$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/43855d7f-830f-3f2b-a307-37ed9d204a65.roa File: 43855d7f-830f-3f2b-a307-37ed9d204a65.roa (raw, json) Hash identifier: SvBZ+kjeRhYx6GKIJ7K4G1e+Icoa7QMQdlUhjed70MM= Subject key identifier: E9:9D:57:39:5C:68:E1:25:29:FA:DF:7B:A0:89:C3:27:23:9F:1D:B2 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584F1CC7A649497FA98450DAC4A0 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/43855d7f-830f-3f2b-a307-37ed9d204a65.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 153517 IP address blocks: 23.249.16.0/20 maxlen: 24 104.143.32.0/20 maxlen: 24 104.251.224.0/20 maxlen: 24 172.81.96.0/20 maxlen: 24 198.176.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a6:49:49:7f:a9:84:50:da:c4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=ba58e688-3ae9-4e72-a7e1-3e2fd245522f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:b8:c3:31:34:a4:d5:d1:78:e7:bf:19:b7: e6:39:4a:1b:c6:32:9d:d7:d9:19:81:80:88:79:f7: b3:93:99:40:4e:f5:09:b2:f8:28:88:40:9b:5f:0b: d6:39:e6:42:fc:e8:2d:fb:b5:1b:5e:d8:a0:84:82: 0f:6b:c1:07:cb:bf:a1:d7:0b:b5:29:b6:ec:47:f3: 25:ec:67:28:f8:2a:af:fa:d9:0b:e9:cb:95:d7:42: d0:fb:52:92:9b:3c:8c:68:10:7b:69:e9:47:77:43: 05:c5:ff:3f:e6:80:14:4d:6c:4f:64:e0:2b:9e:ab: 43:3c:e3:a9:a4:fd:b7:3f:33:ed:b1:7f:cc:37:0a: 3e:41:ce:80:03:7a:c5:26:34:31:9e:eb:0c:b1:a9: 7f:47:10:cf:ce:3b:0c:98:a6:f2:41:25:dd:db:cc: 17:5a:e1:68:d7:3a:02:b2:45:03:3e:2b:7b:5f:7a: 18:33:b3:46:9d:c1:f7:e1:11:46:c5:67:6c:4a:4e: 93:2b:f1:a4:d0:42:82:4f:cc:a1:58:56:9d:51:61: 39:e4:c9:31:60:70:3e:11:35:a2:c1:6d:26:ad:2d: 9e:e1:62:74:1b:03:4f:89:ee:0a:8c:16:14:d4:f4: 77:3c:44:e0:4e:fd:3b:46:eb:a6:01:a8:a7:b1:b7: 3a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9D:57:39:5C:68:E1:25:29:FA:DF:7B:A0:89:C3:27:23:9F:1D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/43855d7f-830f-3f2b-a307-37ed9d204a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.16.0/20 104.143.32.0/20 104.251.224.0/20 172.81.96.0/20 198.176.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d9:90:ba:2f:20:5d:2d:a8:bf:dd:12:c6:f5:38:0e:12:05: 51:06:a1:9e:2d:30:41:27:e2:2a:c0:65:9a:7d:58:56:39:35: d1:81:9e:77:9a:4b:11:9a:e2:31:02:f7:66:4c:f0:0a:e5:ee: c8:85:d8:2f:2d:72:af:a9:d4:20:86:77:49:c6:5d:eb:88:ae: 8a:42:62:ff:a5:03:c5:53:11:f3:6d:28:4e:47:ad:47:1e:df: e1:92:32:04:f9:41:b5:74:bf:ac:53:e3:13:93:89:8b:75:38: 03:7d:d3:e0:53:54:b4:f3:ec:9d:58:5c:5b:1b:21:87:85:4c: d9:5e:6a:84:b7:04:72:68:7d:8d:4f:7c:60:94:1c:2d:f0:6a: fb:c5:d7:2d:d7:9d:53:86:74:ff:6a:03:93:c1:e4:a8:31:a8: 83:69:16:4b:20:9f:3c:5d:d1:24:4c:f4:b1:1f:92:0f:0c:e9: ef:98:a2:12:dc:d0:2b:7c:43:0f:81:d5:b9:d1:74:5e:47:dc: 02:d4:03:42:66:c3:6a:d4:37:de:15:a2:fd:65:95:3e:dc:18: da:86:f2:54:03:b2:07:1f:7e:cf:f7:58:dc:5c:c5:d2:ce:d3: e6:74:0b:d4:f1:34:07:0c:6f:83:1e:3c:29:b5:60:ee:da:8f: e0:d4:78:32 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE8cx6ZJSX+phFDaxKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk YmE1OGU2ODgtM2FlOS00ZTcyLWE3ZTEtM2UyZmQyNDU1MjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAK4wzE0pNXReOe/GbfmOUobxjKd19kZgYCI efezk5lATvUJsvgoiECbXwvWOeZC/Ogt+7UbXtighIIPa8EHy7+h1wu1KbbsR/Ml 7Gco+Cqv+tkL6cuV10LQ+1KSmzyMaBB7aelHd0MFxf8/5oAUTWxPZOArnqtDPOOp pP23PzPtsX/MNwo+Qc6AA3rFJjQxnusMsal/RxDPzjsMmKbyQSXd28wXWuFo1zoC skUDPit7X3oYM7NGncH34RFGxWdsSk6TK/Gk0EKCT8yhWFadUWE55MkxYHA+ETWi wW0mrS2e4WJ0GwNPie4KjBYU1PR3PETgTv07RuumAainsbc6sQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFOmdVzlcaOElKfrfe6CJwycjnx2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNDM4NTVkN2YtODMwZi0z ZjJiLWEzMDctMzdlZDlkMjA0YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEF/kQAwQE aI8gAwQEaPvgAwQErFFgAwQExrAwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIfZkLovIF0tqL/dEsb1OA4S BVEGoZ4tMEEn4irAZZp9WFY5NdGBnneaSxGa4jEC92ZM8Arl7siF2C8tcq+p1CCG d0nGXeuIropCYv+lA8VTEfNtKE5HrUce3+GSMgT5QbV0v6xT4xOTiYt1OAN90+BT VLTz7J1YXFsbIYeFTNleaoS3BHJofY1PfGCUHC3wavvF1y3XnVOGdP9qA5PB5Kgx qINpFksgnzxd0SRM9LEfkg8M6e+YohLc0Ct8Qw+B1bnRdF5H3ALUA0Jmw2rUN94V ov1llT7cGNqG8lQDsgcffs/3WNxcxdLO0+Z0C9TxNAcMb4MePCm1YO7aj+DUeDI= -----END CERTIFICATE-----Generated at Sun Sep 20 17:43:15 2026 by rpki-client