$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92/f5fd97dd-b7ca-3118-8417-5667be5a81c5.roa File: f5fd97dd-b7ca-3118-8417-5667be5a81c5.roa (raw, json) Hash identifier: ti8f3IKE42jru3wKW8x2OdU310FSC6Y7k31k5vke1qQ= Subject key identifier: 57:3F:97:F8:D7:9B:13:80:66:45:85:49:91:18:8D:AF:48:2F:85:77 Certificate issuer: /CN=db6ef8c3-b94d-429a-91a7-213b66ee5e92 Certificate serial: 010D0C9F4328584D6AAAAB56D03F6F6DF27675E0 Authority key identifier: AC:CF:C5:9E:36:BF:AE:C3:69:6E:48:9F:0A:9B:45:6C:69:40:09:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92/f5fd97dd-b7ca-3118-8417-5667be5a81c5.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 401019 IP address blocks: 131.143.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92/db6ef8c3-b94d-429a-91a7-213b66ee5e92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92/db6ef8c3-b94d-429a-91a7-213b66ee5e92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:ab:56:d0:3f:6f:6d:f2:76:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db6ef8c3-b94d-429a-91a7-213b66ee5e92 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=ead21b64-284a-4965-b187-cf289896523d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:a8:c0:4e:c9:7f:2a:fd:f4:a0:b6:a3:3b: 00:9b:d2:00:78:c5:f6:43:bb:c0:d4:d0:ca:92:6e: 9a:80:9b:7d:71:3d:70:6e:10:21:17:ae:b8:7d:ec: 21:f3:bf:a1:48:c0:93:85:bf:2c:1f:47:a8:51:5b: 5e:18:ff:f2:3a:27:fc:91:74:7d:08:27:05:e9:41: ce:3e:aa:e3:38:41:5e:fe:9d:a0:98:9e:4c:2b:32: cc:62:ff:41:cd:51:ae:d1:52:2f:60:dd:cc:49:72: 82:03:64:54:32:b1:50:e2:80:74:e4:c4:08:98:b7: 53:71:01:d2:a8:dc:45:f2:48:02:fa:a7:9e:2e:e7: 78:1a:7c:50:77:28:f1:73:3a:c2:ad:fb:3e:ef:3a: ce:f6:a9:71:07:33:0a:25:06:09:2f:c9:e1:3c:36: ae:f9:e6:d0:79:8f:b2:11:30:a9:59:f5:25:3c:48: f0:24:00:35:ec:7d:71:5c:f7:94:61:ee:ab:a7:71: 66:50:65:61:ef:fe:a0:e3:40:7e:c0:35:a6:5e:06: ee:e8:21:0f:98:cf:6a:8f:97:c0:8e:ea:ca:13:da: 40:0d:11:bc:a5:bb:2a:a2:0d:32:aa:eb:6b:e5:1d: 3f:65:e4:dd:42:c6:02:c0:51:fe:72:ae:24:b3:09: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3F:97:F8:D7:9B:13:80:66:45:85:49:91:18:8D:AF:48:2F:85:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92/f5fd97dd-b7ca-3118-8417-5667be5a81c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92/db6ef8c3-b94d-429a-91a7-213b66ee5e92.crl X509v3 Authority Key Identifier: keyid:AC:CF:C5:9E:36:BF:AE:C3:69:6E:48:9F:0A:9B:45:6C:69:40:09:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92.cer sbgp-ipAddrBlock: critical IPv4: 131.143.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7e:a0:ba:17:51:e4:ac:2d:b5:1b:9e:38:72:79:cf:9d:c6: 46:fc:aa:ac:99:84:85:0d:c4:3e:ae:17:06:65:a3:c6:cf:8b: 95:80:9a:c7:56:7d:cb:44:b3:4a:fb:1b:e9:a1:e5:50:af:48: 62:ad:21:e3:9b:66:84:39:61:0a:a4:c0:91:d8:b0:bf:c4:a9: dc:0c:e4:74:52:d7:86:6d:ef:33:a3:0d:12:88:21:10:02:44: 1a:25:35:0d:6c:7f:54:a2:a3:18:58:e4:fa:9a:64:91:d8:67: 6e:c9:d3:85:cf:1e:9b:3e:ed:b6:31:5a:2a:b9:b1:bf:dc:88: aa:00:0d:0c:93:8e:42:fc:5e:5f:f2:aa:24:b2:5c:4a:51:c4: b6:22:35:f0:9d:be:25:9d:1d:d8:f3:33:17:8c:8b:bb:be:f2: 14:a7:8d:16:ca:59:ab:bb:6d:1e:79:25:de:58:68:1d:7c:95: b1:71:3e:cf:4e:1d:78:a8:20:ac:e5:24:5c:cf:a1:67:4d:be: cb:15:03:c3:38:e4:65:bc:62:e4:1d:1b:2f:30:9b:be:fd:8c: c9:ec:5b:db:c6:9c:31:5f:c1:20:83:4c:3c:06:96:3b:16:41: 71:bd:a4:58:64:60:1e:16:25:00:8c:4f:be:2b:82:05:5b:0f: 88:7a:d0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqtW0D9vbfJ2deAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI2ZWY4YzMtYjk0ZC00MjlhLTkxYTctMjEzYjY2ZWU1 ZTkyMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZWFkMjFiNjQtMjg0YS00OTY1LWIxODctY2YyODk4OTY1MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2uowE7Jfyr99KC2ozsAm9IAeMX2Q7vA1NDK km6agJt9cT1wbhAhF664fewh87+hSMCThb8sH0eoUVteGP/yOif8kXR9CCcF6UHO PqrjOEFe/p2gmJ5MKzLMYv9BzVGu0VIvYN3MSXKCA2RUMrFQ4oB05MQImLdTcQHS qNxF8kgC+qeeLud4GnxQdyjxczrCrfs+7zrO9qlxBzMKJQYJL8nhPDau+ebQeY+y ETCpWfUlPEjwJAA17H1xXPeUYe6rp3FmUGVh7/6g40B+wDWmXgbu6CEPmM9qj5fA jurKE9pADRG8pbsqog0yqutr5R0/ZeTdQsYCwFH+cq4kswnazQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc/l/jXmxOAZkWFSZEYja9IL4V3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjZl ZjhjMy1iOTRkLTQyOWEtOTFhNy0yMTNiNjZlZTVlOTIvZjVmZDk3ZGQtYjdjYS0z MTE4LTg0MTctNTY2N2JlNWE4MWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGI2ZWY4YzMtYjk0ZC00MjlhLTkx YTctMjEzYjY2ZWU1ZTkyL2RiNmVmOGMzLWI5NGQtNDI5YS05MWE3LTIxM2I2NmVl NWU5Mi5jcmwwHwYDVR0jBBgwFoAUrM/Fnja/rsNpbkifCptFbGlACVAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjZlZjhjMy1iOTRkLTQyOWEtOTFhNy0yMTNi NjZlZTVlOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg49tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN+oLoXUeSsLbUbnjhyec+dxkb8qqyZhIUNxD6uFwZlo8bPi5WAmsdW fctEs0r7G+mh5VCvSGKtIeObZoQ5YQqkwJHYsL/EqdwM5HRS14Zt7zOjDRKIIRAC RBolNQ1sf1SioxhY5PqaZJHYZ27J04XPHps+7bYxWiq5sb/ciKoADQyTjkL8Xl/y qiSyXEpRxLYiNfCdviWdHdjzMxeMi7u+8hSnjRbKWau7bR55Jd5YaB18lbFxPs9O HXioIKzlJFzPoWdNvssVA8M45GW8YuQdGy8wm779jMnsW9vGnDFfwSCDTDwGljsW QXG9pFhkYB4WJQCMT74rggVbD4h60KM= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:13 2026 by rpki-client