$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/b9fac21c-c9f5-354e-9342-6157428e0fed.roa File: b9fac21c-c9f5-354e-9342-6157428e0fed.roa (raw, json) Hash identifier: 3xNAdjvCuLUR+kLqnkzMpCmZX6t3WS7Qmw6XoxsGZA4= Subject key identifier: 3E:08:9A:3F:2F:75:89:CC:4E:99:8E:23:BF:1B:2F:62:9A:D0:21:AB Certificate issuer: /CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d Certificate serial: 010D0C9F4328584F391FA3E1A4635FFF2C4DA680 Authority key identifier: 91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/b9fac21c-c9f5-354e-9342-6157428e0fed.roa Signing time: Sat 19 Sep 2026 04:40:17 +0000 ROA not before: Sat 19 Sep 2026 04:40:17 +0000 ROA not after: Fri 18 Dec 2026 05:40:17 +0000 asID: 19977 IP address blocks: 143.58.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:39:1f:a3:e1:a4:63:5f:ff:2c:4d:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d Validity Not Before: Sep 19 04:40:17 2026 GMT Not After : Dec 18 05:40:17 2026 GMT Subject: CN=aa1287f9-0be9-4bc5-a2cc-c52e7afdd0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:ad:d7:e8:8e:be:9a:93:37:15:3c:ca:45: 96:4e:4b:93:9d:2a:9e:fb:6d:fd:dc:ed:f8:16:0a: f7:43:82:f9:3f:92:22:d1:a6:c2:17:40:0d:28:67: 63:b6:71:8c:37:d6:68:8c:3f:00:1b:7c:fb:c3:da: cc:9d:d0:20:e6:da:65:93:91:31:22:a1:ac:70:f3: 95:e6:0d:d6:43:be:03:99:ff:38:cf:94:07:a0:4d: d1:f6:9c:b8:de:67:76:6a:34:c8:34:b4:8a:e4:62: 7e:e5:79:6f:8d:8c:d6:0e:a0:d7:a9:52:88:32:c4: 41:42:00:b7:5e:57:71:5f:77:11:08:1e:45:8b:52: fe:af:d9:32:28:a2:5b:e9:23:3c:f6:e3:19:fc:20: 67:10:76:dd:9a:73:cb:ad:5f:60:d7:f2:41:4a:75: d1:ee:eb:f1:da:da:d6:09:23:d5:b1:52:7d:f8:bd: 75:2e:0a:2b:67:09:56:0f:fd:da:10:76:16:18:49: 41:1c:fd:5e:22:32:52:62:0b:7b:21:08:c4:5b:3e: 34:1b:4e:6f:35:82:ca:56:d8:6d:4c:cf:ef:95:76: 93:94:07:61:83:e5:fe:ec:f1:b8:e8:6b:70:ee:f4: 72:e4:0b:43:0b:fe:da:fd:8d:61:53:b4:56:d3:78: 0d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:08:9A:3F:2F:75:89:CC:4E:99:8E:23:BF:1B:2F:62:9A:D0:21:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/b9fac21c-c9f5-354e-9342-6157428e0fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl X509v3 Authority Key Identifier: keyid:91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer sbgp-ipAddrBlock: critical IPv4: 143.58.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:dc:6f:70:59:74:c9:c0:5e:a8:92:5f:3c:84:4d:b7:b1:8a: 55:8e:88:6c:3e:af:34:2e:13:e8:0f:a7:03:18:47:0b:0c:c0: f6:78:21:d5:64:ad:81:55:e3:ef:83:9b:09:79:10:23:b7:08: 31:ff:5d:c7:21:82:dd:40:fa:10:d2:ad:20:10:f7:b2:55:75: 44:ef:41:d7:16:c1:48:bb:31:cf:87:32:99:19:e1:a2:8e:d0: 04:cc:1c:a8:9a:a7:c7:5b:35:c0:58:bc:aa:4c:d2:8e:3f:af: a9:51:86:54:70:3e:97:fe:d3:7b:3f:7e:67:6b:ae:7a:93:34: 53:70:61:9b:2d:9e:69:57:8d:7d:3d:09:b2:c3:12:d2:09:70: 08:7b:62:62:e1:85:e2:07:f5:fc:52:53:4c:3e:9f:b3:1d:96: ec:53:2d:1e:92:56:c1:2e:12:1d:29:10:c0:64:23:7d:47:48: 99:43:cc:ff:d7:79:8a:87:7a:5a:26:ea:b2:fc:a3:ff:9e:dd: 51:46:34:04:59:80:4f:e7:3c:bd:48:3f:5c:41:9f:eb:17:d8: 8d:ba:b5:08:02:be:c9:85:3b:0d:14:3b:53:1d:96:ff:f3:3e: 82:4f:fa:45:59:2e:ee:a9:8b:3a:91:c7:48:98:fd:5d:18:33: b2:10:8a:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE85H6PhpGNf/yxNpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2NjE3Y2EtNGY1Mi00NzRjLTk4YzktZDJmMmFiZTdi ZjhkMB4XDTI2MDkxOTA0NDAxN1oXDTI2MTIxODA1NDAxN1owLzEtMCsGA1UEAxMk YWExMjg3ZjktMGJlOS00YmM1LWEyY2MtYzUyZTdhZmRkMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDSt1+iOvpqTNxU8ykWWTkuTnSqe+2393O34 Fgr3Q4L5P5Ii0abCF0ANKGdjtnGMN9ZojD8AG3z7w9rMndAg5tplk5ExIqGscPOV 5g3WQ74Dmf84z5QHoE3R9py43md2ajTINLSK5GJ+5XlvjYzWDqDXqVKIMsRBQgC3 XldxX3cRCB5Fi1L+r9kyKKJb6SM89uMZ/CBnEHbdmnPLrV9g1/JBSnXR7uvx2trW CSPVsVJ9+L11LgorZwlWD/3aEHYWGElBHP1eIjJSYgt7IQjEWz40G05vNYLKVtht TM/vlXaTlAdhg+X+7PG46Gtw7vRy5AtDC/7a/Y1hU7RW03gNbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4Imj8vdYnMTpmOI78bL2Ka0CGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNDY2 MTdjYS00ZjUyLTQ3NGMtOThjOS1kMmYyYWJlN2JmOGQvYjlmYWMyMWMtYzlmNS0z NTRlLTkzNDItNjE1NzQyOGUwZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzQ2NjE3Y2EtNGY1Mi00NzRjLTk4 YzktZDJmMmFiZTdiZjhkLzM0NjYxN2NhLTRmNTItNDc0Yy05OGM5LWQyZjJhYmU3 YmY4ZC5jcmwwHwYDVR0jBBgwFoAUkX3e8iP+pIZgJ1vZEQ9uJvUuockwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNDY2MTdjYS00ZjUyLTQ3NGMtOThjOS1kMmYy YWJlN2JmOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjzoBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvcb3BZdMnAXqiSXzyETbexilWOiGw+rzQuE+gPpwMYRwsMwPZ4IdVk rYFV4++Dmwl5ECO3CDH/Xcchgt1A+hDSrSAQ97JVdUTvQdcWwUi7Mc+HMpkZ4aKO 0ATMHKiap8dbNcBYvKpM0o4/r6lRhlRwPpf+03s/fmdrrnqTNFNwYZstnmlXjX09 CbLDEtIJcAh7YmLhheIH9fxSU0w+n7MdluxTLR6SVsEuEh0pEMBkI31HSJlDzP/X eYqHelom6rL8o/+e3VFGNARZgE/nPL1IP1xBn+sX2I26tQgCvsmFOw0UO1Mdlv/z PoJP+kVZLu6pizqRx0iY/V0YM7IQimg= -----END CERTIFICATE-----Generated at Fri Sep 25 18:02:46 2026 by rpki-client