$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa File: 8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa (raw, json) Hash identifier: Zzo8UG6Vy7OYVdNgDp8AObp/Ih/chwetNBjhXb0bG/w= Subject key identifier: 68:71:27:5D:17:97:C2:B1:7D:AF:B9:8E:C4:64:CB:DF:CB:8B:C6:34 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584E11B434111942F8FB963FF180 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 210645 IP address blocks: 131.143.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:34:11:19:42:f8:fb:96:3f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=3e73f9b7-4523-484f-bca9-4bbcb22e6760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:d1:8a:04:dd:e3:d0:d9:78:5e:fb:db:ec: 9d:50:f6:d8:55:95:29:35:67:31:b0:cc:6c:f0:2e: 53:ef:85:ac:ea:23:4d:c6:33:7a:86:a1:c6:dc:fb: 62:f8:25:75:e8:b8:f7:7f:41:0e:20:09:e4:dc:36: 65:d9:81:88:19:bb:9e:23:54:89:33:4e:c3:bf:d5: f9:0c:ad:81:dd:d6:32:16:99:84:51:fc:8f:f9:ab: ae:d6:26:7c:3b:14:43:8e:3e:7f:ba:b2:ff:40:06: d5:9c:b3:c6:bb:cb:38:00:8d:71:1e:a3:c8:10:4a: 3e:43:a3:01:36:3b:ea:fb:3d:e9:8f:63:32:d9:1b: 84:49:96:a9:83:6b:78:10:2d:96:52:e0:48:ee:0b: 35:02:fb:c9:83:d1:db:0f:3b:32:00:06:48:f5:92: 71:e5:09:2a:1a:06:a2:d1:20:ee:31:d6:b0:89:8f: 73:64:11:fb:4d:5b:a6:9b:d1:24:a6:a0:09:52:24: bc:38:7b:7f:2c:3f:ff:b2:36:d6:db:8b:2d:8f:ea: b1:58:50:5d:e5:f0:44:db:93:6b:17:6a:a6:ef:35: 82:0e:67:5d:53:85:6c:93:6c:ef:a7:d2:4d:04:48: 57:85:10:ed:b8:4f:35:cc:b2:48:2e:30:06:c9:23: da:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:71:27:5D:17:97:C2:B1:7D:AF:B9:8E:C4:64:CB:DF:CB:8B:C6:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv4: 131.143.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:98:5f:21:2d:31:72:b6:c5:28:28:ed:00:6a:65:e4:72:68: ef:41:3c:65:8d:5a:30:7b:5e:83:c8:a4:e6:eb:ef:e2:40:f8: fd:35:8f:ea:50:38:97:68:52:df:f5:e7:2a:34:14:3b:23:5b: 30:fd:9c:b1:a4:4d:30:46:15:75:71:10:69:5d:c5:aa:3e:93: 15:95:b1:8f:da:35:ea:23:0e:81:a2:bf:25:b1:07:cd:e9:9f: 74:c7:b8:bf:bd:d8:8d:a2:e4:82:7e:80:97:69:3a:ed:de:0d: 4d:7f:cf:d5:2e:2e:c0:3f:03:d0:e5:02:61:39:c0:d5:9e:e7: 75:ae:db:bc:a2:86:e1:bb:c5:7a:62:04:ca:25:93:cf:a2:53: 1c:53:65:69:7c:fe:64:8f:a4:56:fa:1b:7b:34:2a:e9:52:bc: 86:eb:0a:3c:e0:93:c9:c2:2b:c3:f4:84:5f:4a:ab:42:74:f1: b4:6d:2b:57:52:f2:bd:7c:55:b6:7f:72:99:ed:de:a7:1b:73: ca:88:dc:76:35:28:2b:2f:ee:7e:4e:c1:7a:21:d2:01:c4:28: b9:80:7d:5a:ed:c3:33:a8:5d:de:e0:9e:4c:e9:e6:d1:fb:c5: 21:d4:c8:a4:ed:f4:da:d7:4b:bb:09:bc:a8:12:4f:45:b5:3a: 81:33:5a:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4RtDQRGUL4+5Y/8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk M2U3M2Y5YjctNDUyMy00ODRmLWJjYTktNGJiY2IyMmU2NzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpvRigTd49DZeF772+ydUPbYVZUpNWcxsMxs 8C5T74Ws6iNNxjN6hqHG3Pti+CV16Lj3f0EOIAnk3DZl2YGIGbueI1SJM07Dv9X5 DK2B3dYyFpmEUfyP+auu1iZ8OxRDjj5/urL/QAbVnLPGu8s4AI1xHqPIEEo+Q6MB Njvq+z3pj2My2RuESZapg2t4EC2WUuBI7gs1AvvJg9HbDzsyAAZI9ZJx5QkqGgai 0SDuMdawiY9zZBH7TVumm9EkpqAJUiS8OHt/LD//sjbW24stj+qxWFBd5fBE25Nr F2qm7zWCDmddU4Vsk2zvp9JNBEhXhRDtuE81zLJILjAGySPaHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhxJ10Xl8Kxfa+5jsRky9/Li8Y0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvOGY0OWU2YjItNzg4Ny0z YWE4LWI2NGUtOWRlMGUyMDcxNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGYXyEtMXK2xSgo7QBqZeRyaO9BPGWNWjB7XoPIpObr7+JA+P01j+pQ OJdoUt/15yo0FDsjWzD9nLGkTTBGFXVxEGldxao+kxWVsY/aNeojDoGivyWxB83p n3THuL+92I2i5IJ+gJdpOu3eDU1/z9UuLsA/A9DlAmE5wNWe53Wu27yihuG7xXpi BMolk8+iUxxTZWl8/mSPpFb6G3s0KulSvIbrCjzgk8nCK8P0hF9Kq0J08bRtK1dS 8r18VbZ/cpnt3qcbc8qI3HY1KCsv7n5OwXoh0gHEKLmAfVrtwzOoXd7gnkzp5tH7 xSHUyKTt9NrXS7sJvKgST0W1OoEzWsM= -----END CERTIFICATE-----Generated at Sat Jun 6 05:52:21 2026 by rpki-client