$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c143db02-bb85-38a6-9b52-2ac97b49a347.roa File: c143db02-bb85-38a6-9b52-2ac97b49a347.roa (raw, json) Hash identifier: +AIXjW4e+SEcm3ayGXzAmfuyqkwUt+fd3AjReM979BM= Subject key identifier: 46:35:68:E6:CC:F4:2B:94:0A:BA:A4:99:5C:EC:76:DF:32:84:D3:CE Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584CB6B722D60BC2CE1CE3F94280 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c143db02-bb85-38a6-9b52-2ac97b49a347.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 14618 IP address blocks: 159.41.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:22:d6:0b:c2:ce:1c:e3:f9:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=e6385d69-2dfd-43ef-8011-c358d59cc7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:59:da:8e:ea:9e:7c:03:2b:a2:e3:e3:ba: c2:3f:74:6f:54:89:74:a1:a9:51:01:bd:24:42:8d: ef:9e:02:1e:96:87:62:79:ff:7e:7e:09:ca:d1:4c: 10:2c:5c:04:4b:15:34:6f:0b:dc:54:fd:58:c8:81: 99:57:ac:16:39:fb:39:66:60:89:9d:0a:19:10:d5: 99:79:38:eb:5d:8e:9b:3c:28:11:c8:b9:6d:a7:2a: b5:13:55:79:f8:19:bb:bc:35:8f:ca:25:d6:28:12: a7:98:b3:78:98:67:2f:1f:76:b0:70:f8:1e:2b:dd: 99:4f:88:ff:7a:88:b2:23:64:9a:bd:ce:d0:59:a6: 13:7d:64:0e:ee:05:5d:38:51:4b:c7:67:36:64:20: e0:6b:3d:84:be:49:db:80:09:7a:77:47:d7:74:05: cc:30:41:83:5e:bc:d1:f1:e6:53:c6:cf:8f:fa:e4: 0c:7a:37:22:7f:44:35:6c:a9:5b:1a:1f:f8:6c:ae: bc:c3:ea:85:01:53:b8:e0:2b:c9:fb:c2:bd:78:e2: a4:da:47:17:1c:0f:46:9d:dd:87:d5:82:24:4a:d4: 5a:83:de:32:b8:3e:c5:db:a1:4d:aa:6f:fb:0c:12: 73:2e:d8:00:ca:83:b1:f8:38:da:67:20:62:ae:73: 2c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:35:68:E6:CC:F4:2B:94:0A:BA:A4:99:5C:EC:76:DF:32:84:D3:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c143db02-bb85-38a6-9b52-2ac97b49a347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 159.41.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:03:89:51:1b:68:2c:f5:70:d3:11:02:8d:ba:81:03:4d:95: 27:c1:dd:3a:ef:b0:d2:a8:da:b7:26:e6:1c:95:2f:b2:ba:e9: a7:69:8a:55:6b:81:5d:87:de:a8:b3:cb:a7:2f:f1:c7:4b:14: 3c:7c:68:5f:41:b0:e7:65:c5:12:ff:4b:5a:e8:b0:2a:d0:6d: 36:1d:2d:ff:cb:13:e6:56:69:ce:d3:c6:3f:79:86:fe:0b:d5: 32:33:da:e3:70:77:5e:d5:27:5d:a6:1c:11:2c:26:1a:bb:c2: e0:f8:f6:16:f3:4b:75:58:c8:62:28:ea:f8:26:94:a2:dd:d0: c0:92:57:54:97:5f:cf:77:3e:eb:fc:c6:61:5a:42:e1:1e:96: da:f1:cc:ab:9b:8e:c8:7e:a8:dd:ed:e3:3e:77:26:c0:f7:ed: 1d:f5:78:67:48:42:e4:64:11:d4:6a:26:8b:7d:3d:1c:36:fc: 3d:f1:0d:dc:cf:0a:36:fc:71:d6:2f:5f:10:de:26:7e:dc:c7: 09:bc:01:2b:26:d4:76:58:07:48:4c:1e:fb:d0:9b:12:01:9f: a8:5f:79:c6:8c:d1:e2:c5:57:b9:aa:9b:69:86:7d:c0:ae:ae: 9e:12:58:93:ee:a1:6b:10:e8:16:94:a6:91:ba:dc:f7:0a:f0: b8:35:4e:25 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEy2tyLWC8LOHOP5QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZTYzODVkNjktMmRmZC00M2VmLTgwMTEtYzM1OGQ1OWNjN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0tZ2o7qnnwDK6Lj47rCP3RvVIl0oalRAb0k Qo3vngIelodief9+fgnK0UwQLFwESxU0bwvcVP1YyIGZV6wWOfs5ZmCJnQoZENWZ eTjrXY6bPCgRyLltpyq1E1V5+Bm7vDWPyiXWKBKnmLN4mGcvH3awcPgeK92ZT4j/ eoiyI2Savc7QWaYTfWQO7gVdOFFLx2c2ZCDgaz2EvknbgAl6d0fXdAXMMEGDXrzR 8eZTxs+P+uQMejcif0Q1bKlbGh/4bK68w+qFAVO44CvJ+8K9eOKk2kcXHA9Gnd2H 1YIkStRag94yuD7F26FNqm/7DBJzLtgAyoOx+DjaZyBirnMsrwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEY1aObM9CuUCrqkmVzsdt8yhNPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvYzE0M2RiMDItYmI4NS0z OGE2LTliNTItMmFjOTdiNDlhMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnykwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdgOJURtoLPVw0xECjbqBA02VJ8HdOu+w0qjatybmHJUvsrrpp2mKVWuB XYfeqLPLpy/xx0sUPHxoX0Gw52XFEv9LWuiwKtBtNh0t/8sT5lZpztPGP3mG/gvV MjPa43B3XtUnXaYcESwmGrvC4Pj2FvNLdVjIYijq+CaUot3QwJJXVJdfz3c+6/zG YVpC4R6W2vHMq5uOyH6o3e3jPncmwPftHfV4Z0hC5GQR1Gomi309HDb8PfEN3M8K Nvxx1i9fEN4mftzHCbwBKybUdlgHSEwe+9CbEgGfqF95xozR4sVXuaqbaYZ9wK6u nhJYk+6haxDoFpSmkbrc9wrwuDVOJQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:18:25 2026 by rpki-client