$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa File: a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa (raw, json) Hash identifier: +i1vIjzrORJd72akFgHgFiqwxLV4IJE6WFFInvPQUbA= Subject key identifier: 7B:BB:CC:76:E0:03:B8:2B:CF:A9:30:A6:26:DE:12:26:02:FD:10:C6 Certificate issuer: /CN=c0e74f0a-989b-4956-b947-f56b9aee9d3c Certificate serial: 010D0C9F4328584D72DCA796D0AA5DA91BA4F580 Authority key identifier: 6D:45:0D:D0:2C:FC:62:22:9E:DE:FC:F8:3B:4B:51:B6:0B:35:C7:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa Signing time: Thu 09 Apr 2026 11:28:19 +0000 ROA not before: Thu 09 Apr 2026 11:28:19 +0000 ROA not after: Wed 08 Jul 2026 11:28:19 +0000 asID: 399468 IP address blocks: 131.143.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:72:dc:a7:96:d0:aa:5d:a9:1b:a4:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e74f0a-989b-4956-b947-f56b9aee9d3c Validity Not Before: Apr 9 11:28:19 2026 GMT Not After : Jul 8 11:28:19 2026 GMT Subject: CN=bf8eb974-20c9-4ed9-9ed2-ed8bb08774e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:51:06:01:4e:3d:f1:5a:78:f2:9d:04:2b: f6:e2:1a:f4:ab:23:f1:cf:d9:33:da:90:1c:d5:13: 65:0d:74:8b:15:bf:38:a1:33:77:03:92:82:0c:24: 1a:b0:d0:74:67:fa:0d:70:53:5b:a7:b4:de:c8:c4: 87:4b:3c:be:09:a9:49:a4:25:0d:d6:fd:a6:0b:05: 1c:fb:c6:ca:53:36:45:7e:82:8a:ef:34:7d:8b:65: 27:ad:90:6c:c8:ba:70:71:c3:58:48:65:0b:c5:16: 65:9b:c5:e6:b3:c4:c4:dd:a7:8f:53:d1:54:af:3d: 8b:5d:a0:cc:91:82:1a:e4:94:3d:9a:17:4b:9b:70: 27:38:15:10:ae:e7:dc:45:02:41:8e:97:3f:17:7f: 74:9c:f7:36:cd:7a:25:be:1a:66:b0:22:37:b7:16: ce:a8:75:5a:ce:0b:c2:19:d0:47:98:b0:af:08:90: d9:6f:06:6f:09:7f:ac:f3:53:05:55:e5:f9:bf:16: a6:88:35:ea:3d:8b:b5:70:25:f9:30:9e:1c:e0:93: 8b:55:39:68:5c:8f:e9:d3:3f:b5:60:d5:57:69:d0: bc:5f:71:a0:ae:f9:4c:90:7a:92:75:25:b2:23:59: 61:c1:72:bb:33:68:c9:8d:91:01:41:6e:e9:0a:d2: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BB:CC:76:E0:03:B8:2B:CF:A9:30:A6:26:DE:12:26:02:FD:10:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.crl X509v3 Authority Key Identifier: keyid:6D:45:0D:D0:2C:FC:62:22:9E:DE:FC:F8:3B:4B:51:B6:0B:35:C7:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer sbgp-ipAddrBlock: critical IPv4: 131.143.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:4d:ab:d5:60:2f:df:1b:d2:64:0d:2e:d7:85:97:e6:1e:33: fc:0e:d5:63:e5:fa:cc:96:37:ae:c4:4d:6e:bf:e7:db:b7:e8: 18:90:fc:bc:a9:7d:56:65:65:fa:be:2c:e8:5e:93:95:82:f4: ea:e8:3b:e3:ed:02:4d:a8:29:e1:d1:9b:0a:c3:0b:4e:b9:fc: 2c:20:af:f8:0b:5b:76:d9:e2:d7:ef:94:17:d9:0b:00:67:ff: fd:13:cb:3c:a0:07:df:32:ed:83:0b:f2:fb:71:aa:dd:1a:13: dc:77:07:00:f4:a6:1d:b9:ae:74:51:ee:91:32:80:1a:b5:22: bf:cc:1f:8e:02:fc:65:40:1c:5f:44:10:4e:e9:9f:7c:16:44: a1:8c:96:3f:8e:ff:76:62:34:03:65:fe:73:7f:4e:05:9f:ce: 91:9f:8d:17:2b:d4:46:f5:1c:cf:cf:16:c3:c7:e8:09:c6:f9: ce:2a:0e:a7:85:0a:75:2f:ea:c3:37:a1:16:65:ed:01:a7:7e: 7f:5f:9e:7c:92:1a:a4:2d:e1:d1:6e:cc:f4:90:91:86:60:b0: d7:90:b8:ca:d6:c4:14:30:12:ae:27:0a:54:93:bd:4a:ec:3e: 11:66:ee:1c:39:42:4e:06:df:c6:ff:6a:a1:25:ad:47:fb:1f: a0:b5:df:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1y3KeW0KpdqRuk9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBlNzRmMGEtOTg5Yi00OTU2LWI5NDctZjU2YjlhZWU5 ZDNjMB4XDTI2MDQwOTExMjgxOVoXDTI2MDcwODExMjgxOVowLzEtMCsGA1UEAxMk YmY4ZWI5NzQtMjBjOS00ZWQ5LTllZDItZWQ4YmIwODc3NGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzVRBgFOPfFaePKdBCv24hr0qyPxz9kz2pAc 1RNlDXSLFb84oTN3A5KCDCQasNB0Z/oNcFNbp7TeyMSHSzy+CalJpCUN1v2mCwUc +8bKUzZFfoKK7zR9i2UnrZBsyLpwccNYSGULxRZlm8Xms8TE3aePU9FUrz2LXaDM kYIa5JQ9mhdLm3AnOBUQrufcRQJBjpc/F390nPc2zXolvhpmsCI3txbOqHVazgvC GdBHmLCvCJDZbwZvCX+s81MFVeX5vxamiDXqPYu1cCX5MJ4c4JOLVTloXI/p0z+1 YNVXadC8X3GgrvlMkHqSdSWyI1lhwXK7M2jJjZEBQW7pCtLMPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu7zHbgA7grz6kwpibeEiYC/RDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMGU3 NGYwYS05ODliLTQ5NTYtYjk0Ny1mNTZiOWFlZTlkM2MvYTk3NDBlZjAtYjUzYy0z YTNkLTgzZTktMTQzYTI3NjdhOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzBlNzRmMGEtOTg5Yi00OTU2LWI5 NDctZjU2YjlhZWU5ZDNjL2MwZTc0ZjBhLTk4OWItNDk1Ni1iOTQ3LWY1NmI5YWVl OWQzYy5jcmwwHwYDVR0jBBgwFoAUbUUN0Cz8YiKe3vz4O0tRtgs1xwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMGU3NGYwYS05ODliLTQ5NTYtYjk0Ny1mNTZi OWFlZTlkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNNq9VgL98b0mQNLteFl+YeM/wO1WPl+syWN67ETW6/59u36BiQ/Lyp fVZlZfq+LOhek5WC9OroO+PtAk2oKeHRmwrDC065/Cwgr/gLW3bZ4tfvlBfZCwBn //0TyzygB98y7YML8vtxqt0aE9x3BwD0ph25rnRR7pEygBq1Ir/MH44C/GVAHF9E EE7pn3wWRKGMlj+O/3ZiNANl/nN/TgWfzpGfjRcr1Eb1HM/PFsPH6AnG+c4qDqeF CnUv6sM3oRZl7QGnfn9fnnySGqQt4dFuzPSQkYZgsNeQuMrWxBQwEq4nClSTvUrs PhFm7hw5Qk4G38b/aqElrUf7H6C138M= -----END CERTIFICATE-----Generated at Mon Apr 13 12:08:35 2026 by rpki-client