$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/49ddd083-e7f3-37cc-86ea-eef71c189fea.roa File: 49ddd083-e7f3-37cc-86ea-eef71c189fea.roa (raw, json) Hash identifier: UQ4bjvlEIFw4CcKWgl0ETHMbneugD1US9m7CwdaPXsI= Subject key identifier: 42:CC:8A:C7:81:8D:BD:9C:B4:2E:C1:1B:42:33:95:CD:14:79:F7:83 Certificate issuer: /CN=9ace5cc7-82ec-4bec-947e-97e7401aa1cc Certificate serial: 010D0C9F4328584ECA6C6CFDF243883D69F0B880 Authority key identifier: 00:A3:EE:AC:67:BF:DE:4C:CC:CD:4F:1F:E0:47:7A:CF:26:09:D7:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/49ddd083-e7f3-37cc-86ea-eef71c189fea.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 402092 IP address blocks: 131.143.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:6c:fd:f2:43:88:3d:69:f0:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ace5cc7-82ec-4bec-947e-97e7401aa1cc Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=5e95a04a-8df0-4bf9-96aa-d70191bd9ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:03:9d:e9:42:65:f0:ca:13:15:18:85:fb: 5f:a1:ea:ba:e4:e5:88:2c:4b:d8:cb:bd:73:56:e2: 4f:1f:f7:f2:81:40:9c:a3:e5:64:be:87:32:3b:29: 07:98:d4:93:02:37:0e:bf:37:98:8a:c5:e9:80:2a: f4:43:96:33:1c:93:71:18:11:40:b3:cb:d6:96:4c: 67:36:02:85:d9:36:74:2a:9c:84:69:c5:49:6c:4f: 35:64:89:f2:7a:a5:af:7f:ad:fa:6d:0a:3c:78:74: 33:4c:96:7b:ab:c4:9b:5d:d5:f3:15:8e:f4:e7:4a: 30:c1:fc:e8:8c:78:ef:82:48:e2:91:ef:05:4d:e4: 1d:9e:bc:60:d3:82:c3:a8:51:53:81:3f:a8:79:bf: e6:87:e1:44:49:c2:bf:f3:35:6d:20:a2:ea:64:60: 62:8a:68:e4:64:2a:11:25:fc:ae:95:12:a0:13:45: 7d:13:60:e3:34:c9:0e:1e:1c:7d:43:9c:3f:42:64: 2a:4f:1b:dd:8b:00:a1:9b:21:38:fd:a4:ee:ef:e8: b6:3b:08:24:31:c8:f4:d6:21:3f:9d:de:0e:0a:16: 43:f1:fa:c3:fb:cf:42:e2:66:56:58:cc:33:67:c6: 43:e3:de:c1:95:06:8e:e8:9a:5c:9d:9d:ab:3a:be: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CC:8A:C7:81:8D:BD:9C:B4:2E:C1:1B:42:33:95:CD:14:79:F7:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/49ddd083-e7f3-37cc-86ea-eef71c189fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.crl X509v3 Authority Key Identifier: keyid:00:A3:EE:AC:67:BF:DE:4C:CC:CD:4F:1F:E0:47:7A:CF:26:09:D7:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ace5cc7-82ec-4bec-947e-97e7401aa1cc.cer sbgp-ipAddrBlock: critical IPv4: 131.143.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9b:82:78:d5:10:1a:31:b0:1c:b7:78:5f:b6:1d:eb:8d:f9: 36:48:9b:60:3a:22:59:e8:13:5c:84:5a:4e:e9:1b:4a:9b:3a: 3f:59:9c:59:bf:b8:0d:6a:76:c7:85:cd:08:08:a9:10:72:ee: 6f:bf:65:b6:de:ae:7d:68:da:94:6b:2f:f3:6f:0f:d3:df:69: c0:ee:b4:3f:23:77:81:eb:5b:67:4d:f4:4b:09:08:24:8f:c1: fa:d8:61:10:4e:15:e4:80:ed:4a:ee:c0:05:97:bb:65:52:19: 94:23:87:29:b1:f5:ec:2c:7a:75:fd:f1:51:7a:73:6a:a6:05: c3:44:8c:e7:d3:59:67:9f:38:be:f4:4b:74:d8:2e:13:53:45: 94:e1:c9:d0:11:99:89:01:38:56:f6:06:52:e4:71:e3:7e:9d: f3:13:b7:6f:b3:d6:b3:14:d1:0f:1b:72:09:b3:f4:3b:09:8a: 84:93:54:fa:6e:28:e0:77:5b:c7:5a:91:0f:74:be:45:be:de: c1:5a:1d:72:f9:a5:69:f8:b1:a0:a3:f6:de:6c:2a:1f:d1:4d: 00:b2:95:a8:54:ec:b9:6c:6d:c7:63:56:0f:33:32:a0:15:06: 03:f9:8d:89:a6:05:cd:5f:7a:72:d5:14:56:f4:2b:40:f9:08: 23:f9:da:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbGz98kOIPWnwuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjZTVjYzctODJlYy00YmVjLTk0N2UtOTdlNzQwMWFh MWNjMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk NWU5NWEwNGEtOGRmMC00YmY5LTk2YWEtZDcwMTkxYmQ5ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfUDnelCZfDKExUYhftfoeq65OWILEvYy71z VuJPH/fygUCco+VkvocyOykHmNSTAjcOvzeYisXpgCr0Q5YzHJNxGBFAs8vWlkxn NgKF2TZ0KpyEacVJbE81ZInyeqWvf636bQo8eHQzTJZ7q8SbXdXzFY7050owwfzo jHjvgkjike8FTeQdnrxg04LDqFFTgT+oeb/mh+FEScK/8zVtIKLqZGBiimjkZCoR JfyulRKgE0V9E2DjNMkOHhx9Q5w/QmQqTxvdiwChmyE4/aTu7+i2OwgkMcj01iE/ nd4OChZD8frD+89C4mZWWMwzZ8ZD497BlQaO6JpcnZ2rOr7OpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELMiseBjb2ctC7BG0Izlc0UefeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85YWNl NWNjNy04MmVjLTRiZWMtOTQ3ZS05N2U3NDAxYWExY2MvNDlkZGQwODMtZTdmMy0z N2NjLTg2ZWEtZWVmNzFjMTg5ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWFjZTVjYzctODJlYy00YmVjLTk0 N2UtOTdlNzQwMWFhMWNjLzlhY2U1Y2M3LTgyZWMtNGJlYy05NDdlLTk3ZTc0MDFh YTFjYy5jcmwwHwYDVR0jBBgwFoAUAKPurGe/3kzMzU8f4Ed6zyYJ10AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85YWNlNWNjNy04MmVjLTRiZWMtOTQ3ZS05N2U3 NDAxYWExY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSbgnjVEBoxsBy3eF+2HeuN+TZIm2A6IlnoE1yEWk7pG0qbOj9ZnFm/ uA1qdseFzQgIqRBy7m+/Zbbern1o2pRrL/NvD9PfacDutD8jd4HrW2dN9EsJCCSP wfrYYRBOFeSA7UruwAWXu2VSGZQjhymx9ewsenX98VF6c2qmBcNEjOfTWWefOL70 S3TYLhNTRZThydARmYkBOFb2BlLkceN+nfMTt2+z1rMU0Q8bcgmz9DsJioSTVPpu KOB3W8dakQ90vkW+3sFaHXL5pWn4saCj9t5sKh/RTQCylahU7LlsbcdjVg8zMqAV BgP5jYmmBc1fenLVFFb0K0D5CCP52hk= -----END CERTIFICATE-----Generated at Mon Sep 21 17:28:09 2026 by rpki-client