$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1f2ddde9-48b5-4719-abaf-d3b1200f3171/41deff39-f6bb-3b09-8f6d-419c6aada139.roa File: 41deff39-f6bb-3b09-8f6d-419c6aada139.roa (raw, json) Hash identifier: 316ijsLEIE3Jnr92yyVv7RWiX/HXLb2x9ShTPFNzkG0= Subject key identifier: 05:4D:83:EC:A5:16:63:92:59:0B:8B:AC:BF:EF:CF:5B:45:04:5D:5F Certificate issuer: /CN=1f2ddde9-48b5-4719-abaf-d3b1200f3171 Certificate serial: 010D0C9F4328584F45519FCAECB80369E58DCC80 Authority key identifier: 62:56:B8:B8:B7:E2:11:8C:E9:8E:49:36:75:58:CA:5D:24:F3:11:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1f2ddde9-48b5-4719-abaf-d3b1200f3171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1f2ddde9-48b5-4719-abaf-d3b1200f3171/41deff39-f6bb-3b09-8f6d-419c6aada139.roa Signing time: Wed 23 Sep 2026 13:30:41 +0000 ROA not before: Wed 23 Sep 2026 13:30:41 +0000 ROA not after: Tue 22 Dec 2026 14:30:41 +0000 asID: 19436 IP address blocks: 104.166.116.0/22 maxlen: 22 172.98.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1f2ddde9-48b5-4719-abaf-d3b1200f3171/1f2ddde9-48b5-4719-abaf-d3b1200f3171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1f2ddde9-48b5-4719-abaf-d3b1200f3171/1f2ddde9-48b5-4719-abaf-d3b1200f3171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1f2ddde9-48b5-4719-abaf-d3b1200f3171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:51:9f:ca:ec:b8:03:69:e5:8d:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f2ddde9-48b5-4719-abaf-d3b1200f3171 Validity Not Before: Sep 23 13:30:41 2026 GMT Not After : Dec 22 14:30:41 2026 GMT Subject: CN=f3e6363e-2b37-4443-b964-4cdf4fcc220f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:99:73:d8:d9:80:6f:86:8f:ea:a4:6b:b2: d2:f3:55:e6:11:91:62:e8:00:45:f2:3b:9e:11:26: 4a:9a:ed:16:a2:22:92:16:1d:88:fc:14:4b:ab:f1: 01:b8:0a:88:ea:f6:8c:f7:05:71:61:0c:80:9f:de: bd:c0:3c:f9:92:56:84:a5:7c:01:ea:85:ca:d0:ed: bf:af:43:fd:69:a8:de:43:7e:55:1b:b6:7f:9f:9e: a2:ef:b9:33:42:65:56:d2:9c:d9:a4:e8:17:b3:a7: 49:76:ff:30:fd:9d:7e:1a:63:c7:b1:c4:d0:25:f7: bc:6a:55:5d:e9:09:bd:d1:e5:44:c2:be:46:de:74: 7a:07:91:ac:5d:e6:98:3e:8c:ab:d5:bd:5e:9b:39: fa:21:9c:1a:8d:9c:eb:da:5c:37:11:34:2a:19:f5: 5a:8c:05:38:f9:0d:6a:70:ce:f5:d4:a5:67:ee:5c: 54:fc:b5:82:5c:10:e8:c3:4e:5c:8d:15:df:a0:f5: e8:14:98:2c:5b:d9:a3:59:19:fb:6d:ae:ff:10:a5: aa:66:59:49:ae:4a:c1:4a:57:1f:62:88:33:54:fa: 9d:ea:95:ad:85:37:f4:e4:64:9f:1c:ec:20:f4:05: fa:ff:94:3a:1f:c2:c5:a8:5c:59:47:f2:9b:d4:5f: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4D:83:EC:A5:16:63:92:59:0B:8B:AC:BF:EF:CF:5B:45:04:5D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1f2ddde9-48b5-4719-abaf-d3b1200f3171/41deff39-f6bb-3b09-8f6d-419c6aada139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1f2ddde9-48b5-4719-abaf-d3b1200f3171/1f2ddde9-48b5-4719-abaf-d3b1200f3171.crl X509v3 Authority Key Identifier: keyid:62:56:B8:B8:B7:E2:11:8C:E9:8E:49:36:75:58:CA:5D:24:F3:11:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1f2ddde9-48b5-4719-abaf-d3b1200f3171.cer sbgp-ipAddrBlock: critical IPv4: 104.166.116.0/22 172.98.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a6:d2:f4:45:2b:8c:38:83:fd:b0:e7:26:af:c1:91:0d:99: 4f:6d:52:1c:ab:d6:77:be:e3:13:07:cd:22:23:94:3d:a0:ef: aa:b4:f7:5a:5a:50:09:f3:a5:e3:44:e1:b0:d0:c2:49:1b:42: e2:ad:f0:2f:e2:6f:b3:04:b9:61:a5:42:a2:09:a3:d8:32:23: 2c:8e:89:5d:54:e3:a4:4d:1c:f6:0c:c3:b5:97:f8:00:2b:f8: a2:ba:e0:19:cc:f3:69:8a:37:3a:77:20:51:25:44:68:46:68: 0a:ed:2e:4b:26:d2:15:f9:51:0b:34:98:50:62:95:a7:1d:b1: b0:2a:78:f6:65:c7:52:4f:d7:3c:72:28:ee:17:25:89:43:da: 8e:4a:52:5e:ce:6c:b8:ae:bb:39:3e:34:89:0f:09:3a:92:b1: e2:31:7b:21:37:38:2f:7a:7b:c0:17:1e:01:41:24:fd:63:cc: a6:c3:73:18:10:18:a8:18:ff:5a:c4:3a:3e:ac:74:15:e0:be: 3f:ca:e1:05:71:c5:89:45:ae:82:82:01:c6:46:f8:28:15:d2: 56:44:d8:2f:bf:10:e8:f1:36:3b:ed:12:57:fe:cf:be:0b:47: 6e:9e:fe:a2:c5:81:48:46:12:d1:0d:c5:a7:3a:64:c7:50:83: 7e:c4:6f:62 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9FUZ/K7LgDaeWNzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYyZGRkZTktNDhiNS00NzE5LWFiYWYtZDNiMTIwMGYz MTcxMB4XDTI2MDkyMzEzMzA0MVoXDTI2MTIyMjE0MzA0MVowLzEtMCsGA1UEAxMk ZjNlNjM2M2UtMmIzNy00NDQzLWI5NjQtNGNkZjRmY2MyMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlriZc9jZgG+Gj+qka7LS81XmEZFi6ABF8jue ESZKmu0WoiKSFh2I/BRLq/EBuAqI6vaM9wVxYQyAn969wDz5klaEpXwB6oXK0O2/ r0P9aajeQ35VG7Z/n56i77kzQmVW0pzZpOgXs6dJdv8w/Z1+GmPHscTQJfe8alVd 6Qm90eVEwr5G3nR6B5GsXeaYPoyr1b1emzn6IZwajZzr2lw3ETQqGfVajAU4+Q1q cM711KVn7lxU/LWCXBDow05cjRXfoPXoFJgsW9mjWRn7ba7/EKWqZllJrkrBSlcf YogzVPqd6pWthTf05GSfHOwg9AX6/5Q6H8LFqFxZR/Kb1F+2YwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAVNg+ylFmOSWQuLrL/vz1tFBF1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8xZjJk ZGRlOS00OGI1LTQ3MTktYWJhZi1kM2IxMjAwZjMxNzEvNDFkZWZmMzktZjZiYi0z YjA5LThmNmQtNDE5YzZhYWRhMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMWYyZGRkZTktNDhiNS00NzE5LWFi YWYtZDNiMTIwMGYzMTcxLzFmMmRkZGU5LTQ4YjUtNDcxOS1hYmFmLWQzYjEyMDBm MzE3MS5jcmwwHwYDVR0jBBgwFoAUYla4uLfiEYzpjkk2dVjKXSTzEYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8xZjJkZGRlOS00OGI1LTQ3MTktYWJhZi1kM2Ix MjAwZjMxNzEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaKZ0AwQE rGLwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE6m0vRFK4w4g/2w5yavwZENmU9tUhyr1ne+4xMHzSIjlD2g 76q091paUAnzpeNE4bDQwkkbQuKt8C/ib7MEuWGlQqIJo9gyIyyOiV1U46RNHPYM w7WX+AAr+KK64BnM82mKNzp3IFElRGhGaArtLksm0hX5UQs0mFBilacdsbAqePZl x1JP1zxyKO4XJYlD2o5KUl7ObLiuuzk+NIkPCTqSseIxeyE3OC96e8AXHgFBJP1j zKbDcxgQGKgY/1rEOj6sdBXgvj/K4QVxxYlFroKCAcZG+CgV0lZE2C+/EOjxNjvt Elf+z74LR26e/qLFgUhGEtENxac6ZMdQg37Eb2I= -----END CERTIFICATE-----Generated at Sat Sep 26 16:34:49 2026 by rpki-client