$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa File: c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa (raw, json) Hash identifier: jvMBzjw2fOgMomT27dPZ5oWglqCozqNjMV7nthy4Omo= Subject key identifier: CE:65:6D:8B:8F:63:D0:82:C0:E3:60:49:4A:FE:C1:56:94:CE:CE:D4 Certificate issuer: /CN=53047e29-2570-4585-9e69-b23797196c26 Certificate serial: 010D0C9F4328584ED431ED954B62125172DB4F40 Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 397183 IP address blocks: 158.116.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:ed:95:4b:62:12:51:72:db:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53047e29-2570-4585-9e69-b23797196c26 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=27645005-3726-4675-886a-f3eeb2469a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:69:fe:16:e4:82:b0:75:b4:fa:3b:4b:42: de:13:b8:9b:d5:3f:c8:3e:18:c1:e6:6f:0e:7c:28: 1f:a3:2b:ed:0a:6e:74:59:39:38:66:5f:82:c6:40: 32:85:aa:20:9f:0b:e2:f0:36:2e:bf:3f:1a:bd:f0: 2c:e0:bd:0e:81:23:56:5e:b6:dd:88:76:d3:0d:fe: d1:16:f6:71:a6:44:30:e6:31:f4:45:70:78:8e:24: ca:58:d4:f0:e3:10:a3:04:48:73:3a:50:62:16:97: 5a:4a:0d:bb:35:71:eb:74:6c:44:d6:91:b4:0f:2b: 7d:8e:5e:21:e3:cc:27:45:8d:55:28:e7:70:c7:66: 10:76:a1:4c:ad:93:d9:06:bf:cc:82:34:65:c0:cd: ab:08:d6:ed:a5:9a:87:f1:ac:c7:c2:d4:2d:40:1a: 62:68:99:74:f7:36:09:21:ad:d7:a6:9a:4b:57:c3: 03:6e:4a:89:75:c2:d3:f7:a5:1c:01:1e:87:73:fe: 97:91:6a:c1:31:2c:59:c3:28:ef:ed:12:12:90:8e: ec:5b:19:0b:1f:6b:fa:3c:e8:ba:54:55:a9:40:b5: d8:82:43:5a:ab:be:1a:e0:66:a1:fa:ec:c4:82:76: 15:ee:bc:6a:15:29:e6:d6:47:e6:76:2a:c5:ce:c1: c8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:65:6D:8B:8F:63:D0:82:C0:E3:60:49:4A:FE:C1:56:94:CE:CE:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl X509v3 Authority Key Identifier: keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer sbgp-ipAddrBlock: critical IPv4: 158.116.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:65:9f:37:0b:c1:de:49:8d:ad:03:d8:3a:1f:1f:a4:f1:05: b6:7f:88:80:1c:60:48:39:6a:e9:44:02:0b:8d:27:27:e7:f1: b6:1f:fd:95:a2:e3:d1:52:9d:17:30:0f:2c:0d:78:3a:b5:12: 8a:6b:88:32:69:8a:b2:8a:15:bc:c8:31:ff:70:7e:b1:d4:3f: 01:42:3c:f5:fd:01:00:27:00:3f:f0:79:a2:e4:5a:cc:38:ae: 6b:af:d5:34:58:70:25:fe:ec:0d:54:75:92:3b:4b:0f:04:36: e9:fa:c0:4d:c7:1c:b1:b5:3c:41:ba:3e:96:01:9d:d4:40:11: 17:4b:6e:95:f6:f3:de:b9:47:6e:9c:86:a4:22:42:1f:d1:13: 9d:df:85:dc:7f:6e:21:cb:4a:5d:f3:58:0c:a3:61:e1:9e:92: 3a:81:e1:dd:65:cc:ad:2d:bb:2e:95:3b:ad:84:53:55:ef:43: 8a:06:a6:a3:4f:a2:ec:49:17:c6:46:b8:2e:4e:06:22:9d:67: 3e:23:a2:6a:20:1a:08:1e:4e:70:6d:09:f7:7e:8c:35:2f:88: d0:7f:46:b4:87:5d:20:08:b8:c0:f3:ea:35:59:bd:84:ef:95: f3:e9:e1:e4:e8:8f:ef:32:28:49:69:7c:3f:7b:cc:0e:8f:ea: 64:fc:38:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMe2VS2ISUXLbT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwNDdlMjktMjU3MC00NTg1LTllNjktYjIzNzk3MTk2 YzI2MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk Mjc2NDUwMDUtMzcyNi00Njc1LTg4NmEtZjNlZWIyNDY5YTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDxp/hbkgrB1tPo7S0LeE7ib1T/IPhjB5m8O fCgfoyvtCm50WTk4Zl+CxkAyhaognwvi8DYuvz8avfAs4L0OgSNWXrbdiHbTDf7R FvZxpkQw5jH0RXB4jiTKWNTw4xCjBEhzOlBiFpdaSg27NXHrdGxE1pG0Dyt9jl4h 48wnRY1VKOdwx2YQdqFMrZPZBr/MgjRlwM2rCNbtpZqH8azHwtQtQBpiaJl09zYJ Ia3XpppLV8MDbkqJdcLT96UcAR6Hc/6XkWrBMSxZwyjv7RISkI7sWxkLH2v6POi6 VFWpQLXYgkNaq74a4Gah+uzEgnYV7rxqFSnm1kfmdirFzsHIUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5lbYuPY9CCwONgSUr+wVaUzs7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MzA0 N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3OTcxOTZjMjYvYzQxYzU0MWEtNDIxOS0z MmRkLWFjMDUtYjliYmYxZGRlYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTMwNDdlMjktMjU3MC00NTg1LTll NjktYjIzNzk3MTk2YzI2LzUzMDQ3ZTI5LTI1NzAtNDU4NS05ZTY5LWIyMzc5NzE5 NmMyNi5jcmwwHwYDVR0jBBgwFoAUwbHF/ap4TpJ+5eUnes7voPyzEdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MzA0N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3 OTcxOTZjMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnnQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBlnzcLwd5Jja0D2DofH6TxBbZ/iIAcYEg5aulEAguNJyfn8bYf/ZWi 49FSnRcwDywNeDq1EopriDJpirKKFbzIMf9wfrHUPwFCPPX9AQAnAD/weaLkWsw4 rmuv1TRYcCX+7A1UdZI7Sw8ENun6wE3HHLG1PEG6PpYBndRAERdLbpX28965R26c hqQiQh/RE53fhdx/biHLSl3zWAyjYeGekjqB4d1lzK0tuy6VO62EU1XvQ4oGpqNP ouxJF8ZGuC5OBiKdZz4jomogGggeTnBtCfd+jDUviNB/RrSHXSAIuMDz6jVZvYTv lfPp4eToj+8yKElpfD97zA6P6mT8OJ0= -----END CERTIFICATE-----Generated at Sat Sep 5 09:41:59 2026 by rpki-client