$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3f0d580-be52-4223-80c1-0d303be1331e/576f23f9-66ac-329d-937a-a1b76b309b82.roa File: 576f23f9-66ac-329d-937a-a1b76b309b82.roa (raw, json) Hash identifier: 5rp0UVVH9gqYY1KldPHMEQZS24zsuu8aWV9fNLDqEfs= Subject key identifier: CE:EE:C0:4C:13:91:E0:F3:0A:06:85:1A:2B:55:08:47:18:DD:C7:00 Certificate issuer: /CN=e3f0d580-be52-4223-80c1-0d303be1331e Certificate serial: 010D0C9F4328584F27F2573752D5B260232284F0 Authority key identifier: 81:DF:4C:3A:05:6D:FA:7A:8A:09:82:7C:21:D2:F8:09:A3:82:01:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3f0d580-be52-4223-80c1-0d303be1331e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3f0d580-be52-4223-80c1-0d303be1331e/576f23f9-66ac-329d-937a-a1b76b309b82.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 63100 IP address blocks: 104.153.0.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3f0d580-be52-4223-80c1-0d303be1331e/e3f0d580-be52-4223-80c1-0d303be1331e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3f0d580-be52-4223-80c1-0d303be1331e/e3f0d580-be52-4223-80c1-0d303be1331e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3f0d580-be52-4223-80c1-0d303be1331e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:57:37:52:d5:b2:60:23:22:84:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f0d580-be52-4223-80c1-0d303be1331e Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=438d50d4-9ace-4800-9523-9a0a655db916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:69:e0:ec:96:35:30:e3:2f:e4:dc:14:12: c6:f6:13:3f:eb:19:40:9b:a1:55:ee:4f:9f:c1:e3: cb:66:fb:73:0d:41:b7:fc:13:d9:22:7b:f0:54:0c: 41:34:45:ff:80:dd:3a:3e:ef:24:e7:5a:23:ab:51: f0:66:41:e2:4f:b0:a4:76:d7:45:fc:1d:37:4a:42: 0e:19:2e:37:99:7a:b9:21:4b:bb:5d:6b:1e:70:bd: 83:4f:09:f2:b4:60:a8:fe:de:95:98:a1:16:38:7c: 4a:45:7d:6f:59:e2:fe:39:eb:da:52:0a:11:02:fd: 8e:b3:a0:c5:80:f2:b2:76:e8:ae:bc:c7:46:6c:0f: d4:21:5e:f0:e4:5f:fe:65:3b:26:6a:00:5f:62:73: 8a:5c:72:c1:8b:b4:4c:6c:23:62:3c:26:d3:98:28: b8:69:7a:28:80:bb:96:18:91:e6:48:55:d6:0e:df: bd:f9:61:d1:65:66:68:50:9c:a2:1e:c5:4d:d3:6a: c9:59:f3:50:ed:c1:4e:bd:5d:44:67:f5:58:c1:63: 70:b1:70:2e:c5:c2:f4:1b:d0:6d:10:9f:a6:50:0b: 2e:8e:45:e3:b4:4f:99:63:31:cf:c7:21:2f:db:73: ee:ce:55:df:d4:d9:dd:56:d4:30:bb:40:93:b7:98: f2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EE:C0:4C:13:91:E0:F3:0A:06:85:1A:2B:55:08:47:18:DD:C7:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3f0d580-be52-4223-80c1-0d303be1331e/576f23f9-66ac-329d-937a-a1b76b309b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3f0d580-be52-4223-80c1-0d303be1331e/e3f0d580-be52-4223-80c1-0d303be1331e.crl X509v3 Authority Key Identifier: keyid:81:DF:4C:3A:05:6D:FA:7A:8A:09:82:7C:21:D2:F8:09:A3:82:01:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e3f0d580-be52-4223-80c1-0d303be1331e.cer sbgp-ipAddrBlock: critical IPv4: 104.153.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e3:05:50:ea:96:c9:73:77:a7:fd:52:57:69:1b:c5:4f:bb: 45:9d:50:57:07:45:ee:20:69:3f:02:c1:c1:e6:d4:e3:71:e9: 6c:e7:53:27:78:a5:b0:27:d4:1b:8e:b4:20:96:74:d7:ea:7b: 53:8b:a5:98:6f:39:97:85:66:a0:ea:04:8f:03:dc:66:85:71: fc:df:77:39:d7:14:57:01:75:64:3a:7f:a2:5a:0e:c1:1a:9a: c8:24:6f:0a:fa:b5:70:3e:ee:fb:57:64:da:40:5f:c9:02:df: 52:fa:ca:88:63:e5:d1:87:ff:1e:67:3e:22:5e:c0:75:20:0b: de:8b:88:c7:c5:56:52:57:b7:e2:de:51:01:76:52:da:2c:f0: d2:7d:0c:a8:a9:38:94:f3:db:86:c0:d3:74:6f:7b:72:00:2a: a5:1d:f7:d2:2d:45:a0:7c:b1:c9:8c:fe:66:3c:52:f4:40:47: 12:6d:ee:49:ef:df:8d:fb:2a:71:41:5f:83:eb:d7:94:da:ea: 94:0d:8b:f6:9d:b6:63:5f:ae:73:e1:8f:69:ac:8f:0b:b3:42: 2c:ce:e8:b6:d0:d9:15:95:39:2b:a8:46:1b:e5:29:93:c4:7a: 30:d1:80:cd:2d:9c:69:ab:59:45:ec:63:f6:9e:ee:34:8e:83: 6a:9f:8d:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lc3UtWyYCMihPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmMGQ1ODAtYmU1Mi00MjIzLTgwYzEtMGQzMDNiZTEz MzFlMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk NDM4ZDUwZDQtOWFjZS00ODAwLTk1MjMtOWEwYTY1NWRiOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jFp4OyWNTDjL+TcFBLG9hM/6xlAm6FV7k+f wePLZvtzDUG3/BPZInvwVAxBNEX/gN06Pu8k51ojq1HwZkHiT7CkdtdF/B03SkIO GS43mXq5IUu7XWsecL2DTwnytGCo/t6VmKEWOHxKRX1vWeL+OevaUgoRAv2Os6DF gPKyduiuvMdGbA/UIV7w5F/+ZTsmagBfYnOKXHLBi7RMbCNiPCbTmCi4aXoogLuW GJHmSFXWDt+9+WHRZWZoUJyiHsVN02rJWfNQ7cFOvV1EZ/VYwWNwsXAuxcL0G9Bt EJ+mUAsujkXjtE+ZYzHPxyEv23PuzlXf1NndVtQwu0CTt5jyIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7uwEwTkeDzCgaFGitVCEcY3ccAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9lM2Yw ZDU4MC1iZTUyLTQyMjMtODBjMS0wZDMwM2JlMTMzMWUvNTc2ZjIzZjktNjZhYy0z MjlkLTkzN2EtYTFiNzZiMzA5YjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZTNmMGQ1ODAtYmU1Mi00MjIzLTgw YzEtMGQzMDNiZTEzMzFlL2UzZjBkNTgwLWJlNTItNDIyMy04MGMxLTBkMzAzYmUx MzMxZS5jcmwwHwYDVR0jBBgwFoAUgd9MOgVt+nqKCYJ8IdL4CaOCAdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9lM2YwZDU4MC1iZTUyLTQyMjMtODBjMS0wZDMw M2JlMTMzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbjBVDqlslzd6f9UldpG8VPu0WdUFcHRe4gaT8CwcHm1ONx6WznUyd4 pbAn1BuOtCCWdNfqe1OLpZhvOZeFZqDqBI8D3GaFcfzfdznXFFcBdWQ6f6JaDsEa msgkbwr6tXA+7vtXZNpAX8kC31L6yohj5dGH/x5nPiJewHUgC96LiMfFVlJXt+Le UQF2Utos8NJ9DKipOJTz24bA03Rve3IAKqUd99ItRaB8scmM/mY8UvRARxJt7knv 3437KnFBX4Pr15Ta6pQNi/adtmNfrnPhj2msjwuzQizO6LbQ2RWVOSuoRhvlKZPE ejDRgM0tnGmrWUXsY/ae7jSOg2qfjRc= -----END CERTIFICATE-----Generated at Fri Oct 9 02:17:13 2026 by rpki-client