$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa File: 2a008e47-d7ee-388f-8dd0-00eec15271e8.roa (raw, json) Hash identifier: pjAaQRl3Q40sEmDiUumiOnuoM6gAaTEmTkyc/59AJHg= Subject key identifier: 9E:24:69:5D:AF:9C:78:23:C7:0E:DD:1F:74:4D:D2:94:3D:20:F2:CD Certificate issuer: /CN=143c0e16-c384-40db-8cbd-7b2f4a55e007 Certificate serial: 010D0C9F4328584EF717634553A8F0DE87DD9C00 Authority key identifier: 8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 15154 IP address blocks: 64.113.32.0/20 maxlen: 24 198.232.165.0/24 maxlen: 24 198.232.166.0/24 maxlen: 24 2604:e780::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:63:45:53:a8:f0:de:87:dd:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143c0e16-c384-40db-8cbd-7b2f4a55e007 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=14695df3-8eab-41b4-884c-40180a7656f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:9d:c7:7b:d0:93:8a:86:d1:4c:25:19:30: 82:f2:8b:da:4c:d6:c4:85:6c:1a:42:77:2f:18:f9: 6f:87:2d:fc:23:a3:53:35:ff:56:c4:35:a8:8c:8b: be:e9:77:b4:6d:8e:8d:9e:6b:36:74:14:b3:6a:31: 09:31:75:6f:68:c6:59:fb:11:13:6e:d3:98:65:2f: e8:9e:d2:5b:59:19:24:f3:18:5c:0b:18:26:9f:21: 03:1d:f0:b0:d5:75:0f:87:00:06:8a:36:9f:d0:f2: 6f:3b:00:5c:d3:d0:e8:f4:f1:e3:be:75:71:e7:bc: 90:c0:c6:b1:25:6d:df:e0:78:bc:ef:47:c3:7e:8a: 29:df:92:12:a7:45:1b:b2:0a:be:4c:4c:15:77:4f: 33:3b:83:32:1b:03:24:35:0c:61:6e:7d:b6:17:af: d1:b2:ce:a2:f2:3f:a0:99:f2:15:45:f5:58:3d:9f: c4:59:61:99:c5:11:04:60:bc:2a:2c:e8:fd:76:55: bb:58:dd:c3:61:26:b3:b3:48:e1:c9:5b:0b:f7:f3: 63:33:08:d2:e9:7e:9c:2e:a1:b0:a0:bf:de:19:dd: ba:a1:f3:65:df:b1:ae:c9:c2:f0:d7:12:a1:ba:df: c5:15:66:7a:f7:8e:e9:2e:a8:25:4f:f3:a2:3b:83: 6f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:24:69:5D:AF:9C:78:23:C7:0E:DD:1F:74:4D:D2:94:3D:20:F2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.crl X509v3 Authority Key Identifier: keyid:8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer sbgp-ipAddrBlock: critical IPv4: 64.113.32.0/20 198.232.165.0-198.232.166.255 IPv6: 2604:e780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:95:2d:2c:02:de:83:5f:f5:c9:86:23:7b:56:02:1d:11:a1: 54:ee:a2:ef:27:9d:07:54:48:28:5d:53:6d:1a:83:74:1f:86: 95:63:e7:ba:7d:74:17:44:9b:9a:7a:e7:fe:4c:7c:5d:4d:8f: de:53:53:38:6f:9e:b8:fa:30:bb:11:6e:c8:1f:ae:dc:4c:50: f7:37:8a:5a:d0:d9:32:21:7e:82:f8:d9:30:97:97:cf:d0:57: e6:40:6b:25:ef:ca:45:5e:3d:ce:c9:06:fc:25:90:e4:28:1a: 79:5e:e2:f5:1a:40:d0:c2:88:9d:68:49:ce:a0:ca:a5:ba:6c: 15:ad:0a:4e:0a:74:93:7f:09:cf:22:b4:9c:ab:5b:59:14:49: 6f:1b:a3:d1:ac:24:bb:c1:d5:2a:3b:95:55:2f:e2:6b:53:93: 3a:e4:17:e1:da:54:2b:3c:44:c1:44:f0:ba:91:e8:e2:23:c8: ff:68:f5:b9:76:0b:dc:b3:3e:99:16:a1:f1:f9:a7:4f:44:12: 42:d7:4a:b7:44:99:97:e0:0c:24:7e:70:d6:60:bb:58:b0:59: 52:09:1a:e7:76:fa:2b:f7:88:42:5e:b5:31:80:99:d0:8c:91: 87:64:b0:49:5e:cb:cc:c1:2e:38:4a:67:22:fa:e7:bb:2b:49: f5:9f:d5:24 -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWE73F2NFU6jw3ofdnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzYzBlMTYtYzM4NC00MGRiLThjYmQtN2IyZjRhNTVl MDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MTQ2OTVkZjMtOGVhYi00MWI0LTg4NGMtNDAxODBhNzY1NmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva2dx3vQk4qG0UwlGTCC8ovaTNbEhWwaQncv GPlvhy38I6NTNf9WxDWojIu+6Xe0bY6Nnms2dBSzajEJMXVvaMZZ+xETbtOYZS/o ntJbWRkk8xhcCxgmnyEDHfCw1XUPhwAGijaf0PJvOwBc09Do9PHjvnVx57yQwMax JW3f4Hi870fDfoop35ISp0Ubsgq+TEwVd08zO4MyGwMkNQxhbn22F6/Rss6i8j+g mfIVRfVYPZ/EWWGZxREEYLwqLOj9dlW7WN3DYSazs0jhyVsL9/NjMwjS6X6cLqGw oL/eGd26ofNl37GuycLw1xKhut/FFWZ6947pLqglT/OiO4NvgwIDAQABo4IDcjCC A24wHQYDVR0OBBYEFJ4kaV2vnHgjxw7dH3RN0pQ9IPLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNDNj MGUxNi1jMzg0LTQwZGItOGNiZC03YjJmNGE1NWUwMDcvMmEwMDhlNDctZDdlZS0z ODhmLThkZDAtMDBlZWMxNTI3MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTQzYzBlMTYtYzM4NC00MGRiLThj YmQtN2IyZjRhNTVlMDA3LzE0M2MwZTE2LWMzODQtNDBkYi04Y2JkLTdiMmY0YTU1 ZTAwNy5jcmwwHwYDVR0jBBgwFoAUi9Pfs4d9asHh2MLHv8+hNwKNfB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNDNjMGUxNi1jMzg0LTQwZGItOGNiZC03YjJm NGE1NWUwMDcuY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQEQHEgMAwD BADG6KUDBADG6KYwDQQCAAIwBwMFACYE54AwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPpUtLALeg1/1yYYj e1YCHRGhVO6i7yedB1RIKF1TbRqDdB+GlWPnun10F0Sbmnrn/kx8XU2P3lNTOG+e uPowuxFuyB+u3ExQ9zeKWtDZMiF+gvjZMJeXz9BX5kBrJe/KRV49zskG/CWQ5Cga eV7i9RpA0MKInWhJzqDKpbpsFa0KTgp0k38JzyK0nKtbWRRJbxuj0awku8HVKjuV VS/ia1OTOuQX4dpUKzxEwUTwupHo4iPI/2j1uXYL3LM+mRah8fmnT0QSQtdKt0SZ l+AMJH5w1mC7WLBZUgka53b6K/eIQl61MYCZ0IyRh2SwSV7LzMEuOEpnIvrnuytJ 9Z/VJA== -----END CERTIFICATE-----Generated at Fri Sep 25 00:13:40 2026 by rpki-client