$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a83a923-d533-3653-856d-6e2aaeb8887a.roa File: 2a83a923-d533-3653-856d-6e2aaeb8887a.roa (raw, json) Hash identifier: tKslPxf9TOzX09rrFoqB4kbVf5nhv3exO0cFx0NsTH4= Subject key identifier: C6:E1:84:BB:AB:50:3A:8B:72:68:F3:E0:54:E0:31:28:70:88:BC:F4 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584F4973E65FDAAD7CAB6670DF80 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a83a923-d533-3653-856d-6e2aaeb8887a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14593 IP address blocks: 143.131.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e6:5f:da:ad:7c:ab:66:70:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a6af624a-ff9f-4f04-b0c0-cc56a1d72559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:35:f9:57:c7:be:ff:23:28:0f:7c:9b:23:45: 30:27:ec:4b:76:78:e8:ea:48:5e:c7:9e:dd:15:b3: 12:d0:a5:78:b9:5a:d0:66:42:b7:c7:e4:cf:a9:45: b5:a6:da:b8:35:50:6a:ec:15:f1:a0:6a:2b:5e:fa: 8f:3f:76:99:9a:3f:fe:f8:5b:28:f8:0d:6c:80:46: bc:dc:70:17:65:82:c5:42:4b:7c:43:60:95:fb:40: 49:ac:0d:b6:75:9a:77:ce:12:1b:d7:6b:ed:17:7c: 3e:3f:c9:b5:e9:b3:db:c4:c1:8e:e9:7d:53:d3:35: a0:10:47:58:88:1a:5e:d8:cb:e8:16:4d:00:a5:ee: 39:d2:29:56:1f:f0:c8:85:e3:22:f1:21:27:82:9c: 76:d7:1a:39:c9:eb:0b:55:fb:63:64:13:31:71:ef: 00:19:b1:30:82:d6:01:63:fd:cb:38:13:53:be:d2: 75:ef:b2:2b:2b:e6:f5:52:40:d7:41:fe:c5:1b:93: 8d:55:74:58:37:91:e5:6f:fa:0b:48:e0:79:aa:c5: 3b:99:c2:e0:4f:d9:a5:dd:9b:33:03:e3:bc:61:85: 76:b1:c5:3b:91:74:7b:4f:ee:58:d0:55:81:0c:16: 46:df:a6:49:12:f1:78:51:a0:e7:ed:8c:ae:85:71: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E1:84:BB:AB:50:3A:8B:72:68:F3:E0:54:E0:31:28:70:88:BC:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a83a923-d533-3653-856d-6e2aaeb8887a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 143.131.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:6c:7a:4d:f1:cc:55:0c:08:16:6c:7a:bf:b1:7c:4c:c9:90: d6:48:9a:fd:47:95:ae:32:07:26:41:f1:6d:cb:17:85:f9:58: a8:0c:d1:4e:16:2d:02:12:4e:d0:bc:81:30:6e:34:31:7d:b9: ba:1d:62:0e:1d:f5:cd:1b:c1:76:23:23:7c:04:de:3a:c8:37: 8c:2d:b1:70:0c:31:d2:cd:e7:02:0d:e1:ef:a5:6a:a7:e3:ae: 1b:8b:e9:93:98:84:a0:cc:e2:42:d4:1d:eb:28:66:5d:b8:a1: aa:8a:26:d5:fa:c5:b3:97:2b:3b:12:5d:29:67:16:e5:20:80: b8:10:04:00:7a:76:f2:b7:4c:08:eb:f0:2d:68:b9:23:06:2e: 9d:81:ef:48:57:4a:13:d2:41:25:f4:66:03:9a:4e:60:7c:84: ef:f6:e7:e7:5c:56:c2:43:76:ed:df:10:25:ff:d8:db:90:22: 25:90:39:71:70:5e:b0:04:2c:68:d7:06:c9:5f:2b:4e:12:43: 32:be:92:b2:a5:5d:4c:92:be:fb:84:81:8c:28:f9:1a:9c:a0: 8e:6e:d7:b3:b1:ba:e9:c0:c6:7f:85:53:fe:40:09:48:6f:a1: 29:5d:73:37:28:d5:46:e0:65:9f:7b:cb:60:f6:7d:96:b4:87: 23:7a:ef:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+Zf2q18q2Zw34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTZhZjYyNGEtZmY5Zi00ZjA0LWIwYzAtY2M1NmExZDcyNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jX5V8e+/yMoD3ybI0UwJ+xLdnjo6khex57d FbMS0KV4uVrQZkK3x+TPqUW1ptq4NVBq7BXxoGorXvqPP3aZmj/++Fso+A1sgEa8 3HAXZYLFQkt8Q2CV+0BJrA22dZp3zhIb12vtF3w+P8m16bPbxMGO6X1T0zWgEEdY iBpe2MvoFk0Ape450ilWH/DIheMi8SEngpx21xo5yesLVftjZBMxce8AGbEwgtYB Y/3LOBNTvtJ177IrK+b1UkDXQf7FG5ONVXRYN5Hlb/oLSOB5qsU7mcLgT9ml3Zsz A+O8YYV2scU7kXR7T+5Y0FWBDBZG36ZJEvF4UaDn7YyuhXH7vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbhhLurUDqLcmjz4FTgMShwiLz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvMmE4M2E5MjMtZDUzMy0z NjUzLTg1NmQtNmUyYWFlYjg4ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj4MAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpsek3xzFUMCBZser+xfEzJkNZImv1Hla4yByZB8W3LF4X5WKgM0U4W LQISTtC8gTBuNDF9ubodYg4d9c0bwXYjI3wE3jrIN4wtsXAMMdLN5wIN4e+laqfj rhuL6ZOYhKDM4kLUHesoZl24oaqKJtX6xbOXKzsSXSlnFuUggLgQBAB6dvK3TAjr 8C1ouSMGLp2B70hXShPSQSX0ZgOaTmB8hO/25+dcVsJDdu3fECX/2NuQIiWQOXFw XrAELGjXBslfK04SQzK+krKlXUySvvuEgYwo+RqcoI5u17OxuunAxn+FU/5ACUhv oSldczco1UbgZZ97y2D2fZa0hyN67xM= -----END CERTIFICATE-----Generated at Tue Sep 29 11:47:08 2026 by rpki-client