$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa File: cfa6afac-c953-3625-b664-6b5f5be6d982.roa (raw, json) Hash identifier: gWFPjgplEx2X062OD+5G+CccUO+6BAOrwS7LCZzl1WU= Subject key identifier: 4E:73:BF:3D:08:E9:7C:44:D4:05:C8:98:A1:D7:70:88:07:2A:73:96 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584E3FC472683E9C841025DDE260 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 54913 IP address blocks: 198.52.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:72:68:3e:9c:84:10:25:dd:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=1272008e-f783-41f5-ab0e-bf20f25b6e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:ab:b9:93:f2:f2:a0:41:2d:05:c1:17:2e: 54:4f:bd:1b:2a:b8:c8:72:e1:50:20:84:d5:f2:06: a1:f4:01:0e:85:05:fb:d7:33:81:df:80:2c:af:64: b8:1c:92:12:7c:3c:7e:7b:0a:14:ca:dc:bf:90:c3: 7a:1a:a2:e1:69:84:b3:07:7c:27:0a:63:51:3c:46: 40:b6:5c:35:97:d4:f1:d6:8a:73:72:10:88:39:f2: ee:37:ef:9e:5d:81:ac:ee:78:66:2e:63:77:89:e5: 85:49:f9:c3:fd:8d:bf:b5:0c:91:1a:42:f0:c3:17: 2f:4b:56:6f:24:f2:51:f6:63:49:ac:1f:97:95:62: 22:81:a2:ee:12:00:72:6e:33:5b:16:34:c9:09:50: ba:7c:9a:4c:16:c4:7d:19:98:e0:85:48:8d:50:95: c6:5f:5a:37:d1:44:bf:6f:f8:9c:bd:a3:f6:ca:b3: eb:65:94:bd:ec:f8:35:a0:f3:79:a6:bf:c0:31:1a: 3c:14:b5:4e:8c:49:53:82:d2:6e:bc:1a:74:55:41: b1:f5:1c:12:60:cf:b5:fc:0f:96:24:cc:d7:a9:1f: ec:d7:46:17:93:dd:8c:36:c6:e2:25:09:51:f3:5f: 07:10:7d:1a:6c:4e:50:a8:85:b3:c2:c5:37:9d:75: 47:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:73:BF:3D:08:E9:7C:44:D4:05:C8:98:A1:D7:70:88:07:2A:73:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 198.52.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:cc:ff:56:08:56:44:4b:97:c3:97:78:c5:8b:dd:56:e3:44: 84:05:fd:c0:b8:a5:53:60:3d:62:08:1c:05:92:c6:6f:bb:55: 34:ab:91:42:01:5f:35:98:4b:16:b3:c8:3d:b4:41:16:c7:90: 44:e8:9e:e6:ca:99:83:66:24:b2:4b:cc:2e:39:23:67:bb:9a: 96:f2:29:6f:39:90:4e:8d:20:5c:af:71:8f:1e:73:b7:d7:a0: fa:d9:68:23:3e:de:d2:e0:f3:6c:ff:f7:6b:49:81:e2:2a:79: 97:dc:0e:c1:64:3a:29:a8:d7:37:5c:23:40:34:e2:ee:af:ee: 43:4d:d7:97:12:36:d7:68:44:48:1b:8d:1f:b4:b4:bc:be:1d: f9:60:c7:1e:60:e5:9a:ff:72:8c:c5:66:28:52:1c:2f:a1:32: 13:d5:27:ba:fa:41:4c:1d:43:9f:4f:60:98:9e:e7:ea:a2:f0: 89:d6:89:00:ac:ad:6b:0a:ce:73:cb:4e:61:38:9e:4e:a6:a7: c5:63:2b:5a:a5:ad:05:3b:d8:c7:ec:3c:e0:0f:63:89:75:4c: fa:1b:2a:78:54:7a:e0:b5:6f:20:5d:6b:f8:ab:29:2b:b1:66: 97:06:d7:ee:5c:db:91:27:96:75:b7:8d:95:ad:cd:9a:5e:63: e0:3c:44:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xHJoPpyEECXd4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk MTI3MjAwOGUtZjc4My00MWY1LWFiMGUtYmYyMGYyNWI2ZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/aruZPy8qBBLQXBFy5UT70bKrjIcuFQIITV 8gah9AEOhQX71zOB34Asr2S4HJISfDx+ewoUyty/kMN6GqLhaYSzB3wnCmNRPEZA tlw1l9Tx1opzchCIOfLuN++eXYGs7nhmLmN3ieWFSfnD/Y2/tQyRGkLwwxcvS1Zv JPJR9mNJrB+XlWIigaLuEgBybjNbFjTJCVC6fJpMFsR9GZjghUiNUJXGX1o30US/ b/icvaP2yrPrZZS97Pg1oPN5pr/AMRo8FLVOjElTgtJuvBp0VUGx9RwSYM+1/A+W JMzXqR/s10YXk92MNsbiJQlR818HEH0abE5QqIWzwsU3nXVHtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5zvz0I6XxE1AXImKHXcIgHKnOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvY2ZhNmFmYWMtYzk1My0z NjI1LWI2NjQtNmI1ZjViZTZkOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjT1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHM/1YIVkRLl8OXeMWL3VbjRIQF/cC4pVNgPWIIHAWSxm+7VTSrkUIB XzWYSxazyD20QRbHkETonubKmYNmJLJLzC45I2e7mpbyKW85kE6NIFyvcY8ec7fX oPrZaCM+3tLg82z/92tJgeIqeZfcDsFkOimo1zdcI0A04u6v7kNN15cSNtdoREgb jR+0tLy+Hflgxx5g5Zr/cozFZihSHC+hMhPVJ7r6QUwdQ59PYJie5+qi8InWiQCs rWsKznPLTmE4nk6mp8VjK1qlrQU72MfsPOAPY4l1TPobKnhUeuC1byBda/irKSux ZpcG1+5c25EnlnW3jZWtzZpeY+A8RO8= -----END CERTIFICATE-----Generated at Fri Jul 24 15:47:40 2026 by rpki-client