$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa File: bfc668e6-2f3e-30a4-a410-a3e745688f64.roa (raw, json) Hash identifier: 1colmsmkdIU2/u+IRQPvwgo53yaMTVh3jVnHCWkVGzU= Subject key identifier: 99:70:D7:3C:D3:C2:07:BC:4A:76:04:B8:F4:30:4A:9D:73:57:B3:EE Certificate issuer: /CN=946cb195-9b9a-4836-9152-b97e9e831144 Certificate serial: 010D0C9F4328584F698D7EBEB4CE103B4084B480 Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 142.54.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:7e:be:b4:ce:10:3b:40:84:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=70c87e4a-e2b4-463d-b90b-f10c1b91a9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8f:67:99:1a:1c:3d:b4:7c:8e:02:40:1b:56: 1e:5c:8f:51:18:48:18:85:8f:1e:7c:c1:42:ba:0b: d8:b7:5e:77:88:f0:8f:42:00:b4:4e:09:00:50:99: 43:23:41:1c:55:41:3b:bc:17:92:42:11:c4:74:0c: b2:2c:72:b1:7c:63:54:c0:15:b7:b0:7a:27:df:36: 85:b8:81:a5:d5:74:f7:b0:57:9e:92:3b:71:1a:b1: c9:ce:38:a8:02:2a:93:64:d2:6f:3c:b3:b2:45:ce: f1:3b:f8:7b:11:de:73:9b:e0:fe:d3:59:1c:fd:7e: 90:06:e4:9b:9b:6a:f8:a4:27:b6:ad:76:03:d8:8c: 2f:dd:9b:c4:c7:ca:d0:e6:4b:db:07:bb:c8:8a:ef: 7f:91:a4:85:c1:42:48:24:7d:b5:3a:86:3c:4c:14: ce:ed:c3:cd:44:65:af:3d:1b:5e:90:f5:8e:59:46: 05:d0:73:29:fa:8d:ad:40:d5:94:7d:d5:9b:46:aa: 75:51:ce:14:b1:a9:c3:49:9a:d3:c0:65:54:6e:d1: c0:8f:76:8d:b5:66:55:ae:dd:80:72:d2:8c:1c:51: 77:a4:54:e9:b4:23:4a:4a:1a:76:be:19:a5:00:ad: b8:a3:7b:9d:1e:42:4f:c4:38:d9:b7:88:a7:8e:4c: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:70:D7:3C:D3:C2:07:BC:4A:76:04:B8:F4:30:4A:9D:73:57:B3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl X509v3 Authority Key Identifier: keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer sbgp-ipAddrBlock: critical IPv4: 142.54.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c8:f0:6e:1f:76:23:9c:9f:b4:7f:c0:0a:11:25:51:79:35: d9:a9:a2:e1:f1:82:6b:ce:dd:34:07:32:16:9d:74:f8:73:b8: e1:d8:a2:55:ce:ce:12:b8:46:e0:da:ce:67:22:70:1a:df:38: f3:4d:33:17:c7:05:47:7d:ed:59:2e:a8:34:1d:bd:63:a9:97: e6:28:cd:33:07:3c:d5:81:f1:56:cb:fd:39:b1:fb:a9:c4:c2: 82:0b:95:60:0c:bd:ed:e7:05:fc:77:a4:1d:f1:46:ac:fe:60: f4:18:9e:bb:d9:51:3c:d5:a6:3b:5a:5c:84:e9:25:00:26:83: 47:49:0b:b6:05:9e:23:ba:dd:14:f1:c1:80:e2:6f:0f:8f:6a: 5b:6d:e3:ea:b6:aa:bd:cc:3d:1a:c6:2c:5a:cb:36:b4:3a:90: 58:a1:36:16:8d:af:21:0c:e6:f1:23:7e:53:33:c6:fa:5a:da: 61:cd:b5:2a:f5:d7:6f:d6:2d:28:3d:43:67:a2:00:ca:d2:ef: 2f:12:e6:f6:ef:cc:94:c5:1a:1b:46:a9:d7:4b:bc:c7:a4:07: b5:41:22:b7:5f:62:22:3c:7a:c0:f8:ab:f4:31:a9:c7:1b:54: 8d:ad:2b:55:75:76:a5:2c:2b:81:13:db:f0:6d:b2:2a:25:a7: 15:b6:4b:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjX6+tM4QO0CEtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ2Y2IxOTUtOWI5YS00ODM2LTkxNTItYjk3ZTllODMx MTQ0MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NzBjODdlNGEtZTJiNC00NjNkLWI5MGItZjEwYzFiOTFhOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno9nmRocPbR8jgJAG1YeXI9RGEgYhY8efMFC ugvYt153iPCPQgC0TgkAUJlDI0EcVUE7vBeSQhHEdAyyLHKxfGNUwBW3sHon3zaF uIGl1XT3sFeekjtxGrHJzjioAiqTZNJvPLOyRc7xO/h7Ed5zm+D+01kc/X6QBuSb m2r4pCe2rXYD2Iwv3ZvEx8rQ5kvbB7vIiu9/kaSFwUJIJH21OoY8TBTO7cPNRGWv PRtekPWOWUYF0HMp+o2tQNWUfdWbRqp1Uc4UsanDSZrTwGVUbtHAj3aNtWZVrt2A ctKMHFF3pFTptCNKShp2vhmlAK24o3udHkJPxDjZt4injkxLeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlw1zzTwge8SnYEuPQwSp1zV7PuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZj YjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdlOWU4MzExNDQvYmZjNjY4ZTYtMmYzZS0z MGE0LWE0MTAtYTNlNzQ1Njg4ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTQ2Y2IxOTUtOWI5YS00ODM2LTkx NTItYjk3ZTllODMxMTQ0Lzk0NmNiMTk1LTliOWEtNDgzNi05MTUyLWI5N2U5ZTgz MTE0NC5jcmwwHwYDVR0jBBgwFoAU1WDzXob02ndtuMXazfHRY5vlND0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZjYjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdl OWU4MzExNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjjYpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfI8G4fdiOcn7R/wAoRJVF5NdmpouHxgmvO3TQHMhaddPhzuOHYolXO zhK4RuDazmcicBrfOPNNMxfHBUd97VkuqDQdvWOpl+YozTMHPNWB8VbL/Tmx+6nE woILlWAMve3nBfx3pB3xRqz+YPQYnrvZUTzVpjtaXITpJQAmg0dJC7YFniO63RTx wYDibw+Paltt4+q2qr3MPRrGLFrLNrQ6kFihNhaNryEM5vEjflMzxvpa2mHNtSr1 12/WLSg9Q2eiAMrS7y8S5vbvzJTFGhtGqddLvMekB7VBIrdfYiI8esD4q/Qxqccb VI2tK1V1dqUsK4ET2/BtsiolpxW2Syw= -----END CERTIFICATE-----Generated at Fri Oct 9 11:40:42 2026 by rpki-client