$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa File: 8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa (raw, json) Hash identifier: EtXrjNYiMU9eXAsaCqF9YM5SSx4cO+BMl+OFkHsH1gM= Subject key identifier: 30:72:8B:71:E4:B8:82:5D:D9:C1:79:8F:85:08:40:16:0F:7B:E5:B0 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584EA79475BF0CC682347F2CF400 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400209 IP address blocks: 209.143.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:75:bf:0c:c6:82:34:7f:2c:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a5c547fa-62b6-4dd4-bbe7-b5b9d2899601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3c:08:bf:01:f8:c3:a5:ae:a7:fa:c4:ca:d7: 93:a4:28:59:c5:02:1a:53:74:cf:a4:8e:0f:e4:0f: 0b:a9:46:61:ef:48:8a:6d:5b:40:b9:08:8b:a3:f0: 45:79:62:39:1b:a3:1d:1d:c8:3f:0c:6b:27:4f:c9: 77:c8:47:c6:fd:22:73:26:b2:9e:11:ae:2e:d2:f0: 22:a7:3e:6c:67:7c:43:dc:42:8f:78:36:9f:e0:7f: 00:ef:9a:f1:06:b5:92:f9:af:44:a0:b7:85:ec:af: 4e:53:9f:b5:a7:96:c0:1c:e1:38:00:78:53:b0:77: cc:0b:86:12:d7:19:47:3b:92:9c:f4:cb:85:45:c1: 73:ca:4f:7e:02:3a:a1:b7:40:9e:92:18:0f:9f:d9: 81:ab:06:13:1c:7b:59:ca:31:2e:4b:d0:fe:17:a7: db:8b:db:f9:8e:19:46:2b:9a:f4:6b:d9:b8:0e:82: 45:36:4e:c2:a6:8e:95:dd:1e:e0:1e:f7:40:c1:7c: 75:04:44:6d:9a:0f:d1:93:f3:03:48:a6:e8:4f:8d: 2e:c3:da:b4:6d:48:5a:2f:d2:d2:84:7b:8f:96:64: 5f:fa:38:b0:af:e0:73:3d:8f:ab:a1:66:2a:bd:98: 11:19:54:cc:d5:5e:b1:78:94:6f:57:a3:c4:0d:d5: 8f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:72:8B:71:E4:B8:82:5D:D9:C1:79:8F:85:08:40:16:0F:7B:E5:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:51:c8:1b:ba:08:c8:b9:ac:a8:82:a3:19:92:49:99:b1:37: 9a:b5:5c:8e:06:84:16:40:99:c4:7b:89:f8:8c:6d:b5:40:ce: 4f:33:fb:ce:96:2f:24:aa:ef:35:4b:3f:a2:39:a8:bd:2b:93: 06:2c:a7:34:00:2d:bb:40:ab:ea:2e:50:0b:89:ae:e3:6c:8c: be:62:31:c5:71:26:02:b6:75:3f:78:b0:b1:06:82:4f:67:9e: 25:39:d3:7e:74:3e:05:32:60:5a:31:90:1d:6e:64:9c:67:27: 4e:f4:dc:b9:e2:e2:40:74:5d:83:7b:c3:f8:46:ff:7f:47:82: 79:34:b7:98:22:be:fe:72:21:01:30:26:95:72:41:e2:88:5b: a1:13:91:29:85:0c:72:a5:a1:53:54:85:5a:6a:a4:6c:3c:b0: 5a:e6:5b:f1:32:a3:da:2b:6f:66:97:d2:c1:e0:24:04:8b:2f: c9:1e:a8:69:18:dc:14:4d:29:53:08:a7:55:19:22:2a:70:a3: dc:1f:00:16:f2:df:85:54:01:eb:3d:f7:56:78:3c:4f:df:fa: b1:39:85:c1:e0:fc:aa:19:6a:df:1f:16:93:35:5f:eb:d7:52: 93:ce:79:2c:7c:c2:71:83:94:57:a4:e0:e2:c2:27:90:b0:d9: b5:de:a9:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlHW/DMaCNH8s9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTVjNTQ3ZmEtNjJiNi00ZGQ0LWJiZTctYjViOWQyODk5NjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDwIvwH4w6Wup/rEyteTpChZxQIaU3TPpI4P 5A8LqUZh70iKbVtAuQiLo/BFeWI5G6MdHcg/DGsnT8l3yEfG/SJzJrKeEa4u0vAi pz5sZ3xD3EKPeDaf4H8A75rxBrWS+a9EoLeF7K9OU5+1p5bAHOE4AHhTsHfMC4YS 1xlHO5Kc9MuFRcFzyk9+Ajqht0CekhgPn9mBqwYTHHtZyjEuS9D+F6fbi9v5jhlG K5r0a9m4DoJFNk7Cpo6V3R7gHvdAwXx1BERtmg/Rk/MDSKboT40uw9q0bUhaL9LS hHuPlmRf+jiwr+BzPY+roWYqvZgRGVTM1V6xeJRvV6PEDdWPRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDByi3HkuIJd2cF5j4UIQBYPe+WwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvOGEyMzQ0M2QtMWVkOC0z ZDgwLWFjMDItYmQzZGYzZDhmMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Y9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9RyBu6CMi5rKiCoxmSSZmxN5q1XI4GhBZAmcR7ifiMbbVAzk8z+86W LySq7zVLP6I5qL0rkwYspzQALbtAq+ouUAuJruNsjL5iMcVxJgK2dT94sLEGgk9n niU50350PgUyYFoxkB1uZJxnJ0703Lni4kB0XYN7w/hG/39Hgnk0t5givv5yIQEw JpVyQeKIW6ETkSmFDHKloVNUhVpqpGw8sFrmW/Eyo9orb2aX0sHgJASLL8keqGkY 3BRNKVMIp1UZIipwo9wfABby34VUAes991Z4PE/f+rE5hcHg/KoZat8fFpM1X+vX UpPOeSx8wnGDlFek4OLCJ5Cw2bXeqWo= -----END CERTIFICATE-----Generated at Wed Jul 29 10:35:20 2026 by rpki-client