$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa File: 41d5735c-bf44-3d40-b55c-71b48a44901f.roa (raw, json) Hash identifier: bKDrLf2Kjwqzabl/mhn7j0nBXJ8eJCui8Vtjr67yNIA= Subject key identifier: 31:EE:50:85:51:C7:5A:80:09:56:7C:B8:F2:F0:8C:15:E0:E5:54:EF Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Certificate serial: 010D0C9F4328584B004BF16180713ECC5B647800 Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 40230 IP address blocks: 104.143.48.0/20 maxlen: 24 199.247.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f1:61:80:71:3e:cc:5b:64:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=4eb3f11b-e186-4e2e-bc57-727f18ebec71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:e5:f0:83:e5:1a:f7:fe:6c:71:d6:98:b2: a2:45:ae:e5:f2:70:be:cc:bb:bb:6e:56:33:0a:e4: 57:37:6c:cc:f0:15:6d:77:d5:d9:39:96:15:e2:40: f7:15:24:34:e1:5a:3e:30:f1:52:a3:b4:b8:fd:3f: 68:02:35:70:ee:a5:89:54:71:7d:9a:d0:a0:18:c0: e7:9a:8c:69:0b:2a:7d:11:6f:c0:aa:34:51:ab:9b: 98:9a:14:9e:99:cd:cb:cb:1c:12:31:d7:d3:04:71: 18:67:9e:23:93:ad:09:fb:b3:b7:40:7b:15:70:9d: 06:c0:1a:66:f2:2c:d3:b3:0e:31:85:1f:e3:5b:9e: ab:35:54:dd:84:70:49:3f:22:a3:60:ec:79:97:87: 48:d1:0f:52:bb:55:53:bb:78:7f:cb:2b:a2:64:41: cd:a4:e2:12:37:8d:33:85:58:6e:19:f8:75:1c:33: c6:a6:dc:29:1d:2b:c3:c2:23:11:4c:80:96:78:eb: 93:f2:e0:91:1f:2e:de:03:d6:72:ed:58:56:d5:ec: 23:4a:22:8c:f8:c7:29:44:e8:5f:07:5b:03:cd:87: cd:d1:08:06:88:4d:69:48:56:e8:71:02:0c:52:58: 6f:0c:dd:1c:5a:67:90:ab:c6:3b:94:f2:4d:38:b2: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EE:50:85:51:C7:5A:80:09:56:7C:B8:F2:F0:8C:15:E0:E5:54:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl X509v3 Authority Key Identifier: keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer sbgp-ipAddrBlock: critical IPv4: 104.143.48.0/20 199.247.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:0b:92:39:c7:b9:66:89:dc:ae:e7:64:2b:83:b4:90:05:25: e3:6b:dc:f6:70:77:1a:fc:46:9d:0f:fb:ee:24:c9:70:bd:03: e7:3f:63:dc:a4:bd:25:c6:c1:3b:8c:4b:00:11:39:3f:fc:64: 01:38:c5:98:2b:2a:18:2c:27:c5:5e:00:6f:91:81:a2:cf:a3: 27:76:3a:85:4c:33:4e:6f:3c:aa:d4:49:7f:75:10:53:01:81: 0e:68:14:5e:7b:ae:69:ec:c2:c2:65:e1:b8:00:aa:45:92:80: 16:6a:22:33:58:e1:d5:21:87:4d:2a:c8:cf:d0:5e:c8:1d:ff: 17:c6:ab:c4:6d:ed:e8:ae:e5:67:97:1a:ec:5c:1e:f4:e2:98: 7f:c3:0f:04:bf:10:59:38:67:e6:12:e2:18:d8:e0:bd:a9:ec: d0:4d:61:10:50:4f:92:47:1e:40:c3:d5:8b:98:50:94:de:cf: 5a:ae:e4:38:50:7b:39:73:16:79:8d:ee:3b:54:54:53:48:e0: ca:6a:58:9a:a6:02:df:a4:25:e1:2a:a1:dd:d4:51:51:0d:fc: b6:da:ed:a2:f2:e8:3c:35:62:d4:6c:87:f0:13:83:72:bf:a3: f9:57:1d:3d:39:8e:ca:e2:d1:45:29:8e:d8:aa:93:9d:0c:50: 1e:15:e1:1a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsAS/FhgHE+zFtkeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy YWYwMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NGViM2YxMWItZTE4Ni00ZTJlLWJjNTctNzI3ZjE4ZWJlYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+zl8IPlGvf+bHHWmLKiRa7l8nC+zLu7blYz CuRXN2zM8BVtd9XZOZYV4kD3FSQ04Vo+MPFSo7S4/T9oAjVw7qWJVHF9mtCgGMDn moxpCyp9EW/AqjRRq5uYmhSemc3LyxwSMdfTBHEYZ54jk60J+7O3QHsVcJ0GwBpm 8izTsw4xhR/jW56rNVTdhHBJPyKjYOx5l4dI0Q9Su1VTu3h/yyuiZEHNpOISN40z hVhuGfh1HDPGptwpHSvDwiMRTICWeOuT8uCRHy7eA9Zy7VhW1ewjSiKM+McpROhf B1sDzYfN0QgGiE1pSFbocQIMUlhvDN0cWmeQq8Y7lPJNOLKWzwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDHuUIVRx1qACVZ8uPLwjBXg5VTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvNDFkNTczNWMtYmY0NC0z ZDQwLWI1NWMtNzFiNDhhNDQ5MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1 M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0 MzRiYzJhZjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaI8wAwQD x/eQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB8LkjnHuWaJ3K7nZCuDtJAFJeNr3PZwdxr8Rp0P++4kyXC9 A+c/Y9ykvSXGwTuMSwAROT/8ZAE4xZgrKhgsJ8VeAG+RgaLPoyd2OoVMM05vPKrU SX91EFMBgQ5oFF57rmnswsJl4bgAqkWSgBZqIjNY4dUhh00qyM/QXsgd/xfGq8Rt 7eiu5WeXGuxcHvTimH/DDwS/EFk4Z+YS4hjY4L2p7NBNYRBQT5JHHkDD1YuYUJTe z1qu5DhQezlzFnmN7jtUVFNI4MpqWJqmAt+kJeEqod3UUVEN/Lba7aLy6Dw1YtRs h/ATg3K/o/lXHT05jsri0UUpjtiqk50MUB4V4Ro= -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:23 2025 by rpki-client