$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/1e0a4a1b-6977-36c0-82e0-8929e2098665.roa File: 1e0a4a1b-6977-36c0-82e0-8929e2098665.roa (raw, json) Hash identifier: G6Plha9qre4XMhrzyxUH/efk96q+poH8BjLuPuMl+KU= Subject key identifier: 51:FC:AB:9A:27:AA:B0:E0:D8:5A:EF:4C:23:DC:7A:85:B2:B7:7B:0F Certificate issuer: /CN=8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203 Certificate serial: 010D0C9F4328584D71A528401434AD0D45CDE0C0 Authority key identifier: 5E:D6:15:E7:D5:93:2C:04:99:19:76:B1:9C:56:42:EB:6E:8D:D8:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/1e0a4a1b-6977-36c0-82e0-8929e2098665.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 401044 IP address blocks: 131.143.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:28:40:14:34:ad:0d:45:cd:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=1424ab91-0be1-4f7e-b0af-24cd1313ac6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:92:3e:de:ec:7d:ce:95:48:c3:4c:89:cb:91: 75:ff:7e:c5:e6:a6:e4:48:bf:41:86:7c:7c:a4:1e: 59:14:3c:3b:61:de:c0:09:c4:2f:83:ab:f0:b0:ac: b9:4e:3e:8c:c8:2e:ad:e7:c0:e7:da:1e:62:e7:4a: c7:57:10:af:fb:68:c1:10:2e:f4:34:a1:ec:0d:05: 9c:42:39:47:9c:31:8f:79:0c:78:81:36:b9:ac:14: 0a:58:55:1b:71:2c:01:a7:68:37:40:0b:00:eb:f8: ce:b5:be:6d:42:55:36:68:c2:ae:00:c0:97:86:ce: ae:79:d9:83:61:9c:62:69:79:11:33:ce:b5:ff:85: 30:4e:d8:15:4c:ae:ed:54:b1:97:3b:72:78:2a:a0: 87:f9:09:27:d6:dc:35:62:c5:2d:56:5c:f4:8c:98: 42:35:b0:70:5c:a3:d7:4e:24:6e:e1:73:b8:af:fa: aa:58:34:ae:66:05:8a:30:6d:5b:e9:0f:2c:65:49: 6c:b1:b3:98:ed:5d:e7:24:77:92:de:85:07:d4:f8: fd:09:17:a0:ad:ef:65:8d:4e:29:ed:29:01:0e:e1: b7:54:7e:6e:26:35:06:00:20:bd:f9:a1:cb:44:a2: eb:9c:f2:d1:68:f6:94:41:fa:19:af:5b:42:c9:b2: 74:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FC:AB:9A:27:AA:B0:E0:D8:5A:EF:4C:23:DC:7A:85:B2:B7:7B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/1e0a4a1b-6977-36c0-82e0-8929e2098665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.crl X509v3 Authority Key Identifier: keyid:5E:D6:15:E7:D5:93:2C:04:99:19:76:B1:9C:56:42:EB:6E:8D:D8:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.cer sbgp-ipAddrBlock: critical IPv4: 131.143.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:92:c0:0a:1f:c2:c0:da:fc:73:5e:01:8c:e4:5a:6e:eb:65: 4e:60:2b:f8:f6:48:52:66:11:e8:25:cc:0b:38:bc:fe:91:d7: 4f:1a:eb:25:d7:a4:f5:e3:9a:45:81:61:68:d3:04:2e:96:5e: d7:97:73:00:91:64:78:52:fb:ba:de:07:9b:45:c7:cb:4b:57: 8f:a8:03:45:19:62:3e:83:ef:ed:45:fa:e9:9c:a2:90:90:5f: 7a:d1:4a:72:a1:35:a8:0a:7f:e1:70:33:aa:17:d1:83:6c:c9: c3:d5:6c:1b:71:6e:46:82:78:77:4f:d1:5f:f3:8d:e7:0b:ad: bf:9b:b3:a0:c5:58:cd:89:a3:32:dd:f2:47:23:47:d2:cd:e9: 32:5a:bb:ba:8b:a5:e1:95:2c:75:38:8e:98:8c:11:59:82:52: 87:f5:c2:74:2e:a9:d4:90:0b:6d:5e:da:c7:b4:d3:ff:9a:c9: b0:d1:9e:a4:74:fb:a2:24:eb:58:1e:6d:54:0c:fc:f8:a1:f7: fd:32:2b:11:b5:c0:06:fc:eb:64:8a:77:60:68:9e:2d:43:e0: 83:42:a0:c0:b9:c0:6d:80:ee:5f:61:bc:d7:c9:b6:19:83:c6: 45:1f:07:8f:08:0c:0d:f8:fe:91:94:ab:30:b4:55:bb:6a:a1: 22:be:19:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpShAFDStDUXN4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZjZDVjMTAtYTEwZS00ZWJmLWIwY2MtYzhlNWE4ZTNh MjAzMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk MTQyNGFiOTEtMGJlMS00ZjdlLWIwYWYtMjRjZDEzMTNhYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJI+3ux9zpVIw0yJy5F1/37F5qbkSL9Bhnx8 pB5ZFDw7Yd7ACcQvg6vwsKy5Tj6MyC6t58Dn2h5i50rHVxCv+2jBEC70NKHsDQWc QjlHnDGPeQx4gTa5rBQKWFUbcSwBp2g3QAsA6/jOtb5tQlU2aMKuAMCXhs6uedmD YZxiaXkRM861/4UwTtgVTK7tVLGXO3J4KqCH+Qkn1tw1YsUtVlz0jJhCNbBwXKPX TiRu4XO4r/qqWDSuZgWKMG1b6Q8sZUlssbOY7V3nJHeS3oUH1Pj9CRegre9ljU4p 7SkBDuG3VH5uJjUGACC9+aHLRKLrnPLRaPaUQfoZr1tCybJ0XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFH8q5onqrDg2FrvTCPceoWyt3sPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84ZmNk NWMxMC1hMTBlLTRlYmYtYjBjYy1jOGU1YThlM2EyMDMvMWUwYTRhMWItNjk3Ny0z NmMwLTgyZTAtODkyOWUyMDk4NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGZjZDVjMTAtYTEwZS00ZWJmLWIw Y2MtYzhlNWE4ZTNhMjAzLzhmY2Q1YzEwLWExMGUtNGViZi1iMGNjLWM4ZTVhOGUz YTIwMy5jcmwwHwYDVR0jBBgwFoAUXtYV59WTLASZGXaxnFZC626N2HIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84ZmNkNWMxMC1hMTBlLTRlYmYtYjBjYy1jOGU1 YThlM2EyMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg498MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACySwAofwsDa/HNeAYzkWm7rZU5gK/j2SFJmEeglzAs4vP6R108a6yXX pPXjmkWBYWjTBC6WXteXcwCRZHhS+7reB5tFx8tLV4+oA0UZYj6D7+1F+umcopCQ X3rRSnKhNagKf+FwM6oX0YNsycPVbBtxbkaCeHdP0V/zjecLrb+bs6DFWM2JozLd 8kcjR9LN6TJau7qLpeGVLHU4jpiMEVmCUof1wnQuqdSQC21e2se00/+aybDRnqR0 +6Ik61gebVQM/Pih9/0yKxG1wAb862SKd2Boni1D4INCoMC5wG2A7l9hvNfJthmD xkUfB48IDA34/pGUqzC0VbtqoSK+GSM= -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:02 2026 by rpki-client