$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa File: 3c70d43d-85bd-39c4-974b-b26dc07b9073.roa (raw, json) Hash identifier: 2nlF6Phr8tLYJS9dvkwe9uZXBXFjOCsWpo0XnKWeAzA= Subject key identifier: 25:20:70:20:7B:87:C4:E8:F7:B5:BC:ED:AA:7D:8C:DD:CC:5E:03:2F Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584F093CF2C31163693376520380 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 398156 IP address blocks: 168.220.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f2:c3:11:63:69:33:76:52:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=cc52cf4e-028b-4c77-9c13-ac9664eb3058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:49:33:c6:a4:d7:f7:96:5a:3c:32:a8:dc: b6:33:1b:0f:b3:fe:03:35:a2:89:96:d5:d2:62:ff: 7f:46:a7:3d:d2:e2:6f:5c:9f:f8:e1:5c:30:4e:a0: 7e:79:a1:fa:9c:39:86:ea:b0:f0:59:54:ef:b7:ae: ab:97:69:5d:ba:de:8a:71:71:76:6f:84:62:4e:5e: 02:c4:95:ed:c1:2b:01:a1:bf:bb:39:a6:d4:d0:ff: e4:56:49:9b:1d:71:93:8b:66:b0:f7:41:2f:93:92: 57:f7:23:d7:8f:bc:9b:6d:75:96:62:98:60:52:17: e8:39:4e:e2:ac:93:ac:c0:59:f2:65:06:40:24:18: 00:26:9d:2b:86:6a:80:9d:76:4f:5e:50:aa:65:a6: 69:5c:69:14:8a:b4:b9:2f:b1:a7:bc:f9:35:32:ad: 61:85:95:03:c5:39:03:9c:bb:5c:b7:03:48:d2:9a: 1b:8a:35:cb:2c:29:39:e5:a9:11:60:67:71:95:47: 79:32:ea:2f:63:32:5d:b3:e3:8f:4c:e5:55:cb:dd: 89:e5:76:9e:ee:39:0b:5b:93:ac:b5:22:8f:1e:5f: f6:49:e9:28:4c:18:16:f3:1c:1b:84:f5:3e:30:30: a3:f7:62:27:28:d6:6e:47:ae:a4:99:1e:27:10:2d: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:20:70:20:7B:87:C4:E8:F7:B5:BC:ED:AA:7D:8C:DD:CC:5E:03:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:01:40:2d:2d:16:0c:42:d8:66:5c:80:49:15:67:87:05:64: 71:c9:15:cb:47:9f:6c:f3:83:ef:ac:b0:26:b3:fb:0b:2f:83: 3b:75:2a:4e:93:5e:14:74:97:20:89:3a:ef:00:22:26:75:a8: 41:72:60:54:18:68:6c:88:2c:6f:78:ad:df:17:c5:8b:de:e9: ff:1f:62:f3:d5:cc:9c:a5:c3:a0:7f:64:d4:70:37:f7:21:4b: ff:3e:ca:f6:a3:3d:ca:7b:39:27:39:80:96:b7:d8:70:73:b0: 35:11:88:5c:b1:b2:b4:ef:3d:3f:63:bf:05:f0:80:2b:41:c8: c4:6b:30:c9:a7:13:de:94:ea:53:47:b1:fa:3e:62:d6:f3:6f: 6f:cd:9c:5e:b2:1f:4c:0e:4c:c4:88:f9:61:0e:61:38:cc:8b: d2:14:d8:89:b2:59:e9:49:c7:2c:b1:51:04:af:e5:99:cc:10: e6:58:8a:65:32:8e:25:1a:18:ba:05:ad:df:f5:fe:8c:c2:86: 46:31:38:00:ba:92:79:e8:c7:e2:b0:26:00:e1:b8:50:55:c8: a1:45:6a:82:f1:ca:07:09:66:c4:05:87:19:fe:1c:e3:bb:46: c8:4b:2b:c5:37:5a:39:e2:fb:c8:ca:b2:16:80:46:bd:aa:ae: c7:28:07:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPLDEWNpM3ZSA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk Y2M1MmNmNGUtMDI4Yi00Yzc3LTljMTMtYWM5NjY0ZWIzMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnshJM8ak1/eWWjwyqNy2MxsPs/4DNaKJltXS Yv9/Rqc90uJvXJ/44VwwTqB+eaH6nDmG6rDwWVTvt66rl2ldut6KcXF2b4RiTl4C xJXtwSsBob+7OabU0P/kVkmbHXGTi2aw90Evk5JX9yPXj7ybbXWWYphgUhfoOU7i rJOswFnyZQZAJBgAJp0rhmqAnXZPXlCqZaZpXGkUirS5L7GnvPk1Mq1hhZUDxTkD nLtctwNI0pobijXLLCk55akRYGdxlUd5MuovYzJds+OPTOVVy92J5Xae7jkLW5Os tSKPHl/2SekoTBgW8xwbhPU+MDCj92InKNZuR66kmR4nEC3slQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUgcCB7h8To97W87ap9jN3MXgMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvM2M3MGQ0M2QtODViZC0z OWM0LTk3NGItYjI2ZGMwN2I5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwBQC0tFgxC2GZcgEkVZ4cFZHHJFctHn2zzg++ssCaz+wsvgzt1Kk6T XhR0lyCJOu8AIiZ1qEFyYFQYaGyILG94rd8XxYve6f8fYvPVzJylw6B/ZNRwN/ch S/8+yvajPcp7OSc5gJa32HBzsDURiFyxsrTvPT9jvwXwgCtByMRrMMmnE96U6lNH sfo+Ytbzb2/NnF6yH0wOTMSI+WEOYTjMi9IU2ImyWelJxyyxUQSv5ZnMEOZYimUy jiUaGLoFrd/1/ozChkYxOAC6knnox+KwJgDhuFBVyKFFaoLxygcJZsQFhxn+HOO7 RshLK8U3Wjni+8jKshaARr2qrscoB0A= -----END CERTIFICATE-----Generated at Sun Sep 13 10:19:06 2026 by rpki-client