$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa File: 1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa (raw, json) Hash identifier: buCp/8vi8zxboc3RYqVgjgbsNyZdLnMWAzYF09o30fg= Subject key identifier: 85:8A:8F:00:45:40:7D:C2:A0:51:89:97:73:73:49:67:8F:9B:64:39 Certificate issuer: /CN=135a25e4-6a94-45c6-b694-2d6e8256166a Certificate serial: 010D0C9F4328584F6292CC55454093CA7B12CE20 Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7448 IP address blocks: 143.192.0.0/18 maxlen: 24 143.192.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:cc:55:45:40:93:ca:7b:12:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=c8a10c74-3854-4cd2-ab4f-d347a7e33177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:41:88:78:3e:95:f1:e6:92:17:ec:d0:00:de: 9d:2f:ec:f0:df:c3:54:66:85:d9:b0:96:97:33:ce: ef:5c:de:46:1e:cb:3b:4f:56:f4:e8:37:c6:98:34: 9a:98:bf:35:f0:5a:9d:2f:9c:1e:78:f5:19:c3:0f: 4b:4e:47:17:c6:9a:4c:ef:6d:f8:37:fb:33:41:5f: 26:5e:2d:3e:7c:7c:99:8a:7e:10:2d:7b:27:f0:01: 06:1a:47:09:63:9f:95:77:cf:3d:89:b4:90:22:8d: 60:c2:79:df:f5:89:34:1b:c5:34:85:b4:e8:57:4b: 09:31:5b:f8:13:07:bb:1b:83:45:60:64:6a:ca:de: 35:ce:ff:7b:c5:15:9d:22:13:9f:22:5f:6f:00:52: 03:c2:ce:a5:c6:a5:bc:f4:96:3e:a9:a0:85:31:27: e5:6b:36:c5:d5:91:78:c0:e4:49:f7:fa:1d:1e:9e: fa:4a:56:b6:91:70:bd:c3:28:ad:04:1d:b9:55:60: 9b:1f:87:ca:6b:fe:4c:6c:04:f0:ae:22:72:19:b5: 55:0d:84:01:1a:0f:ed:6d:4b:82:3d:9d:82:6c:eb: dc:75:62:19:16:a7:cf:ac:73:ea:6f:19:84:2f:3c: 7e:e0:02:cd:cf:ab:88:8a:9a:7d:fd:bb:36:aa:b9: d6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8A:8F:00:45:40:7D:C2:A0:51:89:97:73:73:49:67:8F:9B:64:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl X509v3 Authority Key Identifier: keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer sbgp-ipAddrBlock: critical IPv4: 143.192.0.0-143.192.95.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:81:75:39:97:94:71:f9:60:3b:5e:db:d4:71:40:de:23:6e: 65:b8:3d:08:33:a3:d1:3f:44:8c:0d:47:7c:af:34:d1:c1:30: 9f:6a:83:27:ec:77:23:ba:f0:b5:e5:95:b6:70:5c:11:d1:bb: 77:90:04:98:d5:00:15:7c:1f:c4:a5:cb:fc:0a:98:13:27:ce: a8:ba:78:c8:23:64:69:06:22:b0:5c:76:3a:77:c6:a5:09:26: 29:93:cb:c6:0b:21:d8:f9:58:20:ca:8d:a9:26:98:f7:ec:ed: 12:39:59:5f:a8:08:f0:25:9c:64:2c:77:65:85:35:71:5d:8e: 2d:5b:9e:95:7f:fe:ea:c7:41:fb:88:dd:3a:b6:b5:fe:6e:67: a6:dd:49:59:3e:af:c1:8c:eb:6c:d1:ff:ec:bb:23:69:48:4e: 65:b1:4f:90:e1:e1:5d:cb:3a:65:cd:44:06:25:73:dd:8b:ae: 4e:8c:db:13:bc:82:22:8a:9e:73:29:28:9f:a8:af:d0:5b:81: c8:5a:f6:dc:c2:f8:92:a2:34:e3:b9:6a:78:75:26:73:f0:0b: 45:7a:ed:e3:40:82:60:e1:dc:d4:4d:3c:3f:65:ea:48:82:4b: 58:a3:57:f3:1a:f3:9a:aa:40:b2:a2:aa:09:a7:1e:3c:7c:10: 00:3a:45:2f -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE9iksxVRUCTynsSziAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM1YTI1ZTQtNmE5NC00NWM2LWI2OTQtMmQ2ZTgyNTYx NjZhMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YzhhMTBjNzQtMzg1NC00Y2QyLWFiNGYtZDM0N2E3ZTMzMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUGIeD6V8eaSF+zQAN6dL+zw38NUZoXZsJaX M87vXN5GHss7T1b06DfGmDSamL818FqdL5weePUZww9LTkcXxppM7234N/szQV8m Xi0+fHyZin4QLXsn8AEGGkcJY5+Vd889ibSQIo1gwnnf9Yk0G8U0hbToV0sJMVv4 Ewe7G4NFYGRqyt41zv97xRWdIhOfIl9vAFIDws6lxqW89JY+qaCFMSflazbF1ZF4 wORJ9/odHp76Sla2kXC9wyitBB25VWCbH4fKa/5MbATwriJyGbVVDYQBGg/tbUuC PZ2CbOvcdWIZFqfPrHPqbxmELzx+4ALNz6uIipp9/bs2qrnW4wIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFIWKjwBFQH3CoFGJl3NzSWePm2Q5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMzVh MjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZlODI1NjE2NmEvMWFhM2YxYWItY2M3OC0z NmI0LWI4OTAtNTUyZWMyZDRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTM1YTI1ZTQtNmE5NC00NWM2LWI2 OTQtMmQ2ZTgyNTYxNjZhLzEzNWEyNWU0LTZhOTQtNDVjNi1iNjk0LTJkNmU4MjU2 MTY2YS5jcmwwHwYDVR0jBBgwFoAU3z6ArD0AzzQWeNXZQvPiHb3A8b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMzVhMjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZl ODI1NjE2NmEuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwaPwAME BY/AQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAMgXU5l5Rx+WA7XtvUcUDeI25luD0IM6PRP0SMDUd8rzTR wTCfaoMn7HcjuvC15ZW2cFwR0bt3kASY1QAVfB/Epcv8CpgTJ86ounjII2RpBiKw XHY6d8alCSYpk8vGCyHY+Vggyo2pJpj37O0SOVlfqAjwJZxkLHdlhTVxXY4tW56V f/7qx0H7iN06trX+bmem3UlZPq/BjOts0f/suyNpSE5lsU+Q4eFdyzplzUQGJXPd i65OjNsTvIIiip5zKSifqK/QW4HIWvbcwviSojTjuWp4dSZz8AtFeu3jQIJg4dzU TTw/ZepIgktYo1fzGvOaqkCyoqoJpx48fBAAOkUv -----END CERTIFICATE-----Generated at Sun Oct 4 07:28:13 2026 by rpki-client