$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa File: 8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa (raw, json) Hash identifier: woeRcgVKDJ/vtxKe17JhwQZLz678hEClq9mrD8cTBjY= Subject key identifier: F1:AC:7E:6B:4E:BB:7E:81:69:87:C2:EF:39:BA:72:E7:18:D7:38:F3 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584D316F74862B793A98E420C040 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 210645 IP address blocks: 131.143.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:74:86:2b:79:3a:98:e4:20:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=24d3d863-542f-4ae1-86ee-5386aab0f231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:6c:41:75:9f:dd:34:76:27:a2:56:6d:c8: 5d:8a:9f:8c:97:eb:f1:eb:04:9f:ed:b9:b0:1e:71: 7c:78:f3:8f:be:a3:84:a6:a5:5c:5c:f1:93:03:d3: f6:d9:f9:f3:38:24:66:37:a6:ce:1a:9f:30:94:4c: c7:90:2f:87:4f:4f:e4:ee:81:e7:7b:35:c2:ce:e0: 6e:4d:e6:1f:5c:62:bc:ab:3c:ee:26:27:35:54:d1: 57:0d:59:a8:d7:a2:f3:2a:ca:3b:f9:51:86:a4:a6: cf:12:5f:44:f5:e1:58:4e:91:9a:63:db:24:56:68: 00:78:c5:3f:f3:b2:a1:29:58:c9:c2:ed:13:3d:4f: 1e:67:66:2c:37:b5:c9:8c:af:a4:d9:4d:f3:47:c1: 74:43:78:ed:13:ab:18:cc:79:1b:80:31:d0:d0:e3: 2e:0e:3b:75:50:d5:23:ec:1d:91:8d:a2:ab:bc:13: ed:22:62:4f:cf:dc:e9:dd:e8:28:66:27:83:16:64: 9e:6d:81:0a:74:5e:a1:62:58:6a:81:5e:97:c8:9a: 2f:d6:51:32:14:66:84:ba:ee:2f:6d:85:b3:36:6c: 72:52:fe:83:68:6a:f8:22:22:52:ea:b8:a7:a3:09: 40:21:e6:6a:bd:97:63:ef:95:ec:65:02:f8:de:74: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AC:7E:6B:4E:BB:7E:81:69:87:C2:EF:39:BA:72:E7:18:D7:38:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv4: 131.143.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:45:d3:b9:89:5a:00:9d:e4:cd:66:0c:02:15:2a:db:5f:36: 44:9f:0b:26:2d:69:82:d5:99:e7:8e:d3:5b:13:62:f4:18:fe: 89:ac:d1:67:2c:ae:2b:dc:bf:f2:aa:44:85:ac:1b:99:9f:ae: 15:a2:03:e9:e0:51:5e:e3:83:70:c3:aa:3b:74:e4:03:cd:4d: b1:37:fc:5d:c8:f8:e8:33:5f:98:a0:20:e9:d6:d0:42:45:7f: 61:39:c2:dc:1d:40:38:c1:8d:10:f9:f1:ea:57:94:de:62:df: b7:57:44:1f:0b:b9:32:c8:96:56:e1:7e:cb:e7:3d:75:58:a2: 51:8a:8a:aa:de:98:f7:b4:e5:ff:d4:04:61:c4:95:89:65:13: 90:7d:ce:62:cf:0d:27:fa:70:17:db:e1:82:5b:e4:c8:07:ed: 13:bd:eb:f3:e3:5f:05:d3:3a:47:34:66:42:a9:d5:72:75:98: 86:ee:78:70:d4:06:34:f4:14:e2:47:a1:fb:77:e2:73:a3:01: 9c:5f:f1:67:86:c6:1d:1d:2c:82:51:1e:6b:fe:74:c3:2a:30: 71:f8:7b:e4:23:68:60:6a:6b:93:5c:65:17:c5:84:30:77:0c: 61:c9:f0:aa:37:e1:1d:65:34:83:e3:45:62:66:01:8f:c4:2d: cf:ea:ab:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3SGK3k6mOQgwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk MjRkM2Q4NjMtNTQyZi00YWUxLTg2ZWUtNTM4NmFhYjBmMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/tsQXWf3TR2J6JWbchdip+Ml+vx6wSf7bmw HnF8ePOPvqOEpqVcXPGTA9P22fnzOCRmN6bOGp8wlEzHkC+HT0/k7oHnezXCzuBu TeYfXGK8qzzuJic1VNFXDVmo16LzKso7+VGGpKbPEl9E9eFYTpGaY9skVmgAeMU/ 87KhKVjJwu0TPU8eZ2YsN7XJjK+k2U3zR8F0Q3jtE6sYzHkbgDHQ0OMuDjt1UNUj 7B2RjaKrvBPtImJPz9zp3egoZieDFmSebYEKdF6hYlhqgV6XyJov1lEyFGaEuu4v bYWzNmxyUv6DaGr4IiJS6rinowlAIeZqvZdj75XsZQL43nRBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGsfmtOu36BaYfC7zm6cucY1zjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvOGY0OWU2YjItNzg4Ny0z YWE4LWI2NGUtOWRlMGUyMDcxNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBF07mJWgCd5M1mDAIVKttfNkSfCyYtaYLVmeeO01sTYvQY/oms0Wcs rivcv/KqRIWsG5mfrhWiA+ngUV7jg3DDqjt05APNTbE3/F3I+OgzX5igIOnW0EJF f2E5wtwdQDjBjRD58epXlN5i37dXRB8LuTLIllbhfsvnPXVYolGKiqremPe05f/U BGHElYllE5B9zmLPDSf6cBfb4YJb5MgH7RO96/PjXwXTOkc0ZkKp1XJ1mIbueHDU BjT0FOJHoft34nOjAZxf8WeGxh0dLIJRHmv+dMMqMHH4e+QjaGBqa5NcZRfFhDB3 DGHJ8Ko34R1lNIPjRWJmAY/ELc/qq0U= -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:22 2026 by rpki-client