$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa File: cfa6afac-c953-3625-b664-6b5f5be6d982.roa (raw, json) Hash identifier: gntewcXd83zuCNa0K2LMH1SBdutx46wIpIKJWO2NgSw= Subject key identifier: 76:5F:4D:C0:DE:26:50:39:29:80:73:CF:A7:D3:89:78:E1:15:8E:A3 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584EE227415B30F4CFBFB2615500 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa Signing time: Wed 19 Aug 2026 01:00:12 +0000 ROA not before: Wed 19 Aug 2026 01:00:12 +0000 ROA not after: Tue 17 Nov 2026 02:00:12 +0000 asID: 54913 IP address blocks: 198.52.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e2:27:41:5b:30:f4:cf:bf:b2:61:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Aug 19 01:00:12 2026 GMT Not After : Nov 17 02:00:12 2026 GMT Subject: CN=4a53d6de-b9e2-4424-8b12-83e8967745b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:91:63:62:fa:75:2a:e7:9a:ca:7f:4b:89: 86:23:96:c9:d3:fb:75:ac:86:27:76:37:cf:49:6c: 1c:3f:d2:5d:88:56:af:bf:e7:15:a7:dd:70:7f:48: 0f:c1:0d:1b:f1:fc:23:94:ce:11:ed:1f:19:8b:c0: 08:d2:c7:b9:87:2b:99:63:74:1e:61:ae:b1:3f:30: 9c:44:37:10:dd:86:1d:0e:67:f8:0e:2a:0e:b7:7d: 2a:98:6e:0a:8f:35:85:26:f0:ec:51:1f:e2:97:11: 3a:ea:0a:35:c5:66:4c:d6:46:64:78:74:d5:05:54: a5:56:23:0a:36:3f:28:a2:e5:ba:4c:b3:83:d2:d1: cf:63:2c:28:4d:8f:ce:7f:49:c6:e8:dd:1a:6e:94: 5d:bb:30:b6:34:fe:43:95:47:37:64:3e:44:d3:70: e6:0d:e0:15:f0:db:e2:c7:59:fe:71:d7:3f:02:69: 3c:ee:ca:76:b5:18:38:36:c1:92:05:65:46:a1:d9: 4c:ee:de:3a:be:88:f6:36:0e:6d:51:f6:29:a3:47: 43:08:0d:10:08:46:c9:a9:01:b8:a1:8b:81:ea:68: e7:90:c4:b8:d3:74:e2:e4:f2:33:54:d1:fe:03:29: 14:c3:3e:57:f3:d0:b6:2b:84:96:a0:74:bf:8f:65: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5F:4D:C0:DE:26:50:39:29:80:73:CF:A7:D3:89:78:E1:15:8E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 198.52.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a3:70:fd:a6:5c:14:0e:fc:14:d7:4e:c5:25:c4:2b:64:d2: 90:bd:6a:fb:f9:1b:66:e3:0c:d1:ae:1a:ef:1e:fa:a8:06:56: 8b:56:31:a2:a1:02:0b:53:ba:f5:6e:fb:c0:60:1b:65:49:e1: 5a:fd:0c:dc:8b:26:05:9f:46:8b:a2:b1:44:01:f0:c6:f3:21: 5c:16:f4:ab:20:80:39:02:9e:bc:7d:d0:15:4c:c3:63:14:bd: 7a:40:75:2a:6d:6e:cb:be:2f:e7:3c:43:e6:a0:82:73:e3:54: fa:cf:73:a1:8e:78:ca:4e:b0:e8:0b:20:2b:cf:6b:4a:fd:70: 29:8c:f4:30:d6:06:86:a3:e7:27:ed:d4:9f:d3:58:ff:4e:03: f5:73:25:03:3f:bf:a1:3c:eb:38:bb:e6:e5:23:f0:93:50:87: 3a:a5:9d:d9:6a:02:6c:63:cb:2f:59:1b:89:67:d3:1d:56:ff: 50:c7:43:2c:5e:21:4a:b4:c6:03:be:52:51:cd:af:73:6e:71: 1b:29:74:e5:ae:4f:82:5f:bc:89:f5:b1:af:4a:c9:52:18:b1: c1:70:41:c1:3c:64:9a:06:37:0f:55:cc:70:06:18:df:da:a5: 14:5d:15:87:e0:da:b9:91:1c:24:37:a6:74:e9:f2:2f:43:0c: f7:6d:e0:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJ0FbMPTPv7JhVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk NGE1M2Q2ZGUtYjllMi00NDI0LThiMTItODNlODk2Nzc0NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5uRY2L6dSrnmsp/S4mGI5bJ0/t1rIYndjfP SWwcP9JdiFavv+cVp91wf0gPwQ0b8fwjlM4R7R8Zi8AI0se5hyuZY3QeYa6xPzCc RDcQ3YYdDmf4DioOt30qmG4KjzWFJvDsUR/ilxE66go1xWZM1kZkeHTVBVSlViMK Nj8oouW6TLOD0tHPYywoTY/Of0nG6N0abpRduzC2NP5DlUc3ZD5E03DmDeAV8Nvi x1n+cdc/Amk87sp2tRg4NsGSBWVGodlM7t46voj2Ng5tUfYpo0dDCA0QCEbJqQG4 oYuB6mjnkMS403Ti5PIzVNH+AykUwz5X89C2K4SWoHS/j2VaRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZfTcDeJlA5KYBzz6fTiXjhFY6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvY2ZhNmFmYWMtYzk1My0z NjI1LWI2NjQtNmI1ZjViZTZkOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjT1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKjcP2mXBQO/BTXTsUlxCtk0pC9avv5G2bjDNGuGu8e+qgGVotWMaKh AgtTuvVu+8BgG2VJ4Vr9DNyLJgWfRouisUQB8MbzIVwW9KsggDkCnrx90BVMw2MU vXpAdSptbsu+L+c8Q+aggnPjVPrPc6GOeMpOsOgLICvPa0r9cCmM9DDWBoaj5yft 1J/TWP9OA/VzJQM/v6E86zi75uUj8JNQhzqlndlqAmxjyy9ZG4ln0x1W/1DHQyxe IUq0xgO+UlHNr3NucRspdOWuT4JfvIn1sa9KyVIYscFwQcE8ZJoGNw9VzHAGGN/a pRRdFYfg2rmRHCQ3pnTp8i9DDPdt4Jg= -----END CERTIFICATE-----Generated at Thu Sep 10 14:20:36 2026 by rpki-client