$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2433653b-f7bb-3611-ad46-9d42b5e8adc6.roa File: 2433653b-f7bb-3611-ad46-9d42b5e8adc6.roa (raw, json) Hash identifier: X/Sg6n+8WEvoY1oO1bM1Fe7qf2K2jDiRLvuXjCfeZoc= Subject key identifier: 2E:6B:0A:B6:9D:78:17:A4:CC:57:7A:93:6C:47:E2:C1:3C:38:B0:D9 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584F19FCF68D28503B6251078C80 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2433653b-f7bb-3611-ad46-9d42b5e8adc6.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8011 IP address blocks: 159.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f6:8d:28:50:3b:62:51:07:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=ca023385-a8a7-494c-85e3-6326daa4e1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:f2:9a:68:c8:7e:cf:d0:c7:4f:8d:4b:b9: ad:1c:0f:ed:5c:7a:0e:cb:61:76:f1:25:a4:78:37: f6:45:bf:66:63:82:4b:ae:43:0c:ca:68:20:f1:22: d0:59:5a:29:9c:dd:a5:2c:48:c8:f6:8a:4e:17:d5: db:4f:35:52:f5:d6:81:eb:09:14:96:59:15:5b:65: d3:8e:20:0d:7f:c0:8d:a5:24:15:81:ee:f7:1b:1d: 7a:02:9b:54:b6:57:0c:dd:9c:ca:fa:7e:34:0e:3d: 39:3d:13:63:d2:96:48:d8:18:15:ef:89:49:10:a1: bf:89:b5:e5:43:cf:aa:1c:87:3e:5c:67:17:ae:26: 52:ad:d2:5f:af:a4:5e:97:ea:fe:ab:15:27:c0:8c: 3d:80:de:2f:94:1a:16:bf:84:28:3a:35:3a:ea:f5: d8:2b:db:ce:0d:ed:28:ca:0c:27:b0:75:3c:96:71: 8d:d7:e8:35:7b:07:db:c6:48:d8:e2:f7:42:3c:5f: 4e:f9:08:d8:df:92:94:07:56:b4:2c:14:27:78:15: e5:d6:14:11:79:1a:f6:51:ce:06:aa:b8:51:fd:0a: 4b:a0:92:2c:b8:b3:f0:8c:97:80:ed:b9:ef:25:75: 73:27:70:78:eb:b1:fa:b8:95:48:e2:d5:f3:5a:cf: 6a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6B:0A:B6:9D:78:17:A4:CC:57:7A:93:6C:47:E2:C1:3C:38:B0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2433653b-f7bb-3611-ad46-9d42b5e8adc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 159.143.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d3:d2:7e:2e:74:0f:73:3a:13:63:0b:ee:a9:de:95:22:0d: 86:0f:c3:76:6f:20:2b:fd:dc:27:be:ee:21:6b:43:32:d6:46: 57:e6:6c:f3:e3:61:42:bb:ac:50:1e:f9:15:77:8c:2e:7f:e3: 94:b9:38:5a:d9:6b:8f:38:46:af:87:1e:08:51:bb:6d:fd:cf: f8:e6:2d:b3:88:f2:01:28:4a:97:c4:28:74:ae:8b:d1:93:0d: d0:70:4c:a1:c2:14:2f:81:20:d2:a6:34:2b:18:57:93:03:d0: aa:bc:8f:2d:0b:b1:ae:f4:42:c6:3d:3f:50:d2:20:f6:95:c9: 62:c7:a4:72:42:24:db:d4:c5:4a:1f:4b:22:54:35:ac:ef:07: 85:84:f8:be:1d:3b:cc:6c:04:28:14:29:94:c5:e5:02:e5:44: 65:a5:2e:f4:8d:a4:5d:ee:7f:f7:bd:24:bc:9d:5e:1f:b8:b5: 81:1b:8d:c6:08:b2:21:9c:da:87:a1:ed:f2:fe:33:fb:dd:55: 15:38:99:bd:64:cc:1f:f6:c2:ba:d5:54:43:b8:96:02:3a:4b: cf:32:85:11:c0:03:be:79:88:d7:cb:b8:4e:02:33:70:c8:91: 5e:44:cc:92:4d:3e:01:e8:31:ec:09:84:5d:2f:3d:79:aa:e9: 00:59:03:a9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8Z/PaNKFA7YlEHjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk Y2EwMjMzODUtYThhNy00OTRjLTg1ZTMtNjMyNmRhYTRlMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrXymmjIfs/Qx0+NS7mtHA/tXHoOy2F28SWk eDf2Rb9mY4JLrkMMymgg8SLQWVopnN2lLEjI9opOF9XbTzVS9daB6wkUllkVW2XT jiANf8CNpSQVge73Gx16AptUtlcM3ZzK+n40Dj05PRNj0pZI2BgV74lJEKG/ibXl Q8+qHIc+XGcXriZSrdJfr6Rel+r+qxUnwIw9gN4vlBoWv4QoOjU66vXYK9vODe0o ygwnsHU8lnGN1+g1ewfbxkjY4vdCPF9O+QjY35KUB1a0LBQneBXl1hQReRr2Uc4G qrhR/QpLoJIsuLPwjJeA7bnvJXVzJ3B467H6uJVI4tXzWs9qKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFC5rCradeBekzFd6k2xH4sE8OLDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMjQzMzY1M2ItZjdiYi0z NjExLWFkNDYtOWQ0MmI1ZThhZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn48wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHtPSfi50D3M6E2ML7qnelSINhg/Ddm8gK/3cJ77uIWtDMtZGV+Zs8+Nh QrusUB75FXeMLn/jlLk4WtlrjzhGr4ceCFG7bf3P+OYts4jyAShKl8QodK6L0ZMN 0HBMocIUL4Eg0qY0KxhXkwPQqryPLQuxrvRCxj0/UNIg9pXJYsekckIk29TFSh9L IlQ1rO8HhYT4vh07zGwEKBQplMXlAuVEZaUu9I2kXe5/970kvJ1eH7i1gRuNxgiy IZzah6Ht8v4z+91VFTiZvWTMH/bCutVUQ7iWAjpLzzKFEcADvnmI18u4TgIzcMiR XkTMkk0+Aegx7AmEXS89earpAFkDqQ== -----END CERTIFICATE-----Generated at Sat Sep 26 02:58:21 2026 by rpki-client