$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa File: 41d5735c-bf44-3d40-b55c-71b48a44901f.roa (raw, json) Hash identifier: /izdwPpSURa36C38U97OxyfWVdWWtEfP/q/+pEDGYPc= Subject key identifier: 42:41:4F:DB:E7:25:88:30:15:F2:8D:00:D2:40:51:FD:34:B0:AA:D6 Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Certificate serial: 010D0C9F4328584DA11ABDFC7369E58CF2674F00 Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 40230 IP address blocks: 104.143.48.0/20 maxlen: 24 199.247.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:bd:fc:73:69:e5:8c:f2:67:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=c7775347-78f0-44de-bd4a-e6e01372a812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:78:17:3e:c5:d1:c0:0e:0e:e5:a0:af:bb:a3: 01:85:ec:15:d2:f6:db:36:55:aa:74:21:79:3e:94: c4:0a:77:1b:04:97:b8:0a:09:cf:f9:71:fa:0f:d5: e6:f1:24:a6:20:0e:dd:7b:61:11:4b:77:15:b2:02: 1e:4e:70:b7:44:c4:ef:fe:58:63:90:36:de:ee:93: 91:9b:42:b9:ee:43:c1:b0:b2:24:57:cf:b1:70:41: 12:34:93:9d:e8:50:36:46:21:73:ea:c3:64:8c:75: 8d:14:63:ff:2c:b2:44:60:ee:97:40:8b:f4:8c:5a: 03:31:95:5a:b4:ee:d4:51:48:28:3b:de:b2:4d:15: f0:88:28:b6:47:84:b6:78:d8:b9:54:cb:8b:44:81: dc:97:6e:88:1f:05:96:a0:b9:95:79:76:95:3e:1e: 06:0b:0e:59:7e:0d:cf:fc:98:0a:93:66:1e:c5:57: 50:c0:2d:ab:a9:d6:22:74:07:09:24:f5:2e:49:db: 7e:a7:80:3b:84:8d:d3:b4:d5:20:11:73:a9:26:e7: a0:36:a0:10:17:03:d1:58:55:dd:98:a9:1b:24:a0: 3b:4d:40:5c:b2:68:3e:ac:6d:fa:82:b8:8c:ec:7f: 78:22:db:e1:81:06:7d:d8:86:da:9e:24:53:d8:53: 69:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:41:4F:DB:E7:25:88:30:15:F2:8D:00:D2:40:51:FD:34:B0:AA:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl X509v3 Authority Key Identifier: keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer sbgp-ipAddrBlock: critical IPv4: 104.143.48.0/20 199.247.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fc:7c:43:e7:41:c5:dc:d7:ff:08:6e:3f:a1:a5:07:4d:c6: 25:3d:02:8c:fc:9c:5a:ce:7c:38:43:86:33:60:c3:fd:27:ed: e0:51:d3:0f:b5:be:73:3d:72:93:ee:e3:1a:b5:1e:27:78:7d: 41:bc:41:77:a1:92:89:fa:91:99:33:b2:d0:d7:c8:b6:99:62: ea:9f:78:a2:d4:1b:1e:3d:bc:36:e2:9a:19:45:98:d8:4b:9f: 09:03:48:19:57:83:69:f3:d8:b4:d1:7f:ec:76:51:a5:41:bb: 5e:91:90:2c:08:76:46:4e:6c:ba:52:a4:b1:87:ad:6c:0e:1b: 21:37:fe:fa:54:b2:39:8a:4d:17:00:20:3a:b9:eb:6b:23:3e: be:87:86:c9:9f:31:96:7f:90:1b:76:d9:a1:00:7e:3c:89:28: 08:4f:7f:9f:4b:17:0f:50:e0:01:b4:e5:dd:c3:df:db:ab:e1: b2:e7:f4:31:73:44:9a:49:24:de:f5:c1:be:ce:6a:25:54:f6: 17:05:95:d4:0b:29:72:0e:7c:ad:21:85:27:0d:54:f8:79:89: db:49:6f:7f:59:01:b5:7e:f6:12:bc:d8:31:5b:de:8f:2e:63: 48:17:a7:2b:22:f5:47:02:6f:28:88:a9:8b:99:37:7d:05:be: b1:81:fd:2d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2hGr38c2nljPJnTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy YWYwMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk Yzc3NzUzNDctNzhmMC00NGRlLWJkNGEtZTZlMDEzNzJhODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgngXPsXRwA4O5aCvu6MBhewV0vbbNlWqdCF5 PpTECncbBJe4CgnP+XH6D9Xm8SSmIA7de2ERS3cVsgIeTnC3RMTv/lhjkDbe7pOR m0K57kPBsLIkV8+xcEESNJOd6FA2RiFz6sNkjHWNFGP/LLJEYO6XQIv0jFoDMZVa tO7UUUgoO96yTRXwiCi2R4S2eNi5VMuLRIHcl26IHwWWoLmVeXaVPh4GCw5Zfg3P /JgKk2YexVdQwC2rqdYidAcJJPUuSdt+p4A7hI3TtNUgEXOpJuegNqAQFwPRWFXd mKkbJKA7TUBcsmg+rG36griM7H94ItvhgQZ92IbaniRT2FNpNwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEJBT9vnJYgwFfKNANJAUf00sKrWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvNDFkNTczNWMtYmY0NC0z ZDQwLWI1NWMtNzFiNDhhNDQ5MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1 M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0 MzRiYzJhZjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaI8wAwQD x/eQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADT8fEPnQcXc1/8Ibj+hpQdNxiU9Aoz8nFrOfDhDhjNgw/0n 7eBR0w+1vnM9cpPu4xq1Hid4fUG8QXehkon6kZkzstDXyLaZYuqfeKLUGx49vDbi mhlFmNhLnwkDSBlXg2nz2LTRf+x2UaVBu16RkCwIdkZObLpSpLGHrWwOGyE3/vpU sjmKTRcAIDq562sjPr6HhsmfMZZ/kBt22aEAfjyJKAhPf59LFw9Q4AG05d3D39ur 4bLn9DFzRJpJJN71wb7OaiVU9hcFldQLKXIOfK0hhScNVPh5idtJb39ZAbV+9hK8 2DFb3o8uY0gXpysi9UcCbyiIqYuZN30FvrGB/S0= -----END CERTIFICATE-----Generated at Mon Apr 27 11:19:33 2026 by rpki-client