$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/a8f9698d-1090-3eee-86f6-43a4e3a8a9c9.roa File: a8f9698d-1090-3eee-86f6-43a4e3a8a9c9.roa (raw, json) Hash identifier: kcOMbhxVmbFAej1oggzVXUL+ck9/Dq6mUTIYSjwyFYY= Subject key identifier: A9:E9:EB:0A:9A:3A:02:63:24:AC:E3:CF:E2:51:EC:5A:51:9C:80:E5 Certificate issuer: /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f Certificate serial: 010D0C9F4328584F7A3ACC562893B3BCF6CC3030 Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/a8f9698d-1090-3eee-86f6-43a4e3a8a9c9.roa Signing time: Mon 12 Oct 2026 12:22:32 +0000 ROA not before: Mon 12 Oct 2026 12:22:32 +0000 ROA not after: Sun 10 Jan 2027 13:22:32 +0000 asID: 18934 IP address blocks: 143.203.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:3a:cc:56:28:93:b3:bc:f6:cc:30:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f Validity Not Before: Oct 12 12:22:32 2026 GMT Not After : Jan 10 13:22:32 2027 GMT Subject: CN=86c8ba61-24fb-44c3-9067-438ff25fdf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:be:6b:f2:0d:93:6e:29:4e:54:c3:9c:ad: 43:77:fd:04:9b:71:65:14:d3:16:75:50:1c:fe:10: 4f:16:c7:08:08:53:25:94:c7:d8:12:63:e8:af:8d: f1:dd:a8:be:7e:ab:51:50:1d:75:23:47:63:a4:21: 9c:cd:5a:4e:a1:82:ed:a2:78:e9:67:e2:29:e0:a8: 82:de:44:73:6e:1d:b9:0a:5a:16:e2:a3:ed:60:ad: 0f:09:7b:dd:f1:f0:2b:15:9e:2b:15:4c:21:4a:33: 4a:c9:be:29:59:04:fd:b9:8b:df:41:09:d2:86:78: b2:32:3f:01:87:26:1c:fe:fb:86:54:d0:bf:9b:aa: cd:ef:a6:20:54:5a:8d:29:47:a9:2c:47:47:d6:fb: 3f:40:b6:35:86:ad:0d:fd:9a:a9:e4:5b:44:92:52: 75:f2:e4:d2:d3:98:69:53:9c:94:0d:19:9f:c4:2f: bb:35:cf:6d:db:dc:e1:ce:08:ad:5f:15:48:b8:9e: 2b:3b:5f:2a:cc:9c:6c:da:ff:39:fa:4f:40:89:04: 2d:6c:97:b4:ba:fe:84:71:70:8b:8c:f5:06:8d:5b: 69:67:35:96:ee:12:54:97:44:81:90:05:6e:21:f4: a8:c5:15:87:15:72:34:36:cb:28:6e:8d:dd:59:5b: dd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E9:EB:0A:9A:3A:02:63:24:AC:E3:CF:E2:51:EC:5A:51:9C:80:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/a8f9698d-1090-3eee-86f6-43a4e3a8a9c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl X509v3 Authority Key Identifier: keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer sbgp-ipAddrBlock: critical IPv4: 143.203.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7e:26:31:4a:47:6b:95:4e:d3:12:f4:c6:e1:30:14:a5:a3: 14:06:61:63:1e:74:b3:06:be:ca:4f:0f:dd:4e:e3:a1:92:e6: 8a:08:fd:d0:af:4a:5e:f4:f6:6a:d2:c4:b4:f5:67:ef:94:5c: 12:18:34:28:0f:c1:41:ad:69:a3:fd:01:23:5d:e0:78:37:84: e0:33:86:9c:43:1f:6a:eb:26:4b:f4:39:2b:09:78:19:df:0f: 88:86:38:32:61:b5:93:8b:81:38:2f:c6:8a:77:8b:63:87:55: 1e:d0:57:07:17:78:4b:e6:c8:3c:40:95:5f:1f:96:2d:56:15: 2f:11:a2:eb:9d:04:8c:b1:91:e3:7a:20:32:71:b0:37:95:f0: 23:ac:41:e7:46:5a:75:33:0a:0d:a7:a6:a2:6b:87:dd:9c:8e: 5a:77:4b:37:e3:89:34:66:36:db:9f:a1:47:6a:1b:01:ab:28: 53:fe:90:fc:11:9c:3b:e8:15:19:76:44:fb:9c:ea:ca:66:00: 2b:bb:f2:42:79:56:4b:07:62:7c:ee:20:57:12:d0:63:6d:76: 63:ac:bf:4d:9f:30:61:41:8d:7d:2d:2f:81:5a:a6:ad:0a:1b: 29:4c:6b:ff:d3:0a:d3:2f:db:f8:fb:30:3c:1c:10:62:b4:b5: 46:d3:e6:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96OsxWKJOzvPbMMDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk YjdmMB4XDTI2MTAxMjEyMjIzMloXDTI3MDExMDEzMjIzMlowLzEtMCsGA1UEAxMk ODZjOGJhNjEtMjRmYi00NGMzLTkwNjctNDM4ZmYyNWZkZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsou+a/INk24pTlTDnK1Dd/0Em3FlFNMWdVAc /hBPFscICFMllMfYEmPor43x3ai+fqtRUB11I0djpCGczVpOoYLtonjpZ+Ip4KiC 3kRzbh25CloW4qPtYK0PCXvd8fArFZ4rFUwhSjNKyb4pWQT9uYvfQQnShniyMj8B hyYc/vuGVNC/m6rN76YgVFqNKUepLEdH1vs/QLY1hq0N/Zqp5FtEklJ18uTS05hp U5yUDRmfxC+7Nc9t29zhzgitXxVIuJ4rO18qzJxs2v85+k9AiQQtbJe0uv6EcXCL jPUGjVtpZzWW7hJUl0SBkAVuIfSoxRWHFXI0Nssobo3dWVvdeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnp6wqaOgJjJKzjz+JR7FpRnIDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvYThmOTY5OGQtMTA5MC0z ZWVlLTg2ZjYtNDNhNGUzYThhOWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0 OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz NTgwY2RiN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj8t5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh+JjFKR2uVTtMS9MbhMBSloxQGYWMedLMGvspPD91O46GS5ooI/dCv Sl709mrSxLT1Z++UXBIYNCgPwUGtaaP9ASNd4Hg3hOAzhpxDH2rrJkv0OSsJeBnf D4iGODJhtZOLgTgvxop3i2OHVR7QVwcXeEvmyDxAlV8fli1WFS8RouudBIyxkeN6 IDJxsDeV8COsQedGWnUzCg2npqJrh92cjlp3SzfjiTRmNtufoUdqGwGrKFP+kPwR nDvoFRl2RPuc6spmACu78kJ5VksHYnzuIFcS0GNtdmOsv02fMGFBjX0tL4Fapq0K GylMa//TCtMv2/j7MDwcEGK0tUbT5lc= -----END CERTIFICATE-----Generated at Wed Oct 14 20:43:17 2026 by rpki-client