$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa File: 5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa (raw, json) Hash identifier: 9Nv4ialrla/882wCdIuxwQbSjinFCk572sGyk0mn4Sc= Subject key identifier: 0A:2D:6B:FA:51:18:93:FA:78:F3:0E:FF:20:60:B4:77:1E:54:60:64 Certificate issuer: /CN=c4825bb4-0295-4646-b747-1abe4ad33f18 Certificate serial: 010D0C9F4328584F698D6C9D43877CC198D7B280 Authority key identifier: A0:B8:1F:8E:EB:DD:8F:BB:88:E7:F8:AB:55:93:38:50:4F:49:67:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 402091 IP address blocks: 131.143.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:6c:9d:43:87:7c:c1:98:d7:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4825bb4-0295-4646-b747-1abe4ad33f18 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=9fd6861b-1026-4e70-9690-a553a3693136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:f0:2c:29:52:d5:80:1f:6c:45:57:5c:0f: de:33:6f:df:8d:5c:a0:66:80:4c:93:90:e5:38:75: 22:32:4e:7f:f7:17:56:2e:58:00:75:d8:75:48:82: 2a:83:eb:0f:e5:a0:f0:32:d4:5f:7c:48:3e:d7:c2: 0a:bf:5c:19:a0:7d:ed:42:a8:f1:49:a2:74:48:a1: c6:b7:8a:17:d9:83:c5:df:b8:13:7a:03:31:33:88: a6:c0:77:70:13:21:5e:ed:e3:c4:7f:ef:7e:7b:94: 4a:ec:ce:e9:d4:6c:f3:59:0b:30:6c:7e:e2:90:0a: 7d:ce:6a:05:22:f0:f7:f5:66:39:35:7a:2f:a6:72: b2:4c:5c:ff:b9:87:66:69:d5:d0:7f:72:fb:9a:17: f1:db:1e:53:5c:72:2f:d5:a7:fa:3f:a6:22:6f:09: 25:da:63:ba:e5:cf:ad:f4:5e:42:9c:21:15:08:26: 98:59:99:2e:38:86:de:f8:83:a2:73:66:3a:9b:5d: b5:e5:b8:f0:5d:96:3e:69:9e:83:19:86:f8:4e:0b: 0b:0b:8f:3e:1a:36:74:05:06:51:a8:e6:ae:1d:da: 26:65:71:d2:f2:87:f2:ad:fa:3b:94:fe:a6:84:3f: ca:99:a7:bc:e7:e2:dd:f6:12:ce:b1:d4:f3:58:34: 4a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2D:6B:FA:51:18:93:FA:78:F3:0E:FF:20:60:B4:77:1E:54:60:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.crl X509v3 Authority Key Identifier: keyid:A0:B8:1F:8E:EB:DD:8F:BB:88:E7:F8:AB:55:93:38:50:4F:49:67:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18.cer sbgp-ipAddrBlock: critical IPv4: 131.143.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:59:97:df:81:1c:57:c9:cc:6f:42:84:2d:10:b2:ec:2a:ec: 2a:5c:fb:50:7d:eb:6e:8d:61:9b:e2:e5:3e:64:d1:cd:60:38: 3b:3a:4a:0d:b6:af:41:20:28:25:aa:c2:22:d0:3d:9f:21:e3: f1:50:74:c5:f1:e3:10:69:78:07:58:a7:93:49:68:4e:48:24: 51:e9:32:5e:45:ca:c2:1f:49:ce:ca:a1:a3:53:0c:5e:38:5d: c7:c9:50:ce:b4:82:f1:df:2c:06:5e:cf:d9:94:fe:87:7f:5d: ff:10:93:d3:79:4c:21:a1:06:a3:5e:09:61:91:2b:f3:9a:1f: 13:c1:27:1e:c4:94:6d:00:57:94:00:41:6e:38:51:9b:76:7b: 90:c3:15:71:38:b5:ed:db:2f:b8:18:97:01:3b:ac:6f:65:86: c9:ef:dd:94:17:6b:69:d7:68:8d:77:39:e3:03:1e:3b:a9:80: e0:91:43:95:da:50:eb:bb:a5:b8:5a:19:b6:f3:36:bd:a1:77: ac:3c:15:a3:8b:2a:b8:28:df:3f:e7:68:ef:12:23:ac:f2:e6: ff:d4:40:6e:86:fe:e6:19:88:2c:3a:98:63:1c:f5:62:88:79: 93:21:9f:54:6e:cc:c1:04:2c:4f:e6:35:cb:90:c9:85:5a:8b: 61:37:93:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjWydQ4d8wZjXsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ4MjViYjQtMDI5NS00NjQ2LWI3NDctMWFiZTRhZDMz ZjE4MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk OWZkNjg2MWItMTAyNi00ZTcwLTk2OTAtYTU1M2EzNjkzMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4XwLClS1YAfbEVXXA/eM2/fjVygZoBMk5Dl OHUiMk5/9xdWLlgAddh1SIIqg+sP5aDwMtRffEg+18IKv1wZoH3tQqjxSaJ0SKHG t4oX2YPF37gTegMxM4imwHdwEyFe7ePEf+9+e5RK7M7p1GzzWQswbH7ikAp9zmoF IvD39WY5NXovpnKyTFz/uYdmadXQf3L7mhfx2x5TXHIv1af6P6Yibwkl2mO65c+t 9F5CnCEVCCaYWZkuOIbe+IOic2Y6m1215bjwXZY+aZ6DGYb4TgsLC48+GjZ0BQZR qOauHdomZXHS8ofyrfo7lP6mhD/Kmae85+Ld9hLOsdTzWDRKOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAota/pRGJP6ePMO/yBgtHceVGBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNDgy NWJiNC0wMjk1LTQ2NDYtYjc0Ny0xYWJlNGFkMzNmMTgvNWRhZDFjNzItOTVjNy0z MjI5LTkyN2MtNjlmYmQ1Y2FjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzQ4MjViYjQtMDI5NS00NjQ2LWI3 NDctMWFiZTRhZDMzZjE4L2M0ODI1YmI0LTAyOTUtNDY0Ni1iNzQ3LTFhYmU0YWQz M2YxOC5jcmwwHwYDVR0jBBgwFoAUoLgfjuvdj7uI5/irVZM4UE9JZx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNDgyNWJiNC0wMjk1LTQ2NDYtYjc0Ny0xYWJl NGFkMzNmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhZl9+BHFfJzG9ChC0Qsuwq7Cpc+1B9626NYZvi5T5k0c1gODs6Sg22 r0EgKCWqwiLQPZ8h4/FQdMXx4xBpeAdYp5NJaE5IJFHpMl5FysIfSc7KoaNTDF44 XcfJUM60gvHfLAZez9mU/od/Xf8Qk9N5TCGhBqNeCWGRK/OaHxPBJx7ElG0AV5QA QW44UZt2e5DDFXE4te3bL7gYlwE7rG9lhsnv3ZQXa2nXaI13OeMDHjupgOCRQ5Xa UOu7pbhaGbbzNr2hd6w8FaOLKrgo3z/naO8SI6zy5v/UQG6G/uYZiCw6mGMc9WKI eZMhn1RuzMEELE/mNcuQyYVai2E3k7w= -----END CERTIFICATE-----Generated at Tue Oct 13 19:27:20 2026 by rpki-client