$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/571f4c00-0963-3ea7-9343-1511a424bbde.roa File: 571f4c00-0963-3ea7-9343-1511a424bbde.roa (raw, json) Hash identifier: oPmL1aUVelpTdISrvAaWr1acs1xCO6mnyHi96JpvROM= Subject key identifier: A2:87:04:3E:EF:4B:52:22:98:C5:84:E7:F5:8B:35:43:1D:58:57:45 Certificate issuer: /CN=f9ceb08b-7a95-415d-a4e1-32f176c5047c Certificate serial: 010D0C9F4328584F6EE467031A2CBDF9A92E8740 Authority key identifier: 4A:F5:07:AD:08:81:A2:F0:04:96:B1:0A:39:73:61:8B:E7:CD:E4:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/571f4c00-0963-3ea7-9343-1511a424bbde.roa Signing time: Thu 08 Oct 2026 10:54:34 +0000 ROA not before: Thu 08 Oct 2026 10:54:34 +0000 ROA not after: Wed 06 Jan 2027 11:54:34 +0000 asID: 401608 IP address blocks: 143.203.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6e:e4:67:03:1a:2c:bd:f9:a9:2e:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9ceb08b-7a95-415d-a4e1-32f176c5047c Validity Not Before: Oct 8 10:54:34 2026 GMT Not After : Jan 6 11:54:34 2027 GMT Subject: CN=dc67e4b4-9487-42d0-adad-b5d3888b9acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d0:72:54:6e:06:4a:b3:bd:75:e5:ef:64:7f: a9:fa:60:2f:05:47:c5:cb:f5:e5:d1:22:85:e4:67: 6a:8f:69:63:77:c8:af:a7:19:64:43:cd:c4:ac:e0: 50:c1:78:35:34:4f:9e:35:91:97:c1:e7:74:ba:09: 8a:c3:66:bc:41:2f:b4:01:3b:f3:7c:aa:c3:64:7e: f8:dc:a1:ff:47:34:44:1b:02:6c:16:47:75:6b:b8: cf:61:78:c8:a1:fa:a6:86:13:4f:19:84:d6:ea:f6: 72:1d:a5:04:df:1d:ea:78:fa:13:3b:39:84:84:b6: 40:85:a8:96:3e:12:a4:09:c4:ad:ed:7a:6b:e3:b7: 8a:e1:9b:ab:bd:e7:f9:6e:86:72:e7:a4:13:23:a7: eb:43:34:66:a6:a3:7a:4b:17:51:98:6b:3d:b3:8e: 3d:86:fa:4c:e6:e1:09:76:6c:d7:15:0c:fb:1a:22: 39:98:a7:29:79:1d:19:57:21:c1:fc:91:66:66:da: 5f:6f:30:43:a5:96:08:e5:1b:9f:00:42:66:86:be: a6:a4:f9:47:fa:c8:4f:e6:2e:b8:d5:6b:85:6e:90: 0b:45:6e:9b:b4:a9:7e:d3:e2:69:80:bc:44:dc:82: 5c:33:94:be:82:b0:d8:8c:9a:07:80:66:24:0e:f9: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:87:04:3E:EF:4B:52:22:98:C5:84:E7:F5:8B:35:43:1D:58:57:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/571f4c00-0963-3ea7-9343-1511a424bbde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.crl X509v3 Authority Key Identifier: keyid:4A:F5:07:AD:08:81:A2:F0:04:96:B1:0A:39:73:61:8B:E7:CD:E4:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer sbgp-ipAddrBlock: critical IPv4: 143.203.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9b:0b:b8:ba:10:d5:fa:41:b6:59:da:5f:80:2d:63:20:1b: b0:62:b4:7c:a4:ae:68:ad:0a:9c:2a:27:0e:2c:1e:85:93:92: 52:f3:c1:89:a0:c4:28:10:a9:75:0d:b9:77:05:12:7f:2c:9f: ed:99:5a:7b:9a:cc:17:f7:ab:c9:fe:45:34:6f:33:a7:fd:d6: 2f:96:26:2b:7e:e7:a0:28:cc:78:78:4c:4f:ec:7a:f0:71:8c: e4:62:5c:ba:aa:32:11:39:f0:e0:96:8d:38:66:d3:01:4f:bb: b6:f4:29:0d:01:79:8b:aa:89:7f:17:fe:e6:96:18:fa:c0:6e: 89:d2:25:1c:7e:a2:48:7f:66:6c:4f:ee:4b:d9:1e:c7:33:0d: 5d:72:25:97:31:8d:fb:cd:fa:8a:1e:79:83:09:80:be:1d:be: 2d:57:0a:ff:78:b2:b8:3f:de:f1:04:09:06:9e:38:5d:0c:8e: 06:75:ac:49:06:68:d8:f1:13:4f:55:7c:29:80:f2:29:57:80: 9e:c4:52:7f:d7:f9:89:47:bc:44:48:07:72:68:c9:23:df:18: 22:53:86:98:05:a3:f0:7a:bd:b2:b2:ad:f6:a4:8f:92:ee:18: 7a:62:b5:c9:25:05:71:1f:05:ef:48:bc:32:ac:59:e5:55:54: d3:23:14:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9u5GcDGiy9+akuh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljZWIwOGItN2E5NS00MTVkLWE0ZTEtMzJmMTc2YzUw NDdjMB4XDTI2MTAwODEwNTQzNFoXDTI3MDEwNjExNTQzNFowLzEtMCsGA1UEAxMk ZGM2N2U0YjQtOTQ4Ny00MmQwLWFkYWQtYjVkMzg4OGI5YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdByVG4GSrO9deXvZH+p+mAvBUfFy/Xl0SKF 5Gdqj2ljd8ivpxlkQ83ErOBQwXg1NE+eNZGXwed0ugmKw2a8QS+0ATvzfKrDZH74 3KH/RzREGwJsFkd1a7jPYXjIofqmhhNPGYTW6vZyHaUE3x3qePoTOzmEhLZAhaiW PhKkCcSt7Xpr47eK4Zurvef5boZy56QTI6frQzRmpqN6SxdRmGs9s449hvpM5uEJ dmzXFQz7GiI5mKcpeR0ZVyHB/JFmZtpfbzBDpZYI5RufAEJmhr6mpPlH+shP5i64 1WuFbpALRW6btKl+0+JpgLxE3IJcM5S+grDYjJoHgGYkDvm6NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKHBD7vS1IimMWE5/WLNUMdWFdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOWNl YjA4Yi03YTk1LTQxNWQtYTRlMS0zMmYxNzZjNTA0N2MvNTcxZjRjMDAtMDk2My0z ZWE3LTkzNDMtMTUxMWE0MjRiYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjljZWIwOGItN2E5NS00MTVkLWE0 ZTEtMzJmMTc2YzUwNDdjL2Y5Y2ViMDhiLTdhOTUtNDE1ZC1hNGUxLTMyZjE3NmM1 MDQ3Yy5jcmwwHwYDVR0jBBgwFoAUSvUHrQiBovAElrEKOXNhi+fN5NgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOWNlYjA4Yi03YTk1LTQxNWQtYTRlMS0zMmYx NzZjNTA0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj8tMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWbC7i6ENX6QbZZ2l+ALWMgG7BitHykrmitCpwqJw4sHoWTklLzwYmg xCgQqXUNuXcFEn8sn+2ZWnuazBf3q8n+RTRvM6f91i+WJit+56AozHh4TE/sevBx jORiXLqqMhE58OCWjThm0wFPu7b0KQ0BeYuqiX8X/uaWGPrAbonSJRx+okh/ZmxP 7kvZHsczDV1yJZcxjfvN+ooeeYMJgL4dvi1XCv94srg/3vEECQaeOF0MjgZ1rEkG aNjxE09VfCmA8ilXgJ7EUn/X+YlHvERIB3JoySPfGCJThpgFo/B6vbKyrfakj5Lu GHpitcklBXEfBe9IvDKsWeVVVNMjFOg= -----END CERTIFICATE-----Generated at Tue Oct 13 01:16:50 2026 by rpki-client