$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/8b32f37f-9a76-336d-b8ad-fb89f2e480d3.roa File: 8b32f37f-9a76-336d-b8ad-fb89f2e480d3.roa (raw, json) Hash identifier: M78ikQNmDUDqAf1wbvRlHMpDdXRO8I6GttXzrgTPRZU= Subject key identifier: 2F:F8:29:D9:DD:87:63:D0:D8:B7:1D:E7:11:E5:29:FD:1A:85:E9:71 Certificate issuer: /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb Certificate serial: 010D0C9F4328584F11A15FAE8CDD48E58F9D4A80 Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/8b32f37f-9a76-336d-b8ad-fb89f2e480d3.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 143.223.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:5f:ae:8c:dd:48:e5:8f:9d:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=08383b17-7292-4b23-86f0-a4832ab71676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:34:06:21:37:7a:9d:c9:4d:4e:fb:cc:db: 86:fe:83:ea:db:32:03:b3:ed:73:64:1d:02:15:44: bb:5e:9e:95:22:1d:e8:a4:07:a0:9c:bf:13:4f:a5: 95:30:07:ec:da:3a:f0:d5:c1:23:bd:01:ba:99:96: be:35:3e:05:4e:98:a5:76:a2:a0:4d:a1:d3:dd:a4: 2f:ec:65:ab:0f:c3:1d:9d:e2:40:00:ca:0e:a3:9d: ab:75:d0:67:80:f4:0e:61:ad:e1:44:68:d6:15:c1: 20:15:0a:97:f1:e5:6d:24:f3:bd:e1:49:7e:6c:bf: 93:3c:db:b6:8a:b3:a7:a3:17:ad:5e:0e:35:46:8f: 53:cf:64:05:f4:5d:4e:dc:ab:ca:a3:9a:9f:dd:0a: 41:27:4b:2f:f7:d3:ed:c9:ae:bf:a4:3f:ef:03:37: f1:9e:65:bf:29:58:4c:53:da:cd:7c:43:75:34:ed: c5:93:88:44:d7:bc:c5:37:a0:38:f3:2f:98:17:7d: bd:1c:51:1d:ab:46:75:f1:36:d6:31:5d:af:ed:0a: 16:23:01:dc:4c:01:e3:0e:24:4e:d0:3a:fa:66:b3: e2:10:60:71:63:e9:7c:f6:1d:89:ec:a3:5d:1b:d2: 12:0d:53:ac:8f:41:b8:c1:e9:1a:37:b5:22:ae:e2: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F8:29:D9:DD:87:63:D0:D8:B7:1D:E7:11:E5:29:FD:1A:85:E9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/8b32f37f-9a76-336d-b8ad-fb89f2e480d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl X509v3 Authority Key Identifier: keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer sbgp-ipAddrBlock: critical IPv4: 143.223.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:0e:84:17:7e:49:73:90:28:b9:37:18:74:0f:ee:20:56:8f: a7:f2:90:6e:1d:f2:91:c0:dd:e2:dd:cc:40:ad:99:c2:96:c8: c9:39:e1:74:5b:6b:2c:fe:c0:7e:d9:63:2d:04:b6:88:01:76: 02:49:f9:d7:f4:a4:7d:75:01:b4:49:14:88:8e:cc:9e:79:15: 57:e9:2c:39:46:6a:c2:b3:53:fe:19:57:cd:8f:3d:d4:e3:26: f5:c8:63:a5:6a:e1:3d:f0:8f:38:7d:5e:36:1b:91:e1:f4:62: 1c:70:7c:78:11:94:ba:fc:4c:3f:df:f1:26:58:72:be:84:6e: f1:99:05:1f:41:24:e4:70:6d:d5:f7:d8:b9:41:81:79:ea:13: cb:20:01:df:db:e6:59:f9:4a:76:9a:7b:32:73:cf:62:a9:7c: 08:96:37:bc:1c:69:6c:46:eb:84:14:32:da:9e:74:ca:9f:42: 5f:87:45:fa:9d:11:74:fb:88:2c:d0:42:bc:a1:1e:1a:34:50: 2a:93:26:f5:e4:04:dd:a3:df:78:f5:e0:39:4c:66:a6:b6:ce: a9:22:b3:f0:24:18:58:ed:74:ba:1d:11:48:a3:39:21:bf:bb: fa:e0:6b:e6:50:0f:83:64:f3:4c:63:41:d9:ac:b1:99:51:53: d5:c6:a9:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoV+ujN1I5Y+dSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc5NTkxZWItZjhmZi00OGY1LTlhYzYtZTFhZmEyM2U1 M2ZiMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDgzODNiMTctNzI5Mi00YjIzLTg2ZjAtYTQ4MzJhYjcxNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm80BiE3ep3JTU77zNuG/oPq2zIDs+1zZB0C FUS7Xp6VIh3opAegnL8TT6WVMAfs2jrw1cEjvQG6mZa+NT4FTpildqKgTaHT3aQv 7GWrD8MdneJAAMoOo52rddBngPQOYa3hRGjWFcEgFQqX8eVtJPO94Ul+bL+TPNu2 irOnoxetXg41Ro9Tz2QF9F1O3KvKo5qf3QpBJ0sv99Ptya6/pD/vAzfxnmW/KVhM U9rNfEN1NO3Fk4hE17zFN6A48y+YF329HFEdq0Z18TbWMV2v7QoWIwHcTAHjDiRO 0Dr6ZrPiEGBxY+l89h2J7KNdG9ISDVOsj0G4wekaN7UiruIb4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/4Kdndh2PQ2Lcd5xHlKf0ahelxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1 OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFmYTIzZTUzZmIvOGIzMmYzN2YtOWE3Ni0z MzZkLWI4YWQtZmI4OWYyZTQ4MGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjc5NTkxZWItZjhmZi00OGY1LTlh YzYtZTFhZmEyM2U1M2ZiL2Y3OTU5MWViLWY4ZmYtNDhmNS05YWM2LWUxYWZhMjNl NTNmYi5jcmwwHwYDVR0jBBgwFoAUC3rnSZ44dN+bLPVV81syl2w4I3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFm YTIzZTUzZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj99aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0OhBd+SXOQKLk3GHQP7iBWj6fykG4d8pHA3eLdzECtmcKWyMk54XRb ayz+wH7ZYy0EtogBdgJJ+df0pH11AbRJFIiOzJ55FVfpLDlGasKzU/4ZV82PPdTj JvXIY6Vq4T3wjzh9XjYbkeH0YhxwfHgRlLr8TD/f8SZYcr6EbvGZBR9BJORwbdX3 2LlBgXnqE8sgAd/b5ln5SnaaezJzz2KpfAiWN7wcaWxG64QUMtqedMqfQl+HRfqd EXT7iCzQQryhHho0UCqTJvXkBN2j33j14DlMZqa2zqkis/AkGFjtdLodEUijOSG/ u/rga+ZQD4Nk80xjQdmssZlRU9XGqT8= -----END CERTIFICATE-----Generated at Tue Sep 22 05:11:19 2026 by rpki-client