$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/cf43d6ff-d354-3659-b5fe-2b5cb89cb6f1.roa File: cf43d6ff-d354-3659-b5fe-2b5cb89cb6f1.roa (raw, json) Hash identifier: m7/KcIQPaniSLarwKkVxgzGyj1G8V4xeN2aNTFJOHyY= Subject key identifier: 94:FD:40:4C:BF:ED:6A:1A:D0:13:CB:6F:93:47:8D:91:73:24:0B:55 Certificate issuer: /CN=946cb195-9b9a-4836-9152-b97e9e831144 Certificate serial: 010D0C9F4328584F119CECD55218FE3470391000 Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/cf43d6ff-d354-3659-b5fe-2b5cb89cb6f1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 142.54.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ec:d5:52:18:fe:34:70:39:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=395b38e7-7e2c-447c-92c4-a6e03ec9ac3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:df:7c:17:ef:dd:0d:5d:52:09:30:19:6b:89: 52:b6:82:ff:ec:43:7a:91:ab:9b:d4:31:54:e4:cf: be:ec:2b:74:6b:48:e8:ea:dc:c4:d0:d2:81:da:d6: d5:c1:19:08:7c:e8:ec:a2:e8:cd:62:1d:2c:c5:47: cc:dc:9d:e7:9a:d8:9a:28:bf:c3:cb:00:1b:0d:ff: c8:c4:65:75:3e:b9:96:90:49:ec:ad:0d:d9:b3:54: 6f:f1:5b:8b:b5:4f:fc:12:f5:d3:f0:c2:44:e1:ad: 9b:c5:09:6c:94:cc:11:8b:8a:78:f4:8a:57:1f:0a: 21:45:11:9f:5d:b8:47:7f:59:a2:2c:f1:57:63:82: 20:49:67:21:96:20:7f:1e:cd:7d:23:e5:c0:10:4c: a2:7b:3e:87:78:b0:4f:32:a3:36:fd:83:08:0f:68: f7:64:b9:16:8a:4d:00:87:24:e8:d5:c9:24:59:e4: 7c:de:98:06:78:91:c1:2d:12:be:17:82:0d:60:49: 27:78:a0:fb:47:85:70:ce:97:ea:30:43:06:12:91: c1:91:4f:89:c0:cb:f0:85:60:05:a9:ad:0a:d8:b5: 9b:77:ee:73:bc:b4:92:c0:09:e8:d3:f0:04:61:ae: a7:d2:0e:c8:db:05:0a:cb:ea:0a:55:ab:ee:12:a0: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FD:40:4C:BF:ED:6A:1A:D0:13:CB:6F:93:47:8D:91:73:24:0B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/cf43d6ff-d354-3659-b5fe-2b5cb89cb6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl X509v3 Authority Key Identifier: keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer sbgp-ipAddrBlock: critical IPv4: 142.54.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:72:45:dc:35:c2:b5:08:8c:e6:de:84:c2:f0:fc:4c:b4:5b: 48:d1:2b:2c:64:c0:33:4c:93:ec:57:74:dc:8b:36:be:6b:d4: 93:5c:3d:7e:31:5d:64:a4:ba:db:40:69:a3:1d:d0:29:21:ac: 29:c2:a9:4d:ec:86:2a:86:92:74:2c:57:09:9f:a4:3f:f4:c8: a2:4b:71:2b:67:64:be:9c:5a:ba:bd:88:39:fd:52:4e:f9:ac: 5b:ae:d1:1e:75:c1:ba:8b:70:bc:7f:3f:98:ba:8d:7c:7b:34: 9f:77:a8:40:44:52:d0:b0:f8:a2:83:36:05:43:be:f6:8e:31: fd:e9:3f:7b:0b:1a:c7:08:9d:90:6b:57:7b:8c:69:11:57:a7: f0:60:7d:3f:68:55:d3:eb:be:0d:a5:8a:9f:c8:7d:c1:f4:02: a8:2f:be:60:38:13:80:41:4b:cb:f7:d7:fc:5b:fd:05:2e:a2: 18:13:38:30:b0:a3:64:13:32:3a:6b:74:00:79:19:a2:17:cf: ea:8b:72:00:73:0b:02:eb:da:4e:33:9d:48:a6:f0:2d:d9:38: c6:4f:da:99:0e:3e:de:cd:cd:d2:fd:69:07:a2:81:bb:0c:23: 00:2c:67:f6:5f:be:55:c1:5f:8d:dc:32:57:e8:01:49:64:8f: 3b:c8:94:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOzVUhj+NHA5EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ2Y2IxOTUtOWI5YS00ODM2LTkxNTItYjk3ZTllODMx MTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzk1YjM4ZTctN2UyYy00NDdjLTkyYzQtYTZlMDNlYzlhYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm998F+/dDV1SCTAZa4lStoL/7EN6kaub1DFU 5M++7Ct0a0jo6tzE0NKB2tbVwRkIfOjsoujNYh0sxUfM3J3nmtiaKL/DywAbDf/I xGV1PrmWkEnsrQ3Zs1Rv8VuLtU/8EvXT8MJE4a2bxQlslMwRi4p49IpXHwohRRGf XbhHf1miLPFXY4IgSWchliB/Hs19I+XAEEyiez6HeLBPMqM2/YMID2j3ZLkWik0A hyTo1ckkWeR83pgGeJHBLRK+F4INYEkneKD7R4VwzpfqMEMGEpHBkU+JwMvwhWAF qa0K2LWbd+5zvLSSwAno0/AEYa6n0g7I2wUKy+oKVavuEqDpEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT9QEy/7Woa0BPLb5NHjZFzJAtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZj YjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdlOWU4MzExNDQvY2Y0M2Q2ZmYtZDM1NC0z NjU5LWI1ZmUtMmI1Y2I4OWNiNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTQ2Y2IxOTUtOWI5YS00ODM2LTkx NTItYjk3ZTllODMxMTQ0Lzk0NmNiMTk1LTliOWEtNDgzNi05MTUyLWI5N2U5ZTgz MTE0NC5jcmwwHwYDVR0jBBgwFoAU1WDzXob02ndtuMXazfHRY5vlND0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZjYjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdl OWU4MzExNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjjYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpyRdw1wrUIjObehMLw/Ey0W0jRKyxkwDNMk+xXdNyLNr5r1JNcPX4x XWSkuttAaaMd0CkhrCnCqU3shiqGknQsVwmfpD/0yKJLcStnZL6cWrq9iDn9Uk75 rFuu0R51wbqLcLx/P5i6jXx7NJ93qEBEUtCw+KKDNgVDvvaOMf3pP3sLGscInZBr V3uMaRFXp/BgfT9oVdPrvg2lip/IfcH0AqgvvmA4E4BBS8v31/xb/QUuohgTODCw o2QTMjprdAB5GaIXz+qLcgBzCwLr2k4znUim8C3ZOMZP2pkOPt7NzdL9aQeigbsM IwAsZ/ZfvlXBX43cMlfoAUlkjzvIlPQ= -----END CERTIFICATE-----Generated at Sat Sep 26 13:35:44 2026 by rpki-client