$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa File: 5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa (raw, json) Hash identifier: zPEnxTQFstU5BLDxdqeLtWN9H+OT0nRAIQLjOHPCq0M= Subject key identifier: FA:4C:9A:BE:35:61:EC:F1:43:44:81:3A:13:CD:43:1A:98:04:B5:21 Certificate issuer: /CN=c4825bb4-0295-4646-b747-1abe4ad33f18 Certificate serial: 010D0C9F4328584D44FA66764AF71A170CDB5425 Authority key identifier: A0:B8:1F:8E:EB:DD:8F:BB:88:E7:F8:AB:55:93:38:50:4F:49:67:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 402091 IP address blocks: 131.143.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:66:76:4a:f7:1a:17:0c:db:54:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4825bb4-0295-4646-b747-1abe4ad33f18 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=96ad6a93-4f42-46e0-8ee8-fbc4fb490ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:bb:87:64:09:8b:e9:0c:9f:e7:55:7f:6f: 2e:1d:96:fb:f0:6f:eb:a6:07:76:dd:78:a0:0a:dd: 46:07:39:2d:c9:d2:32:2f:02:fa:c1:05:9d:bb:c6: 20:0e:1b:ac:30:0d:42:10:03:4a:e8:61:2d:98:61: 51:3f:58:ac:30:0e:12:c2:c4:33:de:bd:bd:10:02: ea:e1:4f:97:94:87:0e:07:a2:96:6d:bb:74:f5:49: 1d:08:e1:4c:15:18:0f:5d:05:41:7e:50:d3:a4:91: 5f:96:0e:3b:57:d8:bb:56:11:04:f0:16:39:03:3e: 3e:3f:e3:6e:bd:b8:1f:fc:5a:34:e9:90:1f:0d:8a: 94:b0:2a:c9:2f:3a:19:bd:72:8c:52:5a:ea:d3:c5: dc:b1:9a:13:10:45:31:df:d8:78:30:6d:d4:19:38: fe:6f:ff:bb:da:fe:a7:22:6d:10:07:dc:60:f4:a2: c8:c6:1f:a9:e6:5a:cd:f6:32:7d:a5:27:fd:a6:96: 3b:c8:1b:b1:56:8f:29:11:18:d5:89:ab:40:fa:d5: 55:db:e5:b7:52:ae:1b:09:ed:ca:4a:28:1b:2d:80: c6:f8:52:04:f1:6c:3f:f8:6e:0e:ee:9c:8d:15:6b: f1:7b:e0:dd:65:8e:c4:cf:2e:38:ca:cb:e0:4f:91: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4C:9A:BE:35:61:EC:F1:43:44:81:3A:13:CD:43:1A:98:04:B5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/5dad1c72-95c7-3229-927c-69fbd5cac6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.crl X509v3 Authority Key Identifier: keyid:A0:B8:1F:8E:EB:DD:8F:BB:88:E7:F8:AB:55:93:38:50:4F:49:67:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18.cer sbgp-ipAddrBlock: critical IPv4: 131.143.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a9:fd:de:d2:ce:5f:a3:05:59:66:2e:d1:71:ec:d0:ea:8d: 25:e9:16:72:33:3e:f0:6d:a1:02:c1:7a:97:12:1e:2b:f3:2d: b6:37:26:22:e0:29:d8:04:79:3e:91:af:41:05:d6:44:88:ec: 6d:30:dd:65:ad:33:88:fb:85:cf:ab:21:1f:60:66:4d:44:c3: 59:5f:85:0c:67:4f:95:a5:65:48:4f:02:dd:9a:30:bd:1f:9b: de:90:81:d4:4c:a4:ca:76:eb:6b:e5:1f:ea:a1:e0:32:82:61: 5c:af:ba:cd:61:65:5c:3d:b6:16:85:10:41:6d:0b:22:00:05: 2c:be:f6:8b:33:67:b3:e4:90:14:51:e6:87:c0:93:4d:2a:f7: 87:22:0b:55:a7:61:3c:1f:7c:53:4c:18:58:e6:cc:5c:6e:3b: 38:15:19:a7:78:86:f1:ed:ce:43:c8:d2:1d:e6:44:10:6e:e1: d7:eb:cd:34:5a:9e:cb:fb:eb:c7:45:c1:47:e4:25:fc:5b:ba: 31:36:20:bf:5a:49:fa:03:f3:9a:8a:72:c1:dd:12:25:60:81: ee:df:ac:04:53:a0:4a:97:ed:bf:fa:2c:70:29:e5:8b:b8:5a: 0f:31:b3:ac:2b:5c:f2:b1:cb:b2:49:d8:77:86:52:e8:61:77: e4:5a:cc:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mZ2SvcaFwzbVCUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ4MjViYjQtMDI5NS00NjQ2LWI3NDctMWFiZTRhZDMz ZjE4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTZhZDZhOTMtNGY0Mi00NmUwLThlZTgtZmJjNGZiNDkwYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHG7h2QJi+kMn+dVf28uHZb78G/rpgd23Xig Ct1GBzktydIyLwL6wQWdu8YgDhusMA1CEANK6GEtmGFRP1isMA4SwsQz3r29EALq 4U+XlIcOB6KWbbt09UkdCOFMFRgPXQVBflDTpJFflg47V9i7VhEE8BY5Az4+P+Nu vbgf/Fo06ZAfDYqUsCrJLzoZvXKMUlrq08XcsZoTEEUx39h4MG3UGTj+b/+72v6n Im0QB9xg9KLIxh+p5lrN9jJ9pSf9ppY7yBuxVo8pERjViatA+tVV2+W3Uq4bCe3K SigbLYDG+FIE8Ww/+G4O7pyNFWvxe+DdZY7Ezy44ysvgT5G4pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpMmr41YezxQ0SBOhPNQxqYBLUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNDgy NWJiNC0wMjk1LTQ2NDYtYjc0Ny0xYWJlNGFkMzNmMTgvNWRhZDFjNzItOTVjNy0z MjI5LTkyN2MtNjlmYmQ1Y2FjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzQ4MjViYjQtMDI5NS00NjQ2LWI3 NDctMWFiZTRhZDMzZjE4L2M0ODI1YmI0LTAyOTUtNDY0Ni1iNzQ3LTFhYmU0YWQz M2YxOC5jcmwwHwYDVR0jBBgwFoAUoLgfjuvdj7uI5/irVZM4UE9JZx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNDgyNWJiNC0wMjk1LTQ2NDYtYjc0Ny0xYWJl NGFkMzNmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyp/d7Szl+jBVlmLtFx7NDqjSXpFnIzPvBtoQLBepcSHivzLbY3JiLg KdgEeT6Rr0EF1kSI7G0w3WWtM4j7hc+rIR9gZk1Ew1lfhQxnT5WlZUhPAt2aML0f m96QgdRMpMp262vlH+qh4DKCYVyvus1hZVw9thaFEEFtCyIABSy+9oszZ7PkkBRR 5ofAk00q94ciC1WnYTwffFNMGFjmzFxuOzgVGad4hvHtzkPI0h3mRBBu4dfrzTRa nsv768dFwUfkJfxbujE2IL9aSfoD85qKcsHdEiVgge7frARToEqX7b/6LHAp5Yu4 Wg8xs6wrXPKxy7JJ2HeGUuhhd+RazLA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:11 2026 by rpki-client