$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/db21ebea-958d-30b5-8c4d-fe7e4c35c23b.roa File: db21ebea-958d-30b5-8c4d-fe7e4c35c23b.roa (raw, json) Hash identifier: f/maf0hFLmiRQtyHg7JPcItIqVisIoa3kpZUe9zl0Wk= Subject key identifier: 98:EF:F6:04:51:7C:32:0D:0D:01:28:99:9F:AD:5D:FE:D7:4D:D5:E0 Certificate issuer: /CN=addfa849-95a5-420b-9709-5cafc0b4ffa4 Certificate serial: 010D0C9F4328584F4972AF84FD3EE7B19F8A3458 Authority key identifier: 7E:DA:3C:1E:9A:B1:12:27:F5:35:59:8C:BF:94:92:6D:95:B9:84:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/db21ebea-958d-30b5-8c4d-fe7e4c35c23b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40507 IP address blocks: 131.143.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/addfa849-95a5-420b-9709-5cafc0b4ffa4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/addfa849-95a5-420b-9709-5cafc0b4ffa4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:af:84:fd:3e:e7:b1:9f:8a:34:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=addfa849-95a5-420b-9709-5cafc0b4ffa4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6d3957df-9aec-4512-acff-0b10d0731356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:38:bd:ae:d9:6d:43:43:5b:d5:f2:f2:97: 38:10:cd:f9:a6:56:80:28:ea:cd:f9:5c:94:a4:8e: f4:e8:ae:ab:71:d3:7c:52:7c:27:b1:6e:34:15:82: cf:bb:31:c5:28:68:d9:e7:b0:5f:30:9c:c2:be:f2: 60:98:78:d2:6c:ad:0c:7c:0f:ac:49:ce:47:4b:4f: 7a:54:e0:05:be:1b:2e:7e:d1:15:48:de:af:13:4a: 38:c3:8e:37:d7:59:73:9f:b8:9f:f6:8a:ae:b6:8e: b1:8d:fa:98:63:08:1f:40:c0:65:a4:cb:d4:3a:49: a7:06:63:10:5f:0b:d7:73:c3:65:60:f4:17:21:01: e3:9a:7c:18:5d:a5:e0:a3:d7:dc:0f:1f:38:5b:b1: 1b:6a:49:6c:b7:b7:28:6e:b1:b7:60:8f:3a:16:98: 4a:34:e0:18:64:6b:46:52:a0:4c:ee:d0:65:a3:d9: 01:15:21:3d:20:1a:8f:fd:ed:9a:ca:e8:85:eb:3d: 13:16:08:9e:7e:50:63:fe:33:83:6c:71:fb:f9:15: 39:80:de:a4:c0:ee:30:0f:ed:f3:95:a4:e6:90:ec: 46:af:95:70:e0:17:e9:87:38:57:cf:5d:c6:8a:0c: b7:b2:bc:1f:64:a4:c6:87:f8:fe:34:6a:ca:c3:9a: 59:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EF:F6:04:51:7C:32:0D:0D:01:28:99:9F:AD:5D:FE:D7:4D:D5:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/db21ebea-958d-30b5-8c4d-fe7e4c35c23b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/addfa849-95a5-420b-9709-5cafc0b4ffa4.crl X509v3 Authority Key Identifier: keyid:7E:DA:3C:1E:9A:B1:12:27:F5:35:59:8C:BF:94:92:6D:95:B9:84:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4.cer sbgp-ipAddrBlock: critical IPv4: 131.143.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c7:12:10:70:04:0d:c3:4a:f6:f4:38:1c:4f:c3:72:7f:4e: 98:4f:04:f5:6e:75:dd:96:e8:dc:2b:52:54:b5:b8:8c:fb:e4: d4:bb:47:e0:a1:71:b6:7f:af:09:2d:f4:a8:fc:35:3c:eb:10: 34:ea:ea:d0:0f:8f:c2:05:20:61:7f:ba:32:e8:40:0f:b7:12: da:f0:18:e8:50:df:cc:9c:01:92:b6:f9:e7:56:4d:13:6b:99: ab:53:6f:1a:e6:fe:14:b2:74:c1:89:1a:28:92:15:89:ff:16: 5b:c5:fd:85:fe:0f:21:52:44:8b:5f:48:b0:cf:31:41:ec:55: 5e:51:14:e2:11:c5:f2:11:49:5e:24:ec:30:99:06:b8:ef:f9: 81:66:43:d1:05:e7:68:fb:73:99:76:a6:75:de:fe:56:a2:8a: 48:1f:11:21:e5:22:e9:d6:b7:0d:d6:c3:2a:c2:98:5a:b5:3d: 0f:20:b2:e7:56:8a:2d:cd:d9:d5:84:d5:4b:6c:1b:cc:b0:b1: 1c:78:56:13:3e:f5:19:2b:36:6a:c7:d6:a7:4c:92:2f:d1:15: 3d:b2:c5:cf:31:4b:fa:16:d8:b9:58:5e:a8:c6:e9:03:b1:ea: 29:89:f4:95:5e:2a:31:16:a2:f1:04:51:49:f6:ce:b0:2a:a3: a6:69:65:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcq+E/T7nsZ+KNFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkZmE4NDktOTVhNS00MjBiLTk3MDktNWNhZmMwYjRm ZmE0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmQzOTU3ZGYtOWFlYy00NTEyLWFjZmYtMGIxMGQwNzMxMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTU4va7ZbUNDW9Xy8pc4EM35plaAKOrN+VyU pI706K6rcdN8UnwnsW40FYLPuzHFKGjZ57BfMJzCvvJgmHjSbK0MfA+sSc5HS096 VOAFvhsuftEVSN6vE0o4w44311lzn7if9oquto6xjfqYYwgfQMBlpMvUOkmnBmMQ XwvXc8NlYPQXIQHjmnwYXaXgo9fcDx84W7Ebaklst7cobrG3YI86FphKNOAYZGtG UqBM7tBlo9kBFSE9IBqP/e2ayuiF6z0TFgieflBj/jODbHH7+RU5gN6kwO4wD+3z laTmkOxGr5Vw4BfphzhXz13Gigy3srwfZKTGh/j+NGrKw5pZaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjv9gRRfDINDQEomZ+tXf7XTdXgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZGRm YTg0OS05NWE1LTQyMGItOTcwOS01Y2FmYzBiNGZmYTQvZGIyMWViZWEtOTU4ZC0z MGI1LThjNGQtZmU3ZTRjMzVjMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWRkZmE4NDktOTVhNS00MjBiLTk3 MDktNWNhZmMwYjRmZmE0L2FkZGZhODQ5LTk1YTUtNDIwYi05NzA5LTVjYWZjMGI0 ZmZhNC5jcmwwHwYDVR0jBBgwFoAUfto8HpqxEif1NVmMv5SSbZW5hA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZGRmYTg0OS05NWE1LTQyMGItOTcwOS01Y2Fm YzBiNGZmYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfHEhBwBA3DSvb0OBxPw3J/TphPBPVudd2W6NwrUlS1uIz75NS7R+Ch cbZ/rwkt9Kj8NTzrEDTq6tAPj8IFIGF/ujLoQA+3EtrwGOhQ38ycAZK2+edWTRNr matTbxrm/hSydMGJGiiSFYn/FlvF/YX+DyFSRItfSLDPMUHsVV5RFOIRxfIRSV4k 7DCZBrjv+YFmQ9EF52j7c5l2pnXe/laiikgfESHlIunWtw3WwyrCmFq1PQ8gsudW ii3N2dWE1UtsG8ywsRx4VhM+9RkrNmrH1qdMki/RFT2yxc8xS/oW2LlYXqjG6QOx 6imJ9JVeKjEWovEEUUn2zrAqo6ZpZes= -----END CERTIFICATE-----Generated at Sun Sep 27 10:15:56 2026 by rpki-client