$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/9d48d292-f879-378a-8b94-e024a77a03de.roa File: 9d48d292-f879-378a-8b94-e024a77a03de.roa (raw, json) Hash identifier: n+gEHvdFbmp6XIt75XWbNNsWlsfzcmaONCxeYm0Vn5I= Subject key identifier: 35:59:56:10:59:07:AB:14:8E:4D:BF:AB:E0:EE:B1:CB:04:68:E0:AF Certificate issuer: /CN=f9ceb08b-7a95-415d-a4e1-32f176c5047c Certificate serial: 010D0C9F4328584F6C38B93C603A85E23CCBAE40 Authority key identifier: 4A:F5:07:AD:08:81:A2:F0:04:96:B1:0A:39:73:61:8B:E7:CD:E4:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/9d48d292-f879-378a-8b94-e024a77a03de.roa Signing time: Wed 07 Oct 2026 11:57:03 +0000 ROA not before: Wed 07 Oct 2026 11:57:03 +0000 ROA not after: Tue 05 Jan 2027 12:57:03 +0000 asID: 401608 IP address blocks: 143.203.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:38:b9:3c:60:3a:85:e2:3c:cb:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9ceb08b-7a95-415d-a4e1-32f176c5047c Validity Not Before: Oct 7 11:57:03 2026 GMT Not After : Jan 5 12:57:03 2027 GMT Subject: CN=114014ba-6dfb-4915-992b-9dcbbd607ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:9e:d8:a7:e8:fb:2a:a4:84:6e:91:ff:75: b0:64:21:95:61:fd:e6:07:cd:f1:c3:a2:cb:83:45: c6:ef:56:79:21:31:ca:f9:99:e0:6f:ff:ba:a2:9f: b9:58:c5:c0:54:aa:7d:23:33:eb:36:b7:d6:fc:74: 41:b0:c1:2b:40:0a:d5:09:be:f8:b3:b2:c2:2d:a2: 7c:b9:79:bc:92:cd:4a:8b:d0:bc:23:a3:b8:00:6f: 0d:6c:b9:c1:fa:9c:52:c2:1b:a2:40:3c:da:da:27: 3e:b1:4f:67:cf:e3:25:d0:12:49:94:dd:3e:7c:f6: f4:af:26:f0:99:e6:6f:ce:0d:0a:bf:7c:a4:e2:ef: 81:97:9c:c0:8d:26:63:bf:7a:3c:cb:9d:e6:03:25: 82:07:7d:d0:4e:a7:97:16:f6:cc:98:8d:e7:7e:4f: 9a:36:30:67:46:d9:4f:a1:d1:c7:b5:8c:be:06:e0: 0d:14:74:3a:63:6f:41:dc:6c:fd:f4:0f:61:c1:f8: f1:d0:65:ad:52:48:c1:5e:ca:67:d3:46:51:30:54: 47:ba:5a:8f:25:ab:fc:f5:ac:7a:69:77:ad:9e:2b: c8:9e:d1:6e:68:44:a9:6c:f2:74:20:0d:c5:5d:71: 00:c5:9e:d3:59:4f:29:dc:fe:13:d7:c7:30:a1:fe: 34:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:59:56:10:59:07:AB:14:8E:4D:BF:AB:E0:EE:B1:CB:04:68:E0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/9d48d292-f879-378a-8b94-e024a77a03de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.crl X509v3 Authority Key Identifier: keyid:4A:F5:07:AD:08:81:A2:F0:04:96:B1:0A:39:73:61:8B:E7:CD:E4:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer sbgp-ipAddrBlock: critical IPv4: 143.203.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:78:59:09:0d:de:50:7e:d2:64:92:5d:20:9c:f1:38:19:4a: 51:41:8f:4c:fc:fd:e6:47:df:87:bd:7b:2d:1b:95:9a:27:c2: f9:46:e9:34:c5:eb:2e:51:11:8c:5a:d4:d8:39:35:ca:ba:1b: 77:70:28:f7:fe:c6:8f:95:68:61:42:1e:6f:1c:06:4b:9d:5f: c9:47:f6:cd:9f:fe:45:e6:7e:54:35:9a:46:10:a0:97:19:97: 06:de:4b:ca:1c:5c:77:b6:9e:33:5e:b2:82:65:a7:6d:a7:2a: af:09:4d:a2:9b:ff:fe:c9:09:93:32:f7:71:23:d7:34:9f:96: 6c:5b:99:4f:b5:30:23:5e:0d:6f:c2:dd:28:44:11:d6:05:4f: 5f:12:86:74:b2:81:25:a6:88:22:b3:cf:53:09:af:bf:be:b7: f1:ae:54:19:33:03:9b:cf:a2:14:e7:8b:6a:64:d5:a1:d6:3d: ea:8e:1d:aa:c5:11:46:6b:9f:4e:72:0f:fd:63:fa:7b:bb:1d: e7:f1:5f:28:8d:99:bc:0d:5b:7d:ce:c4:ac:1a:f6:62:da:8a: 28:cc:ef:c4:26:c6:0b:34:38:d1:91:15:47:f7:f8:e1:cd:1a: ac:13:ab:ce:de:b8:2d:2b:a4:97:42:35:ea:4e:31:6c:d7:49: eb:0d:23:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sOLk8YDqF4jzLrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljZWIwOGItN2E5NS00MTVkLWE0ZTEtMzJmMTc2YzUw NDdjMB4XDTI2MTAwNzExNTcwM1oXDTI3MDEwNTEyNTcwM1owLzEtMCsGA1UEAxMk MTE0MDE0YmEtNmRmYi00OTE1LTk5MmItOWRjYmJkNjA3YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB6e2Kfo+yqkhG6R/3WwZCGVYf3mB83xw6LL g0XG71Z5ITHK+Zngb/+6op+5WMXAVKp9IzPrNrfW/HRBsMErQArVCb74s7LCLaJ8 uXm8ks1Ki9C8I6O4AG8NbLnB+pxSwhuiQDza2ic+sU9nz+Ml0BJJlN0+fPb0rybw meZvzg0Kv3yk4u+Bl5zAjSZjv3o8y53mAyWCB33QTqeXFvbMmI3nfk+aNjBnRtlP odHHtYy+BuANFHQ6Y29B3Gz99A9hwfjx0GWtUkjBXspn00ZRMFRHulqPJav89ax6 aXetnivIntFuaESpbPJ0IA3FXXEAxZ7TWU8p3P4T18cwof40SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVZVhBZB6sUjk2/q+DuscsEaOCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOWNl YjA4Yi03YTk1LTQxNWQtYTRlMS0zMmYxNzZjNTA0N2MvOWQ0OGQyOTItZjg3OS0z NzhhLThiOTQtZTAyNGE3N2EwM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjljZWIwOGItN2E5NS00MTVkLWE0 ZTEtMzJmMTc2YzUwNDdjL2Y5Y2ViMDhiLTdhOTUtNDE1ZC1hNGUxLTMyZjE3NmM1 MDQ3Yy5jcmwwHwYDVR0jBBgwFoAUSvUHrQiBovAElrEKOXNhi+fN5NgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOWNlYjA4Yi03YTk1LTQxNWQtYTRlMS0zMmYx NzZjNTA0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj8tOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp4WQkN3lB+0mSSXSCc8TgZSlFBj0z8/eZH34e9ey0blZonwvlG6TTF 6y5REYxa1Ng5Ncq6G3dwKPf+xo+VaGFCHm8cBkudX8lH9s2f/kXmflQ1mkYQoJcZ lwbeS8ocXHe2njNesoJlp22nKq8JTaKb//7JCZMy93Ej1zSflmxbmU+1MCNeDW/C 3ShEEdYFT18ShnSygSWmiCKzz1MJr7++t/GuVBkzA5vPohTni2pk1aHWPeqOHarF EUZrn05yD/1j+nu7HefxXyiNmbwNW33OxKwa9mLaiijM78Qmxgs0ONGRFUf3+OHN GqwTq87euC0rpJdCNepOMWzXSesNI1Q= -----END CERTIFICATE-----Generated at Tue Oct 13 01:16:45 2026 by rpki-client