$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/3dd9637d-2212-3e47-9d56-358d29bd5a95.roa File: 3dd9637d-2212-3e47-9d56-358d29bd5a95.roa (raw, json) Hash identifier: M9xtpgYfWKXBDer7dIBw2Rm+rLt6Iz4v6DpzjvEqmFc= Subject key identifier: 27:0A:0F:36:D4:99:5D:2C:80:51:B1:54:E9:C2:B5:46:29:2F:14:E8 Certificate issuer: /CN=99c6479d-ea0e-4777-ae74-d6c93fd3317d Certificate serial: 010D0C9F4328584F497471E3A4838AEF992AA480 Authority key identifier: 14:AA:1B:5A:57:FB:49:05:5E:40:C1:62:EB:D5:15:9F:52:F5:AF:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/3dd9637d-2212-3e47-9d56-358d29bd5a95.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401239 IP address blocks: 143.223.84.0/23 maxlen: 23 143.223.84.0/24 maxlen: 24 143.223.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/99c6479d-ea0e-4777-ae74-d6c93fd3317d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/99c6479d-ea0e-4777-ae74-d6c93fd3317d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:71:e3:a4:83:8a:ef:99:2a:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99c6479d-ea0e-4777-ae74-d6c93fd3317d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8d7fbe6c-9c06-41ed-9c65-9cfd1652c574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:61:9f:48:5a:76:1d:a8:0e:59:89:b8:61: 84:2e:9b:d0:22:4a:d5:38:36:d8:6e:ff:0b:c6:8f: 90:b8:f1:86:d8:91:d4:43:9b:07:9e:69:9e:43:3f: 29:11:97:96:10:6d:f7:65:e0:c9:84:67:a3:59:4f: 82:fa:93:b0:71:ce:06:87:d6:2c:9c:e0:02:90:b5: b4:cf:35:c8:6d:7b:5c:69:ca:09:82:37:89:a9:78: 03:95:78:ad:39:3b:e2:4c:26:20:0c:fc:91:a7:67: 89:57:42:e2:1a:dc:49:19:22:5e:47:d9:83:14:6c: 42:fb:12:d1:49:03:de:55:1d:a3:1e:1d:35:d8:2f: 35:f2:89:e8:96:ae:19:fe:1f:50:d9:c2:7e:9e:a2: 1a:41:08:a3:5c:69:e3:cd:cf:89:a7:d0:92:d2:cd: e1:6c:3d:0f:6a:98:e3:78:ea:6c:c1:61:a2:c8:be: 95:f5:97:68:3d:48:ad:93:57:e7:87:22:06:28:5d: d4:39:05:9f:a9:6a:56:49:75:2d:6c:6d:a5:78:d4: d0:dc:3f:5b:89:01:4e:82:9c:e2:c4:93:45:eb:21: 08:76:1e:bf:da:10:25:74:70:93:df:a2:e9:02:14: e4:0f:77:ae:8a:f6:eb:87:d1:b2:59:69:9c:cf:4f: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:0F:36:D4:99:5D:2C:80:51:B1:54:E9:C2:B5:46:29:2F:14:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/3dd9637d-2212-3e47-9d56-358d29bd5a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d/99c6479d-ea0e-4777-ae74-d6c93fd3317d.crl X509v3 Authority Key Identifier: keyid:14:AA:1B:5A:57:FB:49:05:5E:40:C1:62:EB:D5:15:9F:52:F5:AF:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99c6479d-ea0e-4777-ae74-d6c93fd3317d.cer sbgp-ipAddrBlock: critical IPv4: 143.223.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:0b:a6:9a:05:66:b4:ae:b8:20:71:fd:2a:96:74:57:96:61: 48:c2:32:6d:66:2e:38:3c:df:00:a5:85:9e:27:11:fd:a7:a7: 27:cd:d9:aa:9c:6a:8b:af:ea:ad:85:da:a8:a9:7b:ef:09:b5: 7e:5d:27:8d:e2:ca:57:36:92:e5:ab:ff:e6:2e:e9:0c:1b:c4: 7d:4a:77:92:56:c4:9b:86:b3:11:72:31:f6:be:e5:b9:0d:82: 39:5c:89:0d:a5:44:22:14:fd:ed:7f:5e:7d:ab:bb:2d:bf:83: 66:d3:9c:af:7a:06:94:8f:90:7a:2b:65:a2:f4:ee:23:04:cc: 5d:5a:ef:8d:da:b9:1f:29:05:cf:5a:a2:b2:77:a7:71:07:1e: 8a:d0:49:f0:10:e1:e4:c3:c6:f5:84:49:1a:9b:e1:44:ed:34: 7d:79:14:34:3c:ab:92:22:0f:f8:89:e6:03:5c:df:90:09:93: 1b:23:4e:db:94:b8:b3:66:b6:07:ab:b6:f1:cd:7d:07:47:96: a6:42:a7:c1:8a:cd:ed:8f:5d:7a:d5:5a:a2:00:d0:26:01:da: 22:1e:06:89:d2:c2:46:90:a9:e5:f3:10:db:73:0d:ae:ec:4e: ea:02:33:14:09:ae:5c:b2:75:ba:ee:79:f5:02:49:3b:aa:0e: be:08:de:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHHjpIOK75kqpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljNjQ3OWQtZWEwZS00Nzc3LWFlNzQtZDZjOTNmZDMz MTdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGQ3ZmJlNmMtOWMwNi00MWVkLTljNjUtOWNmZDE2NTJjNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGdhn0hadh2oDlmJuGGELpvQIkrVODbYbv8L xo+QuPGG2JHUQ5sHnmmeQz8pEZeWEG33ZeDJhGejWU+C+pOwcc4Gh9YsnOACkLW0 zzXIbXtcacoJgjeJqXgDlXitOTviTCYgDPyRp2eJV0LiGtxJGSJeR9mDFGxC+xLR SQPeVR2jHh012C818onolq4Z/h9Q2cJ+nqIaQQijXGnjzc+Jp9CS0s3hbD0Papjj eOpswWGiyL6V9ZdoPUitk1fnhyIGKF3UOQWfqWpWSXUtbG2leNTQ3D9biQFOgpzi xJNF6yEIdh6/2hAldHCT36LpAhTkD3euivbrh9GyWWmcz082DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcKDzbUmV0sgFGxVOnCtUYpLxToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OWM2 NDc5ZC1lYTBlLTQ3NzctYWU3NC1kNmM5M2ZkMzMxN2QvM2RkOTYzN2QtMjIxMi0z ZTQ3LTlkNTYtMzU4ZDI5YmQ1YTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTljNjQ3OWQtZWEwZS00Nzc3LWFl NzQtZDZjOTNmZDMzMTdkLzk5YzY0NzlkLWVhMGUtNDc3Ny1hZTc0LWQ2YzkzZmQz MzE3ZC5jcmwwHwYDVR0jBBgwFoAUFKobWlf7SQVeQMFi69UVn1L1r88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OWM2NDc5ZC1lYTBlLTQ3NzctYWU3NC1kNmM5 M2ZkMzMxN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBj99UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsLppoFZrSuuCBx/SqWdFeWYUjCMm1mLjg83wClhZ4nEf2npyfN2aqc aouv6q2F2qipe+8JtX5dJ43iylc2kuWr/+Yu6QwbxH1Kd5JWxJuGsxFyMfa+5bkN gjlciQ2lRCIU/e1/Xn2ruy2/g2bTnK96BpSPkHorZaL07iMEzF1a743auR8pBc9a orJ3p3EHHorQSfAQ4eTDxvWESRqb4UTtNH15FDQ8q5IiD/iJ5gNc35AJkxsjTtuU uLNmtgertvHNfQdHlqZCp8GKze2PXXrVWqIA0CYB2iIeBonSwkaQqeXzENtzDa7s TuoCMxQJrlyydbruefUCSTuqDr4I3nQ= -----END CERTIFICATE-----Generated at Sun Oct 11 21:34:04 2026 by rpki-client