$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c143db02-bb85-38a6-9b52-2ac97b49a347.roa File: c143db02-bb85-38a6-9b52-2ac97b49a347.roa (raw, json) Hash identifier: DCtnmvApFoPNB2kwCNWesKW24eZaY/BWSfKfClVTwrU= Subject key identifier: 98:4B:59:A8:05:E7:E2:FE:62:B9:97:A9:C0:47:60:81:E9:AC:A4:C1 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584FBC066E053658E7D33132C410 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c143db02-bb85-38a6-9b52-2ac97b49a347.roa Signing time: Thu 05 Nov 2026 02:00:14 +0000 ROA not before: Thu 05 Nov 2026 02:00:14 +0000 ROA not after: Wed 03 Feb 2027 02:00:14 +0000 asID: 14618 IP address blocks: 159.41.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bc:06:6e:05:36:58:e7:d3:31:32:c4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Nov 5 02:00:14 2026 GMT Not After : Feb 3 02:00:14 2027 GMT Subject: CN=b5bf91c7-a137-4151-980c-2ae26fa443ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:90:64:a2:83:e4:20:dd:7c:d1:e2:a3:d1: 21:41:3d:df:c1:0d:36:a4:b4:83:20:93:ca:88:a0: 7d:1d:91:2e:f2:b6:4d:24:f7:77:32:17:62:00:e6: b3:be:a3:bc:81:f8:fd:0c:53:57:99:dd:e7:c7:3a: e5:0e:6f:5a:73:03:5b:10:1a:8b:c7:5d:5a:b7:a3: 26:ee:c1:56:cd:f5:a8:cd:0e:2a:87:c2:9e:f5:5a: 26:e1:af:9e:d5:26:68:29:25:8b:cd:cf:6a:ea:2c: 3f:5b:20:4f:52:a1:a4:1f:6a:f3:83:7d:24:3a:f3: f7:b5:0e:2c:c1:9a:18:c4:92:fb:7d:9d:06:0c:a6: 35:f2:08:98:37:47:9b:c6:2b:aa:7f:9c:31:45:46: c3:60:39:17:65:a4:e8:9f:0a:88:39:a2:c4:9e:0a: 80:ea:1a:fd:25:ce:38:22:38:f7:27:a8:9b:3d:f6: 00:82:ca:f2:ce:6d:44:71:64:91:7f:ef:34:4a:5d: 53:28:37:b0:2b:78:0d:e7:66:9f:34:d4:c7:6e:51: 36:b3:6f:a8:1c:5e:ea:04:2b:c3:a5:36:79:f1:06: 3c:34:e1:5f:03:61:c4:a9:77:3e:d7:a0:91:dc:71: 0f:1d:01:b6:77:80:e0:e3:e9:30:4c:9c:8f:8f:4f: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4B:59:A8:05:E7:E2:FE:62:B9:97:A9:C0:47:60:81:E9:AC:A4:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c143db02-bb85-38a6-9b52-2ac97b49a347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 159.41.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:05:2c:2f:58:78:dc:26:a9:d9:b2:80:57:bb:df:cc:2c:6b: 20:3d:3a:32:2f:7f:2d:8b:66:8a:81:42:a8:da:ab:9b:0a:0d: 69:b7:3c:5d:61:d9:80:83:a6:1f:21:f9:2f:5d:97:45:53:c7: 13:40:e1:68:74:a4:dd:69:75:53:f9:b2:35:4f:be:f3:c0:4f: 43:d1:c2:54:73:12:51:c3:7d:e9:60:f4:8d:61:ab:cf:08:30: a8:3a:4d:7c:58:5d:0c:81:8b:71:3c:4c:33:59:73:e9:c6:81: 29:cf:15:d8:5c:50:11:98:67:93:3a:4b:3f:6a:89:2e:29:d1: ac:8f:ae:f4:52:72:ff:64:16:e9:76:74:07:3b:ce:66:4b:06: 7b:b9:ea:ba:45:43:d0:1b:15:8f:f7:82:eb:67:7b:5f:c2:1b: ec:41:1a:f9:cd:04:ea:17:ce:ae:93:95:40:d9:7f:8c:5c:c9: c9:8b:a6:d7:45:f3:21:cd:9a:30:37:f3:d0:39:6f:5b:cf:96: 81:f1:ba:72:cd:84:ab:08:30:b4:d8:a4:01:99:75:a0:6c:3b: 7c:c3:af:77:13:96:26:3f:c1:f3:03:d9:67:db:ef:59:1f:bf: 42:79:43:e0:da:83:1f:82:e0:4a:9e:90:02:29:aa:f1:c5:14: eb:43:d1:e7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+8Bm4FNljn0zEyxBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI2MTEwNTAyMDAxNFoXDTI3MDIwMzAyMDAxNFowLzEtMCsGA1UEAxMk YjViZjkxYzctYTEzNy00MTUxLTk4MGMtMmFlMjZmYTQ0M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0iQZKKD5CDdfNHio9EhQT3fwQ02pLSDIJPK iKB9HZEu8rZNJPd3MhdiAOazvqO8gfj9DFNXmd3nxzrlDm9acwNbEBqLx11at6Mm 7sFWzfWozQ4qh8Ke9Vom4a+e1SZoKSWLzc9q6iw/WyBPUqGkH2rzg30kOvP3tQ4s wZoYxJL7fZ0GDKY18giYN0ebxiuqf5wxRUbDYDkXZaTonwqIOaLEngqA6hr9Jc44 Ijj3J6ibPfYAgsryzm1EcWSRf+80Sl1TKDewK3gN52afNNTHblE2s2+oHF7qBCvD pTZ58QY8NOFfA2HEqXc+16CR3HEPHQG2d4Dg4+kwTJyPj0+92wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJhLWagF5+L+YrmXqcBHYIHprKTBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvYzE0M2RiMDItYmI4NS0z OGE2LTliNTItMmFjOTdiNDlhMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnykwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhQUsL1h43Cap2bKAV7vfzCxrID06Mi9/LYtmioFCqNqrmwoNabc8XWHZ gIOmHyH5L12XRVPHE0DhaHSk3Wl1U/myNU++88BPQ9HCVHMSUcN96WD0jWGrzwgw qDpNfFhdDIGLcTxMM1lz6caBKc8V2FxQEZhnkzpLP2qJLinRrI+u9FJy/2QW6XZ0 BzvOZksGe7nqukVD0BsVj/eC62d7X8Ib7EEa+c0E6hfOrpOVQNl/jFzJyYum10Xz Ic2aMDfz0DlvW8+WgfG6cs2EqwgwtNikAZl1oGw7fMOvdxOWJj/B8wPZZ9vvWR+/ QnlD4NqDH4LgSp6QAimq8cUU60PR5w== -----END CERTIFICATE-----Generated at Thu Nov 5 09:25:27 2026 by rpki-client