$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa File: df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa (raw, json) Hash identifier: Qbo18BWGH2IaTw6eRNY4FhiTbIPeW57vMscWPVqWXiQ= Subject key identifier: 86:C5:40:A1:05:63:3D:A0:83:C8:3B:63:CF:22:EE:26:AA:3C:7F:56 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584F576809B342385BE08DAA22E2 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 923 IP address blocks: 131.143.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:09:b3:42:38:5b:e0:8d:aa:22:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=493a9511-fff7-4e3f-9ba2-4ede4a305fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5d:a3:0c:f3:8f:cf:22:e6:27:a6:91:b6:30: 05:f7:15:81:dc:69:0f:8c:b8:10:78:63:c4:8e:73: 11:64:11:c6:4e:d4:c9:de:4a:86:4b:c8:a8:da:5e: f5:d8:f7:95:b8:77:5b:88:02:52:63:fa:fa:7e:58: 9a:29:b1:09:3a:dd:bc:83:62:df:0b:78:fd:24:99: a7:77:00:49:c8:be:c6:73:85:5a:be:f7:bf:13:21: 6b:2c:4a:5d:7a:53:a0:a9:bf:56:16:40:97:dc:57: 98:73:00:04:96:46:cf:1d:a9:e7:6b:44:bb:28:93: 9e:3b:d8:78:62:19:48:ae:fd:09:de:e3:be:64:b0: 3e:5b:e6:9d:40:dd:13:7d:51:74:28:da:71:74:1e: 00:be:76:a7:c1:d2:e3:4b:b2:bb:53:48:84:22:cb: 89:c6:33:33:f6:52:e0:ba:6d:8b:a5:6f:99:95:de: 53:d8:7b:69:e6:7a:40:04:28:02:14:a2:79:ab:ee: 35:15:8e:72:22:e8:75:4a:c1:e7:63:84:1d:30:d8: 28:90:20:d8:83:c0:ed:ac:df:cc:a9:ec:19:ed:9a: 08:c4:90:bc:d8:74:02:25:5e:f3:3a:ce:f4:44:2c: ab:04:91:06:5e:88:e5:74:16:82:8a:3a:63:10:99: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C5:40:A1:05:63:3D:A0:83:C8:3B:63:CF:22:EE:26:AA:3C:7F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 131.143.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7a:48:fe:84:ae:08:39:2a:d6:34:a1:a6:ec:d1:cb:de:ce: f3:a9:7a:23:69:56:b6:33:d2:0e:4c:b4:d0:14:a3:26:03:b3: 42:9d:0e:2f:ef:db:1c:2b:5d:eb:fd:97:2e:43:1a:f3:0b:76: 24:0e:7f:81:04:ca:1a:64:08:a2:92:bb:e0:5b:96:17:06:d9: 15:d6:27:c5:75:72:16:1f:26:a4:72:ad:f2:bd:ff:31:c4:a4: 7a:9b:a7:2b:d3:43:c9:7d:6a:04:c6:ff:72:41:ed:ba:f7:14: 68:57:bf:a9:3a:29:2f:54:b7:41:0c:6a:7e:1f:81:41:ed:d1: cb:d7:07:19:2a:d5:9b:ae:e6:fc:a4:3d:ab:ac:ec:9d:65:69: 5c:9f:3e:0b:24:5a:3c:a7:d7:6d:ea:19:c2:73:d4:72:e7:0e: 56:b9:fd:ab:33:75:cb:63:cc:d9:70:4e:e4:5a:fb:f0:69:ee: cf:f4:3f:f2:23:da:56:4f:19:41:c6:2f:39:86:41:a8:b7:a3: c3:dc:a6:dd:69:5a:fe:bf:48:3c:78:a7:20:ca:9e:8a:55:6d: 17:8f:98:e7:9e:fc:6c:75:72:86:e5:cf:27:70:b3:b0:c3:62: 62:78:f4:8d:45:7a:1d:50:d9:74:d1:e8:55:c5:29:07:0c:3e: a8:e0:d7:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAmzQjhb4I2qIuIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk NDkzYTk1MTEtZmZmNy00ZTNmLTliYTItNGVkZTRhMzA1ZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV2jDPOPzyLmJ6aRtjAF9xWB3GkPjLgQeGPE jnMRZBHGTtTJ3kqGS8io2l712PeVuHdbiAJSY/r6fliaKbEJOt28g2LfC3j9JJmn dwBJyL7Gc4Vavve/EyFrLEpdelOgqb9WFkCX3FeYcwAElkbPHanna0S7KJOeO9h4 YhlIrv0J3uO+ZLA+W+adQN0TfVF0KNpxdB4AvnanwdLjS7K7U0iEIsuJxjMz9lLg um2LpW+Zld5T2Htp5npABCgCFKJ5q+41FY5yIuh1SsHnY4QdMNgokCDYg8DtrN/M qewZ7ZoIxJC82HQCJV7zOs70RCyrBJEGXojldBaCijpjEJmVvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbFQKEFYz2gg8g7Y88i7iaqPH9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvZGYxZDZhMzYtYjg4MC0z ZWE1LWE0MTItYmRjOWIyMzAzZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF6SP6Ergg5KtY0oabs0cvezvOpeiNpVrYz0g5MtNAUoyYDs0KdDi/v 2xwrXev9ly5DGvMLdiQOf4EEyhpkCKKSu+BblhcG2RXWJ8V1chYfJqRyrfK9/zHE pHqbpyvTQ8l9agTG/3JB7br3FGhXv6k6KS9Ut0EMan4fgUHt0cvXBxkq1Zuu5vyk Paus7J1laVyfPgskWjyn123qGcJz1HLnDla5/aszdctjzNlwTuRa+/Bp7s/0P/Ij 2lZPGUHGLzmGQai3o8Pcpt1pWv6/SDx4pyDKnopVbRePmOee/Gx1coblzydws7DD YmJ49I1Feh1Q2XTR6FXFKQcMPqjg12o= -----END CERTIFICATE-----Generated at Sat Oct 10 14:52:56 2026 by rpki-client