$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/541c1a8f-611b-3414-980a-5adb80ec6276.roa File: 541c1a8f-611b-3414-980a-5adb80ec6276.roa (raw, json) Hash identifier: rZuHO+jYOY/ex5Mde3jEXmoep7o2z+wWsIOQjn46a+k= Subject key identifier: F0:AB:ED:A7:E0:5A:88:87:5C:50:CC:92:E2:02:1B:98:0F:D6:D3:1B Certificate issuer: /CN=95437874-24a3-4971-a87b-95b645e257bb Certificate serial: 010D0C9F4328584F0AA22AE0D797245DE8FF97C0 Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/541c1a8f-611b-3414-980a-5adb80ec6276.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 36556 IP address blocks: 104.143.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2a:e0:d7:97:24:5d:e8:ff:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=6dba819f-3c50-427a-ba46-5533e823403e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:18:c9:86:6d:1b:08:84:4f:66:09:de:4c:ba: de:5d:2b:b7:72:e3:96:71:4f:15:ec:d8:46:ed:75: 90:a8:f3:bb:d1:98:2f:7f:14:cd:57:38:fa:43:ec: 8f:bf:7c:b0:40:7d:cc:1f:a6:c8:4a:43:b6:de:ab: 5b:ef:4f:5b:d6:d9:ca:be:19:02:c1:46:e7:34:c2: 80:ad:8c:ab:31:65:d8:e6:33:9c:82:7f:35:b8:d2: b0:52:29:49:f8:c0:3c:2a:4c:36:7d:95:19:b1:64: 92:cf:81:86:7a:ad:96:75:ff:f3:f0:ff:1d:4a:50: 75:b1:e5:c9:26:f9:f0:ff:65:d1:91:8d:85:66:40: f0:07:ee:e7:62:72:6d:7f:15:b0:a0:b3:6d:5a:f7: 1b:45:f5:1a:37:8e:4c:78:b4:32:f9:de:70:e1:83: 40:1d:bb:f1:a4:e3:5e:a7:e9:f0:f8:78:b6:24:fe: 55:9b:8e:20:c4:f0:38:8b:6f:15:9a:66:76:60:81: 04:57:64:15:fd:5c:86:e8:da:bf:2d:85:5c:16:9d: db:f9:4b:14:bd:47:e4:22:1f:6a:08:34:05:6e:ff: 23:da:0e:5f:e0:89:f4:a8:0c:15:08:2d:72:fa:53: c6:a2:db:ae:18:cb:bc:d7:1a:8f:b3:43:ae:70:18: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AB:ED:A7:E0:5A:88:87:5C:50:CC:92:E2:02:1B:98:0F:D6:D3:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/541c1a8f-611b-3414-980a-5adb80ec6276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl X509v3 Authority Key Identifier: keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer sbgp-ipAddrBlock: critical IPv4: 104.143.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:42:9d:3d:bc:db:18:39:16:74:a1:ca:cd:19:5b:83:cc:9b: c3:3b:5c:71:9f:81:c7:2c:00:e2:31:80:13:ea:29:b9:c6:b6: 33:12:9a:74:2c:24:64:8f:93:33:46:e5:b9:d8:82:b1:61:5d: 89:49:7a:d6:ec:18:8b:cb:25:99:82:c1:4d:56:a5:33:63:96: b2:d1:c8:c2:9a:26:1f:6b:f9:b4:0d:f2:23:b9:79:93:52:9a: 93:18:79:1e:4e:10:2c:f1:8f:a3:08:0e:ba:6d:bb:67:18:98: 2f:01:a7:ee:ac:d9:ef:e4:ad:a6:91:28:f1:ad:d3:54:9c:ff: a6:39:67:8c:82:33:c2:1f:5f:5a:ba:c9:25:e2:ee:06:06:de: db:2a:54:b4:c6:95:af:e3:49:2b:13:91:52:e7:38:1f:19:01: bb:06:d3:8d:69:fd:15:a6:90:3e:3c:49:11:d9:60:6c:54:8d: 49:ae:9f:52:77:0c:da:35:58:0f:33:77:83:20:99:34:6f:79: e4:be:64:fc:4a:02:12:51:56:fc:75:79:7a:90:ae:a3:be:d2: 78:26:07:37:b0:2d:79:79:91:4d:78:d3:28:b0:dc:4f:57:43: 5a:d7:37:4e:6f:d6:dc:1c:dd:df:77:e5:0f:75:c7:3b:4d:ea: 9b:1b:25:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Koirg15ckXej/l8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0Mzc4NzQtMjRhMy00OTcxLWE4N2ItOTViNjQ1ZTI1 N2JiMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk NmRiYTgxOWYtM2M1MC00MjdhLWJhNDYtNTUzM2U4MjM0MDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhjJhm0bCIRPZgneTLreXSu3cuOWcU8V7NhG 7XWQqPO70ZgvfxTNVzj6Q+yPv3ywQH3MH6bISkO23qtb709b1tnKvhkCwUbnNMKA rYyrMWXY5jOcgn81uNKwUilJ+MA8Kkw2fZUZsWSSz4GGeq2Wdf/z8P8dSlB1seXJ Jvnw/2XRkY2FZkDwB+7nYnJtfxWwoLNtWvcbRfUaN45MeLQy+d5w4YNAHbvxpONe p+nw+Hi2JP5Vm44gxPA4i28VmmZ2YIEEV2QV/VyG6Nq/LYVcFp3b+UsUvUfkIh9q CDQFbv8j2g5f4In0qAwVCC1y+lPGotuuGMu81xqPs0OucBiXEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCr7afgWoiHXFDMkuICG5gP1tMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NTQz Nzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVlMjU3YmIvNTQxYzFhOGYtNjExYi0z NDE0LTk4MGEtNWFkYjgwZWM2Mjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTU0Mzc4NzQtMjRhMy00OTcxLWE4 N2ItOTViNjQ1ZTI1N2JiLzk1NDM3ODc0LTI0YTMtNDk3MS1hODdiLTk1YjY0NWUy NTdiYi5jcmwwHwYDVR0jBBgwFoAUDZpYabwzwNGVnD0AuQA7uUOKTmkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2 NDVlMjU3YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaI8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExCnT282xg5FnShys0ZW4PMm8M7XHGfgccsAOIxgBPqKbnGtjMSmnQs JGSPkzNG5bnYgrFhXYlJetbsGIvLJZmCwU1WpTNjlrLRyMKaJh9r+bQN8iO5eZNS mpMYeR5OECzxj6MIDrptu2cYmC8Bp+6s2e/kraaRKPGt01Sc/6Y5Z4yCM8IfX1q6 ySXi7gYG3tsqVLTGla/jSSsTkVLnOB8ZAbsG041p/RWmkD48SRHZYGxUjUmun1J3 DNo1WA8zd4MgmTRveeS+ZPxKAhJRVvx1eXqQrqO+0ngmBzewLXl5kU140yiw3E9X Q1rXN05v1twc3d935Q91xztN6psbJWM= -----END CERTIFICATE-----Generated at Sun Sep 20 11:09:18 2026 by rpki-client