$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/d702d2eb-7080-3bcc-bf56-862bf8c4b6f8.roa File: d702d2eb-7080-3bcc-bf56-862bf8c4b6f8.roa (raw, json) Hash identifier: /yXPF4X+3tiDdLu5F2LFLydhu96XXpM4R6Z9msXySB4= Subject key identifier: 10:D7:64:BB:04:81:11:E7:EB:0E:D2:14:26:64:DD:FF:00:C4:A4:32 Certificate issuer: /CN=9a798c1c-9f1e-43d6-a5e9-09da6d32b31e Certificate serial: 010D0C9F4328584F5B98056DEB89683F8AE95050 Authority key identifier: CC:B7:8F:43:D1:10:D5:D3:38:2B:9A:6E:B7:22:B1:98:9A:9C:13:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/d702d2eb-7080-3bcc-bf56-862bf8c4b6f8.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 19577 IP address blocks: 131.143.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:05:6d:eb:89:68:3f:8a:e9:50:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a798c1c-9f1e-43d6-a5e9-09da6d32b31e Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=0b46fcbb-1a89-4335-a9dc-b4fb495864af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b6:01:ec:b8:3b:cc:a5:8d:14:ef:14:0e:a2: 72:16:4f:fa:0e:3b:e0:54:8e:03:00:85:a0:de:17: 14:0b:94:33:9b:99:4f:a1:90:d2:27:0c:96:bd:ff: 1e:74:25:3f:d0:73:f8:7e:87:ed:6f:82:8d:76:4e: 57:13:f1:45:53:77:0b:9f:6e:c1:80:9f:8f:c5:5c: c7:84:b5:4b:22:4d:4a:7d:ae:a3:6a:18:b3:28:8b: 91:b9:62:d6:e8:dc:8e:b3:4f:f2:81:f7:25:4e:09: aa:05:a9:11:e0:dc:59:be:bc:05:da:d9:c9:1f:45: 15:3f:b1:d8:96:fb:58:db:85:ee:65:cb:db:9b:5b: 68:38:07:4e:c1:71:b9:77:41:0f:fd:26:e2:80:9a: 79:32:6f:6a:78:90:da:20:2d:5b:1a:55:0b:87:78: 65:7c:56:f3:76:a5:77:c3:3e:a6:c8:52:67:3c:99: e9:e7:2c:51:86:35:cd:35:d1:93:dc:c4:f0:f9:82: 9f:dc:15:1b:e0:bb:3e:ac:43:97:49:c2:b1:0f:54: 98:e9:2c:be:fa:26:41:ad:e7:a1:12:b4:32:16:a2: fa:b5:b5:d0:7d:08:24:19:16:77:3f:29:b4:09:1a: fb:b0:e7:31:7a:52:b0:bb:be:1b:29:49:e3:81:bc: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D7:64:BB:04:81:11:E7:EB:0E:D2:14:26:64:DD:FF:00:C4:A4:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/d702d2eb-7080-3bcc-bf56-862bf8c4b6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.crl X509v3 Authority Key Identifier: keyid:CC:B7:8F:43:D1:10:D5:D3:38:2B:9A:6E:B7:22:B1:98:9A:9C:13:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.cer sbgp-ipAddrBlock: critical IPv4: 131.143.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9f:c5:36:85:65:26:ab:f0:d3:27:88:32:42:95:c3:19:ac: 8b:66:2b:9d:3e:6a:84:9b:d3:70:18:1f:55:15:51:92:b4:15: 14:9e:18:78:e4:03:aa:92:06:92:f8:ec:a6:6f:e8:8c:e1:15: 6f:0d:32:be:9d:a8:9a:33:3b:a2:7a:11:9e:1f:24:44:20:45: a0:a3:14:4f:f9:f1:9f:89:ed:57:91:c4:94:75:b2:bc:ab:6c: 71:e5:4c:1b:24:48:d1:41:0e:0d:78:66:33:03:e4:d9:5f:ae: 94:82:09:94:b5:20:3b:54:eb:15:72:99:1b:a4:e1:3d:e8:ce: 1d:75:60:8e:c0:ca:09:af:44:0d:a7:e9:9a:73:31:83:15:51: 86:ed:ad:2c:42:dc:87:48:5f:59:b5:c0:3c:65:a4:93:17:0a: 1c:db:5a:0b:de:69:d8:c2:47:b0:10:be:ee:3c:1c:28:ef:94: 4c:cd:c9:b3:85:73:22:96:b4:78:6d:71:bd:9f:a8:0e:87:c0: 7b:09:9b:a3:55:bf:ed:33:01:04:d0:7a:88:2f:12:d1:7c:19: e0:86:26:0d:e0:09:d6:db:17:99:86:26:73:e9:09:2a:79:1c: eb:d3:99:16:a6:f6:51:67:5d:58:d3:ab:31:2f:d3:31:11:64: 0c:9c:8f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bmAVt64loP4rpUFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE3OThjMWMtOWYxZS00M2Q2LWE1ZTktMDlkYTZkMzJi MzFlMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MGI0NmZjYmItMWE4OS00MzM1LWE5ZGMtYjRmYjQ5NTg2NGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7YB7Lg7zKWNFO8UDqJyFk/6DjvgVI4DAIWg 3hcUC5Qzm5lPoZDSJwyWvf8edCU/0HP4foftb4KNdk5XE/FFU3cLn27BgJ+PxVzH hLVLIk1Kfa6jahizKIuRuWLW6NyOs0/ygfclTgmqBakR4NxZvrwF2tnJH0UVP7HY lvtY24XuZcvbm1toOAdOwXG5d0EP/SbigJp5Mm9qeJDaIC1bGlULh3hlfFbzdqV3 wz6myFJnPJnp5yxRhjXNNdGT3MTw+YKf3BUb4Ls+rEOXScKxD1SY6Sy++iZBreeh ErQyFqL6tbXQfQgkGRZ3Pym0CRr7sOcxelKwu74bKUnjgbzwVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDXZLsEgRHn6w7SFCZk3f8AxKQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTc5 OGMxYy05ZjFlLTQzZDYtYTVlOS0wOWRhNmQzMmIzMWUvZDcwMmQyZWItNzA4MC0z YmNjLWJmNTYtODYyYmY4YzRiNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWE3OThjMWMtOWYxZS00M2Q2LWE1 ZTktMDlkYTZkMzJiMzFlLzlhNzk4YzFjLTlmMWUtNDNkNi1hNWU5LTA5ZGE2ZDMy YjMxZS5jcmwwHwYDVR0jBBgwFoAUzLePQ9EQ1dM4K5putyKxmJqcEzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTc5OGMxYy05ZjFlLTQzZDYtYTVlOS0wOWRh NmQzMmIzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg49XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABefxTaFZSar8NMniDJClcMZrItmK50+aoSb03AYH1UVUZK0FRSeGHjk A6qSBpL47KZv6IzhFW8NMr6dqJozO6J6EZ4fJEQgRaCjFE/58Z+J7VeRxJR1sryr bHHlTBskSNFBDg14ZjMD5NlfrpSCCZS1IDtU6xVymRuk4T3ozh11YI7AygmvRA2n 6ZpzMYMVUYbtrSxC3IdIX1m1wDxlpJMXChzbWgveadjCR7AQvu48HCjvlEzNybOF cyKWtHhtcb2fqA6HwHsJm6NVv+0zAQTQeogvEtF8GeCGJg3gCdbbF5mGJnPpCSp5 HOvTmRam9lFnXVjTqzEv0zERZAycj8s= -----END CERTIFICATE-----Generated at Sun Oct 4 05:43:43 2026 by rpki-client