$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/cfcb808e-c69f-3cb0-ba67-a080cf94a73e.roa File: cfcb808e-c69f-3cb0-ba67-a080cf94a73e.roa (raw, json) Hash identifier: tXCciDes2eR6jY7eox6qRXtJ6mCRQWNQxY+iwiiC5R8= Subject key identifier: 9D:3F:E4:EC:5A:13:4B:5D:AA:4B:D4:4D:61:C1:4D:E0:40:C3:FB:3A Certificate issuer: /CN=0c18872e-4e90-4862-8069-3a53159075c1 Certificate serial: 010D0C9F4328584EE7BCB53A0E0742FB0D84ACF0 Authority key identifier: B5:1B:2D:E9:54:09:D8:DB:7B:E4:4D:5C:6B:B9:7A:8F:B5:2A:16:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/cfcb808e-c69f-3cb0-ba67-a080cf94a73e.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 31875 IP address blocks: 64.112.232.0/21 maxlen: 24 66.33.40.0/21 maxlen: 24 169.136.192.0/19 maxlen: 24 174.137.16.0/20 maxlen: 24 2606:2140::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/0c18872e-4e90-4862-8069-3a53159075c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/0c18872e-4e90-4862-8069-3a53159075c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b5:3a:0e:07:42:fb:0d:84:ac:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c18872e-4e90-4862-8069-3a53159075c1 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=11465d87-6f19-44f4-bab3-f4bda1fba104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:86:7c:6e:97:eb:5f:d3:04:00:a9:b6:6b:92: 2d:10:93:17:32:56:7e:0e:2b:e8:3c:49:34:aa:3f: c4:b4:8f:5b:3c:44:23:09:08:7c:81:ae:7e:c2:c8: 9e:53:e0:26:ed:2b:71:e5:55:6a:00:d1:32:30:bc: a5:96:79:ec:42:a2:69:33:67:7d:9e:a9:7c:10:1e: 01:03:9b:b1:43:29:60:6c:c6:9d:29:8a:d1:c8:c9: 84:fa:53:c0:19:cd:79:aa:9a:2a:4e:4e:ec:d1:a3: 8e:72:01:f2:ba:2c:08:10:9f:f2:b0:31:66:1c:11: 4d:17:b0:e5:f7:7c:ef:f0:3f:27:44:2f:bc:00:8a: 30:e0:40:4c:b5:9a:c4:65:18:3c:bf:94:b3:38:be: 58:10:d4:8e:71:54:74:2d:de:75:12:78:e0:92:cd: 73:af:06:f4:15:8a:b6:c0:71:01:79:84:c1:fa:5a: 3d:1f:17:ea:71:40:d0:8c:4d:3b:bd:de:16:11:d3: f7:6f:ee:c7:45:13:8a:44:7f:97:63:30:d7:a1:7a: 45:fd:90:1b:51:7b:91:c5:b9:69:5f:17:0d:e7:fb: 6d:55:b5:9c:91:18:d5:f9:bf:24:e4:f0:85:a0:8e: 40:c4:f0:0c:54:52:50:6c:cd:21:54:c5:cb:ff:97: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3F:E4:EC:5A:13:4B:5D:AA:4B:D4:4D:61:C1:4D:E0:40:C3:FB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/cfcb808e-c69f-3cb0-ba67-a080cf94a73e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/0c18872e-4e90-4862-8069-3a53159075c1.crl X509v3 Authority Key Identifier: keyid:B5:1B:2D:E9:54:09:D8:DB:7B:E4:4D:5C:6B:B9:7A:8F:B5:2A:16:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer sbgp-ipAddrBlock: critical IPv4: 64.112.232.0/21 66.33.40.0/21 169.136.192.0/19 174.137.16.0/20 IPv6: 2606:2140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e8:c9:da:2f:7a:ab:1b:22:df:f2:d2:b2:0e:f3:32:30:42:32: 90:da:f1:37:e9:5a:3f:b5:96:0f:b3:36:5a:8b:00:61:f3:79: dd:db:a1:c5:29:7c:08:f2:5a:97:83:ec:71:79:03:eb:91:50: 0e:87:c7:a4:9a:5e:a5:e9:bd:ed:af:c2:b4:11:a1:5c:e4:1d: d4:cb:c3:d3:aa:1c:0d:52:83:4e:c8:8d:fb:b6:ad:7d:0e:18: 88:03:2e:08:54:a5:b0:dc:89:6c:5a:b6:42:fe:bb:03:da:87: 5d:c2:02:b6:52:7d:8a:ed:dc:9b:86:9c:b3:fc:86:99:49:46: 38:e4:76:2f:ff:bd:e9:0d:34:92:ab:2f:f6:e8:45:f4:e4:a3: 8b:5e:00:e4:58:05:f4:6b:89:d2:5f:86:39:45:81:52:ab:da: 87:c5:fd:f7:6c:a9:b9:d2:1b:60:e3:9f:af:83:fb:f1:6a:8e: d7:b8:5f:2d:b5:8f:6f:4c:64:b1:87:a8:30:e0:17:28:27:4d: 26:7f:8f:82:61:84:41:79:f4:05:41:28:bf:19:35:74:0b:21: 31:bb:ad:7b:b7:bf:44:59:d4:8d:cc:e0:c5:5f:27:f6:38:39: 22:04:b4:1f:60:ad:c4:a5:36:51:5a:84:ec:84:af:53:2c:86: 47:e1:ba:a7 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE7nvLU6DgdC+w2ErPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMxODg3MmUtNGU5MC00ODYyLTgwNjktM2E1MzE1OTA3 NWMxMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MTE0NjVkODctNmYxOS00NGY0LWJhYjMtZjRiZGExZmJhMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YZ8bpfrX9MEAKm2a5ItEJMXMlZ+DivoPEk0 qj/EtI9bPEQjCQh8ga5+wsieU+Am7Stx5VVqANEyMLyllnnsQqJpM2d9nql8EB4B A5uxQylgbMadKYrRyMmE+lPAGc15qpoqTk7s0aOOcgHyuiwIEJ/ysDFmHBFNF7Dl 93zv8D8nRC+8AIow4EBMtZrEZRg8v5SzOL5YENSOcVR0Ld51Enjgks1zrwb0FYq2 wHEBeYTB+lo9HxfqcUDQjE07vd4WEdP3b+7HRROKRH+XYzDXoXpF/ZAbUXuRxblp XxcN5/ttVbWckRjV+b8k5PCFoI5AxPAMVFJQbM0hVMXL/5dyKQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFJ0/5OxaE0tdqkvUTWHBTeBAw/s6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzE4 ODcyZS00ZTkwLTQ4NjItODA2OS0zYTUzMTU5MDc1YzEvY2ZjYjgwOGUtYzY5Zi0z Y2IwLWJhNjctYTA4MGNmOTRhNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGMxODg3MmUtNGU5MC00ODYyLTgw NjktM2E1MzE1OTA3NWMxLzBjMTg4NzJlLTRlOTAtNDg2Mi04MDY5LTNhNTMxNTkw NzVjMS5jcmwwHwYDVR0jBBgwFoAUtRst6VQJ2Nt75E1ca7l6j7UqFs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzE4ODcyZS00ZTkwLTQ4NjItODA2OS0zYTUz MTU5MDc1YzEuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDQHDoAwQD QiEoAwQFqYjAAwQErokQMA0EAgACMAcDBQAmBiFAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAOjJ2i96qxsi 3/LSsg7zMjBCMpDa8TfpWj+1lg+zNlqLAGHzed3bocUpfAjyWpeD7HF5A+uRUA6H x6SaXqXpve2vwrQRoVzkHdTLw9OqHA1Sg07Ijfu2rX0OGIgDLghUpbDciWxatkL+ uwPah13CArZSfYrt3JuGnLP8hplJRjjkdi//vekNNJKrL/boRfTko4teAORYBfRr idJfhjlFgVKr2ofF/fdsqbnSG2Djn6+D+/Fqjte4Xy21j29MZLGHqDDgFygnTSZ/ j4JhhEF59AVBKL8ZNXQLITG7rXu3v0RZ1I3M4MVfJ/Y4OSIEtB9grcSlNlFahOyE r1Mshkfhuqc= -----END CERTIFICATE-----Generated at Thu Sep 24 01:52:55 2026 by rpki-client