$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/90e7005a-b9da-342d-9f06-eacf0dd2c69b.roa File: 90e7005a-b9da-342d-9f06-eacf0dd2c69b.roa (raw, json) Hash identifier: hQgk2NDTRmX3QyWxXscNG/IZBuSHPznNaH9PXokBFQk= Subject key identifier: 1F:0D:09:DA:D8:0C:3B:7B:4F:1D:82:82:C1:FA:B4:26:17:51:A3:7F Certificate issuer: /CN=f0998994-1f51-4070-9d55-9e3090085fb9 Certificate serial: 010D0C9F4328584F9BCDEA0198952979D857B480 Authority key identifier: 7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/90e7005a-b9da-342d-9f06-eacf0dd2c69b.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 3356 IP address blocks: 143.112.0.0/17 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:ea:01:98:95:29:79:d8:57:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0998994-1f51-4070-9d55-9e3090085fb9 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=3e71c07b-dfac-4076-bd1b-9333ba828c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:45:f1:0d:2d:29:26:a1:40:15:71:73:1f: f2:99:8d:a0:7f:21:74:cc:53:00:7c:be:d1:02:bf: b2:21:06:88:1f:b6:86:66:27:00:33:58:28:5a:86: 3d:5b:b8:b8:e0:c5:19:33:92:68:6b:8a:b3:c4:ac: 36:85:7a:e2:2a:c4:eb:41:b0:5e:31:d5:41:ef:e2: 90:95:71:55:a6:38:af:39:bc:cb:e1:fc:7c:94:37: 48:09:32:ff:a0:1b:cf:96:92:bb:fd:f8:85:54:1a: c7:c9:b0:88:dc:ab:2a:64:6f:11:21:0d:1f:de:fb: 54:83:92:cf:7e:a0:e5:e9:ea:25:c5:f5:0c:2e:a9: c6:24:4f:70:50:f6:37:57:78:7a:88:d5:14:79:76: 43:23:2c:cf:3c:ef:fb:66:19:e8:98:70:90:22:79: 6c:87:9a:d9:13:c7:7e:fc:90:e7:fe:b7:15:7b:0f: a3:81:6d:7f:44:01:99:3c:83:84:e3:2a:0b:45:ff: 90:7f:2f:3e:80:ee:37:c2:40:71:68:e6:c7:c5:d5: 0d:f9:43:e6:4f:4f:7b:63:21:cc:89:06:c0:19:e6: d3:05:32:1e:27:d9:40:cf:52:3a:2b:95:15:07:95: 2c:4e:0f:b2:bd:14:a5:0f:09:b2:3e:2f:8b:40:ab: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0D:09:DA:D8:0C:3B:7B:4F:1D:82:82:C1:FA:B4:26:17:51:A3:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/90e7005a-b9da-342d-9f06-eacf0dd2c69b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl X509v3 Authority Key Identifier: keyid:7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer sbgp-ipAddrBlock: critical IPv4: 143.112.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4a:44:f9:6b:46:38:87:5c:8d:f9:c7:43:66:11:b2:44:f2: 70:89:18:18:56:f5:1a:5d:b6:a3:f3:ec:81:e0:b5:50:ff:a3: b9:a3:13:f8:24:d8:27:27:1f:63:ff:a5:35:4f:c1:4d:f2:0f: 46:9c:4a:6e:ac:62:ed:c4:ae:3f:6f:32:da:a3:45:fc:ca:d6: 08:9f:8d:00:d0:44:01:fe:10:92:c2:f8:c5:28:97:c7:c7:ac: 2c:d1:2c:cc:8a:54:13:b5:32:8b:56:30:c8:99:92:9f:4d:44: f3:e8:30:cf:d5:29:8b:b5:fd:27:a5:5c:06:1f:f5:49:61:55: 4e:d4:19:71:5e:2f:ea:8a:f4:d2:51:d3:55:6f:b9:2e:40:ce: 08:6c:27:97:60:a5:17:64:0a:32:9d:33:0b:74:50:47:09:16: 10:2e:fa:b0:20:80:98:2f:ea:24:a9:d2:80:3d:87:1d:6b:1f: 2d:02:40:7b:1e:ec:76:ed:05:d9:45:2d:79:c9:83:4d:38:54: 1b:46:8f:2c:ec:c2:ab:e1:dc:ff:93:94:ec:3d:c5:c6:51:5e: 5f:1f:84:24:b8:fc:b2:9d:af:c6:ae:8b:e0:92:f0:1c:c7:ba: 64:ca:e7:c4:2c:f6:5c:51:93:a3:37:7c:04:10:6c:6a:75:52: a5:e8:c6:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeoBmJUpedhXtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA5OTg5OTQtMWY1MS00MDcwLTlkNTUtOWUzMDkwMDg1 ZmI5MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk M2U3MWMwN2ItZGZhYy00MDc2LWJkMWItOTMzM2JhODI4YzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQNF8Q0tKSahQBVxcx/ymY2gfyF0zFMAfL7R Ar+yIQaIH7aGZicAM1goWoY9W7i44MUZM5Joa4qzxKw2hXriKsTrQbBeMdVB7+KQ lXFVpjivObzL4fx8lDdICTL/oBvPlpK7/fiFVBrHybCI3KsqZG8RIQ0f3vtUg5LP fqDl6eolxfUMLqnGJE9wUPY3V3h6iNUUeXZDIyzPPO/7ZhnomHCQInlsh5rZE8d+ /JDn/rcVew+jgW1/RAGZPIOE4yoLRf+Qfy8+gO43wkBxaObHxdUN+UPmT097YyHM iQbAGebTBTIeJ9lAz1I6K5UVB5UsTg+yvRSlDwmyPi+LQKuuXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8NCdrYDDt7Tx2CgsH6tCYXUaN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mMDk5 ODk5NC0xZjUxLTQwNzAtOWQ1NS05ZTMwOTAwODVmYjkvOTBlNzAwNWEtYjlkYS0z NDJkLTlmMDYtZWFjZjBkZDJjNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjA5OTg5OTQtMWY1MS00MDcwLTlk NTUtOWUzMDkwMDg1ZmI5L2YwOTk4OTk0LTFmNTEtNDA3MC05ZDU1LTllMzA5MDA4 NWZiOS5jcmwwHwYDVR0jBBgwFoAUf6t1dsAzEFiygrbQpSj7LTevW4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mMDk5ODk5NC0xZjUxLTQwNzAtOWQ1NS05ZTMw OTAwODVmYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHj3AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZKRPlrRjiHXI35x0NmEbJE8nCJGBhW9RpdtqPz7IHgtVD/o7mjE/gk 2CcnH2P/pTVPwU3yD0acSm6sYu3Erj9vMtqjRfzK1gifjQDQRAH+EJLC+MUol8fH rCzRLMyKVBO1MotWMMiZkp9NRPPoMM/VKYu1/SelXAYf9UlhVU7UGXFeL+qK9NJR 01VvuS5AzghsJ5dgpRdkCjKdMwt0UEcJFhAu+rAggJgv6iSp0oA9hx1rHy0CQHse 7HbtBdlFLXnJg004VBtGjyzswqvh3P+TlOw9xcZRXl8fhCS4/LKdr8aui+CS8BzH umTK58Qs9lxRk6M3fAQQbGp1UqXoxgw= -----END CERTIFICATE-----Generated at Sun Oct 25 16:28:19 2026 by rpki-client