$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/01fcde38-7bee-3e19-9f58-fcf7f7971734.roa File: 01fcde38-7bee-3e19-9f58-fcf7f7971734.roa (raw, json) Hash identifier: Ci9nZFMnGGbmTa0IN7q5WXv9BAN39SZ4YqfwWr+ZINc= Subject key identifier: 51:38:E1:11:92:40:72:BD:DF:42:3A:46:39:35:F1:C2:D9:C9:C7:3A Certificate issuer: /CN=7b3f3998-8e70-47c2-94e8-307a39db87d5 Certificate serial: 010D0C9F4328584F4F07F1AEA062FDE11D635700 Authority key identifier: 10:AF:4A:6F:F0:86:60:37:47:CA:9A:A5:06:6F:4F:42:78:36:F5:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/01fcde38-7bee-3e19-9f58-fcf7f7971734.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 402123 IP address blocks: 131.143.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:07:f1:ae:a0:62:fd:e1:1d:63:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b3f3998-8e70-47c2-94e8-307a39db87d5 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=d50071b1-d139-4628-9333-11120cb0589f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:12:1e:a9:b9:17:c9:dc:f7:7b:db:d2:5c: 1d:a3:d1:11:72:d3:a9:d0:93:2e:e1:30:53:e5:e3: 52:ee:f5:a8:1c:4a:33:b8:52:cc:bc:e6:6f:a4:c7: 72:73:31:d8:00:89:42:d2:d6:01:99:16:bd:b5:d6: 68:43:44:80:6b:05:95:b9:75:39:15:49:e2:84:35: e6:19:6f:c1:88:c2:16:dd:8a:ac:c2:9b:a4:06:19: 3d:cb:94:df:7e:7f:07:3c:ab:3b:23:d6:f1:39:76: 0d:af:0a:a4:17:c0:51:d0:e9:cc:fb:bd:23:21:5c: 06:69:13:bb:66:42:f4:62:1f:64:d1:0c:53:4b:b3: df:84:32:b5:8b:b2:2b:8e:d7:c5:de:6c:4c:36:6a: 6d:15:50:d8:d8:b5:49:5f:0c:8f:21:78:6b:02:5e: 6c:09:cb:7a:b3:f9:7f:72:9a:9f:78:dd:6e:7d:64: cf:69:60:d7:d3:08:73:85:a3:1b:72:bc:84:cd:cb: bd:20:d6:c8:82:b2:3e:56:8f:a1:28:20:e9:06:af: ca:fe:7b:b3:2e:ac:f3:ea:cf:08:d1:d6:e2:c2:b0: cf:d0:d1:14:c3:1a:71:b8:ff:05:90:82:50:ed:df: 4d:15:8c:4c:7c:ed:ac:22:02:8a:61:4f:79:af:02: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:38:E1:11:92:40:72:BD:DF:42:3A:46:39:35:F1:C2:D9:C9:C7:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/01fcde38-7bee-3e19-9f58-fcf7f7971734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.crl X509v3 Authority Key Identifier: keyid:10:AF:4A:6F:F0:86:60:37:47:CA:9A:A5:06:6F:4F:42:78:36:F5:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5.cer sbgp-ipAddrBlock: critical IPv4: 131.143.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fd:f4:5d:bb:6f:b1:d4:d8:25:29:d0:55:c2:9c:e9:47:28: 2e:0f:ed:71:30:f6:a6:ba:25:b2:f8:dc:1e:69:fc:ae:e1:4e: 32:80:24:c7:6a:0e:d8:f9:f7:12:d9:41:bd:96:17:7f:7d:f3: 16:74:0a:32:e3:99:45:11:bf:dc:73:15:66:0f:d9:da:01:f7: 98:4d:61:16:62:f4:12:58:f0:a3:0a:1a:91:60:d5:bc:70:da: cd:1c:5a:5b:9e:30:33:40:d8:db:ac:a6:74:a1:66:a0:45:76: d1:eb:94:58:7e:d4:18:d5:b8:ac:08:6b:18:0a:ec:35:c3:e6: cc:2b:2a:1c:f8:b4:84:c7:ca:e2:fb:59:f3:d8:07:9c:9b:fd: 65:77:22:9d:63:35:d7:bd:1c:91:79:06:4e:16:79:08:b9:2f: 33:c9:a2:38:a7:c7:43:83:3d:d1:6b:4b:55:da:d6:0f:ad:75: 69:99:cc:ad:97:09:7f:67:89:5e:31:be:73:6c:d3:3d:9e:c6: bd:49:d4:2e:16:22:a1:33:cc:96:32:d5:48:54:bd:4b:4a:11: 32:a2:4c:ef:c7:5a:24:66:4e:bd:a5:2b:db:e9:ee:6b:b1:a5: 2d:a3:bb:42:b8:5f:3f:1e:f2:e1:e8:88:6e:31:64:15:6a:05: 6e:6b:01:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PB/GuoGL94R1jVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzZjM5OTgtOGU3MC00N2MyLTk0ZTgtMzA3YTM5ZGI4 N2Q1MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZDUwMDcxYjEtZDEzOS00NjI4LTkzMzMtMTExMjBjYjA1ODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti8SHqm5F8nc93vb0lwdo9ERctOp0JMu4TBT 5eNS7vWoHEozuFLMvOZvpMdyczHYAIlC0tYBmRa9tdZoQ0SAawWVuXU5FUnihDXm GW/BiMIW3YqswpukBhk9y5Tffn8HPKs7I9bxOXYNrwqkF8BR0OnM+70jIVwGaRO7 ZkL0Yh9k0QxTS7PfhDK1i7IrjtfF3mxMNmptFVDY2LVJXwyPIXhrAl5sCct6s/l/ cpqfeN1ufWTPaWDX0whzhaMbcryEzcu9INbIgrI+Vo+hKCDpBq/K/nuzLqzz6s8I 0dbiwrDP0NEUwxpxuP8FkIJQ7d9NFYxMfO2sIgKKYU95rwL6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE44RGSQHK930I6Rjk18cLZycc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83YjNm Mzk5OC04ZTcwLTQ3YzItOTRlOC0zMDdhMzlkYjg3ZDUvMDFmY2RlMzgtN2JlZS0z ZTE5LTlmNTgtZmNmN2Y3OTcxNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvN2IzZjM5OTgtOGU3MC00N2MyLTk0 ZTgtMzA3YTM5ZGI4N2Q1LzdiM2YzOTk4LThlNzAtNDdjMi05NGU4LTMwN2EzOWRi ODdkNS5jcmwwHwYDVR0jBBgwFoAUEK9Kb/CGYDdHypqlBm9PQng29T4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83YjNmMzk5OC04ZTcwLTQ3YzItOTRlOC0zMDdh MzlkYjg3ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP99F27b7HU2CUp0FXCnOlHKC4P7XEw9qa6JbL43B5p/K7hTjKAJMdq Dtj59xLZQb2WF3998xZ0CjLjmUURv9xzFWYP2doB95hNYRZi9BJY8KMKGpFg1bxw 2s0cWlueMDNA2NuspnShZqBFdtHrlFh+1BjVuKwIaxgK7DXD5swrKhz4tITHyuL7 WfPYB5yb/WV3Ip1jNde9HJF5Bk4WeQi5LzPJojinx0ODPdFrS1Xa1g+tdWmZzK2X CX9niV4xvnNs0z2exr1J1C4WIqEzzJYy1UhUvUtKETKiTO/HWiRmTr2lK9vp7mux pS2ju0K4Xz8e8uHoiG4xZBVqBW5rAYU= -----END CERTIFICATE-----Generated at Tue Sep 29 01:39:24 2026 by rpki-client