$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/3cfa82ad-c52e-3002-9a3f-71d4bdf1680c.roa File: 3cfa82ad-c52e-3002-9a3f-71d4bdf1680c.roa (raw, json) Hash identifier: Q/AO+NiHv66qdRky7Rg/iTW4lYBk3ep03jIdw8sV5x8= Subject key identifier: E0:6D:67:E3:F5:DD:A9:A1:46:BF:9D:77:71:11:0A:6E:AF:AF:57:00 Certificate issuer: /CN=9e02d737-f857-4f86-b0cd-a7966c6e2ac3 Certificate serial: 010D0C9F4328584F61F876801455BBEFD0A26910 Authority key identifier: B9:A9:98:4A:99:17:91:42:EC:68:51:3E:B2:F4:35:AD:E3:C1:40:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/3cfa82ad-c52e-3002-9a3f-71d4bdf1680c.roa Signing time: Sat 03 Oct 2026 19:49:29 +0000 ROA not before: Sat 03 Oct 2026 19:49:29 +0000 ROA not after: Fri 01 Jan 2027 20:49:29 +0000 asID: 402212 IP address blocks: 143.203.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:f8:76:80:14:55:bb:ef:d0:a2:69:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e02d737-f857-4f86-b0cd-a7966c6e2ac3 Validity Not Before: Oct 3 19:49:29 2026 GMT Not After : Jan 1 20:49:29 2027 GMT Subject: CN=b2fdfbac-4b5a-45aa-89e4-16c2ed147bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:88:50:6d:83:fb:3f:2f:90:87:03:df:2f: 7c:45:21:15:43:4f:77:4e:25:1f:6d:56:9f:bd:8a: 30:10:6e:c3:75:01:93:04:ed:52:58:98:e1:55:96: ae:90:83:9b:88:47:29:60:36:c5:b8:7c:82:de:b3: 72:f8:be:43:96:76:69:d7:5f:73:77:f0:5c:1c:7c: fb:74:6a:df:ef:50:64:9c:13:57:34:7a:62:19:10: df:d7:b7:74:ad:06:e2:59:76:e4:13:ac:73:e3:14: eb:e0:f8:c1:79:b0:03:ca:f5:19:bc:84:d0:66:93: 8d:3c:d2:6d:8c:53:27:6f:2d:ff:f3:7e:4c:dc:32: a7:09:70:1c:cb:ca:b7:23:de:0e:05:09:b7:02:b9: f5:11:2d:82:32:54:ef:bc:34:d3:88:00:33:45:c4: 59:55:b2:f7:6b:48:18:54:a6:fa:27:a9:4f:d5:f4: 92:c8:9e:6e:bb:4b:86:7d:10:43:62:ab:2a:22:07: ee:31:a3:1b:75:ea:9e:17:c4:26:cf:25:48:36:4b: ba:a1:23:fa:43:91:66:dc:60:c0:a1:d8:23:50:c2: 65:9a:48:7a:9e:49:ed:1b:62:39:fa:28:40:c7:05: 9a:5d:3e:03:38:60:84:d2:fa:7d:11:df:b6:3b:46: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6D:67:E3:F5:DD:A9:A1:46:BF:9D:77:71:11:0A:6E:AF:AF:57:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/3cfa82ad-c52e-3002-9a3f-71d4bdf1680c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.crl X509v3 Authority Key Identifier: keyid:B9:A9:98:4A:99:17:91:42:EC:68:51:3E:B2:F4:35:AD:E3:C1:40:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer sbgp-ipAddrBlock: critical IPv4: 143.203.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:44:6c:ca:da:ac:91:89:d1:48:e9:18:31:a4:dc:d2:0c:6a: 89:5a:b6:06:88:dd:5c:e0:fb:11:50:1b:41:e3:0a:6c:0f:ee: fc:06:a7:07:12:71:8e:9b:90:b5:5e:ff:e6:39:fe:3c:81:1c: a5:40:4e:60:2a:c4:10:38:d0:06:f6:06:89:ed:1a:71:86:aa: 61:f1:ce:aa:61:0c:8c:88:bb:22:75:d3:94:63:f9:87:81:10: 4d:89:9f:57:1e:df:b4:a9:e8:9f:88:a7:03:d0:a6:b3:a0:43: 0b:36:24:58:98:ab:c9:de:8f:b8:71:e0:3e:12:7c:9e:b0:fa: 29:ae:69:5e:3e:a0:60:19:19:3b:01:e9:3f:8f:8e:06:23:3b: 9f:f6:d5:b3:cb:41:6a:bf:d2:f7:34:91:20:e3:40:46:7c:56: d2:18:c6:65:ed:e3:f2:1c:7c:55:79:54:f9:ac:22:b5:65:25: 03:f3:ee:57:49:33:7c:78:c8:15:e8:2d:95:47:39:42:2e:c3: 10:73:20:e9:c4:60:fd:7b:2f:0f:45:fb:b4:c3:c0:05:61:16: d9:83:6a:41:75:11:db:bc:c5:86:66:ba:7f:8b:a9:d4:d2:7e: 85:cc:b9:04:e5:a7:74:27:ee:f9:5d:61:cf:49:81:8c:bd:34: 6b:3e:1b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9h+HaAFFW779CiaRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUwMmQ3MzctZjg1Ny00Zjg2LWIwY2QtYTc5NjZjNmUy YWMzMB4XDTI2MTAwMzE5NDkyOVoXDTI3MDEwMTIwNDkyOVowLzEtMCsGA1UEAxMk YjJmZGZiYWMtNGI1YS00NWFhLTg5ZTQtMTZjMmVkMTQ3YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg+IUG2D+z8vkIcD3y98RSEVQ093TiUfbVaf vYowEG7DdQGTBO1SWJjhVZaukIObiEcpYDbFuHyC3rNy+L5DlnZp119zd/BcHHz7 dGrf71BknBNXNHpiGRDf17d0rQbiWXbkE6xz4xTr4PjBebADyvUZvITQZpONPNJt jFMnby3/835M3DKnCXAcy8q3I94OBQm3Arn1ES2CMlTvvDTTiAAzRcRZVbL3a0gY VKb6J6lP1fSSyJ5uu0uGfRBDYqsqIgfuMaMbdeqeF8QmzyVINku6oSP6Q5Fm3GDA odgjUMJlmkh6nkntG2I5+ihAxwWaXT4DOGCE0vp9Ed+2O0ax4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBtZ+P13amhRr+dd3ERCm6vr1cAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85ZTAy ZDczNy1mODU3LTRmODYtYjBjZC1hNzk2NmM2ZTJhYzMvM2NmYTgyYWQtYzUyZS0z MDAyLTlhM2YtNzFkNGJkZjE2ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOWUwMmQ3MzctZjg1Ny00Zjg2LWIw Y2QtYTc5NjZjNmUyYWMzLzllMDJkNzM3LWY4NTctNGY4Ni1iMGNkLWE3OTY2YzZl MmFjMy5jcmwwHwYDVR0jBBgwFoAUuamYSpkXkULsaFE+svQ1rePBQNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS85ZTAyZDczNy1mODU3LTRmODYtYjBjZC1hNzk2 NmM2ZTJhYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj8uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxEbMrarJGJ0UjpGDGk3NIMaolatgaI3Vzg+xFQG0HjCmwP7vwGpwcS cY6bkLVe/+Y5/jyBHKVATmAqxBA40Ab2BontGnGGqmHxzqphDIyIuyJ105Rj+YeB EE2Jn1ce37Sp6J+IpwPQprOgQws2JFiYq8nej7hx4D4SfJ6w+imuaV4+oGAZGTsB 6T+PjgYjO5/21bPLQWq/0vc0kSDjQEZ8VtIYxmXt4/IcfFV5VPmsIrVlJQPz7ldJ M3x4yBXoLZVHOUIuwxBzIOnEYP17Lw9F+7TDwAVhFtmDakF1Edu8xYZmun+LqdTS foXMuQTlp3Qn7vldYc9JgYy9NGs+GzQ= -----END CERTIFICATE-----Generated at Sun Oct 11 06:19:46 2026 by rpki-client