:10:41:82:14:62 Certificate issuer: /CN=472e14ed-5432-4736-a4d2-f21c573a3c6c Certificate serial: 010D0C9F4328584EF1527493A1BCE6312425DC9C Authority key identifier: 8B:A2:BA:D7:51:5F:82:21:64:65:FB:12:18:B3:E5:AD:C2:E1:77:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/3d309991-deaa-35db-84d5-3b952aeac87c.roa Signing time: Mon 24 Aug 2026 11:24:28 +0000 ROA not before: Mon 24 Aug 2026 11:24:28 +0000 ROA not after: Sun 22 Nov 2026 12:24:28 +0000 asID: 9304 IP address blocks: 131.143.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:52:74:93:a1:bc:e6:31:24:25:dc:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472e14ed-5432-4736-a4d2-f21c573a3c6c Validity Not Before: Aug 24 11:24:28 2026 GMT Not After : Nov 22 12:24:28 2026 GMT Subject: CN=5b22d3e8-c3e3-4833-9c67-cc6c3cd728a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:57:9d:f2:8e:d1:26:1c:7c:f4:d6:e1:2d: 06:8a:1a:9e:ef:c5:54:98:dd:6f:8a:c9:55:c0:af: e3:c8:b2:f7:6c:9e:5a:bb:ab:3c:f5:0b:8c:89:68: 29:83:2c:a6:38:14:57:b3:7e:f9:83:b6:40:df:68: 91:e5:70:4c:c5:e0:28:8c:f5:c6:96:e9:0f:59:75: fb:7f:7c:b0:af:f5:a8:da:71:31:da:fd:86:68:42: 0c:3c:14:fa:c3:87:f0:e4:c5:de:07:2e:78:7f:11: fe:c9:d0:bc:87:8f:9b:ad:d3:eb:50:4d:4b:e7:b7: 24:52:b4:96:8a:c5:9c:41:fa:37:71:cb:86:81:1e: 6e:77:66:61:51:74:c2:75:fe:e0:e2:e8:da:ee:5b: 14:72:a5:49:7c:8f:31:64:0b:0d:14:f6:b1:cf:c6: 23:65:26:61:30:59:3a:81:3a:1e:f0:f9:e7:a7:b4: cd:c0:13:a0:4a:9e:ec:94:67:30:0a:34:aa:9c:60: b2:03:6d:49:8f:60:a0:ab:18:8f:64:81:2b:ef:e5: 35:78:c9:83:11:d7:96:57:ab:31:65:4e:93:2c:9f: 19:1f:d7:53:4e:8b:10:d6:c4:50:71:23:b7:d7:92: 02:a3:c6:0c:c3:77:ab:1d:aa:4e:12:63:63:a6:50: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A4:1C:7A:DE:A3:9A:63:E6:84:83:9A:EF:BD:7A:10:41:82:14:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/3d309991-deaa-35db-84d5-3b952aeac87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.crl X509v3 Authority Key Identifier: keyid:8B:A2:BA:D7:51:5F:82:21:64:65:FB:12:18:B3:E5:AD:C2:E1:77:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer sbgp-ipAddrBlock: critical IPv4: 131.143.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:31:e1:31:b7:37:c8:52:f0:61:9f:30:23:0a:85:f6:42:61: 41:f4:bb:61:74:53:95:84:9e:52:51:bc:f1:42:3b:23:04:db: 18:e9:1e:ad:88:23:fd:ca:e7:53:a0:c8:6c:9d:67:aa:6e:78: ee:98:e3:a1:98:3d:8f:d4:29:a8:52:ff:75:3b:cc:51:53:9c: be:5b:50:ff:eb:5e:36:fd:53:14:1c:7d:68:0c:22:14:56:1c: 46:b4:95:52:80:69:7d:d0:24:d8:bf:da:c4:08:88:9b:d3:02: e1:9b:75:42:29:27:8c:db:87:09:ab:aa:48:eb:23:ec:a8:6c: c0:35:72:4d:4b:ba:04:43:74:26:58:51:b0:81:e8:18:db:13: 11:52:15:91:48:21:fe:69:39:b2:74:4c:21:41:2b:41:e0:8a: 1f:1a:a9:00:eb:94:d2:57:05:ed:cd:3b:ed:da:71:0e:9d:34: 63:26:21:fc:c0:9c:8a:d6:da:03:ef:ce:12:cf:43:2a:c5:3e: f4:5e:75:07:31:6c:57:fe:f5:15:5b:be:75:a6:9e:61:35:1f: 50:ec:30:32:05:3e:ee:80:bb:b5:ba:e9:e0:6e:68:4b:70:87: 0f:4a:66:09:66:16:a9:fb:88:01:ba:09:fc:11:1c:f9:6a:72: 47:29:d6:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xUnSTobzmMSQl3JwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyZTE0ZWQtNTQzMi00NzM2LWE0ZDItZjIxYzU3M2Ez YzZjMB4XDTI2MDgyNDExMjQyOFoXDTI2MTEyMjEyMjQyOFowLzEtMCsGA1UEAxMk NWIyMmQzZTgtYzNlMy00ODMzLTljNjctY2M2YzNjZDcyOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFJXnfKO0SYcfPTW4S0Gihqe78VUmN1vislV wK/jyLL3bJ5au6s89QuMiWgpgyymOBRXs375g7ZA32iR5XBMxeAojPXGlukPWXX7 f3ywr/Wo2nEx2v2GaEIMPBT6w4fw5MXeBy54fxH+ydC8h4+brdPrUE1L57ckUrSW isWcQfo3ccuGgR5ud2ZhUXTCdf7g4uja7lsUcqVJfI8xZAsNFPaxz8YjZSZhMFk6 gToe8Pnnp7TNwBOgSp7slGcwCjSqnGCyA21Jj2CgqxiPZIEr7+U1eMmDEdeWV6sx ZU6TLJ8ZH9dTTosQ1sRQcSO315ICo8YMw3erHapOEmNjplAxcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+kHHreo5pj5oSDmu+9ehBBghRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NzJl MTRlZC01NDMyLTQ3MzYtYTRkMi1mMjFjNTczYTNjNmMvM2QzMDk5OTEtZGVhYS0z NWRiLTg0ZDUtM2I5NTJhZWFjODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDcyZTE0ZWQtNTQzMi00NzM2LWE0 ZDItZjIxYzU3M2EzYzZjLzQ3MmUxNGVkLTU0MzItNDczNi1hNGQyLWYyMWM1NzNh M2M2Yy5jcmwwHwYDVR0jBBgwFoAUi6K611FfgiFkZfsSGLPlrcLhd9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NzJlMTRlZC01NDMyLTQ3MzYtYTRkMi1mMjFj NTczYTNjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg48gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEx4TG3N8hS8GGfMCMKhfZCYUH0u2F0U5WEnlJRvPFCOyME2xjpHq2I I/3K51OgyGydZ6pueO6Y46GYPY/UKahS/3U7zFFTnL5bUP/rXjb9UxQcfWgMIhRW HEa0lVKAaX3QJNi/2sQIiJvTAuGbdUIpJ4zbhwmrqkjrI+yobMA1ck1LugRDdCZY UbCB6BjbExFSFZFIIf5pObJ0TCFBK0Hgih8aqQDrlNJXBe3NO+3acQ6dNGMmIfzA nIrW2gPvzhLPQyrFPvRedQcxbFf+9RVbvnWmnmE1H1DsMDIFPu6Au7W66eBuaEtw hw9KZglmFqn7iAG6CfwRHPlqckcp1mI= -----END CERTIFICATE-----Generated at Thu Aug 27 06:28:50 2026 by rpki-client