$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5493d83a-80ea-3747-b446-a9c21b50af3c.roa File: 5493d83a-80ea-3747-b446-a9c21b50af3c.roa (raw, json) Hash identifier: V30pXPMokVmRafxpmK2kKCPaq3bfyxSS3tKdny91wb0= Subject key identifier: CC:AF:F3:65:09:C7:97:51:66:90:96:6B:5C:A9:16:74:FE:7A:76:93 Certificate issuer: /CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143 Certificate serial: 010D0C9F4328584F749A661D5D2EFE55626EDD00 Authority key identifier: D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5493d83a-80ea-3747-b446-a9c21b50af3c.roa Signing time: Sat 10 Oct 2026 12:00:19 +0000 ROA not before: Sat 10 Oct 2026 12:00:19 +0000 ROA not after: Fri 08 Jan 2027 13:00:19 +0000 asID: 51082 IP address blocks: 143.203.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:9a:66:1d:5d:2e:fe:55:62:6e:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143 Validity Not Before: Oct 10 12:00:19 2026 GMT Not After : Jan 8 13:00:19 2027 GMT Subject: CN=15b94295-41e7-4e90-917b-0ab30f63001b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:75:9b:5d:80:e6:f1:e9:19:a0:89:85:e5:d8: 23:61:ba:0a:25:b6:fc:d4:74:88:95:6a:f0:f9:5e: eb:88:53:48:d4:f6:4b:d6:c6:59:b3:82:b3:28:c2: 55:71:b6:9f:8e:d3:6b:9a:70:c8:08:19:d3:d3:b4: bd:37:b6:d3:93:ca:5a:62:0f:ec:03:ac:7b:0c:79: 54:c4:f8:15:e1:8f:73:a8:5e:c0:23:f3:15:37:ad: 06:f5:65:93:7e:69:e1:ef:d6:52:20:59:ab:31:66: ac:93:30:7a:37:ff:4d:25:f3:a2:e4:19:36:ac:df: 29:17:60:e6:94:9b:42:d3:c5:fe:ad:3e:76:d4:b1: 03:6b:7d:ae:96:ba:79:f2:24:5e:25:83:09:e7:17: e4:eb:60:e7:9a:29:8a:56:a2:89:69:b0:e5:86:be: 24:2d:19:dd:fa:d8:f9:e9:99:12:f2:1c:2e:09:98: 39:3e:19:8a:c0:bb:09:00:2f:d8:8c:7c:25:09:f7: ba:be:f0:2d:07:78:bc:ce:86:79:51:ca:3c:e7:d3: 03:7e:40:ca:72:7c:9e:8c:d8:4e:37:59:dc:04:ff: 6e:80:ce:36:55:d2:3e:38:d7:c3:b7:41:75:13:eb: ae:f0:83:99:09:66:31:5c:2e:de:d6:ab:6c:3c:ce: 0a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AF:F3:65:09:C7:97:51:66:90:96:6B:5C:A9:16:74:FE:7A:76:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5493d83a-80ea-3747-b446-a9c21b50af3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.crl X509v3 Authority Key Identifier: keyid:D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer sbgp-ipAddrBlock: critical IPv4: 143.203.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b6:30:7c:23:e3:1c:e6:3c:4c:c0:50:8e:97:44:76:c3:54: 37:e5:a1:0a:cb:d8:4a:4a:2c:e0:c0:cd:4b:2b:a9:b7:d1:c2: 03:00:9c:41:fc:56:62:40:46:39:18:1c:a2:6b:20:29:c8:60: 3a:9e:73:93:1b:07:a5:23:4b:fc:74:f5:93:45:d3:1e:f5:45: 58:9e:e3:14:a4:12:b5:02:63:cb:8a:fe:b8:e1:b0:f1:ae:f6: d0:82:3b:14:5d:05:52:37:6f:8b:40:bf:b4:34:4e:23:18:d1: 3a:42:06:20:9c:53:49:16:61:ff:0f:e8:bc:6d:31:db:1f:bf: cb:39:59:6d:5d:21:73:75:0e:07:0d:41:a1:db:c1:d0:b2:d9: 32:10:7e:5f:b2:5a:65:d1:da:20:fd:95:90:24:f4:15:8e:42: 6a:ce:96:f0:68:b7:ef:39:5c:b4:e5:f2:c6:9e:dc:9a:7c:65: 98:c1:3d:40:7e:75:97:97:99:20:2a:c1:1c:dc:e2:cc:20:27: ea:5e:68:85:14:98:a8:76:6b:cb:c6:fc:08:0a:c8:83:6e:40: eb:22:c6:3e:36:02:33:1a:36:28:61:e4:10:d1:9a:45:a6:a1: 56:c7:91:63:2e:1a:d6:6d:20:05:0f:5e:e9:7f:60:83:6b:0b: a2:e1:b6:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90mmYdXS7+VWJu3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkNDQyOWMtNTA4MC00ZGE5LTljZjYtYzVjZGNjMWIy MTQzMB4XDTI2MTAxMDEyMDAxOVoXDTI3MDEwODEzMDAxOVowLzEtMCsGA1UEAxMk MTViOTQyOTUtNDFlNy00ZTkwLTkxN2ItMGFiMzBmNjMwMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXWbXYDm8ekZoImF5dgjYboKJbb81HSIlWrw +V7riFNI1PZL1sZZs4KzKMJVcbafjtNrmnDICBnT07S9N7bTk8paYg/sA6x7DHlU xPgV4Y9zqF7AI/MVN60G9WWTfmnh79ZSIFmrMWaskzB6N/9NJfOi5Bk2rN8pF2Dm lJtC08X+rT521LEDa32ulrp58iReJYMJ5xfk62DnmimKVqKJabDlhr4kLRnd+tj5 6ZkS8hwuCZg5PhmKwLsJAC/YjHwlCfe6vvAtB3i8zoZ5Uco859MDfkDKcnyejNhO N1ncBP9ugM42VdI+ONfDt0F1E+uu8IOZCWYxXC7e1qtsPM4KOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyv82UJx5dRZpCWa1ypFnT+enaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGQ0 NDI5Yy01MDgwLTRkYTktOWNmNi1jNWNkY2MxYjIxNDMvNTQ5M2Q4M2EtODBlYS0z NzQ3LWI0NDYtYTljMjFiNTBhZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRkNDQyOWMtNTA4MC00ZGE5LTlj ZjYtYzVjZGNjMWIyMTQzLzVkZDQ0MjljLTUwODAtNGRhOS05Y2Y2LWM1Y2RjYzFi MjE0My5jcmwwHwYDVR0jBBgwFoAU2WTDta5xcPVr1AduylGeui+LpUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGQ0NDI5Yy01MDgwLTRkYTktOWNmNi1jNWNk Y2MxYjIxNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj8vYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG2MHwj4xzmPEzAUI6XRHbDVDfloQrL2EpKLODAzUsrqbfRwgMAnEH8 VmJARjkYHKJrICnIYDqec5MbB6UjS/x09ZNF0x71RVie4xSkErUCY8uK/rjhsPGu 9tCCOxRdBVI3b4tAv7Q0TiMY0TpCBiCcU0kWYf8P6LxtMdsfv8s5WW1dIXN1DgcN QaHbwdCy2TIQfl+yWmXR2iD9lZAk9BWOQmrOlvBot+85XLTl8sae3Jp8ZZjBPUB+ dZeXmSAqwRzc4swgJ+peaIUUmKh2a8vG/AgKyINuQOsixj42AjMaNihh5BDRmkWm oVbHkWMuGtZtIAUPXul/YINrC6Lhtk4= -----END CERTIFICATE-----Generated at Sun Oct 11 22:13:44 2026 by rpki-client