$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86cbb17-1b94-34d7-a719-08b1ec7b9ece.roa File: a86cbb17-1b94-34d7-a719-08b1ec7b9ece.roa (raw, json) Hash identifier: zSAgpFu+sLqIit9wrnBwLvGoIzMKD7gePNUTIAZKsTM= Subject key identifier: 9E:88:D6:E2:51:C2:68:7E:AB:4E:17:6F:04:D8:5F:86:C1:FE:3F:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD34F6A60505632B717600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86cbb17-1b94-34d7-a719-08b1ec7b9ece.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 63949 IP address blocks: 143.42.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:34:f6:a6:05:05:63:2b:71:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=d8b1d9a5-dd85-4b74-a88a-c65fc3ffdae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0c:76:e3:6d:84:3b:4f:87:b5:bb:4f:08:10: 58:42:4c:b1:74:df:ce:47:44:44:62:d6:60:04:94: d7:6c:a3:0f:b9:cd:fc:0a:3c:59:2f:c5:86:70:d0: 16:1e:1d:d4:ea:5f:ff:1c:87:15:1f:97:7d:19:46: d3:91:cb:af:75:5f:4d:0d:91:40:f4:97:ef:20:f5: ee:17:bf:df:b8:02:57:db:40:d8:52:e0:fc:f3:aa: 55:95:16:30:5f:7f:25:8a:2c:1a:46:74:62:c7:8a: 42:92:23:fe:47:8d:ba:38:bd:4b:01:34:a1:22:20: 95:8a:62:ad:ae:ae:10:0f:6e:49:b7:f8:23:53:72: 81:3c:1c:fe:86:99:dc:c6:88:34:7e:35:4a:32:ed: 24:e4:e2:2d:ce:62:b9:35:e5:bf:52:2f:b9:6f:3e: 80:97:ad:7f:97:a5:cc:b6:54:d4:6a:6d:58:df:29: 59:ef:fd:75:39:b7:11:7b:a1:21:b0:ba:3b:55:37: 98:3d:51:66:cf:01:e7:36:73:14:f9:7e:62:d3:cb: 6f:77:c5:15:0a:2f:42:7c:0c:be:9e:cf:bd:ee:5c: 65:9b:fa:af:c1:f5:e0:a7:0f:ad:58:69:8e:5a:bf: ab:b3:8b:84:b1:a5:31:7c:d6:1a:4a:37:e5:dd:32: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:88:D6:E2:51:C2:68:7E:AB:4E:17:6F:04:D8:5F:86:C1:FE:3F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86cbb17-1b94-34d7-a719-08b1ec7b9ece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 143.42.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:12:b4:16:74:c9:42:cf:33:7d:1b:08:99:fc:75:74:29:bb: 62:e5:c5:81:5b:fa:8c:7b:ea:43:0b:16:c8:4b:f2:1f:88:8e: 7e:ec:5d:c0:b0:c0:6c:70:a3:bd:09:28:0a:53:2e:d5:1c:46: 0d:c9:ba:55:20:32:3f:7c:80:8a:8e:32:ea:df:86:57:d1:4e: 80:2a:42:90:cf:a8:4f:bc:01:cc:17:34:63:5b:24:8f:a2:d8: 43:91:6d:85:d7:85:18:9f:05:f5:0e:ae:85:64:43:a9:4f:27: 3d:d7:01:6e:7a:79:16:53:24:b1:85:74:4c:63:2d:7b:a6:65: 43:27:99:4d:d5:4e:5e:51:26:45:80:03:66:95:de:56:a6:57: 08:b3:96:4c:24:18:7c:54:d9:2b:ca:d3:db:61:f6:8a:20:f2: 76:e9:85:9b:6d:4b:8f:9a:af:99:ee:a0:1b:a9:25:de:ba:fe: dc:56:c0:dd:31:cd:04:a3:0e:10:4e:26:df:8a:76:13:6b:da: 91:9e:14:72:60:ba:67:ff:8e:14:d1:55:95:f4:1b:dc:f9:18: da:9d:33:7a:45:e0:83:5e:3b:d9:2b:70:72:2e:a1:87:0f:d0: 4d:47:0e:9d:17:f8:49:a1:f2:fa:9a:60:92:48:50:42:39:ed: 2f:fc:f0:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTT2pgUFYytxdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDhiMWQ5YTUtZGQ4NS00Yjc0LWE4OGEtYzY1ZmMzZmZkYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwx2422EO0+HtbtPCBBYQkyxdN/OR0REYtZg BJTXbKMPuc38CjxZL8WGcNAWHh3U6l//HIcVH5d9GUbTkcuvdV9NDZFA9JfvIPXu F7/fuAJX20DYUuD886pVlRYwX38liiwaRnRix4pCkiP+R426OL1LATShIiCVimKt rq4QD25Jt/gjU3KBPBz+hpncxog0fjVKMu0k5OItzmK5NeW/Ui+5bz6Al61/l6XM tlTUam1Y3ylZ7/11ObcRe6EhsLo7VTeYPVFmzwHnNnMU+X5i08tvd8UVCi9CfAy+ ns+97lxlm/qvwfXgpw+tWGmOWr+rs4uEsaUxfNYaSjfl3TL37wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6I1uJRwmh+q04XbwTYX4bB/j8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg2Y2JiMTctMWI5NC0z NGQ3LWE3MTktMDhiMWVjN2I5ZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjypgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMStBZ0yULPM30bCJn8dXQpu2LlxYFb+ox76kMLFshL8h+Ijn7sXcCw wGxwo70JKApTLtUcRg3JulUgMj98gIqOMurfhlfRToAqQpDPqE+8AcwXNGNbJI+i 2EORbYXXhRifBfUOroVkQ6lPJz3XAW56eRZTJLGFdExjLXumZUMnmU3VTl5RJkWA A2aV3lamVwizlkwkGHxU2SvK09th9oog8nbphZttS4+ar5nuoBupJd66/txWwN0x zQSjDhBOJt+KdhNr2pGeFHJgumf/jhTRVZX0G9z5GNqdM3pF4INeO9krcHIuoYcP 0E1HDp0X+Emh8vqaYJJIUEI57S/88Gs= -----END CERTIFICATE-----Generated at Tue Sep 22 20:34:56 2026 by rpki-client