$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa File: d8100009-70c0-3912-8d76-a269e3657e98.roa (raw, json) Hash identifier: tV/rCmWUd2PxDCEt6RX9L+k86KnegTc8PZ9zUK4H6lM= Subject key identifier: D7:31:57:89:3E:E2:F6:77:E7:27:88:C2:C9:36:54:67:C1:AB:CC:43 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584ED861DD46AF352DCF26340980 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 25649 IP address blocks: 143.55.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:dd:46:af:35:2d:cf:26:34:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=83e57d6f-fa5c-4fea-be9e-597c6ec3b439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:06:f5:c4:22:b8:f7:06:40:0c:da:e9:e4: 0a:0b:17:ef:32:8c:78:96:b5:ab:54:13:b6:7f:0d: ca:a6:52:54:a3:39:00:95:9c:f0:dc:17:48:13:0d: 7f:7e:4e:8f:a2:29:04:28:f9:41:b8:b4:0b:54:5d: ba:fb:1b:d9:6d:7e:1a:37:e5:fe:d8:53:5a:65:1f: 02:ec:67:51:9c:05:17:5e:96:52:14:1b:41:6c:78: 2a:90:27:d3:15:94:79:3e:16:79:90:5c:1c:8b:c7: 49:38:49:8e:47:02:d6:c3:91:b2:8d:a5:67:6c:6e: 9c:27:65:c1:33:a6:a4:d9:e1:4c:10:e1:c1:7a:8e: 34:16:ac:ff:f6:9b:00:d1:5a:89:8b:09:4e:d8:d2: 8d:8b:af:e4:87:c0:5a:17:9b:ee:fc:a0:f1:df:ce: c8:fb:36:18:28:50:41:39:c7:eb:3a:25:e5:29:b8: 76:45:8c:ef:ba:92:f2:4f:93:88:5d:b0:68:02:d9: d0:00:01:30:f7:d1:e1:cf:b4:34:02:03:13:ab:ac: 97:57:c7:ca:0a:e7:68:97:3f:4d:79:4f:a2:f8:2c: 12:58:cb:a8:29:d1:09:b6:4c:d2:9b:e8:e0:00:ec: 11:41:2f:d9:35:4b:46:c6:8f:6a:0a:bc:f9:84:a9: 27:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:31:57:89:3E:E2:F6:77:E7:27:88:C2:C9:36:54:67:C1:AB:CC:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 143.55.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c3:0b:a4:0d:2f:27:63:3a:89:bd:89:cc:ae:6d:14:2e:17: 3c:a3:4a:8a:68:32:51:c2:e1:d8:bd:45:f8:bb:dd:07:85:70: 43:33:75:42:c8:f9:68:86:c9:c4:24:da:0e:bb:61:26:fc:4f: b5:dd:44:f4:0c:3c:fb:9f:98:3c:e4:fa:8a:56:d6:46:66:1e: 14:d3:d3:70:58:48:2f:ac:9f:c2:2e:2a:be:38:6a:8d:a6:a7: 16:04:6c:89:c7:40:a1:f7:1e:80:5b:74:1a:91:85:a7:c8:ab: 9c:56:3e:15:2a:c9:0f:1e:fc:f3:c0:42:9b:6d:ef:ad:1d:73: 7e:a4:e7:f2:ae:87:66:91:1b:3d:1d:8a:ff:d6:7e:8d:ce:4f: 86:9a:03:ab:a8:5c:3c:06:3b:80:bd:30:7b:42:3d:71:f6:d3: 3c:2e:e5:82:78:d4:aa:55:85:4c:ab:61:fe:3c:bd:5e:94:d9: b3:cd:2b:dd:53:fa:2c:2e:10:34:16:7a:67:1e:b7:d6:ad:11: 55:38:7f:5a:a8:28:59:c0:61:38:cc:86:ad:c7:dd:80:af:b7: 67:4d:6c:02:8f:52:89:3e:77:4d:c3:5b:96:cc:06:ed:e2:79: a1:ed:f5:0c:bb:65:36:bc:5d:ad:73:f7:f6:e4:c7:73:86:83: 30:d7:75:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYd1GrzUtzyY0CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ODNlNTdkNmYtZmE1Yy00ZmVhLWJlOWUtNTk3YzZlYzNiNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij8G9cQiuPcGQAza6eQKCxfvMox4lrWrVBO2 fw3KplJUozkAlZzw3BdIEw1/fk6PoikEKPlBuLQLVF26+xvZbX4aN+X+2FNaZR8C 7GdRnAUXXpZSFBtBbHgqkCfTFZR5PhZ5kFwci8dJOEmORwLWw5GyjaVnbG6cJ2XB M6ak2eFMEOHBeo40Fqz/9psA0VqJiwlO2NKNi6/kh8BaF5vu/KDx387I+zYYKFBB OcfrOiXlKbh2RYzvupLyT5OIXbBoAtnQAAEw99Hhz7Q0AgMTq6yXV8fKCudolz9N eU+i+CwSWMuoKdEJtkzSm+jgAOwRQS/ZNUtGxo9qCrz5hKknNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcxV4k+4vZ35yeIwsk2VGfBq8xDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvZDgxMDAwMDktNzBjMC0z OTEyLThkNzYtYTI2OWUzNjU3ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjzeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHDC6QNLydjOom9icyubRQuFzyjSopoMlHC4di9Rfi73QeFcEMzdULI +WiGycQk2g67YSb8T7XdRPQMPPufmDzk+opW1kZmHhTT03BYSC+sn8IuKr44ao2m pxYEbInHQKH3HoBbdBqRhafIq5xWPhUqyQ8e/PPAQptt760dc36k5/Kuh2aRGz0d iv/Wfo3OT4aaA6uoXDwGO4C9MHtCPXH20zwu5YJ41KpVhUyrYf48vV6U2bPNK91T +iwuEDQWemcet9atEVU4f1qoKFnAYTjMhq3H3YCvt2dNbAKPUok+d03DW5bMBu3i eaHt9Qy7ZTa8Xa1z9/bkx3OGgzDXdWg= -----END CERTIFICATE-----Generated at Sat Aug 22 18:43:34 2026 by rpki-client