$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa File: b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa (raw, json) Hash identifier: wsq8yI8KShRO57+TU7O/wx6SryKkTrqoLMGl3IKpkkE= Subject key identifier: 50:76:98:65:37:10:0F:15:1D:1C:B5:7B:47:0F:32:B5:A4:EA:7A:67 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584F49740FAE93C08A79634C7440 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397090 IP address blocks: 209.143.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0f:ae:93:c0:8a:79:63:4c:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0123e5be-7e69-4374-a21b-48730ca5df35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:61:19:23:87:ab:fd:1c:a9:60:cb:2b:ab: 75:1b:9a:74:67:aa:bb:b0:c8:ba:8c:c3:4f:e9:72: fa:d7:4a:f6:47:85:06:fa:aa:be:ce:8b:fc:39:28: bc:41:59:5f:fe:96:76:36:e2:23:c1:2e:02:68:c6: f3:c5:2b:23:02:44:c4:fb:54:b9:80:ce:07:4b:d8: 95:51:84:fe:15:95:8c:25:23:b8:48:dc:06:3a:a1: 81:72:8c:af:22:50:67:23:d9:79:e4:26:f5:38:7d: 39:8f:ae:e6:b7:9b:db:d9:7e:9c:ab:01:c8:cc:e2: a2:23:4c:be:2e:11:de:09:81:b5:7d:ba:b7:99:96: 79:d3:7b:60:a7:9a:c7:f2:2c:be:d3:10:4c:5d:68: 77:fb:2d:ac:1b:b2:22:0d:b5:d7:2d:fd:f9:bd:6f: ae:8e:60:29:1c:c9:51:05:3f:09:f5:fd:b5:ab:b9: 72:72:e6:e8:23:0b:0e:ed:e8:d3:ec:95:83:a5:e3: 57:f5:72:de:f6:63:31:5d:9d:f2:a8:70:bd:a8:94: 72:63:11:21:2b:2e:9d:56:82:93:a8:96:46:3c:61: b9:f5:31:d7:f1:4c:23:30:91:25:39:c8:5f:c5:6f: d9:31:5d:2a:c2:be:36:9a:92:5e:2b:3f:cf:c3:7a: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:76:98:65:37:10:0F:15:1D:1C:B5:7B:47:0F:32:B5:A4:EA:7A:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:cc:2e:18:b5:a3:a1:7d:a1:3c:88:29:0b:71:32:0d:bb:4f: 93:e5:c6:ab:cd:0b:d4:e5:eb:24:01:85:08:20:8d:e6:bf:8b: 27:81:1c:66:92:73:c5:08:8f:8f:7b:3c:50:3c:6d:6c:6f:e5: 09:4d:89:b9:3f:e3:85:7d:18:41:a0:b0:68:36:d5:b9:6a:f5: 6c:4f:b6:01:83:fe:43:5a:b7:9c:d7:02:39:83:4c:f4:e3:38: 70:52:fe:8b:3f:1e:10:4c:c8:3c:a0:a6:44:96:53:e1:6f:b6: e4:53:1e:e3:3b:f1:07:f9:a9:07:f7:78:52:a0:d6:22:c5:cc: 1b:61:40:26:04:83:b4:e8:29:af:a3:92:76:73:e6:03:51:85: 91:d3:04:5a:4a:cf:a7:5f:7b:0d:40:ef:ad:c1:08:eb:da:c3: 27:df:c0:9c:6b:4f:fd:91:ca:45:66:8c:a6:86:58:38:9b:e1: 35:fb:07:ec:23:cc:cc:bb:35:ac:05:b0:fb:83:a7:74:36:96: 51:c4:42:be:7b:f1:97:cc:e8:1f:be:a9:30:5b:02:c9:01:d7: 59:90:f0:ef:e5:a7:25:6e:6a:3e:6b:14:87:da:da:c2:18:d4: 7f:0f:fd:9d:cf:37:7d:06:b7:e1:50:30:e6:76:b3:44:82:ae: 41:44:76:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdA+uk8CKeWNMdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDEyM2U1YmUtN2U2OS00Mzc0LWEyMWItNDg3MzBjYTVkZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnophGSOHq/0cqWDLK6t1G5p0Z6q7sMi6jMNP 6XL610r2R4UG+qq+zov8OSi8QVlf/pZ2NuIjwS4CaMbzxSsjAkTE+1S5gM4HS9iV UYT+FZWMJSO4SNwGOqGBcoyvIlBnI9l55Cb1OH05j67mt5vb2X6cqwHIzOKiI0y+ LhHeCYG1fbq3mZZ503tgp5rH8iy+0xBMXWh3+y2sG7IiDbXXLf35vW+ujmApHMlR BT8J9f21q7lycuboIwsO7ejT7JWDpeNX9XLe9mMxXZ3yqHC9qJRyYxEhKy6dVoKT qJZGPGG59THX8UwjMJElOchfxW/ZMV0qwr42mpJeKz/Pw3oP1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB2mGU3EA8VHRy1e0cPMrWk6npnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYjViMmQxMDItZDIzMS0z M2NmLWIyOGItMWJlZGMxY2Q2NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y9OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbMLhi1o6F9oTyIKQtxMg27T5PlxqvNC9Tl6yQBhQggjea/iyeBHGaS c8UIj497PFA8bWxv5QlNibk/44V9GEGgsGg21blq9WxPtgGD/kNat5zXAjmDTPTj OHBS/os/HhBMyDygpkSWU+FvtuRTHuM78Qf5qQf3eFKg1iLFzBthQCYEg7ToKa+j knZz5gNRhZHTBFpKz6dfew1A763BCOvawyffwJxrT/2RykVmjKaGWDib4TX7B+wj zMy7NawFsPuDp3Q2llHEQr578ZfM6B++qTBbAskB11mQ8O/lpyVuaj5rFIfa2sIY 1H8P/Z3PN30Gt+FQMOZ2s0SCrkFEdsM= -----END CERTIFICATE-----Generated at Wed Sep 30 22:48:21 2026 by rpki-client