$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/d658f8ed-9fd8-3964-af53-0917094d3301.roa File: d658f8ed-9fd8-3964-af53-0917094d3301.roa (raw, json) Hash identifier: WXo3z4BxwSFmsMNlU2JsDnCj04uHSEEqxxUcy5TWheg= Subject key identifier: DF:0E:F4:A2:44:24:BC:20:D5:17:3C:C3:A7:CB:E5:52:04:29:CB:70 Certificate issuer: /CN=f0998994-1f51-4070-9d55-9e3090085fb9 Certificate serial: 010D0C9F4328584F9BCDE9882613E0158102CE80 Authority key identifier: 7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/d658f8ed-9fd8-3964-af53-0917094d3301.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 203 IP address blocks: 143.112.128.0/18 maxlen: 24 143.112.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e9:88:26:13:e0:15:81:02:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0998994-1f51-4070-9d55-9e3090085fb9 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=017b8e35-3af8-4d13-9b3c-27980ca7b81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f4:91:60:3d:58:d9:fc:27:6c:e5:a8:ff:c8: b4:86:3d:a0:4a:eb:1f:fd:d5:00:85:64:6e:fa:74: e6:ca:06:15:48:5d:a7:72:a1:63:c3:68:7e:52:3f: 0b:f4:77:d2:99:7e:2c:4c:c4:db:0e:d6:91:cf:2a: a7:0a:b2:c1:88:2b:d0:e6:ed:93:c5:ad:1e:8d:8d: 8f:45:9b:aa:5d:33:7c:7b:aa:31:68:da:03:61:31: c9:e7:56:67:e8:96:76:7c:ed:29:17:c0:2c:d9:49: 89:a6:63:e1:38:fc:c5:8c:ee:97:d8:05:f8:de:11: d2:36:d7:14:31:5c:31:fb:e3:fa:4b:8a:8a:54:21: 5c:83:3d:05:cd:d7:73:32:69:60:40:02:93:88:07: 6f:3c:93:fc:96:6a:b0:70:84:20:9b:af:bc:90:9d: 37:69:13:74:b9:ef:27:dc:03:68:79:39:a9:83:47: 13:e8:4e:a7:1a:ae:18:3d:73:82:97:28:e2:88:38: 4b:82:78:7a:b9:48:4c:1f:f9:ca:8f:30:35:bc:d7: 61:72:b2:67:7a:b7:3b:07:98:14:7a:5e:9f:9e:d6: 3c:db:a6:d9:85:35:90:d8:64:ed:0d:68:8d:47:56: 67:f9:a6:5b:0c:c4:5d:0a:3a:f0:ff:3b:d7:5f:c6: c1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0E:F4:A2:44:24:BC:20:D5:17:3C:C3:A7:CB:E5:52:04:29:CB:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/d658f8ed-9fd8-3964-af53-0917094d3301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl X509v3 Authority Key Identifier: keyid:7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer sbgp-ipAddrBlock: critical IPv4: 143.112.128.0-143.112.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5b:a2:5e:59:98:1c:32:ef:15:9f:eb:14:79:13:30:81:1f: 5f:8b:fd:2d:1f:51:41:08:07:b9:bc:eb:ac:ce:16:b8:52:1d: d7:7d:a8:d2:8d:2d:ec:90:8b:52:e4:41:82:27:36:47:da:91: af:ca:cd:09:ce:b1:de:7e:64:77:a5:00:d5:52:74:af:87:4b: 0d:a1:db:14:e2:6e:ee:53:83:f5:1c:91:df:ad:cf:be:ab:53: 55:09:ea:7f:af:f0:f2:8c:9f:23:84:40:b3:56:88:53:55:5a: eb:cc:dd:53:72:77:9e:b8:40:21:d7:46:00:45:fa:5d:8b:f0: 56:4b:fc:90:93:41:a8:82:43:07:c5:d5:9c:74:76:8f:6a:3d: 3d:5a:0d:e9:6b:6e:d4:cd:9f:ac:9d:5e:b7:00:56:b8:53:e5: d9:c6:6f:72:3e:29:1d:21:8b:30:cc:b6:f9:6e:7d:d4:4b:a3: 2e:d9:21:8e:3f:3b:b1:d8:bc:2c:fc:18:52:74:3d:56:cf:95: 0c:b5:7a:48:ac:07:03:1a:e8:ba:ad:08:06:9c:bb:ff:57:25: 3f:51:ae:b8:3c:0f:b7:4d:7f:7a:9f:e2:83:76:97:2c:4c:84: d7:2c:85:ae:10:6c:63:45:d3:b1:e2:4c:f9:90:a7:6f:5d:f9: 79:30:a1:c4 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE+bzemIJhPgFYECzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA5OTg5OTQtMWY1MS00MDcwLTlkNTUtOWUzMDkwMDg1 ZmI5MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MDE3YjhlMzUtM2FmOC00ZDEzLTliM2MtMjc5ODBjYTdiODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/SRYD1Y2fwnbOWo/8i0hj2gSusf/dUAhWRu +nTmygYVSF2ncqFjw2h+Uj8L9HfSmX4sTMTbDtaRzyqnCrLBiCvQ5u2Txa0ejY2P RZuqXTN8e6oxaNoDYTHJ51Zn6JZ2fO0pF8As2UmJpmPhOPzFjO6X2AX43hHSNtcU MVwx++P6S4qKVCFcgz0FzddzMmlgQAKTiAdvPJP8lmqwcIQgm6+8kJ03aRN0ue8n 3ANoeTmpg0cT6E6nGq4YPXOClyjiiDhLgnh6uUhMH/nKjzA1vNdhcrJnerc7B5gU el6fntY826bZhTWQ2GTtDWiNR1Zn+aZbDMRdCjrw/zvXX8bBoQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFN8O9KJEJLwg1Rc8w6fL5VIEKctwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mMDk5 ODk5NC0xZjUxLTQwNzAtOWQ1NS05ZTMwOTAwODVmYjkvZDY1OGY4ZWQtOWZkOC0z OTY0LWFmNTMtMDkxNzA5NGQzMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjA5OTg5OTQtMWY1MS00MDcwLTlk NTUtOWUzMDkwMDg1ZmI5L2YwOTk4OTk0LTFmNTEtNDA3MC05ZDU1LTllMzA5MDA4 NWZiOS5jcmwwHwYDVR0jBBgwFoAUf6t1dsAzEFiygrbQpSj7LTevW4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mMDk5ODk5NC0xZjUxLTQwNzAtOWQ1NS05ZTMw OTAwODVmYjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAePcIAD BAWPcMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAaVuiXlmYHDLvFZ/rFHkTMIEfX4v9LR9RQQgHubzrrM4W uFId132o0o0t7JCLUuRBgic2R9qRr8rNCc6x3n5kd6UA1VJ0r4dLDaHbFOJu7lOD 9RyR363PvqtTVQnqf6/w8oyfI4RAs1aIU1Va68zdU3J3nrhAIddGAEX6XYvwVkv8 kJNBqIJDB8XVnHR2j2o9PVoN6Wtu1M2frJ1etwBWuFPl2cZvcj4pHSGLMMy2+W59 1EujLtkhjj87sdi8LPwYUnQ9Vs+VDLV6SKwHAxrouq0IBpy7/1clP1GuuDwPt01/ ep/ig3aXLEyE1yyFrhBsY0XTseJM+ZCnb135eTChxA== -----END CERTIFICATE-----Generated at Mon Oct 26 20:51:40 2026 by rpki-client