$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa File: 41d5735c-bf44-3d40-b55c-71b48a44901f.roa (raw, json) Hash identifier: gAclGLPH1wEiM9WmPG/PHTWR8+F+f4Cw0TTX68L0y3A= Subject key identifier: 21:0C:DC:9E:4F:1E:8E:E8:F0:02:4A:CB:7B:6C:B4:D6:75:99:CA:83 Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Certificate serial: 010D0C9F4328584F23C25CA53289EF1B3207F500 Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 40230 IP address blocks: 104.143.48.0/20 maxlen: 24 199.247.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5c:a5:32:89:ef:1b:32:07:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=abac6b39-9466-4fb8-8aa6-7bd44ba928fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:4e:64:5e:b8:50:0e:a7:4b:e1:0c:dc:f3: f2:81:47:88:79:99:67:cb:07:27:3a:51:72:f6:a3: 22:40:bd:aa:db:bf:b9:fb:2c:e5:c9:b5:a7:45:36: e9:63:65:83:1c:db:ab:f8:8a:d6:72:d5:59:b2:cc: 17:51:0c:ef:da:1c:ea:6f:4f:77:95:e2:91:b1:d1: ff:e6:11:8b:d7:4f:67:d4:12:a3:60:9d:00:b1:37: 2a:92:bb:da:00:f6:a4:28:b2:88:3e:b9:fc:61:88: 1b:37:20:d8:b8:f0:97:eb:a4:5d:4e:cc:0d:a1:3e: f7:8a:c1:85:a1:61:ef:a4:a6:95:ac:e8:30:21:2d: 39:d9:b2:4c:0d:3a:1d:08:7f:09:e1:87:23:60:d7: 0d:11:f6:83:40:a4:8d:30:e7:8b:90:04:ca:19:42: 52:1a:76:b0:e5:19:c6:4d:76:27:c7:bb:33:7b:d7: ec:b6:a0:9c:d4:e7:22:92:a0:98:c0:4a:5e:1c:6c: 0e:df:e3:89:29:bd:de:0f:fc:82:9a:44:2d:a1:e8: 44:82:27:b4:e8:4b:ea:aa:b2:6e:f4:ee:a3:db:3b: d4:06:8b:e0:7e:81:5b:66:06:3a:a3:8e:9f:14:88: 9e:af:27:67:06:37:9b:a8:4e:b3:d3:47:8c:79:b4: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0C:DC:9E:4F:1E:8E:E8:F0:02:4A:CB:7B:6C:B4:D6:75:99:CA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl X509v3 Authority Key Identifier: keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer sbgp-ipAddrBlock: critical IPv4: 104.143.48.0/20 199.247.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c3:80:09:16:39:9d:13:ec:18:02:26:ec:ef:05:7d:b7:bb: 37:28:da:07:6d:d9:82:80:66:63:e7:b7:12:a5:d4:75:47:1f: 43:c0:c4:83:da:65:6e:3a:94:da:8c:61:cd:a2:0d:14:69:21: 3b:ce:e5:4d:8b:b4:d8:0a:48:d7:04:2e:eb:4d:9e:dd:65:0e: ff:2b:20:12:ae:97:d2:6f:c3:18:0d:ae:f3:a6:4c:04:6e:0d: 1d:23:11:ae:57:37:b1:6c:4c:a4:af:ce:11:2d:20:00:18:3a: 7a:e6:cb:e5:cc:75:73:e1:17:60:35:02:ab:c2:05:ac:e6:d8: d7:f8:26:fd:c4:86:bb:85:d1:38:0d:dd:d3:3c:80:4e:41:69: b1:29:e6:d2:f6:7f:3f:61:06:e2:bd:a1:f5:43:2b:1a:f7:c6: 01:dd:a5:ed:85:d1:b1:b5:77:a6:63:90:f6:b2:26:a6:39:b4: 09:55:ac:90:86:0a:b6:50:13:55:2e:1e:21:c0:c2:8e:49:9b: ec:90:f9:e0:e0:67:51:4d:19:99:51:9a:06:44:75:d4:14:b1: 7f:5a:44:a4:c2:af:cb:ab:04:b6:b8:ed:75:de:5c:07:67:56: 55:2a:e5:98:df:cd:3b:2b:8f:49:d1:8f:26:b5:4a:b5:c4:d4: bf:03:5f:4d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8jwlylMonvGzIH9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy YWYwMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk YWJhYzZiMzktOTQ2Ni00ZmI4LThhYTYtN2JkNDRiYTkyOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4BOZF64UA6nS+EM3PPygUeIeZlnywcnOlFy 9qMiQL2q27+5+yzlybWnRTbpY2WDHNur+IrWctVZsswXUQzv2hzqb093leKRsdH/ 5hGL109n1BKjYJ0AsTcqkrvaAPakKLKIPrn8YYgbNyDYuPCX66RdTswNoT73isGF oWHvpKaVrOgwIS052bJMDTodCH8J4YcjYNcNEfaDQKSNMOeLkATKGUJSGnaw5RnG TXYnx7sze9fstqCc1OcikqCYwEpeHGwO3+OJKb3eD/yCmkQtoehEgie06EvqqrJu 9O6j2zvUBovgfoFbZgY6o46fFIierydnBjebqE6z00eMebQ5NwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCEM3J5PHo7o8AJKy3tstNZ1mcqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvNDFkNTczNWMtYmY0NC0z ZDQwLWI1NWMtNzFiNDhhNDQ5MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1 M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0 MzRiYzJhZjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaI8wAwQD x/eQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADzDgAkWOZ0T7BgCJuzvBX23uzco2gdt2YKAZmPntxKl1HVH H0PAxIPaZW46lNqMYc2iDRRpITvO5U2LtNgKSNcELutNnt1lDv8rIBKul9JvwxgN rvOmTARuDR0jEa5XN7FsTKSvzhEtIAAYOnrmy+XMdXPhF2A1AqvCBazm2Nf4Jv3E hruF0TgN3dM8gE5BabEp5tL2fz9hBuK9ofVDKxr3xgHdpe2F0bG1d6ZjkPayJqY5 tAlVrJCGCrZQE1UuHiHAwo5Jm+yQ+eDgZ1FNGZlRmgZEddQUsX9aRKTCr8urBLa4 7XXeXAdnVlUq5ZjfzTsrj0nRjya1SrXE1L8DX00= -----END CERTIFICATE-----Generated at Fri Sep 25 09:03:59 2026 by rpki-client