$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa File: c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa (raw, json) Hash identifier: 6igbxpGCTjPuXe6rH+Mu6jJX7QZ71se8QywPFERc6nE= Subject key identifier: D2:A2:AD:3C:41:C1:48:E7:7B:45:AF:60:F0:F3:34:CF:BE:D3:A9:1B Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584F1467A1B863B745C493B50A80 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 63189 IP address blocks: 40.143.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a1:b8:63:b7:45:c4:93:b5:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=f53b1a24-d21e-49e7-a53e-01eca8909cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d4:29:f0:6c:47:b2:e3:ab:6b:7b:e5:32:73: 90:23:fd:0f:15:d3:31:36:23:36:38:f0:af:ab:3a: e8:c4:39:fc:12:a0:4c:51:72:d5:23:c9:24:39:47: ab:49:c9:fd:1c:4c:1e:26:ae:e8:59:79:31:1a:7b: 02:35:03:e8:84:89:6e:df:3a:bb:a8:39:36:99:ea: 64:08:f4:76:49:94:d5:60:d6:f9:9e:24:cf:2f:24: f5:e6:70:30:6c:59:db:a0:58:7a:4d:db:47:e5:2f: fa:05:78:bc:8d:e8:0d:14:28:1c:18:0c:fc:42:a7: 28:6a:d7:d6:cb:47:91:52:9d:27:70:a9:a7:08:39: d3:cd:0a:08:7a:68:86:a6:e4:94:da:2e:45:d4:c7: 0b:39:58:6c:cf:6c:3b:d0:0d:90:3a:69:74:ac:37: a6:c7:6f:ef:a4:39:df:75:3e:9c:14:53:22:25:b7: ad:81:6f:3c:c3:d3:22:a4:7e:13:49:51:68:1f:82: 93:5d:f4:fe:d4:b2:ab:d7:32:c5:33:7c:d7:fa:59: 1c:c2:e9:63:d6:61:51:57:4c:61:1a:7c:aa:ad:89: ee:05:53:db:97:4e:8d:ed:0f:37:82:0e:c5:f3:2d: bf:c0:59:46:e4:4c:e3:d6:b0:5b:c1:55:34:37:67: 48:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A2:AD:3C:41:C1:48:E7:7B:45:AF:60:F0:F3:34:CF:BE:D3:A9:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:96:4d:38:a7:72:3e:02:ba:2e:20:e1:7d:a6:6b:09:f7:ec: de:1a:84:5f:0f:c1:7d:6b:d5:f8:12:d0:99:c7:d9:1c:ec:3c: a2:36:cb:45:79:aa:8a:1e:05:d4:fd:ee:f1:74:e1:5c:48:65: 5f:70:fd:2c:09:0c:b8:96:b8:09:96:cf:76:fa:44:93:8c:b4: 26:ea:d2:fd:81:c8:44:4d:cb:cc:e4:f1:09:f2:32:c8:c2:e1: 50:86:43:fe:d5:8a:2a:3c:5f:2d:2f:90:48:11:de:3d:4b:b7: 2e:33:b6:ed:78:23:af:2f:3b:9b:13:2b:2b:6b:3d:38:f4:5e: 59:55:bc:a7:d2:96:1a:3f:48:64:0f:51:1d:94:b1:40:c5:01: 8c:60:58:df:b5:c6:70:e6:d4:18:18:7b:74:9f:fc:02:26:9f: e2:6e:d8:f3:52:7d:fc:8c:85:c3:c6:3f:5f:2c:54:fc:4e:a3: a0:43:0e:af:bc:1c:f2:e6:b1:e4:8f:06:5e:2f:e4:ea:be:1c: f3:63:d2:12:db:29:43:3a:c7:64:db:a8:1f:45:a9:03:44:a2: b8:4b:3f:42:e2:89:71:a1:35:7b:42:96:59:3c:ae:25:31:cc: fe:d3:34:20:e5:d2:b5:0e:5e:26:a7:4c:f3:4c:d4:cd:6f:44: 3b:6e:5e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6G4Y7dFxJO1CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZjUzYjFhMjQtZDIxZS00OWU3LWE1M2UtMDFlY2E4OTA5Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltQp8GxHsuOra3vlMnOQI/0PFdMxNiM2OPCv qzroxDn8EqBMUXLVI8kkOUerScn9HEweJq7oWXkxGnsCNQPohIlu3zq7qDk2mepk CPR2SZTVYNb5niTPLyT15nAwbFnboFh6TdtH5S/6BXi8jegNFCgcGAz8QqcoatfW y0eRUp0ncKmnCDnTzQoIemiGpuSU2i5F1McLOVhsz2w70A2QOml0rDemx2/vpDnf dT6cFFMiJbetgW88w9MipH4TSVFoH4KTXfT+1LKr1zLFM3zX+lkcwulj1mFRV0xh GnyqrYnuBVPbl06N7Q83gg7F8y2/wFlG5Ezj1rBbwVU0N2dIJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKirTxBwUjne0WvYPDzNM++06kbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYzVkZDI4MWYtNGMzNi0z ZTFjLWI4NDEtZTJmYWJkZjMxMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI+PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSWTTincj4Cui4g4X2mawn37N4ahF8PwX1r1fgS0JnH2RzsPKI2y0V5 qooeBdT97vF04VxIZV9w/SwJDLiWuAmWz3b6RJOMtCbq0v2ByERNy8zk8QnyMsjC 4VCGQ/7Viio8Xy0vkEgR3j1Lty4ztu14I68vO5sTKytrPTj0XllVvKfSlho/SGQP UR2UsUDFAYxgWN+1xnDm1BgYe3Sf/AImn+Ju2PNSffyMhcPGP18sVPxOo6BDDq+8 HPLmseSPBl4v5Oq+HPNj0hLbKUM6x2TbqB9FqQNEorhLP0LiiXGhNXtCllk8riUx zP7TNCDl0rUOXianTPNM1M1vRDtuXsw= -----END CERTIFICATE-----Generated at Mon Sep 21 10:56:05 2026 by rpki-client