$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/3c955ffd-aaa0-337d-989d-42fb4d839e35.roa File: 3c955ffd-aaa0-337d-989d-42fb4d839e35.roa (raw, json) Hash identifier: udaOqft9OeOJHTEV8HGvledXhv2wKVP8kZLprMYWVPo= Subject key identifier: 55:A3:5A:7D:FB:56:AC:ED:02:0D:4F:F6:13:74:C4:4D:AF:E7:38:94 Certificate issuer: /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f Certificate serial: 010D0C9F4328584F7A3A7A847E49C322FE9E0080 Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/3c955ffd-aaa0-337d-989d-42fb4d839e35.roa Signing time: Mon 12 Oct 2026 12:21:54 +0000 ROA not before: Mon 12 Oct 2026 12:21:54 +0000 ROA not after: Sun 10 Jan 2027 13:21:54 +0000 asID: 18934 IP address blocks: 143.203.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:3a:7a:84:7e:49:c3:22:fe:9e:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f Validity Not Before: Oct 12 12:21:54 2026 GMT Not After : Jan 10 13:21:54 2027 GMT Subject: CN=858e0f92-5579-4e95-8451-39ca6973c9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:18:f0:bf:8a:d3:dd:0f:02:2a:c0:a3:f4: ae:49:f5:e0:bf:ed:53:cf:f9:b8:68:57:dc:a6:22: 35:ce:78:e2:b0:1c:73:84:b9:79:ce:75:97:5c:9e: 76:4a:7a:2e:b3:5e:4e:54:36:66:4a:d8:f3:bf:a7: dd:d4:62:55:c4:21:8b:36:86:3c:07:6f:f9:ee:5a: 45:73:6e:04:d5:81:5b:c8:41:2f:e1:13:38:a3:98: ae:61:d4:fd:7d:75:f0:96:3f:7f:87:bb:77:3f:af: f7:83:bf:2f:57:1d:9b:cf:7c:5b:43:d4:0d:f7:66: 7a:c6:f2:2a:16:96:41:7b:fb:b1:81:cc:fc:ff:25: 85:e3:29:14:99:ab:c6:c6:1f:dd:ea:25:2d:21:f1: 2c:95:51:20:29:f3:ec:d1:f2:5e:c7:c5:9d:9b:4d: 01:4e:aa:8e:a2:cc:15:c5:af:a5:44:0c:39:d7:5a: 06:da:4f:8c:5d:1c:bb:3a:9b:2f:64:04:a7:ec:15: c7:f7:b9:14:e0:2b:3e:e2:4e:2b:c3:da:ad:c8:61: 13:e1:aa:af:c8:86:f9:3a:16:f9:f0:43:00:06:04: cf:fe:f8:f0:54:83:f7:34:c3:6f:87:73:66:bd:40: f1:a6:9a:9f:17:1e:d1:16:cb:3b:32:4b:27:48:f4: 2a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A3:5A:7D:FB:56:AC:ED:02:0D:4F:F6:13:74:C4:4D:AF:E7:38:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/3c955ffd-aaa0-337d-989d-42fb4d839e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl X509v3 Authority Key Identifier: keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer sbgp-ipAddrBlock: critical IPv4: 143.203.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:55:c1:d8:79:82:ca:48:ac:e4:d1:6b:40:a6:cd:3a:21:ec: ef:45:90:0b:59:fd:4e:c4:2e:b6:a3:3d:8b:04:e6:7e:a0:1b: fe:7c:3b:04:77:e5:e3:7e:50:f1:10:b1:95:65:5d:cb:85:77: 8b:b6:43:b6:78:26:8c:ab:cb:93:7e:5d:db:e8:aa:79:ca:45: 79:dc:55:99:dc:1e:4d:10:81:17:db:2d:29:6e:e5:8c:04:82: f7:e4:c5:01:50:8b:26:10:77:39:01:be:d7:15:53:65:c6:48: 48:b7:e4:d7:fa:75:e0:b7:20:a2:d3:79:03:68:59:03:f7:89: f0:c0:62:e8:f3:fc:51:54:da:76:56:2b:a6:83:cf:a1:60:01: 4f:0a:a4:c4:34:99:d2:b7:a1:b4:22:d6:0c:a7:a9:f4:cc:8f: 0e:8d:e0:b5:3d:c1:37:eb:40:86:28:a1:44:cb:8a:ed:25:20: 53:c4:f0:90:c6:13:96:cf:4b:e9:31:9a:37:78:14:92:1a:38: dc:13:0f:7a:26:58:61:9a:e7:19:95:f2:18:6a:d0:bf:10:4b: 6d:9f:27:9b:27:b8:d1:bd:a6:3b:70:c3:b1:1a:68:47:6d:d1: bf:2e:73:7f:ca:a5:97:a1:b8:6e:39:03:58:6c:9f:ae:fd:c5: 50:e7:79:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96OnqEfknDIv6eAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk YjdmMB4XDTI2MTAxMjEyMjE1NFoXDTI3MDExMDEzMjE1NFowLzEtMCsGA1UEAxMk ODU4ZTBmOTItNTU3OS00ZTk1LTg0NTEtMzljYTY5NzNjOWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEcY8L+K090PAirAo/SuSfXgv+1Tz/m4aFfc piI1znjisBxzhLl5znWXXJ52Snous15OVDZmStjzv6fd1GJVxCGLNoY8B2/57lpF c24E1YFbyEEv4RM4o5iuYdT9fXXwlj9/h7t3P6/3g78vVx2bz3xbQ9QN92Z6xvIq FpZBe/uxgcz8/yWF4ykUmavGxh/d6iUtIfEslVEgKfPs0fJex8Wdm00BTqqOoswV xa+lRAw511oG2k+MXRy7OpsvZASn7BXH97kU4Cs+4k4rw9qtyGET4aqvyIb5Ohb5 8EMABgTP/vjwVIP3NMNvh3NmvUDxppqfFx7RFss7MksnSPQq7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWjWn37VqztAg1P9hN0xE2v5ziUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvM2M5NTVmZmQtYWFhMC0z MzdkLTk4OWQtNDJmYjRkODM5ZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0 OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz NTgwY2RiN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj8t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZVwdh5gspIrOTRa0CmzToh7O9FkAtZ/U7ELrajPYsE5n6gG/58OwR3 5eN+UPEQsZVlXcuFd4u2Q7Z4Joyry5N+XdvoqnnKRXncVZncHk0QgRfbLSlu5YwE gvfkxQFQiyYQdzkBvtcVU2XGSEi35Nf6deC3IKLTeQNoWQP3ifDAYujz/FFU2nZW K6aDz6FgAU8KpMQ0mdK3obQi1gynqfTMjw6N4LU9wTfrQIYooUTLiu0lIFPE8JDG E5bPS+kxmjd4FJIaONwTD3omWGGa5xmV8hhq0L8QS22fJ5snuNG9pjtww7EaaEdt 0b8uc3/KpZehuG45A1hsn679xVDneX8= -----END CERTIFICATE-----Generated at Wed Oct 14 20:43:19 2026 by rpki-client