$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa File: df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa (raw, json) Hash identifier: uegG4aCU9Q9XS9AEtKyVP2eMRX2qyCkrb/xH8v6AhOg= Subject key identifier: A9:EC:B7:5F:F2:42:80:6B:54:FE:96:BE:41:E4:F1:CF:10:50:DF:06 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584D316F7AAB56644634C32C1480 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 923 IP address blocks: 131.143.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:7a:ab:56:64:46:34:c3:2c:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=59263c9a-e474-4801-bf90-b109fc2a8e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:b2:e9:56:0c:e9:1a:2d:aa:cc:15:7c:8d: 7e:78:b5:d6:bf:18:4d:af:ca:5b:d0:1b:7c:82:6a: 95:0f:cc:d3:07:79:f7:8c:ca:eb:3b:a7:61:cd:5b: 41:18:39:96:d3:7f:f0:ad:85:3c:2d:92:95:ba:ef: 14:e6:37:54:6f:4d:cb:cd:39:49:dc:9a:74:95:8b: 5e:58:7c:25:d3:97:fd:53:7f:d7:65:df:73:0d:83: 41:6f:ee:45:d5:0e:09:60:4a:ea:ef:3b:b9:3c:e6: f7:c7:9c:49:5d:62:d8:f7:f6:c1:50:e1:f5:5d:bd: 33:30:28:8a:93:2f:5b:e6:c8:6d:70:34:c4:f3:40: 62:d9:08:5d:50:9a:d1:b7:01:c2:8f:66:19:3e:30: dd:fb:c6:31:84:b9:fe:ca:fd:8e:f2:d3:1e:86:21: e5:ba:78:f9:b1:5e:99:e0:01:3c:fe:ed:8b:f3:4b: 0c:f0:db:52:35:31:15:99:cd:d4:48:1b:eb:e0:63: f0:8e:78:c4:95:2d:aa:48:d7:79:e3:68:8c:ef:ba: a3:70:1d:79:58:51:2d:44:15:83:50:91:4b:e4:e4: 95:f6:38:5b:45:69:c3:36:86:c9:ce:4f:e8:fb:9e: 6c:97:83:4b:f9:99:f4:1d:ee:82:7c:c8:ff:2d:e6: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EC:B7:5F:F2:42:80:6B:54:FE:96:BE:41:E4:F1:CF:10:50:DF:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 131.143.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:08:b1:6e:5c:c2:4d:25:b1:86:27:35:8d:37:10:2e:6a:8d: 6a:a6:18:ed:64:bc:ea:a3:05:74:35:58:aa:4b:ad:b1:d4:46: 93:31:73:16:22:64:28:75:ae:1e:67:d0:af:05:41:5d:c4:6a: 57:95:52:78:c5:59:9d:51:57:1c:66:4f:5e:ae:9c:ec:d4:ab: 00:d1:ff:7d:57:b2:2c:a6:1f:7f:35:7d:5e:39:98:89:3e:81: eb:70:d2:72:b8:f4:48:e2:24:c6:9d:a5:a6:6e:aa:78:dd:22: 13:b2:43:d5:9c:dd:89:ac:32:58:dc:8d:b8:94:d1:a2:e7:91: 5d:36:b0:ea:56:f3:dc:92:23:21:a7:49:17:91:46:94:ae:4e: 45:66:95:2c:bf:4a:d1:23:83:56:4d:8d:b4:c5:1c:4d:d2:eb: b2:b7:fa:ad:69:61:08:90:66:3e:ce:d2:45:cb:6d:1a:13:3b: 26:03:f3:a2:16:67:21:e9:ce:f1:24:c3:8c:ec:fb:d1:89:40: 17:2d:02:c3:e8:66:e7:2c:79:86:3b:9f:8b:e6:79:b8:8c:fe: 15:87:96:8b:2b:42:2c:41:15:dd:44:b5:89:06:f1:6b:09:6f: 69:b1:2e:5d:53:27:77:fb:ab:c3:69:89:d2:de:30:f5:dc:38: a3:4a:e5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3qrVmRGNMMsFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk NTkyNjNjOWEtZTQ3NC00ODAxLWJmOTAtYjEwOWZjMmE4ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFqy6VYM6RotqswVfI1+eLXWvxhNr8pb0Bt8 gmqVD8zTB3n3jMrrO6dhzVtBGDmW03/wrYU8LZKVuu8U5jdUb03LzTlJ3Jp0lYte WHwl05f9U3/XZd9zDYNBb+5F1Q4JYErq7zu5POb3x5xJXWLY9/bBUOH1Xb0zMCiK ky9b5shtcDTE80Bi2QhdUJrRtwHCj2YZPjDd+8YxhLn+yv2O8tMehiHlunj5sV6Z 4AE8/u2L80sM8NtSNTEVmc3USBvr4GPwjnjElS2qSNd542iM77qjcB15WFEtRBWD UJFL5OSV9jhbRWnDNobJzk/o+55sl4NL+Zn0He6CfMj/LebkywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnst1/yQoBrVP6WvkHk8c8QUN8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvZGYxZDZhMzYtYjg4MC0z ZWE1LWE0MTItYmRjOWIyMzAzZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUIsW5cwk0lsYYnNY03EC5qjWqmGO1kvOqjBXQ1WKpLrbHURpMxcxYi ZCh1rh5n0K8FQV3EaleVUnjFWZ1RVxxmT16unOzUqwDR/31XsiymH381fV45mIk+ getw0nK49EjiJMadpaZuqnjdIhOyQ9Wc3YmsMljcjbiU0aLnkV02sOpW89ySIyGn SReRRpSuTkVmlSy/StEjg1ZNjbTFHE3S67K3+q1pYQiQZj7O0kXLbRoTOyYD86IW ZyHpzvEkw4zs+9GJQBctAsPoZucseYY7n4vmebiM/hWHlosrQixBFd1EtYkG8WsJ b2mxLl1TJ3f7q8NpidLeMPXcOKNK5a8= -----END CERTIFICATE-----Generated at Wed Mar 25 21:30:15 2026 by rpki-client