$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa File: 8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa (raw, json) Hash identifier: fT3WIcB+MCqwJbxj6+qKZa/sF9+CUhEqo/ty2BscDbE= Subject key identifier: 8E:90:DD:7A:E3:9F:DC:1A:B2:5B:44:87:E4:C0:93:18:F0:D6:55:3A Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584F5768050CCE6D9DE343B318B8 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 210645 IP address blocks: 131.143.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:05:0c:ce:6d:9d:e3:43:b3:18:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=c0740c7f-e3b2-4bfa-b242-61361509a704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:07:54:71:5a:82:ed:6b:00:c9:04:70:d6:4c: ce:30:4e:88:6d:8c:5e:7d:50:3e:f5:4b:77:8d:fe: 92:7c:36:7b:af:09:e4:b1:88:c1:30:15:6a:83:f4: f9:a2:98:e5:5b:9a:18:e1:6b:b2:0c:6e:19:45:5c: 2f:68:5e:18:69:c9:51:49:08:99:08:67:ad:c1:8a: ed:87:df:97:b3:1b:08:46:89:7c:54:e1:40:d3:a6: c3:cd:cc:51:95:f9:7c:b2:01:01:55:42:3d:8e:b5: 69:8d:8a:09:be:12:04:18:e2:b6:03:aa:44:13:bb: be:cc:98:58:62:24:b5:82:ea:fd:80:ee:dd:14:6b: 38:49:2b:eb:b6:39:0a:1b:c5:cc:dd:38:ef:0e:24: dd:6b:c1:cb:af:0c:89:52:b6:0d:b4:cd:11:52:5b: be:b7:fa:c4:a0:4b:bc:32:59:e0:1e:1f:3d:6d:90: ac:11:a0:98:bc:ea:2b:c8:51:31:3f:5c:0c:83:4d: cf:64:e9:4f:2e:8c:d1:17:a4:cb:ab:d2:2f:22:75: f5:94:a7:a5:15:6f:83:72:85:23:d2:ed:ff:bd:df: 93:45:25:d4:36:a5:bd:50:76:86:3c:9b:62:f5:5e: 99:da:93:44:d1:65:98:21:7c:d2:0e:8e:a9:78:ba: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:90:DD:7A:E3:9F:DC:1A:B2:5B:44:87:E4:C0:93:18:F0:D6:55:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv4: 131.143.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f5:02:84:b7:ab:bb:91:04:8d:12:90:6b:38:60:23:96:cd: 88:28:67:77:d2:cf:86:95:b8:2e:c8:d8:60:fc:dc:7c:5f:3b: d2:38:9d:46:73:74:73:32:03:39:8f:1d:a7:38:bb:f3:a2:2d: fc:20:00:9c:25:cd:6d:eb:b9:ad:58:f1:c1:5f:15:b1:4a:a9: 86:f3:c6:02:85:13:09:33:7e:41:90:ab:22:23:63:d7:27:f5: 34:70:49:dc:af:81:57:94:92:c4:77:b4:93:01:4a:78:49:d9: 1a:48:a8:f1:bb:d9:7e:78:ce:ea:e4:96:bd:50:1b:21:e1:b4: 79:98:cd:86:b2:4b:c0:47:7a:80:9a:ba:3e:a6:b5:03:e9:99: eb:2d:90:e9:dc:d3:e9:2d:0a:cd:d9:de:31:77:95:a9:8a:2c: af:a0:72:c3:56:5e:a2:95:9f:2c:0e:b3:c0:95:2a:e9:77:8c: c5:c2:2e:62:ce:5c:f8:88:27:d9:31:f5:58:9a:84:30:cd:83: 43:83:49:04:78:60:cd:d8:08:fd:f5:ad:21:5b:f1:4b:47:d2: a4:49:e3:c6:39:63:2d:42:a6:a4:d7:2f:17:77:d9:0b:95:57: 11:5c:86:eb:2f:eb:6a:a5:47:23:0e:2a:fd:28:c6:4f:4c:7d: f1:a6:07:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAUMzm2d40OzGLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YzA3NDBjN2YtZTNiMi00YmZhLWIyNDItNjEzNjE1MDlhNzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAdUcVqC7WsAyQRw1kzOME6IbYxefVA+9Ut3 jf6SfDZ7rwnksYjBMBVqg/T5opjlW5oY4WuyDG4ZRVwvaF4YaclRSQiZCGetwYrt h9+XsxsIRol8VOFA06bDzcxRlfl8sgEBVUI9jrVpjYoJvhIEGOK2A6pEE7u+zJhY YiS1gur9gO7dFGs4SSvrtjkKG8XM3TjvDiTda8HLrwyJUrYNtM0RUlu+t/rEoEu8 MlngHh89bZCsEaCYvOoryFExP1wMg03PZOlPLozRF6TLq9IvInX1lKelFW+DcoUj 0u3/vd+TRSXUNqW9UHaGPJti9V6Z2pNE0WWYIXzSDo6peLp0zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6Q3Xrjn9wasltEh+TAkxjw1lU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvOGY0OWU2YjItNzg4Ny0z YWE4LWI2NGUtOWRlMGUyMDcxNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH1AoS3q7uRBI0SkGs4YCOWzYgoZ3fSz4aVuC7I2GD83HxfO9I4nUZz dHMyAzmPHac4u/OiLfwgAJwlzW3rua1Y8cFfFbFKqYbzxgKFEwkzfkGQqyIjY9cn 9TRwSdyvgVeUksR3tJMBSnhJ2RpIqPG72X54zurklr1QGyHhtHmYzYayS8BHeoCa uj6mtQPpmestkOnc0+ktCs3Z3jF3lamKLK+gcsNWXqKVnywOs8CVKul3jMXCLmLO XPiIJ9kx9ViahDDNg0ODSQR4YM3YCP31rSFb8UtH0qRJ48Y5Yy1CpqTXLxd32QuV VxFchusv62qlRyMOKv0oxk9MffGmB74= -----END CERTIFICATE-----Generated at Wed Sep 30 20:00:55 2026 by rpki-client