$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa File: ab4c49e6-70a7-364a-859e-9e88bba251d9.roa (raw, json) Hash identifier: O7bqSrs+959pegPjSh+ETd+VdJ6kxA8AH13NP0E+vWM= Subject key identifier: 0F:CB:9A:A5:01:E6:4F:B8:89:7B:CA:59:41:29:B5:23:CA:6E:86:A4 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584F49740FA3C202C7CC8822A100 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54518 IP address blocks: 209.143.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0f:a3:c2:02:c7:cc:88:22:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=90b71d46-5029-4c8b-99ea-233d1f16755f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d6:45:2f:7b:d3:20:95:a5:0c:58:e8:21:2c: be:2b:7e:e6:6e:6e:74:aa:e4:fa:dd:b4:07:f4:81: 2a:95:86:1f:14:3c:d8:5a:9f:d4:cd:1b:9b:be:67: d5:fc:9e:95:59:35:38:b6:26:1e:40:f6:5f:90:40: a3:26:07:35:51:49:c9:2b:78:e7:a4:95:d4:af:38: b2:f9:cd:05:5b:a0:b9:8c:cc:f0:52:95:97:ad:55: 37:e8:fd:5e:83:ed:78:b4:f0:f7:8d:0a:24:64:b4: 15:3a:d9:8d:35:7f:57:83:24:16:61:99:bc:1c:15: 14:30:ef:82:01:d2:db:c6:2a:50:18:8a:21:a7:ab: d2:1a:d9:6d:c7:87:c3:01:b2:f0:bc:81:36:c3:70: b5:e2:fc:e3:3e:32:41:de:ea:10:c5:c3:0c:59:46: 12:0f:b5:cf:e5:b6:13:50:09:15:e6:e5:91:61:c5: fc:fa:88:76:12:9e:26:24:99:05:88:00:2a:c6:bc: c8:7e:06:83:08:b9:44:22:cd:94:8c:b1:f8:cb:f1: 18:0e:26:01:c4:35:8d:15:7b:63:46:ef:21:0e:10: c8:9f:2c:26:6b:f6:20:91:88:50:e6:79:ad:18:a2: f9:12:41:da:74:13:37:b1:7d:db:06:f5:21:4f:b3: b8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CB:9A:A5:01:E6:4F:B8:89:7B:CA:59:41:29:B5:23:CA:6E:86:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:55:3c:ea:16:25:03:dc:b7:4a:76:84:19:96:41:4d:2b:67: 75:1c:fd:cb:70:d7:c0:a6:69:c5:f0:80:80:ae:31:ae:80:21: 5f:07:a9:a8:da:0d:43:a6:74:4e:ce:e8:06:87:75:62:19:6c: 99:c1:43:4c:1b:06:01:46:bf:f8:a7:10:8e:f2:8f:c9:76:39: d8:a4:6d:be:0f:cc:70:37:aa:d0:c3:62:e0:2e:8d:7e:26:24: 4e:61:a3:4e:2d:08:a6:db:a1:bf:be:a4:c8:63:0f:a5:bb:d7: 99:9f:02:f5:12:a4:59:da:87:60:51:0c:08:b2:99:2a:2a:76: 92:0e:25:a8:6b:b2:c0:8d:1e:b8:4b:9a:f2:38:9b:a4:94:5c: 69:6d:ef:b8:5a:40:75:f8:86:c8:57:f0:28:0b:0e:6a:6b:48: 52:f5:7b:b6:40:e9:e2:b5:ee:26:f6:22:62:f0:31:df:1c:e7: 76:56:10:8a:82:ad:64:d5:6a:42:c3:91:56:51:0d:63:2e:c4: 3b:52:21:1f:82:08:07:45:6e:b5:f5:16:b1:7c:da:dc:cb:32: ae:df:7a:32:59:de:f1:31:ea:30:5d:07:1b:c0:1f:d5:3a:85: c0:62:c6:88:26:0d:7a:46:ab:6f:61:14:ad:b6:cb:98:d7:d0: 8c:d3:dc:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdA+jwgLHzIgioQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTBiNzFkNDYtNTAyOS00YzhiLTk5ZWEtMjMzZDFmMTY3NTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NZFL3vTIJWlDFjoISy+K37mbm50quT63bQH 9IEqlYYfFDzYWp/UzRubvmfV/J6VWTU4tiYeQPZfkECjJgc1UUnJK3jnpJXUrziy +c0FW6C5jMzwUpWXrVU36P1eg+14tPD3jQokZLQVOtmNNX9XgyQWYZm8HBUUMO+C AdLbxipQGIohp6vSGtltx4fDAbLwvIE2w3C14vzjPjJB3uoQxcMMWUYSD7XP5bYT UAkV5uWRYcX8+oh2Ep4mJJkFiAAqxrzIfgaDCLlEIs2UjLH4y/EYDiYBxDWNFXtj Ru8hDhDInywma/YgkYhQ5nmtGKL5EkHadBM3sX3bBvUhT7O4TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/LmqUB5k+4iXvKWUEptSPKboakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYWI0YzQ5ZTYtNzBhNy0z NjRhLTg1OWUtOWU4OGJiYTI1MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y9KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxVPOoWJQPct0p2hBmWQU0rZ3Uc/ctw18CmacXwgICuMa6AIV8Hqaja DUOmdE7O6AaHdWIZbJnBQ0wbBgFGv/inEI7yj8l2Odikbb4PzHA3qtDDYuAujX4m JE5ho04tCKbbob++pMhjD6W715mfAvUSpFnah2BRDAiymSoqdpIOJahrssCNHrhL mvI4m6SUXGlt77haQHX4hshX8CgLDmprSFL1e7ZA6eK17ib2ImLwMd8c53ZWEIqC rWTVakLDkVZRDWMuxDtSIR+CCAdFbrX1FrF82tzLMq7fejJZ3vEx6jBdBxvAH9U6 hcBixogmDXpGq29hFK22y5jX0IzT3Bs= -----END CERTIFICATE-----Generated at Mon Sep 28 20:11:15 2026 by rpki-client