$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa File: 998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa (raw, json) Hash identifier: UNPcsRWNdetSllyIwcsFYmBQ7lTg3291sR+bvkrNpAA= Subject key identifier: EF:DD:0E:FD:2B:D6:5F:77:CE:82:88:D0:60:BE:E0:C2:69:49:16:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4973EC2FE60B9529B46D1200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 143.42.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ec:2f:e6:0b:95:29:b4:6d:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1aa93f86-29f0-4afd-b2ff-9a336c165ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:72:a4:7d:d7:19:77:e0:af:ec:64:c8:d3: 4d:94:58:43:74:f4:ef:a6:4a:b4:b8:dc:fa:f3:a3: 64:00:49:de:fc:32:48:10:8e:d2:b8:ca:8d:ee:35: cb:02:27:79:e1:b7:62:3f:af:64:fc:51:e0:09:da: 9b:7c:3c:12:15:29:6f:15:18:9c:13:d9:b9:bc:02: d2:51:2f:c9:d0:04:2c:a0:96:b9:95:5d:c6:66:f8: d9:62:9e:c1:2b:95:bd:15:fe:86:e5:e6:53:59:0c: da:c9:89:f1:26:52:9b:20:d4:25:57:23:f1:69:0f: c1:4b:47:c6:4f:c3:09:49:6e:de:df:44:21:38:31: fa:cd:48:f3:12:9b:3a:ea:27:66:33:0c:5b:37:22: 4c:69:f1:32:3b:29:43:c0:ef:2e:f2:77:50:69:47: b9:ef:43:5e:e9:18:90:3e:f2:9d:59:f1:b2:7f:a5: f1:6a:47:48:30:96:27:2c:34:c4:18:18:d6:2b:ea: c0:67:cf:f9:e6:04:c5:9b:eb:28:01:98:99:41:3a: be:a7:99:5f:e1:fc:54:33:97:ab:dc:fa:2f:c1:a7: 1e:54:75:40:77:2d:5b:05:cf:3c:64:76:a5:b3:4e: 4b:df:3b:e3:49:58:1d:5a:5a:9b:0c:9d:22:c0:c8: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DD:0E:FD:2B:D6:5F:77:CE:82:88:D0:60:BE:E0:C2:69:49:16:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 143.42.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:89:a6:bf:54:52:06:7f:57:e6:8a:1c:ca:22:e9:51:69:e5: 83:09:80:45:16:cb:75:27:28:ee:e6:fb:af:cf:7e:bf:6f:cd: 43:36:e3:54:1a:0f:1d:81:4c:af:ba:17:ea:7b:57:43:a9:5a: fe:bd:e6:59:da:ea:f2:90:94:58:93:45:79:3b:0a:b7:79:31: f9:c5:7f:a5:89:d5:6a:03:16:f8:99:1b:61:0e:f7:1d:27:cb: 42:2b:2c:39:d0:fe:d1:75:89:4a:2a:63:0a:2c:85:52:ac:4a: 48:16:59:55:5e:c2:31:9b:d3:2d:d0:ff:7b:a3:e0:e2:a2:a2: 04:20:c3:ea:c8:74:78:5a:79:19:d5:1e:5e:04:92:cc:74:9c: 84:19:7f:79:ca:3d:8f:87:1c:15:ec:3b:a0:6b:56:ce:75:63: ac:7d:20:7b:3b:3c:fa:f0:20:37:63:35:a6:42:53:bc:09:9c: 95:ad:6d:c7:ee:45:d7:d4:05:a3:9b:2c:d7:91:7d:31:d6:e9: 0e:f3:ef:e5:ce:f5:4d:df:39:32:58:7b:be:cf:69:32:49:5f: 48:d6:14:cc:5e:51:59:f3:1f:19:bc:62:d4:cb:2c:ed:9a:dd: a4:3c:e0:ab:4f:2b:a7:89:0e:f9:70:2f:dc:be:41:33:e0:71: a4:67:f9:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9Jc+wv5guVKbRtEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWFhOTNmODYtMjlmMC00YWZkLWIyZmYtOWEzMzZjMTY1YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BpypH3XGXfgr+xkyNNNlFhDdPTvpkq0uNz6 86NkAEne/DJIEI7SuMqN7jXLAid54bdiP69k/FHgCdqbfDwSFSlvFRicE9m5vALS US/J0AQsoJa5lV3GZvjZYp7BK5W9Ff6G5eZTWQzayYnxJlKbINQlVyPxaQ/BS0fG T8MJSW7e30QhODH6zUjzEps66idmMwxbNyJMafEyOylDwO8u8ndQaUe570Ne6RiQ PvKdWfGyf6XxakdIMJYnLDTEGBjWK+rAZ8/55gTFm+soAZiZQTq+p5lf4fxUM5er 3PovwaceVHVAdy1bBc88ZHals05L3zvjSVgdWlqbDJ0iwMjLwwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO/dDv0r1l93zoKI0GC+4MJpSRY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk4YTljYWUtYWFjMy0z NjQ5LWJhMDgtZmI5NGNkMmE0YWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjyowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfommv1RSBn9X5oocyiLpUWnlgwmARRbLdSco7ub7r89+v2/NQzbjVBoP HYFMr7oX6ntXQ6la/r3mWdrq8pCUWJNFeTsKt3kx+cV/pYnVagMW+JkbYQ73HSfL QissOdD+0XWJSipjCiyFUqxKSBZZVV7CMZvTLdD/e6Pg4qKiBCDD6sh0eFp5GdUe XgSSzHSchBl/eco9j4ccFew7oGtWznVjrH0gezs8+vAgN2M1pkJTvAmcla1tx+5F 19QFo5ss15F9MdbpDvPv5c71Td85Mlh7vs9pMklfSNYUzF5RWfMfGbxi1Mss7Zrd pDzgq08rp4kO+XAv3L5BM+BxpGf5tQ== -----END CERTIFICATE-----Generated at Fri Sep 25 20:50:02 2026 by rpki-client