$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa File: 1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa (raw, json) Hash identifier: VrDQyhLm4wFC8luL8jx8UKl7cmO9aR1cRRkJw7KsiTg= Subject key identifier: C7:29:25:E5:EA:E8:84:26:5C:A2:75:0C:D7:BC:20:C1:C6:31:83:14 Certificate issuer: /CN=135a25e4-6a94-45c6-b694-2d6e8256166a Certificate serial: 010D0C9F4328584D3DFF99D97933E39C2A64EC00 Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7448 IP address blocks: 143.192.0.0/18 maxlen: 24 143.192.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:99:d9:79:33:e3:9c:2a:64:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=9f9004e2-1fc6-4c50-b268-843626d6319e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8a:a5:da:bc:28:3a:68:10:a7:e5:b5:30:c0: 32:f6:a1:de:1b:1a:2f:43:d2:ed:29:45:12:dd:7b: b7:a9:f6:9e:c7:69:47:34:a5:71:b6:57:23:5f:a7: 5f:9e:92:69:9f:e0:9c:0f:ab:48:57:7f:c2:b8:79: 36:0d:25:5f:70:f5:71:93:8b:48:87:0b:13:f8:3e: 90:cf:7c:c2:2c:9b:a5:1f:5e:9b:45:9b:c1:30:04: ff:67:d2:b8:7d:4e:c3:c4:74:09:23:91:af:b1:41: b3:ea:3e:51:ec:91:21:a9:21:c3:d7:25:6e:d1:a3: 4f:a9:06:bc:d5:74:ad:59:70:a7:e3:94:61:6f:6e: 0c:c8:b2:ef:c4:dc:75:84:f4:38:fe:79:5f:5b:d0: 34:53:23:a9:f9:7c:01:19:48:3b:0d:1f:e2:91:35: ce:ac:22:80:cf:4f:34:aa:cd:25:8c:73:80:12:42: ee:a7:43:80:dd:e5:fb:ef:4d:4c:36:8f:7b:2c:96: d9:0d:54:32:09:f7:58:dd:d9:6e:33:28:b1:ac:67: 15:68:bd:ff:04:72:aa:c6:10:1f:d9:3b:c9:16:2a: db:9a:3f:4c:f1:6a:e2:cd:09:c0:88:79:63:63:f9: 66:a4:a6:bd:39:a1:2f:73:a2:ad:f0:63:8f:d6:44: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:29:25:E5:EA:E8:84:26:5C:A2:75:0C:D7:BC:20:C1:C6:31:83:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl X509v3 Authority Key Identifier: keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer sbgp-ipAddrBlock: critical IPv4: 143.192.0.0-143.192.95.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:11:88:52:65:57:3c:99:6d:5f:8c:2a:f6:ac:cc:61:01:6c: a9:60:30:5f:51:69:01:d1:3f:6b:f3:c7:14:5b:05:55:f6:68: 65:21:b8:79:19:59:cd:2e:eb:77:34:9c:e6:5d:eb:b1:42:33: 53:55:05:1c:02:9e:3e:45:ba:12:1a:3b:de:b4:a6:49:87:4f: 9f:45:01:ee:ac:23:7b:9e:9c:b3:69:1f:c1:9c:68:dc:ca:1b: 7d:6c:8d:61:e7:9f:05:94:3b:db:f2:e6:82:fb:98:7b:b0:9a: 8c:7b:8b:e6:36:16:62:aa:d7:ba:8a:d3:a2:bb:95:25:77:dd: f4:2d:eb:41:d9:ce:c1:93:86:94:ea:8c:33:c9:10:e1:d7:8d: fd:2b:56:1e:74:e2:8d:3e:b1:c7:0c:c1:25:a7:fe:ea:3a:c0: ba:f1:6b:54:cc:85:a8:84:68:12:35:24:7b:ab:62:e0:15:7c: 8b:a5:2c:ee:70:3a:97:91:aa:19:66:50:49:79:89:8f:3d:16: 19:2a:1c:3b:43:71:b4:64:dc:53:47:5a:69:87:20:f4:02:2b: c0:06:09:45:34:e5:25:bf:83:97:48:e8:6e:e1:f5:46:11:21: ff:d4:0a:55:14:8c:f6:77:a9:1b:2b:f3:e9:df:6a:aa:9b:10: 22:d2:f3:70 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE09/5nZeTPjnCpk7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM1YTI1ZTQtNmE5NC00NWM2LWI2OTQtMmQ2ZTgyNTYx NjZhMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OWY5MDA0ZTItMWZjNi00YzUwLWIyNjgtODQzNjI2ZDYzMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74ql2rwoOmgQp+W1MMAy9qHeGxovQ9LtKUUS 3Xu3qfaex2lHNKVxtlcjX6dfnpJpn+CcD6tIV3/CuHk2DSVfcPVxk4tIhwsT+D6Q z3zCLJulH16bRZvBMAT/Z9K4fU7DxHQJI5GvsUGz6j5R7JEhqSHD1yVu0aNPqQa8 1XStWXCn45Rhb24MyLLvxNx1hPQ4/nlfW9A0UyOp+XwBGUg7DR/ikTXOrCKAz080 qs0ljHOAEkLup0OA3eX7701MNo97LJbZDVQyCfdY3dluMyixrGcVaL3/BHKqxhAf 2TvJFirbmj9M8WrizQnAiHljY/lmpKa9OaEvc6Kt8GOP1kSp4wIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFMcpJeXq6IQmXKJ1DNe8IMHGMYMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMzVh MjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZlODI1NjE2NmEvMWFhM2YxYWItY2M3OC0z NmI0LWI4OTAtNTUyZWMyZDRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTM1YTI1ZTQtNmE5NC00NWM2LWI2 OTQtMmQ2ZTgyNTYxNjZhLzEzNWEyNWU0LTZhOTQtNDVjNi1iNjk0LTJkNmU4MjU2 MTY2YS5jcmwwHwYDVR0jBBgwFoAU3z6ArD0AzzQWeNXZQvPiHb3A8b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMzVhMjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZl ODI1NjE2NmEuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwaPwAME BY/AQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBeEYhSZVc8mW1fjCr2rMxhAWypYDBfUWkB0T9r88cUWwVV 9mhlIbh5GVnNLut3NJzmXeuxQjNTVQUcAp4+RboSGjvetKZJh0+fRQHurCN7npyz aR/BnGjcyht9bI1h558FlDvb8uaC+5h7sJqMe4vmNhZiqte6itOiu5Uld930LetB 2c7Bk4aU6owzyRDh1439K1YedOKNPrHHDMElp/7qOsC68WtUzIWohGgSNSR7q2Lg FXyLpSzucDqXkaoZZlBJeYmPPRYZKhw7Q3G0ZNxTR1pphyD0AivABglFNOUlv4OX SOhu4fVGESH/1ApVFIz2d6kbK/Pp32qqmxAi0vNw -----END CERTIFICATE-----Generated at Sun Mar 22 09:46:53 2026 by rpki-client