$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa File: 8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa (raw, json) Hash identifier: 67BCzLGmNhLnxqsYzqE7F98OlYkzvpYRKDZxhbu/+LA= Subject key identifier: 2D:46:83:3F:9D:4B:71:FF:69:D3:1F:F7:4B:99:06:B7:90:2B:23:A0 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584F49740FBA8A0A1AF9439CFA80 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400209 IP address blocks: 209.143.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0f:ba:8a:0a:1a:f9:43:9c:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=499c0f7b-28bc-4988-a130-1545855da544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:69:1d:e2:99:5b:76:9e:0c:41:6f:4b:13: e7:2c:00:b6:29:8d:f2:0e:e2:e1:c7:ae:02:c7:d7: 16:03:7d:3d:d2:10:62:0d:97:77:c3:39:e8:9a:cb: 9e:8a:9a:7b:6d:fe:c8:67:74:6d:bf:63:06:58:26: ae:d2:63:5d:86:69:92:44:c2:d1:2a:34:0e:01:2e: 37:1a:ca:85:2d:a0:21:64:20:f1:21:02:48:f8:b3: e0:31:f1:ac:d2:8d:e1:10:fd:db:70:4c:ef:7b:4d: 57:6c:61:a0:ae:2b:79:af:eb:dd:70:9c:b0:29:c6: 1d:60:5d:03:c4:dc:da:96:f3:d1:3b:7d:e4:82:b8: 78:48:cb:3d:a4:8a:74:aa:6b:69:bb:0a:43:61:e2: 62:29:c7:ef:c0:ae:f8:3c:af:9c:f9:d8:75:97:21: d7:8c:33:8e:a2:97:bf:1a:64:a0:01:de:70:66:5c: 4f:7e:5f:1e:c3:b7:a0:40:59:39:a2:ec:a9:79:75: 0d:38:89:ac:98:d1:da:38:e1:a3:99:0e:f4:3e:6f: c8:dc:7e:37:e7:2b:2d:25:42:e8:d4:6c:58:e1:a8: 9e:ab:b3:5a:81:2f:99:70:82:26:5a:45:11:65:6f: fe:79:c6:8e:c8:2e:d2:d1:14:27:fd:8d:cd:ce:e3: fb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:46:83:3F:9D:4B:71:FF:69:D3:1F:F7:4B:99:06:B7:90:2B:23:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e2:b2:e3:d6:7e:b5:de:a6:75:04:93:65:12:f6:a7:9f:7c: 43:a0:60:4c:26:74:87:6e:c0:98:92:f7:8d:5e:19:99:19:c4: 50:5b:31:fb:1c:42:19:88:24:5b:ff:22:a2:e1:df:a2:ee:87: ac:35:04:d0:32:28:d7:e4:dd:3e:0c:f6:e5:cd:19:93:f1:bc: e4:13:48:1c:19:11:5e:ae:3d:01:da:ae:a7:d4:b9:23:62:37: 10:eb:e9:de:b8:b3:b9:84:5f:95:79:d3:b0:cb:30:11:b4:12: da:26:b5:60:14:b3:87:fe:f8:64:8a:cc:66:de:b0:69:03:75: 34:9a:4a:22:be:66:fb:cb:42:8a:4a:0c:50:88:4e:75:52:48: 10:00:89:62:41:36:bf:a9:1c:aa:33:8e:e3:4b:ca:59:9b:38: 21:dc:c8:ab:f8:1e:09:b6:95:91:4e:ee:7a:8d:d2:68:10:1d: 18:d4:bf:c6:34:21:bc:d4:df:96:f5:1e:9b:dd:08:32:d3:49: 6e:99:78:a5:51:08:9b:02:af:25:d5:ad:bd:65:49:8c:30:d5: 66:11:08:3a:2a:35:fc:01:3e:90:fe:ed:0d:d2:63:43:6d:63: be:56:da:2d:08:49:88:8f:e5:62:d5:c2:2e:bd:88:70:b2:68: b4:24:d6:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdA+6igoa+UOc+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDk5YzBmN2ItMjhiYy00OTg4LWExMzAtMTU0NTg1NWRhNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGBpHeKZW3aeDEFvSxPnLAC2KY3yDuLhx64C x9cWA3090hBiDZd3wznomsueipp7bf7IZ3Rtv2MGWCau0mNdhmmSRMLRKjQOAS43 GsqFLaAhZCDxIQJI+LPgMfGs0o3hEP3bcEzve01XbGGgrit5r+vdcJywKcYdYF0D xNzalvPRO33kgrh4SMs9pIp0qmtpuwpDYeJiKcfvwK74PK+c+dh1lyHXjDOOope/ GmSgAd5wZlxPfl8ew7egQFk5ouypeXUNOImsmNHaOOGjmQ70Pm/I3H435ystJULo 1GxY4aieq7NagS+ZcIImWkURZW/+ecaOyC7S0RQn/Y3NzuP73wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1Ggz+dS3H/adMf90uZBreQKyOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvOGEyMzQ0M2QtMWVkOC0z ZDgwLWFjMDItYmQzZGYzZDhmMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Y9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/isuPWfrXepnUEk2US9qeffEOgYEwmdIduwJiS941eGZkZxFBbMfsc QhmIJFv/IqLh36Luh6w1BNAyKNfk3T4M9uXNGZPxvOQTSBwZEV6uPQHarqfUuSNi NxDr6d64s7mEX5V507DLMBG0EtomtWAUs4f++GSKzGbesGkDdTSaSiK+ZvvLQopK DFCITnVSSBAAiWJBNr+pHKozjuNLylmbOCHcyKv4Hgm2lZFO7nqN0mgQHRjUv8Y0 IbzU35b1HpvdCDLTSW6ZeKVRCJsCryXVrb1lSYww1WYRCDoqNfwBPpD+7Q3SY0Nt Y75W2i0ISYiP5WLVwi69iHCyaLQk1o8= -----END CERTIFICATE-----Generated at Tue Sep 29 17:54:42 2026 by rpki-client