$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86cafe7-0321-3f4f-8a92-52b07466fa7b.roa File: a86cafe7-0321-3f4f-8a92-52b07466fa7b.roa (raw, json) Hash identifier: 6A3txtVSBd85R/GhMgBj24l9Ri/ucgvFf+ggSYdWVOU= Subject key identifier: B5:21:83:74:6B:41:11:C0:29:35:BA:8D:99:79:CE:14:D6:09:6E:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4980D6BCA473A226A68CE600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86cafe7-0321-3f4f-8a92-52b07466fa7b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33650 IP address blocks: 173.14.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:d6:bc:a4:73:a2:26:a6:8c:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=655b273e-9e79-4330-a59d-d647ebf5e4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:86:8c:c3:15:52:b5:8e:15:ac:45:84:13:00: 3e:aa:8c:d5:48:e4:0d:6d:2d:35:1c:75:52:a5:e8: 6f:94:2b:9f:5b:b1:e7:82:c8:fc:a4:a2:71:69:45: 92:fd:8c:ef:d5:ba:20:04:1e:55:66:5f:1a:2e:ae: 0d:cd:05:2c:43:f1:80:cf:7a:7e:53:0c:bd:dc:de: 03:15:2b:77:4b:88:ba:53:72:67:fa:73:7a:1b:21: a0:c0:fc:03:28:7f:cd:c7:99:b6:ad:10:e7:e2:91: 7c:95:05:40:5b:3a:f1:ba:05:0f:7d:ae:cc:92:dd: 8f:30:be:45:82:0d:ce:77:ce:46:3a:db:69:73:f0: 37:c5:69:ff:61:be:ff:7c:9c:15:60:94:e0:b7:63: ac:a9:7c:4d:6c:6b:9b:ae:d1:e9:5e:19:d7:ba:ce: f7:d2:2c:31:40:2b:eb:96:b4:00:69:8c:aa:bd:b6: 4c:41:90:f5:a8:bd:34:c0:46:2e:25:17:b1:b1:3d: f9:be:a6:d5:70:71:d4:4a:98:80:5b:4f:02:00:97: 78:e7:af:97:2f:ac:22:90:c3:72:c2:05:be:45:ac: f0:74:4d:68:01:f7:b4:d3:9d:78:b3:b1:49:a6:e4: 95:df:5e:84:60:ca:32:c2:18:2e:98:65:ce:d3:48: e9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:21:83:74:6B:41:11:C0:29:35:BA:8D:99:79:CE:14:D6:09:6E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86cafe7-0321-3f4f-8a92-52b07466fa7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 173.14.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c2:2c:f6:d2:4f:41:f1:59:45:cd:94:20:ea:3e:e0:25:3a: 5e:83:fe:52:6e:c6:c6:70:2b:c2:ce:23:46:60:0a:f7:e3:5b: c7:3c:1c:25:67:be:e2:81:30:b2:f4:48:d9:7b:d1:11:49:e5: 4e:79:3c:b4:c2:aa:ab:f6:90:84:2e:c3:f8:96:ea:13:ea:29: 4c:08:5d:23:c8:65:0c:81:07:f0:64:c1:49:b8:86:1b:cd:1e: 6b:50:c6:47:8b:2e:0e:05:f7:37:1e:e5:54:44:bc:63:4e:67: 4c:ee:32:80:bf:42:b9:54:c5:a6:36:4c:ed:73:71:2e:b5:fa: b4:eb:59:d2:58:d6:8e:28:2a:ea:c6:1d:7d:5f:22:31:81:ff: a9:d7:8e:d2:7a:ce:bf:60:f5:02:e9:1c:a5:9b:de:f4:5c:92: c4:86:8e:17:4f:ed:01:36:8c:c3:a1:7b:cb:8a:5c:b2:f8:3e: 95:58:ff:2d:a9:dc:78:cf:a0:3d:8c:cd:6d:95:1c:4f:49:ba: 23:2e:1d:b3:77:1b:64:4e:e2:fa:13:25:cc:07:15:51:64:46: 87:15:fd:2a:d0:29:ec:c7:cb:f1:b9:59:21:03:0d:36:20:b4: 2b:55:2b:d1:8e:b9:a3:5b:14:68:f9:23:81:43:f9:44:2b:98: 0c:df:b8:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgNa8pHOiJqaM5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjU1YjI3M2UtOWU3OS00MzMwLWE1OWQtZDY0N2ViZjVlNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIaMwxVStY4VrEWEEwA+qozVSOQNbS01HHVS pehvlCufW7Hngsj8pKJxaUWS/Yzv1bogBB5VZl8aLq4NzQUsQ/GAz3p+Uwy93N4D FSt3S4i6U3Jn+nN6GyGgwPwDKH/Nx5m2rRDn4pF8lQVAWzrxugUPfa7Mkt2PML5F gg3Od85GOttpc/A3xWn/Yb7/fJwVYJTgt2OsqXxNbGubrtHpXhnXus730iwxQCvr lrQAaYyqvbZMQZD1qL00wEYuJRexsT35vqbVcHHUSpiAW08CAJd456+XL6wikMNy wgW+RazwdE1oAfe00514s7FJpuSV316EYMoywhgumGXO00jpPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUhg3RrQRHAKTW6jZl5zhTWCW5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTg2Y2FmZTctMDMyMS0z ZjRmLThhOTItNTJiMDc0NjZmYTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErQ7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbCLPbST0HxWUXNlCDqPuAlOl6D/lJuxsZwK8LOI0ZgCvfjW8c8HCVn vuKBMLL0SNl70RFJ5U55PLTCqqv2kIQuw/iW6hPqKUwIXSPIZQyBB/BkwUm4hhvN HmtQxkeLLg4F9zce5VREvGNOZ0zuMoC/QrlUxaY2TO1zcS61+rTrWdJY1o4oKurG HX1fIjGB/6nXjtJ6zr9g9QLpHKWb3vRcksSGjhdP7QE2jMOhe8uKXLL4PpVY/y2p 3HjPoD2MzW2VHE9JuiMuHbN3G2RO4voTJcwHFVFkRocV/SrQKezHy/G5WSEDDTYg tCtVK9GOuaNbFGj5I4FD+UQrmAzfuL4= -----END CERTIFICATE-----Generated at Fri Sep 25 06:00:43 2026 by rpki-client