$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/ff4d5abf-ee67-3861-a3ee-cb77507bd014.roa File: ff4d5abf-ee67-3861-a3ee-cb77507bd014.roa (raw, json) Hash identifier: dwblvSKfvO6UY93xCHOYJK5fxwhLHbaGk6Ck5ykzNcM= Subject key identifier: FF:1F:6C:85:15:32:A7:6E:12:32:9E:9B:FA:74:63:B1:5D:78:5F:7F Certificate issuer: /CN=54f335e9-72b0-4332-86a1-4a11593d7ef7 Certificate serial: 010D0C9F4328584F936DA56441B8F1D29C47E840 Authority key identifier: 43:45:D2:28:E7:C6:DA:D1:82:D2:E1:A1:28:12:ED:E0:30:01:88:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/ff4d5abf-ee67-3861-a3ee-cb77507bd014.roa Signing time: Wed 21 Oct 2026 13:00:12 +0000 ROA not before: Wed 21 Oct 2026 13:00:12 +0000 ROA not after: Tue 19 Jan 2027 14:00:12 +0000 asID: 2914 IP address blocks: 131.143.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/54f335e9-72b0-4332-86a1-4a11593d7ef7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/54f335e9-72b0-4332-86a1-4a11593d7ef7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:6d:a5:64:41:b8:f1:d2:9c:47:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54f335e9-72b0-4332-86a1-4a11593d7ef7 Validity Not Before: Oct 21 13:00:12 2026 GMT Not After : Jan 19 14:00:12 2027 GMT Subject: CN=4e91cec1-1c41-4055-8359-aefdbd46a4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:75:5c:14:6b:d8:22:15:c5:30:f1:41:e7: 0d:11:6d:db:2e:18:46:e9:23:9a:66:2b:94:17:00: 05:d7:bd:ab:3e:22:94:c3:a1:b4:84:25:d9:6e:24: 4e:36:1e:d6:ca:81:d9:06:da:ca:13:5a:8d:cd:a8: 9d:f5:de:19:86:df:5c:cc:72:bd:ff:98:56:a0:80: f9:a8:b6:aa:64:14:e6:cb:b8:7c:2d:60:6c:11:20: 3a:91:1e:24:ff:75:65:95:60:7c:b7:c8:1a:57:50: 9c:36:c1:d1:a6:1e:28:47:f2:26:cf:2b:38:fd:96: f9:eb:ed:5a:bc:39:c4:05:fb:6c:3c:d4:3e:79:ab: 3f:4e:bb:09:59:fd:fe:e9:64:57:b4:0e:2e:e2:9c: 26:60:d8:2f:81:6b:28:a7:28:7f:34:b1:f0:e5:2c: 50:19:87:67:a9:26:3a:10:bb:5e:93:71:76:67:a1: 3c:0f:30:05:9c:02:7a:69:d6:79:60:d6:78:3b:56: a0:e7:8b:4c:cc:6b:60:97:24:43:50:44:a4:25:bb: a3:79:5d:9a:81:2e:9a:13:29:02:6b:23:a7:d6:ae: 74:00:d9:56:60:7c:9c:44:5c:8a:4e:ef:ac:7c:9a: 27:2d:df:53:7a:2b:fc:8c:1f:b1:c7:f7:a5:fd:6e: c9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1F:6C:85:15:32:A7:6E:12:32:9E:9B:FA:74:63:B1:5D:78:5F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/ff4d5abf-ee67-3861-a3ee-cb77507bd014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/54f335e9-72b0-4332-86a1-4a11593d7ef7.crl X509v3 Authority Key Identifier: keyid:43:45:D2:28:E7:C6:DA:D1:82:D2:E1:A1:28:12:ED:E0:30:01:88:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7.cer sbgp-ipAddrBlock: critical IPv4: 131.143.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:9a:e8:3f:eb:17:6f:6e:5a:76:37:6b:73:b3:17:da:76:f8: b1:18:1c:22:2c:ac:5b:a8:1b:7c:d9:75:5f:48:4c:f0:2c:0d: 19:6e:61:4e:67:f8:03:41:34:4a:77:a5:d9:1a:51:6b:f3:b8: 7b:bf:5c:8f:c3:9d:4d:ca:00:3c:82:0c:24:fb:5b:09:40:d0: c2:5f:2a:54:29:26:04:27:13:73:f0:28:db:b6:31:2f:06:ca: f7:01:4a:29:2f:05:95:22:03:e8:02:50:70:d9:8c:0a:bc:39: 33:6f:b1:30:72:96:93:bf:ef:d6:56:ae:4a:37:8d:38:e1:ae: dd:49:84:5d:a3:ba:54:35:b6:28:35:6e:74:e6:d4:c5:f8:60: 9f:6a:bc:ef:2a:43:2f:0f:a8:db:92:e4:d0:d5:ed:25:52:8d: 8e:26:ed:65:37:75:92:6f:7d:e9:be:6c:30:b9:1a:24:33:18: b1:3e:90:f8:03:ed:40:8b:8d:94:dc:a7:cf:a0:1f:9e:c9:2e: b1:4b:e4:99:08:e0:fb:52:56:5d:bc:3a:fa:a4:8f:b0:f8:80: f5:eb:de:76:bd:32:14:ae:d1:dd:72:72:fb:5f:d3:f9:36:56: e6:09:2b:dc:34:36:b3:f7:b0:a7:6e:81:ef:9d:e6:8f:fc:ba: 56:53:0f:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+TbaVkQbjx0pxH6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRmMzM1ZTktNzJiMC00MzMyLTg2YTEtNGExMTU5M2Q3 ZWY3MB4XDTI2MTAyMTEzMDAxMloXDTI3MDExOTE0MDAxMlowLzEtMCsGA1UEAxMk NGU5MWNlYzEtMWM0MS00MDU1LTgzNTktYWVmZGJkNDZhNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki11XBRr2CIVxTDxQecNEW3bLhhG6SOaZiuU FwAF172rPiKUw6G0hCXZbiRONh7WyoHZBtrKE1qNzaid9d4Zht9czHK9/5hWoID5 qLaqZBTmy7h8LWBsESA6kR4k/3VllWB8t8gaV1CcNsHRph4oR/Imzys4/Zb56+1a vDnEBftsPNQ+eas/TrsJWf3+6WRXtA4u4pwmYNgvgWsopyh/NLHw5SxQGYdnqSY6 ELtek3F2Z6E8DzAFnAJ6adZ5YNZ4O1ag54tMzGtglyRDUESkJbujeV2agS6aEykC ayOn1q50ANlWYHycRFyKTu+sfJonLd9Teiv8jB+xx/el/W7JmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8fbIUVMqduEjKem/p0Y7FdeF9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81NGYz MzVlOS03MmIwLTQzMzItODZhMS00YTExNTkzZDdlZjcvZmY0ZDVhYmYtZWU2Ny0z ODYxLWEzZWUtY2I3NzUwN2JkMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTRmMzM1ZTktNzJiMC00MzMyLTg2 YTEtNGExMTU5M2Q3ZWY3LzU0ZjMzNWU5LTcyYjAtNDMzMi04NmExLTRhMTE1OTNk N2VmNy5jcmwwHwYDVR0jBBgwFoAUQ0XSKOfG2tGC0uGhKBLt4DABiBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81NGYzMzVlOS03MmIwLTQzMzItODZhMS00YTEx NTkzZDdlZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg49IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHya6D/rF29uWnY3a3OzF9p2+LEYHCIsrFuoG3zZdV9ITPAsDRluYU5n +ANBNEp3pdkaUWvzuHu/XI/DnU3KADyCDCT7WwlA0MJfKlQpJgQnE3PwKNu2MS8G yvcBSikvBZUiA+gCUHDZjAq8OTNvsTBylpO/79ZWrko3jTjhrt1JhF2julQ1tig1 bnTm1MX4YJ9qvO8qQy8PqNuS5NDV7SVSjY4m7WU3dZJvfem+bDC5GiQzGLE+kPgD 7UCLjZTcp8+gH57JLrFL5JkI4PtSVl28Ovqkj7D4gPXr3na9MhSu0d1ycvtf0/k2 VuYJK9w0NrP3sKduge+d5o/8ulZTD7M= -----END CERTIFICATE-----Generated at Tue Oct 27 11:36:45 2026 by rpki-client