$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/41c17ad6-2850-37e8-8887-ce7da61674a2.roa File: 41c17ad6-2850-37e8-8887-ce7da61674a2.roa (raw, json) Hash identifier: 8qzlclA/KKmngYFjjQckckXfuUxnezv8nByUKJYaqbk= Subject key identifier: 36:4F:81:CC:99:C2:CC:A0:98:BE:31:AB:24:31:03:92:16:54:12:43 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B6252E2015B02A21D473A00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/41c17ad6-2850-37e8-8887-ce7da61674a2.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 144.25.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:52:e2:01:5b:02:a2:1d:47:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=977a733c-61af-47d3-9aea-40896f16bf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:2e:a0:a0:87:ad:86:21:d7:fc:db:fa:96: 6c:5b:3b:73:0c:ad:ad:60:15:6a:e5:17:3d:b8:5e: 9b:5f:2d:ea:20:86:64:db:3e:e6:46:ac:33:06:ba: 40:fe:99:bf:8d:8d:37:0d:8a:32:63:d7:42:1d:f6: c9:e3:c4:b1:f2:2a:46:e2:5d:84:68:1b:5a:42:2f: 95:26:52:7e:e2:c1:07:59:37:52:d2:00:51:9f:7e: 1a:cd:4e:a1:5a:bd:55:5e:04:55:3f:69:ee:90:9d: 30:33:ff:0c:29:f3:20:c2:32:80:7b:3f:b3:2c:1b: b2:ce:6d:9e:e1:cb:46:32:68:f9:b1:60:c5:38:bd: d8:e3:ed:5a:b7:c6:bb:f0:84:0f:71:97:7d:5d:23: 33:61:64:92:65:a8:3b:2e:bf:6c:9e:17:33:1f:f4: 46:5e:95:c3:5c:94:ac:11:3c:9d:b5:cc:7e:e5:a6: 75:8b:b7:ef:6c:72:8e:2a:dd:d9:04:10:90:81:6c: 31:e4:c8:48:66:6e:39:7b:6f:76:59:0e:e9:30:54: 07:ac:dc:57:5f:b7:5a:25:ce:8b:bb:cd:35:89:1a: 12:ba:fc:ac:57:68:39:88:99:89:df:fa:1f:c7:75: 55:51:89:15:8f:81:8d:51:b9:5a:46:07:69:7c:b8: 6f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4F:81:CC:99:C2:CC:A0:98:BE:31:AB:24:31:03:92:16:54:12:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/41c17ad6-2850-37e8-8887-ce7da61674a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7a:1f:f7:e5:7b:63:81:e2:17:05:e8:c6:46:f1:1c:e3:2f: e4:50:eb:f8:fb:66:b7:75:98:be:5a:e5:c9:fa:3b:d7:89:80: 7b:e3:ba:36:d8:3f:fa:15:dd:7c:f1:bd:20:b9:9f:99:e0:7f: 1b:af:9f:c7:48:69:83:06:2d:7b:81:e6:fb:06:f1:56:45:05: a3:df:53:6d:9d:f5:8b:b8:63:5a:6c:f2:9c:2d:5a:4b:d5:c7: 21:78:34:93:72:e5:30:c4:33:b0:8d:92:b1:9d:f1:b4:c7:e4: 6b:88:70:7c:9d:d2:df:ee:f5:aa:cc:d7:67:2f:11:7e:d2:d0: ff:a9:f3:10:a3:a8:60:10:62:91:c1:ef:c3:6b:8d:d1:c9:55: dc:71:b1:78:7a:d0:a9:26:a7:63:44:2e:21:b2:8c:c9:3e:61: 34:1a:58:98:60:90:d7:18:5a:ac:da:7c:88:13:05:e6:07:b1: 5d:c4:c6:6c:ed:e0:43:b2:57:d4:be:79:dd:9f:c2:2d:8a:d6: 38:1c:ff:96:bc:27:c4:da:54:c7:9a:46:8d:e9:ad:84:c7:b4: 88:68:56:85:cd:9c:79:99:a6:bd:b1:89:49:69:d9:be:61:85: 47:07:52:28:04:d6:20:b8:8a:e2:df:29:47:dd:48:b4:de:e2: c7:7a:38:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlLiAVsCoh1HOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk OTc3YTczM2MtNjFhZi00N2QzLTlhZWEtNDA4OTZmMTZiZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHguoKCHrYYh1/zb+pZsWztzDK2tYBVq5Rc9 uF6bXy3qIIZk2z7mRqwzBrpA/pm/jY03DYoyY9dCHfbJ48Sx8ipG4l2EaBtaQi+V JlJ+4sEHWTdS0gBRn34azU6hWr1VXgRVP2nukJ0wM/8MKfMgwjKAez+zLBuyzm2e 4ctGMmj5sWDFOL3Y4+1at8a78IQPcZd9XSMzYWSSZag7Lr9snhczH/RGXpXDXJSs ETydtcx+5aZ1i7fvbHKOKt3ZBBCQgWwx5MhIZm45e292WQ7pMFQHrNxXX7daJc6L u801iRoSuvysV2g5iJmJ3/ofx3VVUYkVj4GNUblaRgdpfLhv4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZPgcyZwsygmL4xqyQxA5IWVBJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDFjMTdhZDYtMjg1MC0z N2U4LTg4ODctY2U3ZGE2MTY3NGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkBlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD16H/fle2OB4hcF6MZG8RzjL+RQ6/j7Zrd1mL5a5cn6O9eJgHvjujbY P/oV3XzxvSC5n5ngfxuvn8dIaYMGLXuB5vsG8VZFBaPfU22d9Yu4Y1ps8pwtWkvV xyF4NJNy5TDEM7CNkrGd8bTH5GuIcHyd0t/u9arM12cvEX7S0P+p8xCjqGAQYpHB 78NrjdHJVdxxsXh60Kkmp2NELiGyjMk+YTQaWJhgkNcYWqzafIgTBeYHsV3Exmzt 4EOyV9S+ed2fwi2K1jgc/5a8J8TaVMeaRo3prYTHtIhoVoXNnHmZpr2xiUlp2b5h hUcHUigE1iC4iuLfKUfdSLTe4sd6OCA= -----END CERTIFICATE-----Generated at Tue Oct 6 01:15:36 2026 by rpki-client