$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/23268cde-899f-349c-bbd5-320f2e081d09.roa File: 23268cde-899f-349c-bbd5-320f2e081d09.roa (raw, json) Hash identifier: +XQ6iDsjYLBpA09cyAf0vxCE1rh7i3GGYYyej0F3/Ec= Subject key identifier: 86:A7:64:11:66:AA:73:0E:B3:C3:3D:7E:19:DD:FF:88:F6:ED:47:9D Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584F19FCF64369794800D1CDFDC0 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/23268cde-899f-349c-bbd5-320f2e081d09.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8011 IP address blocks: 159.41.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f6:43:69:79:48:00:d1:cd:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=3a565f2b-99c6-4449-87e5-62772277179e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:5f:29:37:25:9d:72:4d:04:83:2c:56:36: 51:31:6e:2d:e7:44:89:45:f8:32:4b:80:ed:cf:a6: ba:1f:ad:64:7a:e2:88:34:1b:ca:e1:80:80:82:8f: 5f:84:e4:5f:2d:49:af:91:30:13:a9:58:9a:5e:3d: 5f:82:07:e0:90:17:ee:0b:91:93:2c:43:49:f6:ca: ff:30:e6:50:7b:86:b3:e5:c0:e8:f4:57:a9:fb:63: 95:ff:c2:5a:ae:a8:60:2a:1b:59:b5:5e:bc:4a:5a: 44:7e:42:0f:e3:26:80:ed:85:08:45:45:8d:10:c7: a6:f1:7a:93:ec:ae:f4:8d:ce:7f:71:b5:cf:72:d2: c7:bd:6e:f0:1c:29:41:44:d4:5f:65:21:1c:42:a9: 98:69:a9:41:b0:73:a0:04:44:27:bc:97:68:8b:a8: 51:ed:61:d4:65:7b:25:2c:ef:b5:be:69:f3:a0:e0: eb:b9:cd:d0:8a:a9:27:fc:4e:18:c0:38:27:f8:e9: 5d:77:d0:ea:a8:f7:a8:9d:65:d8:d8:b1:3d:9b:db: 8e:8b:59:f8:c6:8c:2f:c3:3a:11:41:c7:23:b0:95: e9:d7:7e:81:58:c0:23:f8:1b:42:26:16:ab:52:b6: 92:fa:ff:ce:10:3e:54:4f:99:87:2a:4d:bb:9a:50: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A7:64:11:66:AA:73:0E:B3:C3:3D:7E:19:DD:FF:88:F6:ED:47:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/23268cde-899f-349c-bbd5-320f2e081d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 159.41.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:02:57:0e:2f:80:51:41:1d:3c:bc:fc:97:b4:95:10:62:7c: c7:ec:cf:b4:ca:53:cd:a7:b8:34:e4:13:bc:20:fe:05:5f:36: fc:6f:a5:01:53:19:46:08:6e:cc:9a:eb:dc:87:f5:7c:9e:82: cd:00:d0:b9:fe:34:69:e1:24:73:ea:6c:46:87:7b:70:0c:03: 77:30:78:a2:82:fc:c4:ee:ae:4e:ba:b6:09:72:97:a7:cd:35: 20:19:22:b2:22:84:55:f9:0b:7f:c5:a1:a2:31:ef:5b:d0:92: 70:cd:80:9a:9b:8b:81:c8:47:35:83:cd:bc:b5:8a:1a:d2:5f: e5:d5:77:06:e9:c8:79:69:50:f6:a5:da:5a:e7:64:ee:b3:2e: b4:fa:13:3e:84:18:bb:55:a7:0e:8d:a5:2d:60:ff:99:a5:e1: 35:35:0c:09:8f:96:f9:25:fd:f0:f4:55:33:42:70:ff:4c:88: 92:e9:fb:a2:aa:f4:9c:fc:3e:ef:cb:ca:85:7b:5e:63:c5:4b: a7:08:12:9a:e0:df:a5:4e:dc:e4:46:71:a5:37:c9:14:18:b7: b1:49:68:e2:54:8a:62:c1:7a:39:5c:77:b6:95:41:1b:25:0d: b1:dd:db:4b:14:1f:e2:21:54:84:34:fc:00:66:16:71:34:00: c1:a8:a5:78 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8Z/PZDaXlIANHN/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk M2E1NjVmMmItOTljNi00NDQ5LTg3ZTUtNjI3NzIyNzcxNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiRfKTclnXJNBIMsVjZRMW4t50SJRfgyS4Dt z6a6H61keuKINBvK4YCAgo9fhORfLUmvkTATqViaXj1fggfgkBfuC5GTLENJ9sr/ MOZQe4az5cDo9Fep+2OV/8JarqhgKhtZtV68SlpEfkIP4yaA7YUIRUWNEMem8XqT 7K70jc5/cbXPctLHvW7wHClBRNRfZSEcQqmYaalBsHOgBEQnvJdoi6hR7WHUZXsl LO+1vmnzoODruc3Qiqkn/E4YwDgn+Oldd9DqqPeonWXY2LE9m9uOi1n4xowvwzoR QccjsJXp136BWMAj+BtCJharUraS+v/OED5UT5mHKk27mlBriwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIanZBFmqnMOs8M9fhnd/4j27UedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMjMyNjhjZGUtODk5Zi0z NDljLWJiZDUtMzIwZjJlMDgxZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnykwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEApwJXDi+AUUEdPLz8l7SVEGJ8x+zPtMpTzae4NOQTvCD+BV82/G+lAVMZ RghuzJrr3If1fJ6CzQDQuf40aeEkc+psRod7cAwDdzB4ooL8xO6uTrq2CXKXp801 IBkisiKEVfkLf8WhojHvW9CScM2AmpuLgchHNYPNvLWKGtJf5dV3BunIeWlQ9qXa Wudk7rMutPoTPoQYu1WnDo2lLWD/maXhNTUMCY+W+SX98PRVM0Jw/0yIkun7oqr0 nPw+78vKhXteY8VLpwgSmuDfpU7c5EZxpTfJFBi3sUlo4lSKYsF6OVx3tpVBGyUN sd3bSxQf4iFUhDT8AGYWcTQAwaileA== -----END CERTIFICATE-----Generated at Tue Sep 22 21:58:09 2026 by rpki-client