$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b/ba8c1c90-d130-3f5e-923c-0742c3365942.roa File: ba8c1c90-d130-3f5e-923c-0742c3365942.roa (raw, json) Hash identifier: 72C+7ydXP+p8uwYn2QtMxk1tkVfDTCcd0WNS+5V/Joo= Subject key identifier: 18:1D:D2:50:86:F9:93:D3:EE:FA:DB:CE:CB:C9:C8:0F:E5:57:42:69 Certificate issuer: /CN=c8886d9d-2c70-4f51-a8ba-c7b6558bec9b Certificate serial: 010D0C9F4328584FA2E729B4458477D320E3ED30 Authority key identifier: A5:E0:77:B5:D9:0C:AA:0D:D7:9C:E0:F4:41:CF:D6:93:34:86:CF:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b/ba8c1c90-d130-3f5e-923c-0742c3365942.roa Signing time: Tue 27 Oct 2026 02:02:10 +0000 ROA not before: Tue 27 Oct 2026 02:02:10 +0000 ROA not after: Mon 25 Jan 2027 03:02:10 +0000 asID: 1054 IP address blocks: 143.203.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:e7:29:b4:45:84:77:d3:20:e3:ed:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8886d9d-2c70-4f51-a8ba-c7b6558bec9b Validity Not Before: Oct 27 02:02:10 2026 GMT Not After : Jan 25 03:02:10 2027 GMT Subject: CN=227cd6ce-4765-4669-bdbf-5e25d138a734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:79:f9:33:3b:f8:14:e1:21:07:6b:76:6c:9b: ac:f0:cb:c1:ac:c7:1e:d8:85:1a:f0:c9:d3:1b:9d: 99:ea:2f:65:4e:18:d0:9e:fe:2a:4e:ba:3b:7d:52: 61:ad:10:86:69:ff:c5:ab:6f:0d:ba:e7:1a:f7:39: aa:d4:82:4b:b4:6e:40:61:ad:22:44:0a:9c:2d:14: c0:b6:cb:30:5c:35:92:ab:3e:b6:dd:53:36:33:56: 2b:ee:01:26:08:8d:b2:aa:25:28:5b:be:8a:dd:58: a7:7b:de:35:a6:da:ed:92:0c:23:d2:df:1c:ac:85: 76:42:7b:2d:da:39:c3:bf:79:5a:a2:d2:d8:96:68: 77:b6:c7:f0:5d:7c:d3:a5:1f:34:39:cb:f0:83:8a: b0:23:45:f5:ca:2e:cb:73:5b:b6:00:6f:60:63:5e: b4:d5:12:ec:f3:ed:a1:f7:e2:7a:a3:ab:d9:d3:ba: 48:f1:24:12:a2:d8:c0:b3:9d:e7:af:cb:7d:70:b6: 5b:cd:e6:1b:33:e7:69:8b:ab:1b:42:f8:1d:82:22: b5:f4:86:fc:15:d0:38:68:4e:85:a3:9e:82:5b:18: 96:17:1a:76:8b:1c:9f:ba:26:6e:91:cb:7b:44:ea: 11:2d:21:22:34:45:95:02:fa:0c:7f:57:a5:18:44: 66:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1D:D2:50:86:F9:93:D3:EE:FA:DB:CE:CB:C9:C8:0F:E5:57:42:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b/ba8c1c90-d130-3f5e-923c-0742c3365942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b.crl X509v3 Authority Key Identifier: keyid:A5:E0:77:B5:D9:0C:AA:0D:D7:9C:E0:F4:41:CF:D6:93:34:86:CF:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8886d9d-2c70-4f51-a8ba-c7b6558bec9b.cer sbgp-ipAddrBlock: critical IPv4: 143.203.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:97:4d:90:a6:89:09:6e:a6:10:aa:37:78:10:08:e4:81:a8: af:01:95:b4:59:6c:d3:90:d3:07:ee:86:3a:fc:40:38:33:bc: 74:e1:f3:dc:55:e4:31:c2:3e:a7:8e:2f:c4:c9:51:45:b2:9c: 1c:d6:57:ef:bc:10:3e:d3:73:a2:8f:66:b1:99:7f:ea:6a:d3: 8a:b9:ce:ed:a7:1a:e3:fa:cf:c0:ed:37:c4:67:43:fb:12:9e: d5:c5:ce:54:a8:75:b8:12:9b:3f:d3:36:75:d2:ad:57:ef:63: cd:22:34:8f:bd:34:3e:67:98:a7:5a:d0:59:3d:7c:f1:51:e4: 17:10:bf:87:f2:eb:69:0a:09:e0:a2:4e:1c:dc:f0:00:a2:e2: 5f:c5:32:f5:aa:9b:f8:18:7f:16:5a:65:71:d6:14:b0:2a:a1: d4:10:18:cb:81:31:53:c8:9f:1a:d0:63:19:e1:65:01:68:33: 48:f4:2f:06:2b:1b:1b:83:8e:70:4d:c4:21:c4:27:5c:2f:c8: 4e:a4:97:e6:ce:d1:b8:50:67:6a:a6:5f:75:3e:db:00:97:66: 7e:7f:67:3d:93:97:db:3a:ac:e0:17:76:43:73:56:0e:51:29: d8:59:0d:7f:18:12:80:e6:8c:ff:b5:4f:a3:cd:84:ef:d9:5f: d2:fa:e2:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+i5ym0RYR30yDj7TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4ODZkOWQtMmM3MC00ZjUxLWE4YmEtYzdiNjU1OGJl YzliMB4XDTI2MTAyNzAyMDIxMFoXDTI3MDEyNTAzMDIxMFowLzEtMCsGA1UEAxMk MjI3Y2Q2Y2UtNDc2NS00NjY5LWJkYmYtNWUyNWQxMzhhNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHn5Mzv4FOEhB2t2bJus8MvBrMce2IUa8MnT G52Z6i9lThjQnv4qTro7fVJhrRCGaf/Fq28Nuuca9zmq1IJLtG5AYa0iRAqcLRTA tsswXDWSqz623VM2M1Yr7gEmCI2yqiUoW76K3Vine941ptrtkgwj0t8crIV2Qnst 2jnDv3laotLYlmh3tsfwXXzTpR80Ocvwg4qwI0X1yi7Lc1u2AG9gY1601RLs8+2h 9+J6o6vZ07pI8SQSotjAs53nr8t9cLZbzeYbM+dpi6sbQvgdgiK19Ib8FdA4aE6F o56CWxiWFxp2ixyfuiZukct7ROoRLSEiNEWVAvoMf1elGERmOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgd0lCG+ZPT7vrbzsvJyA/lV0JpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9jODg4 NmQ5ZC0yYzcwLTRmNTEtYThiYS1jN2I2NTU4YmVjOWIvYmE4YzFjOTAtZDEzMC0z ZjVlLTkyM2MtMDc0MmMzMzY1OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYzg4ODZkOWQtMmM3MC00ZjUxLWE4 YmEtYzdiNjU1OGJlYzliL2M4ODg2ZDlkLTJjNzAtNGY1MS1hOGJhLWM3YjY1NThi ZWM5Yi5jcmwwHwYDVR0jBBgwFoAUpeB3tdkMqg3XnOD0Qc/WkzSGzyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9jODg4NmQ5ZC0yYzcwLTRmNTEtYThiYS1jN2I2 NTU4YmVjOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj8sIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqXTZCmiQluphCqN3gQCOSBqK8BlbRZbNOQ0wfuhjr8QDgzvHTh89xV 5DHCPqeOL8TJUUWynBzWV++8ED7Tc6KPZrGZf+pq04q5zu2nGuP6z8DtN8RnQ/sS ntXFzlSodbgSmz/TNnXSrVfvY80iNI+9ND5nmKda0Fk9fPFR5BcQv4fy62kKCeCi Thzc8ACi4l/FMvWqm/gYfxZaZXHWFLAqodQQGMuBMVPInxrQYxnhZQFoM0j0LwYr GxuDjnBNxCHEJ1wvyE6kl+bO0bhQZ2qmX3U+2wCXZn5/Zz2Tl9s6rOAXdkNzVg5R KdhZDX8YEoDmjP+1T6PNhO/ZX9L64j0= -----END CERTIFICATE-----Generated at Wed Nov 4 14:30:13 2026 by rpki-client