$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/a417a33b-63fe-3fa1-9067-afc3c0988d5d.roa File: a417a33b-63fe-3fa1-9067-afc3c0988d5d.roa (raw, json) Hash identifier: h3rP31C2dW6F+8qiQYJSRxfP4YLDch7nvV+25CJZLXs= Subject key identifier: 1C:B7:04:07:9B:91:CF:D9:D2:D4:6D:B1:F3:46:57:7C:EF:10:5A:5E Certificate issuer: /CN=e3aefa7a-1469-41b1-a14f-6fc251b55823 Certificate serial: 010D0C9F4328584D4BF4F5326F899DB7F91F9600 Authority key identifier: 23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/a417a33b-63fe-3fa1-9067-afc3c0988d5d.roa Signing time: Thu 26 Mar 2026 13:00:41 +0000 ROA not before: Thu 26 Mar 2026 13:00:41 +0000 ROA not after: Wed 24 Jun 2026 13:00:41 +0000 asID: 15280 IP address blocks: 131.143.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:f4:f5:32:6f:89:9d:b7:f9:1f:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3aefa7a-1469-41b1-a14f-6fc251b55823 Validity Not Before: Mar 26 13:00:41 2026 GMT Not After : Jun 24 13:00:41 2026 GMT Subject: CN=b7fa3627-51a3-4113-aafd-7dfbf4593348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:d4:da:b0:e8:05:f2:c1:92:ef:67:05:fb: d7:f4:e6:8d:27:ca:34:35:96:07:da:89:9d:53:fd: c6:8e:5c:88:a6:b3:50:fd:5c:cb:f7:77:19:2d:e1: c8:6b:fb:f8:cc:98:71:e8:10:63:ef:44:72:85:b3: 51:3d:59:e9:34:d3:d1:51:35:8a:ec:35:fe:30:07: 8f:b1:d4:b7:c9:80:7a:9f:af:6d:69:67:b2:8d:47: 67:a6:73:84:f8:f9:97:b7:2d:99:47:41:2a:e9:9a: 87:ac:51:76:c2:ba:bd:a5:46:d7:39:52:05:e6:cc: 11:1e:98:c2:5c:e3:74:57:57:43:2a:12:a7:35:a2: 63:f9:a1:cb:d5:5d:9c:3c:bc:bb:d2:a8:87:a7:5a: d4:12:28:d8:d0:1d:f0:00:6c:c4:eb:15:03:07:76: ee:b3:95:52:b5:50:f1:28:32:b8:80:60:6f:e0:ab: 6b:34:3c:ba:17:5f:48:39:3a:b7:67:fc:e5:f7:c1: bc:67:e3:1c:e0:97:42:c6:c0:d5:cc:f9:1e:9d:88: 88:d5:93:1d:48:d0:ec:ba:a1:2c:de:28:48:f9:66: 21:bd:84:98:78:fa:05:45:5c:aa:5d:61:78:40:ec: 36:1f:fe:1e:f4:e8:80:b9:a9:6c:9d:cf:aa:bb:fa: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B7:04:07:9B:91:CF:D9:D2:D4:6D:B1:F3:46:57:7C:EF:10:5A:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/a417a33b-63fe-3fa1-9067-afc3c0988d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.crl X509v3 Authority Key Identifier: keyid:23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer sbgp-ipAddrBlock: critical IPv4: 131.143.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:36:29:8d:40:05:a0:d6:67:23:ca:2f:a2:3a:ea:d9:b7:47: 5c:7c:11:ea:ab:df:a2:cd:b9:23:8c:7e:18:c7:47:c9:1b:c4: ad:b1:85:f1:56:04:01:13:30:84:d7:65:8f:7b:81:33:b0:09: b0:df:3a:0e:e6:6d:68:b6:a6:b3:2a:dd:fe:81:dd:4f:12:b2: 83:43:0c:a4:3b:de:07:45:a2:58:05:9d:7e:e0:7e:5a:1f:c7: f9:b5:ad:b2:7e:1b:37:60:40:86:4c:ef:f3:21:bb:e6:64:41: e5:85:df:31:1a:46:72:f1:53:26:ee:0e:83:f9:50:1f:a8:9d: 5d:d3:15:4d:9f:19:25:e0:63:61:3a:99:13:84:39:d8:8c:71: ed:33:30:18:27:20:39:0f:a3:0a:36:36:8f:c1:65:42:82:ce: 95:3f:9e:4b:6a:5d:32:d1:7b:5b:8f:0e:d5:66:79:86:7d:20: e2:6f:67:e8:b6:16:af:92:d0:ee:21:60:fc:41:08:68:d9:61: 09:e3:0a:b9:74:5d:89:b2:f9:3a:64:77:29:8b:92:c8:89:5b: 6b:a8:d0:dc:d8:70:45:5b:3e:aa:ad:79:05:a7:0a:48:0d:3a: 38:ef:ba:87:eb:bc:bc:cb:62:02:0a:05:33:3b:43:8f:97:cb: 88:9e:f5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1L9PUyb4mdt/kflgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNhZWZhN2EtMTQ2OS00MWIxLWExNGYtNmZjMjUxYjU1 ODIzMB4XDTI2MDMyNjEzMDA0MVoXDTI2MDYyNDEzMDA0MVowLzEtMCsGA1UEAxMk YjdmYTM2MjctNTFhMy00MTEzLWFhZmQtN2RmYmY0NTkzMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMrU2rDoBfLBku9nBfvX9OaNJ8o0NZYH2omd U/3GjlyIprNQ/VzL93cZLeHIa/v4zJhx6BBj70RyhbNRPVnpNNPRUTWK7DX+MAeP sdS3yYB6n69taWeyjUdnpnOE+PmXty2ZR0Eq6ZqHrFF2wrq9pUbXOVIF5swRHpjC XON0V1dDKhKnNaJj+aHL1V2cPLy70qiHp1rUEijY0B3wAGzE6xUDB3bus5VStVDx KDK4gGBv4KtrNDy6F19IOTq3Z/zl98G8Z+Mc4JdCxsDVzPkenYiI1ZMdSNDsuqEs 3ihI+WYhvYSYePoFRVyqXWF4QOw2H/4e9OiAualsnc+qu/qV+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBy3BAebkc/Z0tRtsfNGV3zvEFpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lM2Fl ZmE3YS0xNDY5LTQxYjEtYTE0Zi02ZmMyNTFiNTU4MjMvYTQxN2EzM2ItNjNmZS0z ZmExLTkwNjctYWZjM2MwOTg4ZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTNhZWZhN2EtMTQ2OS00MWIxLWEx NGYtNmZjMjUxYjU1ODIzL2UzYWVmYTdhLTE0NjktNDFiMS1hMTRmLTZmYzI1MWI1 NTgyMy5jcmwwHwYDVR0jBBgwFoAUI6Fu/KLsWtanqAWr/erfaF8HIZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lM2FlZmE3YS0xNDY5LTQxYjEtYTE0Zi02ZmMy NTFiNTU4MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo2KY1ABaDWZyPKL6I66tm3R1x8Eeqr36LNuSOMfhjHR8kbxK2xhfFW BAETMITXZY97gTOwCbDfOg7mbWi2prMq3f6B3U8SsoNDDKQ73gdFolgFnX7gflof x/m1rbJ+GzdgQIZM7/Mhu+ZkQeWF3zEaRnLxUybuDoP5UB+onV3TFU2fGSXgY2E6 mROEOdiMce0zMBgnIDkPowo2No/BZUKCzpU/nktqXTLRe1uPDtVmeYZ9IOJvZ+i2 Fq+S0O4hYPxBCGjZYQnjCrl0XYmy+TpkdymLksiJW2uo0NzYcEVbPqqteQWnCkgN OjjvuofrvLzLYgIKBTM7Q4+Xy4ie9eI= -----END CERTIFICATE-----Generated at Fri Apr 17 18:23:40 2026 by rpki-client