$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/8181a447-de84-3b44-853d-60f76b9f40be.roa File: 8181a447-de84-3b44-853d-60f76b9f40be.roa (raw, json) Hash identifier: 5ubNJbgC8OOQ/lFot9LkTpMa+HVIUFdOto/o8LLRDoQ= Subject key identifier: 49:DE:CD:11:30:D7:20:24:92:7F:49:82:0C:02:A3:62:F1:43:55:AF Certificate issuer: /CN=98bb1a5e-296b-4265-806f-5bfbd7773fb7 Certificate serial: 010D0C9F4328584D117255AA7A0A77C69202D4C8 Authority key identifier: 34:AD:46:B4:D3:2F:57:24:80:23:A9:28:49:2F:B0:61:CE:E5:FD:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/8181a447-de84-3b44-853d-60f76b9f40be.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 399138 IP address blocks: 131.143.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/98bb1a5e-296b-4265-806f-5bfbd7773fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/98bb1a5e-296b-4265-806f-5bfbd7773fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:55:aa:7a:0a:77:c6:92:02:d4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98bb1a5e-296b-4265-806f-5bfbd7773fb7 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=5b913c76-0133-492b-80e3-86ed01708bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:d9:75:d8:09:02:b8:d3:83:43:82:62:60: 35:a4:cd:9a:f0:a9:fe:f4:a4:b1:62:9b:a2:35:59: 06:f0:14:60:e3:96:b7:98:e0:8e:dc:c1:07:95:29: d7:c0:44:ed:a5:26:5a:b9:db:81:f4:33:2a:51:70: 2f:43:63:e5:a2:91:4f:cd:be:64:b4:0e:51:67:98: 93:9e:65:27:13:89:ee:78:8e:a9:90:97:28:dc:a3: 25:d2:bb:24:7e:12:d5:f3:44:8e:f4:bc:b8:d9:83: c8:6a:59:96:10:f5:ee:e1:2b:77:7b:ec:0c:c2:f9: bb:62:8d:6d:a9:06:ad:38:fe:6e:d5:5f:d5:37:0c: 0b:21:85:c7:4b:fa:1d:b0:b8:7e:37:90:8e:0a:74: c4:98:1d:9b:4f:9d:93:00:1a:39:23:e7:e6:5e:0f: a6:04:e1:16:3a:e4:94:85:e6:4c:0b:35:f5:c1:59: a4:d4:7f:04:b6:25:59:1e:61:ef:fa:a2:a0:54:ab: b4:23:62:ee:6c:34:fd:0a:80:df:61:b4:35:16:72: b6:4d:52:bb:f2:05:59:ec:5a:60:f5:c6:63:92:e6: ec:ab:b1:46:40:18:a2:af:43:f6:f5:a2:80:d4:48: 9a:8c:bc:bb:8a:c3:c6:7d:34:7d:9a:5e:d1:78:e2: e2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DE:CD:11:30:D7:20:24:92:7F:49:82:0C:02:A3:62:F1:43:55:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/8181a447-de84-3b44-853d-60f76b9f40be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/98bb1a5e-296b-4265-806f-5bfbd7773fb7.crl X509v3 Authority Key Identifier: keyid:34:AD:46:B4:D3:2F:57:24:80:23:A9:28:49:2F:B0:61:CE:E5:FD:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7.cer sbgp-ipAddrBlock: critical IPv4: 131.143.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:71:4a:d7:25:af:99:52:df:47:5d:92:57:df:c4:64:50:7a: f4:d1:e4:2a:ff:3c:b7:f4:5f:37:00:e4:3c:df:6d:ee:2e:19: 3f:cc:96:66:45:b0:72:2e:4d:b1:d1:01:be:fa:a0:64:9a:f6: 41:fe:19:ea:0d:45:8a:bb:da:d6:51:09:a0:9f:db:13:0a:9f: 6f:7b:a9:da:43:e1:d3:de:11:70:45:0e:75:ea:01:fd:35:7e: 42:a9:51:b5:f0:48:57:c5:1a:56:3a:4b:93:fd:2b:7d:d4:94: f2:1b:70:ea:93:6a:61:67:61:a4:c9:42:10:89:6f:3d:09:38: 07:76:c7:fb:f8:a7:52:78:9b:52:b1:d9:17:4e:59:b8:e8:47: 03:f5:27:69:6d:3e:f3:af:4b:92:9f:d9:bd:2c:1b:e4:c6:de: 60:07:5d:3e:39:6f:88:74:2f:25:70:9c:14:54:e7:3d:0e:73: 9b:9c:d2:59:0b:fe:26:fb:22:5f:ca:fe:93:4b:24:90:ce:46: 9d:e9:bc:55:e4:c4:3b:f3:5f:c4:52:4b:5e:a9:bf:2b:05:4a: b0:29:47:2a:b9:21:40:17:61:2a:86:6b:17:41:f9:6e:da:1c: ce:41:33:2d:02:31:5e:82:c8:f4:c1:37:fe:5c:4e:dd:a7:fe: 56:67:4e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RclWqegp3xpIC1MgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThiYjFhNWUtMjk2Yi00MjY1LTgwNmYtNWJmYmQ3Nzcz ZmI3MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NWI5MTNjNzYtMDEzMy00OTJiLTgwZTMtODZlZDAxNzA4YmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j7ZddgJArjTg0OCYmA1pM2a8Kn+9KSxYpui NVkG8BRg45a3mOCO3MEHlSnXwETtpSZauduB9DMqUXAvQ2PlopFPzb5ktA5RZ5iT nmUnE4nueI6pkJco3KMl0rskfhLV80SO9Ly42YPIalmWEPXu4St3e+wMwvm7Yo1t qQatOP5u1V/VNwwLIYXHS/odsLh+N5COCnTEmB2bT52TABo5I+fmXg+mBOEWOuSU heZMCzX1wVmk1H8EtiVZHmHv+qKgVKu0I2LubDT9CoDfYbQ1FnK2TVK78gVZ7Fpg 9cZjkubsq7FGQBiir0P29aKA1EiajLy7isPGfTR9ml7ReOLiEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnezREw1yAkkn9JggwCo2LxQ1WvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85OGJi MWE1ZS0yOTZiLTQyNjUtODA2Zi01YmZiZDc3NzNmYjcvODE4MWE0NDctZGU4NC0z YjQ0LTg1M2QtNjBmNzZiOWY0MGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOThiYjFhNWUtMjk2Yi00MjY1LTgw NmYtNWJmYmQ3NzczZmI3Lzk4YmIxYTVlLTI5NmItNDI2NS04MDZmLTViZmJkNzc3 M2ZiNy5jcmwwHwYDVR0jBBgwFoAUNK1GtNMvVySAI6koSS+wYc7l/ZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85OGJiMWE1ZS0yOTZiLTQyNjUtODA2Zi01YmZi ZDc3NzNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg494MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9xStclr5lS30ddklffxGRQevTR5Cr/PLf0XzcA5Dzfbe4uGT/MlmZF sHIuTbHRAb76oGSa9kH+GeoNRYq72tZRCaCf2xMKn297qdpD4dPeEXBFDnXqAf01 fkKpUbXwSFfFGlY6S5P9K33UlPIbcOqTamFnYaTJQhCJbz0JOAd2x/v4p1J4m1Kx 2RdOWbjoRwP1J2ltPvOvS5Kf2b0sG+TG3mAHXT45b4h0LyVwnBRU5z0Oc5uc0lkL /ib7Il/K/pNLJJDORp3pvFXkxDvzX8RSS16pvysFSrApRyq5IUAXYSqGaxdB+W7a HM5BMy0CMV6CyPTBN/5cTt2n/lZnTlo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:27 2026 by rpki-client