$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa File: 9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa (raw, json) Hash identifier: TfwWJO72LfV4w4mGgK6ZZsRZz69fDO7RDbJ9xmuS75c= Subject key identifier: 0C:8A:9C:08:10:3B:32:38:55:96:2A:60:8E:FC:5A:D5:6D:48:97:BD Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584ED861DD3AB991BED0D2999660 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 25649 IP address blocks: 143.55.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:dd:3a:b9:91:be:d0:d2:99:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=4885ad0c-f2ea-450b-b22e-b64accb18707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:26:93:09:c9:0e:02:97:62:dd:e6:6d:13:24: b0:0e:a4:db:a2:a6:5f:e5:a7:e4:93:00:5c:c2:85: d2:cc:9a:15:54:f6:0a:ea:03:f2:1c:40:9f:5b:61: e0:4a:25:e4:b5:15:24:22:2b:fa:4b:01:47:50:d4: 93:eb:a4:34:70:c4:20:a8:c1:45:d9:46:49:b8:b3: 2d:62:cf:5e:9e:c1:80:1f:5f:dd:d3:2c:78:79:5e: dd:8e:5e:74:19:86:de:09:d5:bc:fe:d1:c8:5b:5d: 6d:66:8b:8e:73:bb:92:82:1b:f1:a2:06:31:97:14: 29:4e:fe:75:84:ed:b2:4d:73:a2:ec:02:65:f2:ad: fd:b0:14:d9:4e:60:a3:c5:75:01:65:09:c5:0b:7a: 47:b5:5d:a4:4e:ad:c7:cf:b6:a1:20:50:82:93:a1: 08:2f:1d:76:3d:6c:72:38:25:9d:00:e2:fc:82:4c: f7:b8:59:8e:6d:3c:0e:fb:5c:54:dc:14:f2:cd:3b: 49:0d:73:51:84:7b:2e:e4:19:96:3a:ac:fc:6a:89: e7:f3:77:7d:b4:de:4c:be:16:9d:49:53:79:0b:80: 78:94:45:52:89:83:89:c0:2d:e2:a9:23:2c:4e:1b: a9:ac:17:22:48:c2:b4:4c:44:55:37:e0:3b:8b:f0: 1a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8A:9C:08:10:3B:32:38:55:96:2A:60:8E:FC:5A:D5:6D:48:97:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 143.55.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c4:ef:28:63:f2:68:22:54:9d:c4:3c:76:d5:49:a0:2f:05: 68:13:92:b6:a0:1a:f6:6f:f6:25:4e:bc:9a:4a:2d:c1:a0:7c: 2a:eb:c9:42:94:69:ca:f3:a0:7e:d6:89:ba:27:26:9c:db:9d: c9:cd:a1:cf:ab:05:c5:7b:71:0e:41:31:f8:03:36:0c:b9:f1: f5:78:ea:bf:98:d8:55:f7:ff:ed:03:4e:9d:d8:06:dd:c4:e6: db:10:0c:b2:b1:3f:47:ce:b6:12:0f:04:e3:77:0f:d6:7c:d3: 67:fe:db:f5:d0:f6:48:0e:17:28:9e:48:c3:66:7e:a5:22:fa: 1b:25:9f:ef:92:82:3c:60:6d:5f:5a:c7:dc:a0:e7:61:b7:8e: 6d:cd:65:f6:21:5f:ac:13:fa:dc:bc:71:f7:9f:09:c8:23:2d: 36:77:46:49:13:aa:26:f6:30:e1:d0:61:41:2b:24:10:01:05: 0d:c8:94:c3:93:17:2f:87:61:04:d3:3c:b3:f1:35:4d:79:f9: cf:8a:cf:4e:2e:da:4f:9e:a1:cb:26:a4:f1:36:54:9d:3d:43: 7f:ce:df:e6:af:dd:46:4c:5f:97:10:5c:3f:f6:57:67:41:99: f4:19:2a:20:0e:72:f5:de:43:1d:0b:19:16:f3:9e:2c:fe:8f: 8f:45:d3:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYd06uZG+0NKZlmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NDg4NWFkMGMtZjJlYS00NTBiLWIyMmUtYjY0YWNjYjE4NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiaTCckOApdi3eZtEySwDqTboqZf5afkkwBc woXSzJoVVPYK6gPyHECfW2HgSiXktRUkIiv6SwFHUNST66Q0cMQgqMFF2UZJuLMt Ys9ensGAH1/d0yx4eV7djl50GYbeCdW8/tHIW11tZouOc7uSghvxogYxlxQpTv51 hO2yTXOi7AJl8q39sBTZTmCjxXUBZQnFC3pHtV2kTq3Hz7ahIFCCk6EILx12PWxy OCWdAOL8gkz3uFmObTwO+1xU3BTyzTtJDXNRhHsu5BmWOqz8aonn83d9tN5Mvhad SVN5C4B4lEVSiYOJwC3iqSMsThuprBciSMK0TERVN+A7i/AaYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyKnAgQOzI4VZYqYI78WtVtSJe9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvOWYwZmU0ZWMtNTQwOC0z NDAxLTkzYjctMGQxZmQ5NWU0ZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjzdUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3E7yhj8mgiVJ3EPHbVSaAvBWgTkragGvZv9iVOvJpKLcGgfCrryUKU acrzoH7WibonJpzbncnNoc+rBcV7cQ5BMfgDNgy58fV46r+Y2FX3/+0DTp3YBt3E 5tsQDLKxP0fOthIPBON3D9Z802f+2/XQ9kgOFyieSMNmfqUi+hsln++SgjxgbV9a x9yg52G3jm3NZfYhX6wT+ty8cfefCcgjLTZ3RkkTqib2MOHQYUErJBABBQ3IlMOT Fy+HYQTTPLPxNU15+c+Kz04u2k+eocsmpPE2VJ09Q3/O3+av3UZMX5cQXD/2V2dB mfQZKiAOcvXeQx0LGRbzniz+j49F04o= -----END CERTIFICATE-----Generated at Sat Aug 22 18:42:04 2026 by rpki-client