$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/2aec8231-f163-30e0-9620-1c69764a1a29.roa File: 2aec8231-f163-30e0-9620-1c69764a1a29.roa (raw, json) Hash identifier: DQBU+hWaXHSojTBoCwtzSrJTdu/2gahE5SSSa+B9DGM= Subject key identifier: 82:AA:96:7D:38:7D:DD:82:91:99:B6:EB:7D:6C:27:0A:59:E9:76:BA Certificate issuer: /CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143 Certificate serial: 010D0C9F4328584F70ADEAFB69F4629F7D4B3600 Authority key identifier: D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/2aec8231-f163-30e0-9620-1c69764a1a29.roa Signing time: Fri 09 Oct 2026 02:16:24 +0000 ROA not before: Fri 09 Oct 2026 02:16:24 +0000 ROA not after: Thu 07 Jan 2027 03:16:24 +0000 asID: 29802 IP address blocks: 143.203.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:ad:ea:fb:69:f4:62:9f:7d:4b:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143 Validity Not Before: Oct 9 02:16:24 2026 GMT Not After : Jan 7 03:16:24 2027 GMT Subject: CN=f3909a8c-49ba-423f-96ca-b2b9a1f2848b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f2:7a:3a:bd:c3:fd:74:b9:dc:8a:2e:1e:19: 89:75:98:ab:8b:ae:8b:e4:c4:d6:24:c2:c3:fe:3f: b9:df:be:6a:21:24:f5:1f:64:0a:c1:8e:ec:2a:81: 06:1a:14:6e:f4:34:a9:f5:38:3e:d0:84:92:8f:59: 88:4b:8a:d9:cf:2c:1d:c7:60:6b:3c:d5:6d:19:b5: 31:18:9e:a0:02:dd:5a:0e:af:0a:6c:c6:2b:8d:cf: a8:e7:1e:e0:31:ee:32:c5:2f:17:f1:44:61:52:e1: 5e:af:43:c7:7b:91:39:e9:39:e7:7c:4d:1c:c6:1b: ea:fd:75:1d:fa:97:67:14:1a:fc:da:f3:52:75:c1: db:af:5c:94:b1:de:d3:f4:cd:78:aa:1e:8a:31:aa: 21:15:c4:a9:3d:6c:85:8d:13:27:38:13:25:c8:e9: 92:73:22:1e:bf:9b:18:16:77:6a:e1:d8:41:53:7a: 08:b9:53:85:5e:e4:74:63:b2:8e:1d:bb:2b:75:0e: 1b:a3:4f:f2:e2:a4:37:77:a0:09:f0:2f:ba:7e:df: ba:dc:cf:12:7a:88:07:0e:1e:51:48:06:0e:45:ff: 62:ab:fd:bf:43:ae:27:fe:f9:92:fd:e7:bd:a2:64: 6e:06:2e:b1:1f:5c:08:d8:e4:c2:06:0f:22:6d:90: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AA:96:7D:38:7D:DD:82:91:99:B6:EB:7D:6C:27:0A:59:E9:76:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/2aec8231-f163-30e0-9620-1c69764a1a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.crl X509v3 Authority Key Identifier: keyid:D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer sbgp-ipAddrBlock: critical IPv4: 143.203.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:24:44:45:34:2c:73:fc:3b:e7:b9:0f:7e:38:d8:cf:c8:6e: fb:40:fd:be:59:1c:15:7c:f5:60:e0:6d:23:2b:c1:d9:33:6b: 98:8e:d0:70:38:47:83:33:30:01:8b:ca:e5:75:41:5e:ba:7f: e7:fa:23:c8:94:36:e6:b4:ad:3f:20:1f:5f:81:97:7f:35:73: 44:3f:58:1e:7f:6e:75:d8:71:b7:c1:41:08:1b:7f:a6:b0:d7: d8:16:90:06:b4:59:43:98:7a:34:84:cb:3c:3c:a2:69:26:56: 50:69:3f:2f:9c:04:f0:68:2f:ef:63:66:77:16:63:c9:82:de: c9:44:b9:b0:08:cf:e6:e6:af:3f:43:9f:92:b8:03:22:d9:51: 92:d1:60:f1:40:94:b6:d4:e5:0e:c4:bc:9e:ec:1d:1b:ba:24: 5f:d4:41:ac:df:1e:b7:fd:aa:be:62:96:cf:b6:39:b2:61:35: be:5a:84:39:ed:9b:bd:ec:23:42:f8:70:50:5b:a5:4d:59:51: 2c:cf:ec:2d:bc:bf:16:19:37:55:62:1f:44:70:11:44:89:3c: ce:44:81:21:7e:c9:05:0a:7b:11:ce:0e:6a:be:c2:46:f0:fa: 24:d9:d6:99:48:46:57:bf:af:dc:82:69:78:f3:98:5b:d0:0c: 11:30:99:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wrer7afRin31LNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkNDQyOWMtNTA4MC00ZGE5LTljZjYtYzVjZGNjMWIy MTQzMB4XDTI2MTAwOTAyMTYyNFoXDTI3MDEwNzAzMTYyNFowLzEtMCsGA1UEAxMk ZjM5MDlhOGMtNDliYS00MjNmLTk2Y2EtYjJiOWExZjI4NDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvJ6Or3D/XS53IouHhmJdZiri66L5MTWJMLD /j+5375qIST1H2QKwY7sKoEGGhRu9DSp9Tg+0ISSj1mIS4rZzywdx2BrPNVtGbUx GJ6gAt1aDq8KbMYrjc+o5x7gMe4yxS8X8URhUuFer0PHe5E56TnnfE0cxhvq/XUd +pdnFBr82vNSdcHbr1yUsd7T9M14qh6KMaohFcSpPWyFjRMnOBMlyOmScyIev5sY Fndq4dhBU3oIuVOFXuR0Y7KOHbsrdQ4bo0/y4qQ3d6AJ8C+6ft+63M8SeogHDh5R SAYORf9iq/2/Q64n/vmS/ee9omRuBi6xH1wI2OTCBg8ibZDKswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKqln04fd2CkZm2631sJwpZ6Xa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGQ0 NDI5Yy01MDgwLTRkYTktOWNmNi1jNWNkY2MxYjIxNDMvMmFlYzgyMzEtZjE2My0z MGUwLTk2MjAtMWM2OTc2NGExYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRkNDQyOWMtNTA4MC00ZGE5LTlj ZjYtYzVjZGNjMWIyMTQzLzVkZDQ0MjljLTUwODAtNGRhOS05Y2Y2LWM1Y2RjYzFi MjE0My5jcmwwHwYDVR0jBBgwFoAU2WTDta5xcPVr1AduylGeui+LpUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGQ0NDI5Yy01MDgwLTRkYTktOWNmNi1jNWNk Y2MxYjIxNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj8vYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACckREU0LHP8O+e5D3442M/IbvtA/b5ZHBV89WDgbSMrwdkza5iO0HA4 R4MzMAGLyuV1QV66f+f6I8iUNua0rT8gH1+Bl381c0Q/WB5/bnXYcbfBQQgbf6aw 19gWkAa0WUOYejSEyzw8omkmVlBpPy+cBPBoL+9jZncWY8mC3slEubAIz+bmrz9D n5K4AyLZUZLRYPFAlLbU5Q7EvJ7sHRu6JF/UQazfHrf9qr5ils+2ObJhNb5ahDnt m73sI0L4cFBbpU1ZUSzP7C28vxYZN1ViH0RwEUSJPM5EgSF+yQUKexHODmq+wkbw +iTZ1plIRle/r9yCaXjzmFvQDBEwmY8= -----END CERTIFICATE-----Generated at Sun Oct 11 14:30:40 2026 by rpki-client