$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f18bd271-f3f5-39c2-8b78-11040053f7d2.roa File: f18bd271-f3f5-39c2-8b78-11040053f7d2.roa (raw, json) Hash identifier: sHOA+3TLpl/eii4rAzVzAVcGQwcL097uS9O0Vxzk/Nc= Subject key identifier: 72:E6:F4:6E:94:05:BA:B2:A0:A3:A6:13:83:68:F3:45:B6:56:BE:FF Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584F9B05A495891E4EDBFDBB4900 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f18bd271-f3f5-39c2-8b78-11040053f7d2.roa Signing time: Sat 24 Oct 2026 06:17:07 +0000 ROA not before: Sat 24 Oct 2026 06:17:07 +0000 ROA not after: Fri 22 Jan 2027 07:17:07 +0000 asID: 397181 IP address blocks: 143.203.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:05:a4:95:89:1e:4e:db:fd:bb:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Oct 24 06:17:07 2026 GMT Not After : Jan 22 07:17:07 2027 GMT Subject: CN=37bdd24f-762b-4325-8000-a7e1b33a9598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:9b:86:71:b5:ed:0d:37:9c:14:2b:10:b1: 4f:18:7e:46:2d:ff:bd:54:4e:1e:5d:43:c1:a9:53: a8:92:18:dd:52:20:4a:71:29:98:83:02:b6:a5:f3: e4:28:5c:e4:fc:41:ed:2d:1d:99:c9:d8:00:82:a8: 22:fb:5e:45:ba:0f:2c:96:93:6a:a7:22:ae:1c:e2: e4:25:85:cb:00:dd:93:d5:1d:5a:f0:ba:50:8d:56: 16:59:eb:20:f4:9a:1d:9c:b0:92:4d:48:80:8f:05: 9a:97:4e:38:c7:74:a0:99:0e:8e:b6:d7:83:71:fd: 0e:82:71:bf:f3:4d:36:a4:8d:c0:ae:40:62:e8:18: 0c:b7:14:51:37:a1:76:34:2c:81:55:e8:1d:7d:9c: 50:b0:43:89:57:dd:5a:d6:e7:64:2d:3a:fb:fc:6e: a6:37:94:94:d8:74:05:da:a5:8f:d4:c8:c3:45:d4: d1:a8:d9:d1:53:41:e5:3a:cb:df:ae:15:4f:81:cb: 55:2d:f7:cf:ac:63:54:91:18:8f:87:de:e9:54:e3: 76:94:23:c7:ad:7d:41:f1:2a:8e:ac:09:9d:32:5c: 9c:59:92:9f:be:6e:6a:2e:80:bb:5f:38:1f:f5:c4: 47:7d:5f:ad:22:73:6d:11:16:e4:81:de:94:d9:17: 81:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E6:F4:6E:94:05:BA:B2:A0:A3:A6:13:83:68:F3:45:B6:56:BE:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f18bd271-f3f5-39c2-8b78-11040053f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 143.203.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:60:94:26:75:86:bf:a5:f3:fc:11:fe:d5:cc:dd:2a:58:25: 6c:90:6c:a6:60:23:60:ec:59:27:3c:57:6e:28:8d:f9:a7:11: f4:c8:6e:6d:ae:8a:82:1f:d9:d9:41:17:21:ba:1c:3d:67:8d: 3c:7e:a5:d6:1f:5e:88:9b:67:8b:54:7c:aa:e1:3b:37:19:86: 31:f6:40:5f:94:51:cf:e2:3e:7c:38:3d:cd:e6:8c:a7:86:47: 87:cb:2c:ce:7d:36:e8:38:59:82:a3:ac:c3:23:05:7a:21:1b: 8d:a2:a6:f7:a2:6e:14:67:23:b8:db:7e:b1:51:94:4d:d2:8f: 62:89:4a:81:49:78:12:5b:05:b6:9a:52:9a:2b:72:f4:fd:f9: 86:e3:b1:00:a2:ce:5c:b3:f1:b6:d3:42:2f:1d:36:3a:b8:1e: a0:34:67:1c:20:c6:9f:62:9a:df:18:e5:a0:28:92:4d:95:2c: 97:64:bd:8f:8f:5b:dc:cd:9e:15:e0:37:0d:9d:25:90:b9:f9: f5:13:ba:38:6e:57:4d:c3:b6:fe:1e:0d:71:60:75:c6:ab:c2: 24:fa:25:de:7d:53:0c:ab:30:0f:b6:e8:35:f7:ea:1b:3b:37: 39:4a:0a:14:2e:f5:73:1d:15:0d:3f:9b:dc:ff:ee:05:8a:40: 53:ad:8d:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bBaSViR5O2/27SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MTAyNDA2MTcwN1oXDTI3MDEyMjA3MTcwN1owLzEtMCsGA1UEAxMk MzdiZGQyNGYtNzYyYi00MzI1LTgwMDAtYTdlMWIzM2E5NTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib6bhnG17Q03nBQrELFPGH5GLf+9VE4eXUPB qVOokhjdUiBKcSmYgwK2pfPkKFzk/EHtLR2ZydgAgqgi+15Fug8slpNqpyKuHOLk JYXLAN2T1R1a8LpQjVYWWesg9JodnLCSTUiAjwWal044x3SgmQ6OtteDcf0OgnG/ 8002pI3ArkBi6BgMtxRRN6F2NCyBVegdfZxQsEOJV91a1udkLTr7/G6mN5SU2HQF 2qWP1MjDRdTRqNnRU0HlOsvfrhVPgctVLffPrGNUkRiPh97pVON2lCPHrX1B8SqO rAmdMlycWZKfvm5qLoC7Xzgf9cRHfV+tInNtERbkgd6U2ReB9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLm9G6UBbqyoKOmE4No80W2Vr7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvZjE4YmQyNzEtZjNmNS0z OWMyLThiNzgtMTEwNDAwNTNmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj8t1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5glCZ1hr+l8/wR/tXM3SpYJWyQbKZgI2DsWSc8V24ojfmnEfTIbm2u ioIf2dlBFyG6HD1njTx+pdYfXoibZ4tUfKrhOzcZhjH2QF+UUc/iPnw4Pc3mjKeG R4fLLM59Nug4WYKjrMMjBXohG42ipveibhRnI7jbfrFRlE3Sj2KJSoFJeBJbBbaa UporcvT9+YbjsQCizlyz8bbTQi8dNjq4HqA0Zxwgxp9imt8Y5aAokk2VLJdkvY+P W9zNnhXgNw2dJZC5+fUTujhuV03Dtv4eDXFgdcarwiT6Jd59UwyrMA+26DX36hs7 NzlKChQu9XMdFQ0/m9z/7gWKQFOtjZM= -----END CERTIFICATE-----Generated at Mon Oct 26 21:16:15 2026 by rpki-client