$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/35c5b19c-d212-3871-bbc6-e557994a06be.roa File: 35c5b19c-d212-3871-bbc6-e557994a06be.roa (raw, json) Hash identifier: goPd04wIm/PzzFr9rvbjPzcTRmQHPxk51HnGrDawhNE= Subject key identifier: CD:9F:8C:D0:E0:7C:A0:DD:DB:B4:18:25:E9:5B:44:98:9A:17:97:BB Certificate issuer: /CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Certificate serial: 010D0C9F4328584F49766500DA9F1B7E83B96980 Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/35c5b19c-d212-3871-bbc6-e557994a06be.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40401 IP address blocks: 104.153.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:65:00:da:9f:1b:7e:83:b9:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33e3f8af-255c-401d-9490-c3b247431eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:c7:9f:15:7d:d1:42:db:7b:4c:50:25:45: c9:1d:4f:2b:ac:d1:04:99:4d:97:b5:08:2f:fb:c2: 2e:7e:e2:18:7d:72:81:e1:05:b9:65:20:1e:25:76: 6d:73:4e:79:60:95:22:69:47:3a:41:32:17:5b:88: b4:8c:1c:d9:fb:99:f8:d5:d5:38:9e:a1:d9:cd:44: 0d:5e:71:bb:96:47:95:49:75:ab:c1:30:a4:af:6b: cb:42:4b:de:1d:c7:ba:ac:c4:60:fe:7f:e7:1e:a7: a2:d4:e1:36:b5:6b:7f:0b:61:2f:82:2b:71:fe:8d: df:40:83:76:83:ec:c0:f7:dc:59:30:8a:32:dc:0c: 34:d3:5b:e5:93:8f:e6:80:c3:e8:9b:b1:ef:48:1e: d1:2c:cf:ce:50:58:f8:5d:70:39:d0:65:9c:53:0b: e1:b7:4a:5d:d8:67:1f:c7:ec:71:09:36:69:73:38: 33:80:58:57:18:2c:93:cd:f1:19:b2:0d:f3:1a:20: f8:7b:a5:67:93:7c:ee:59:78:10:df:29:ed:db:ab: 7c:c3:b0:c6:87:7f:4f:77:3b:1c:33:bc:cb:1f:c6: ca:ac:ae:f2:75:74:61:93:e3:40:4a:dc:fd:c6:0a: 13:59:16:9f:74:39:e3:0f:40:49:99:e2:6c:f5:e3: d8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9F:8C:D0:E0:7C:A0:DD:DB:B4:18:25:E9:5B:44:98:9A:17:97:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/35c5b19c-d212-3871-bbc6-e557994a06be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl X509v3 Authority Key Identifier: keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer sbgp-ipAddrBlock: critical IPv4: 104.153.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c1:9d:a6:42:40:8c:11:d5:91:b3:55:a0:40:bf:a6:0d:ea: f9:ba:0a:20:43:ed:22:67:bd:c3:83:7f:77:d2:7b:54:d9:1c: 79:c4:3f:2c:5f:65:3c:a2:23:f8:84:05:82:e4:36:fb:d2:8b: ec:9f:dc:50:68:cb:2c:b6:bc:47:f7:c4:6a:a5:02:d8:37:c1: ab:b0:b3:e6:c6:99:55:8b:e8:5b:9d:55:c0:f9:4f:05:74:81: 95:b2:6e:98:e1:41:06:8b:96:59:6b:6f:02:10:3d:79:ba:48: a2:ab:47:f1:a3:b9:bd:7e:cb:a0:25:95:50:56:04:15:35:3a: 40:af:b2:07:72:d9:5b:7d:ae:6e:74:47:a7:02:66:b8:ce:50: 00:ac:6e:7e:8d:ac:49:71:fb:a0:86:18:61:00:90:0b:c9:78: 4c:17:8c:41:c6:d6:32:af:e9:02:48:c2:d3:7a:fd:a0:74:dd: 28:97:0b:fe:54:86:e3:c8:e6:f2:3e:42:d1:d2:fd:2f:94:c1: 08:03:1e:8e:65:a2:0c:1d:81:61:bf:7d:f2:43:22:05:89:00: 8a:b8:27:6f:6e:8d:46:44:fd:89:5e:ae:7b:c4:fb:8b:be:35: a5:bb:35:ea:03:68:de:54:45:bb:1a:5b:7d:3e:43:76:db:62: 6b:dd:e3:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdmUA2p8bfoO5aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll Mjg3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzNlM2Y4YWYtMjU1Yy00MDFkLTk0OTAtYzNiMjQ3NDMxZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhHHnxV90ULbe0xQJUXJHU8rrNEEmU2XtQgv +8IufuIYfXKB4QW5ZSAeJXZtc055YJUiaUc6QTIXW4i0jBzZ+5n41dU4nqHZzUQN XnG7lkeVSXWrwTCkr2vLQkveHce6rMRg/n/nHqei1OE2tWt/C2Evgitx/o3fQIN2 g+zA99xZMIoy3Aw001vlk4/mgMPom7HvSB7RLM/OUFj4XXA50GWcUwvht0pd2Gcf x+xxCTZpczgzgFhXGCyTzfEZsg3zGiD4e6Vnk3zuWXgQ3ynt26t8w7DGh39Pdzsc M7zLH8bKrK7ydXRhk+NAStz9xgoTWRafdDnjD0BJmeJs9ePYUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2fjNDgfKDd27QYJelbRJiaF5e7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvMzVjNWIxOWMtZDIxMi0z ODcxLWJiYzYtZTU1Nzk5NGEwNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5 ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz YTQyOWUyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHBnaZCQIwR1ZGzVaBAv6YN6vm6CiBD7SJnvcODf3fSe1TZHHnEPyxf ZTyiI/iEBYLkNvvSi+yf3FBoyyy2vEf3xGqlAtg3wauws+bGmVWL6FudVcD5TwV0 gZWybpjhQQaLlllrbwIQPXm6SKKrR/Gjub1+y6AllVBWBBU1OkCvsgdy2Vt9rm50 R6cCZrjOUACsbn6NrElx+6CGGGEAkAvJeEwXjEHG1jKv6QJIwtN6/aB03SiXC/5U huPI5vI+QtHS/S+UwQgDHo5logwdgWG/ffJDIgWJAIq4J29ujUZE/YlernvE+4u+ NaW7NeoDaN5URbsaW30+Q3bbYmvd42Y= -----END CERTIFICATE-----Generated at Fri Oct 2 08:16:40 2026 by rpki-client