$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/a45902da-9e70-3943-a932-51f817256e75.roa File: a45902da-9e70-3943-a932-51f817256e75.roa (raw, json) Hash identifier: jYms5LFjy9H0oZKHZP8n160iIucVDEPxElN1nYe6+Nc= Subject key identifier: 8D:AB:08:EB:FC:D1:43:06:B9:AC:EB:0E:E1:C7:85:C3:0F:6B:96:03 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584F63F81F1EE1154139A66E2700 Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/a45902da-9e70-3943-a932-51f817256e75.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 53339 IP address blocks: 206.126.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:1f:1e:e1:15:41:39:a6:6e:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=b0e192b9-bd71-4345-a50e-d85d8ac0f452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e9:46:f2:13:da:51:0e:38:d9:ff:92:db:7a: 5b:87:56:f1:3f:3a:97:d9:75:1b:f1:21:34:fe:60: 69:c6:ad:85:28:87:b5:6e:55:d8:10:c1:de:d0:2c: 5d:09:e1:a1:9f:73:74:3c:fd:97:e5:e3:93:50:bf: 25:46:cd:b8:ec:9a:b3:af:59:f6:c1:20:92:e4:79: 07:74:58:d3:cd:45:f3:8a:91:b9:de:d4:8a:4d:bf: 48:be:70:81:04:b3:f5:3f:c7:2a:f8:db:2f:f4:b0: ba:d6:ed:75:75:46:96:0f:a3:b7:85:23:e2:ce:79: 02:85:8c:b7:d1:98:ed:1a:69:b6:86:03:0f:43:53: 80:42:7f:72:36:cd:29:12:db:85:79:55:1d:3d:03: e0:13:76:09:a7:7a:2a:da:43:5f:6d:c6:a3:21:b0: 3d:34:0f:79:39:88:7f:6a:d0:ff:07:e2:92:e8:aa: 0e:c2:ee:2a:a8:c5:e1:79:71:73:75:c9:8a:4f:81: ad:27:78:46:ca:d1:35:97:da:f6:9e:12:85:b1:cb: 24:d9:74:cb:56:13:78:ef:f9:93:30:5f:e0:32:7c: 93:e0:d1:a4:b0:22:b5:8c:64:30:57:b5:2c:fd:b1: 92:29:7f:10:e3:e9:91:61:90:42:38:3e:b6:8a:37: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AB:08:EB:FC:D1:43:06:B9:AC:EB:0E:E1:C7:85:C3:0F:6B:96:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/a45902da-9e70-3943-a932-51f817256e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv4: 206.126.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:32:ae:56:03:47:bc:b0:cb:d9:c7:0b:1c:f4:48:39:51:49: eb:b6:9c:64:3a:f6:d6:3b:a7:06:8a:94:4f:25:7d:c7:59:f1: 95:c8:97:7c:42:97:f1:a5:fc:94:68:5c:da:35:37:ce:52:dd: 94:36:25:13:e5:8b:03:a1:c6:42:6c:66:17:43:e7:ab:70:59: dd:1b:8a:a9:71:b0:07:26:e6:95:c2:7d:a2:c9:00:5a:b6:41: 34:5e:26:2f:41:51:a4:61:a2:41:e6:f0:a5:e2:de:96:d0:c2: a5:05:b2:d0:68:72:cd:d8:e0:ed:16:4c:46:29:d2:ee:c8:13: 9c:ef:d2:3f:86:23:fb:f8:cd:8e:20:ea:10:26:eb:5c:a0:00: fb:b6:60:15:42:cb:84:1d:85:fc:f9:66:4e:fd:5d:b5:e2:db: 6b:dd:4b:0c:ee:26:9e:5b:56:bf:92:e2:39:21:6e:e7:a7:0d: c8:3d:74:da:d4:1a:f9:40:01:ef:1c:d8:f9:e1:89:85:f8:09: 84:0b:be:39:19:7d:b9:25:21:eb:d3:ea:6a:9f:02:66:6d:b8: 4f:27:6a:0c:c1:89:96:a4:c4:95:5e:ee:d1:95:31:f9:05:28: c0:ea:31:7a:cd:c5:7c:da:b0:96:32:54:7f:0e:34:55:e4:53: 1f:41:34:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+B8e4RVBOaZuJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk YjBlMTkyYjktYmQ3MS00MzQ1LWE1MGUtZDg1ZDhhYzBmNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ulG8hPaUQ442f+S23pbh1bxPzqX2XUb8SE0 /mBpxq2FKIe1blXYEMHe0CxdCeGhn3N0PP2X5eOTUL8lRs247Jqzr1n2wSCS5HkH dFjTzUXzipG53tSKTb9IvnCBBLP1P8cq+Nsv9LC61u11dUaWD6O3hSPiznkChYy3 0ZjtGmm2hgMPQ1OAQn9yNs0pEtuFeVUdPQPgE3YJp3oq2kNfbcajIbA9NA95OYh/ atD/B+KS6KoOwu4qqMXheXFzdcmKT4GtJ3hGytE1l9r2nhKFscsk2XTLVhN47/mT MF/gMnyT4NGksCK1jGQwV7Us/bGSKX8Q4+mRYZBCOD62ijdN8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2rCOv80UMGuazrDuHHhcMPa5YDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvYTQ1OTAyZGEtOWU3MC0z OTQzLWE5MzItNTFmODE3MjU2ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn7hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcyrlYDR7ywy9nHCxz0SDlRSeu2nGQ69tY7pwaKlE8lfcdZ8ZXIl3xC l/Gl/JRoXNo1N85S3ZQ2JRPliwOhxkJsZhdD56twWd0biqlxsAcm5pXCfaLJAFq2 QTReJi9BUaRhokHm8KXi3pbQwqUFstBocs3Y4O0WTEYp0u7IE5zv0j+GI/v4zY4g 6hAm61ygAPu2YBVCy4Qdhfz5Zk79XbXi22vdSwzuJp5bVr+S4jkhbuenDcg9dNrU GvlAAe8c2PnhiYX4CYQLvjkZfbklIevT6mqfAmZtuE8nagzBiZakxJVe7tGVMfkF KMDqMXrNxXzasJYyVH8ONFXkUx9BNK0= -----END CERTIFICATE-----Generated at Tue Oct 13 13:24:33 2026 by rpki-client