$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa File: cd00af14-086a-320d-acc3-d521035dec44.roa (raw, json) Hash identifier: 1e4waIWaO4wCsPAlHd0YraB9EiQoFp05xk3LZ14cqzI= Subject key identifier: 4E:B9:97:1A:CE:21:7F:C6:2A:D9:C0:30:48:8A:F9:62:51:65:27:42 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584EC7A1E93039F6585EE5A587C0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 36352 IP address blocks: 192.119.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:e9:30:39:f6:58:5e:e5:a5:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=8575b0c8-46ff-448d-b51f-a35d598b5db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:d8:51:ed:5d:3d:85:46:dd:f3:a0:28:e6: 32:e0:55:0f:19:54:d3:ed:84:b7:66:e7:69:97:b1: 85:12:dd:90:6a:a9:f1:a4:fd:7e:49:03:55:87:37: e5:ca:e4:87:3f:89:aa:9d:5a:5e:c9:92:eb:2c:58: e0:21:c7:1d:91:6b:13:ef:4d:f6:f5:10:c9:bb:69: 98:cc:7f:87:68:eb:10:83:c6:e8:77:80:e8:c4:21: bc:02:ff:bf:f1:98:7d:f8:c9:ee:80:70:39:2d:da: 72:86:e7:63:36:f2:23:af:5c:0b:2a:6f:d7:58:c6: 9f:f5:b5:c1:94:68:db:26:91:76:29:36:d6:50:1d: ce:ce:2b:58:cb:fd:c2:91:86:99:38:4b:ef:05:50: 55:40:c1:a3:a6:7f:13:44:fc:bd:a7:9e:d0:e4:7e: 10:40:0f:74:db:32:08:6a:c0:a2:01:98:6e:aa:2f: 12:4d:55:00:8c:f3:fb:12:15:fd:92:52:f0:89:1f: 0e:62:1a:04:46:4d:87:13:0d:25:aa:ab:1f:fd:52: 13:40:db:bd:f4:32:93:ee:aa:31:15:08:7a:8a:c1: e8:44:51:15:44:fd:6e:75:8a:5a:cb:a0:1e:92:4a: 3f:cd:c5:c5:4d:24:b3:d5:6b:0e:1e:9e:f9:33:6b: 12:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B9:97:1A:CE:21:7F:C6:2A:D9:C0:30:48:8A:F9:62:51:65:27:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 192.119.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ca:68:20:15:40:5d:25:48:17:73:86:9a:e5:a6:e2:28:b5: b9:f9:3c:b4:11:82:2c:4b:29:64:ee:79:8e:b9:30:2e:21:62: f3:68:e1:b7:80:d7:03:a7:47:e0:ec:6f:1c:88:fe:68:d6:f0: c6:07:eb:0b:95:14:e0:76:82:e3:08:b6:b4:11:22:78:5e:40: 66:f5:6a:0c:4c:9a:e7:ed:b5:77:dc:8e:87:a5:fb:dc:90:9a: e5:19:4b:0f:b8:54:e1:bd:0c:f1:e8:cb:1b:21:a3:ef:f8:60: 3f:7f:17:de:10:70:ca:e7:18:c4:c9:80:43:41:96:7b:5c:50: 49:fc:7a:45:a9:d6:94:1b:b3:e7:e5:3a:d6:27:d2:eb:4b:11: 42:cc:4b:53:dd:a5:df:50:1e:ad:74:16:0f:dc:41:41:a9:7f: 9d:34:7a:22:cc:0a:65:fe:5e:56:86:f5:ca:59:f1:4f:d7:35: 1a:0d:49:14:23:be:80:7e:22:c8:4e:fe:80:22:16:82:a1:f2: 28:18:93:1c:4c:f6:08:7a:c4:0d:66:7b:19:76:95:9a:a1:2c: d7:c4:47:59:6c:7f:ed:07:54:f4:33:7d:a0:c0:49:8c:a0:33: 6f:7c:aa:24:aa:ee:06:16:3c:e1:33:91:3e:44:6f:8b:12:1b: cf:03:69:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HoekwOfZYXuWlh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk ODU3NWIwYzgtNDZmZi00NDhkLWI1MWYtYTM1ZDU5OGI1ZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSLYUe1dPYVG3fOgKOYy4FUPGVTT7YS3Zudp l7GFEt2QaqnxpP1+SQNVhzflyuSHP4mqnVpeyZLrLFjgIccdkWsT70329RDJu2mY zH+HaOsQg8bod4DoxCG8Av+/8Zh9+MnugHA5LdpyhudjNvIjr1wLKm/XWMaf9bXB lGjbJpF2KTbWUB3OzitYy/3CkYaZOEvvBVBVQMGjpn8TRPy9p57Q5H4QQA902zII asCiAZhuqi8STVUAjPP7EhX9klLwiR8OYhoERk2HEw0lqqsf/VITQNu99DKT7qox FQh6isHoRFEVRP1udYpay6Aekko/zcXFTSSz1WsOHp75M2sSHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE65lxrOIX/GKtnAMEiK+WJRZSdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvY2QwMGFmMTQtMDg2YS0z MjBkLWFjYzMtZDUyMTAzNWRlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrKaCAVQF0lSBdzhprlpuIotbn5PLQRgixLKWTueY65MC4hYvNo4beA 1wOnR+DsbxyI/mjW8MYH6wuVFOB2guMItrQRInheQGb1agxMmufttXfcjoel+9yQ muUZSw+4VOG9DPHoyxsho+/4YD9/F94QcMrnGMTJgENBlntcUEn8ekWp1pQbs+fl OtYn0utLEULMS1Pdpd9QHq10Fg/cQUGpf500eiLMCmX+XlaG9cpZ8U/XNRoNSRQj voB+IshO/oAiFoKh8igYkxxM9gh6xA1mexl2lZqhLNfER1lsf+0HVPQzfaDASYyg M298qiSq7gYWPOEzkT5Eb4sSG88DaSU= -----END CERTIFICATE-----Generated at Wed Aug 19 16:04:25 2026 by rpki-client