$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa File: afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa (raw, json) Hash identifier: fI9Xu60SapOS3C6SBYeZzAPvNVLnjY5stPfODc+f2Ko= Subject key identifier: 52:3A:5B:93:CC:D8:F9:0F:55:98:A1:A1:90:08:C3:F3:8A:B5:AD:11 Certificate issuer: /CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Certificate serial: 010D0C9F4328584EE7BCAF111C070D4EECED5A00 Authority key identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 30110 IP address blocks: 198.59.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:af:11:1c:07:0d:4e:ec:ed:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=a19aa414-feb6-4aa6-966a-b67671ea9bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:c7:17:ff:6d:6a:c3:ad:15:e9:ed:76:93: b2:81:41:25:a9:bf:67:9c:46:d3:d5:92:7a:dd:4a: 71:e7:e0:f3:50:7f:05:9b:4d:d8:c0:b6:84:9e:1a: 96:c7:f0:c5:ac:c2:ea:2d:d3:97:07:7d:2d:28:b4: a1:b9:f5:19:35:0c:75:ef:3d:f1:e8:83:02:1b:fb: e2:5f:db:0c:d8:bc:2f:37:7f:f2:47:b1:eb:85:7a: bc:c3:13:39:69:9f:68:06:f7:5d:f5:87:47:6c:15: 77:91:79:4b:7e:c6:3e:9d:d0:6a:fb:a1:0a:f2:2d: d4:4a:00:24:5e:56:a7:f1:e7:e0:56:cf:90:97:3b: f9:22:b6:da:73:84:ce:e7:75:c4:4f:d0:ec:b9:eb: 9c:a8:24:91:d1:d9:f2:93:a1:28:b5:aa:11:5e:a5: cd:0c:a7:0f:9d:64:40:36:57:c8:cb:0f:60:5a:fd: 21:ab:fc:97:19:b0:cf:49:04:d3:9e:72:dd:92:0f: 32:70:b1:8e:eb:40:5b:aa:0a:6e:b2:de:56:74:a0: 72:6e:a9:8b:7e:9d:7f:76:10:4e:fc:88:0f:64:31: f5:89:6d:27:66:41:59:74:20:44:e7:0d:6a:3b:25: cf:c9:38:a7:e2:cc:e8:ac:f6:e9:b2:99:94:b3:0d: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3A:5B:93:CC:D8:F9:0F:55:98:A1:A1:90:08:C3:F3:8A:B5:AD:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl X509v3 Authority Key Identifier: keyid:43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer sbgp-ipAddrBlock: critical IPv4: 198.59.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c7:e2:94:5a:ce:b7:a3:b6:d2:49:96:4a:30:80:9b:59:52: 1d:80:e7:a1:f3:98:17:6e:6a:73:55:7b:55:a0:77:2d:40:35: e7:45:89:a4:a9:15:c2:cd:66:37:24:b7:bb:23:59:c6:89:a9: b1:a2:d5:74:a4:29:76:ba:ae:7b:4c:4e:a9:ff:42:36:f7:1a: 9a:1e:3e:b7:6b:31:1d:ad:7b:8d:3d:50:08:ab:58:35:cf:67: f6:7d:98:07:88:d3:32:6a:e5:c2:14:60:2f:b7:7a:5b:23:70: 45:a2:e8:86:29:84:10:26:94:3e:4d:10:e6:56:8a:5a:7d:23: 22:1f:4a:72:7e:00:8d:0f:ac:5a:d1:81:74:ee:81:be:e8:a2: 1c:89:d4:fc:30:ad:d7:4b:a0:29:b4:2a:99:51:d2:45:a9:cb: cd:df:08:93:bc:ae:e5:98:f4:4d:d2:26:a9:06:10:44:bf:be: 00:9a:58:d5:06:d9:2d:61:99:9f:20:4e:03:be:b3:bc:65:03: 39:dc:78:2e:89:b6:0c:77:bc:25:99:38:35:e8:3e:f4:07:da: a9:38:84:4e:3b:0a:dd:f0:94:44:4c:f0:bf:a2:3a:bf:c1:ec: 2d:db:96:47:e7:77:c2:8d:79:37:be:cf:7e:49:e0:19:69:74: ed:44:e7:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvK8RHAcNTuztWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM0YmNmYzgtZTZlNy00NTAwLWI5ODUtNWNiODU5Zjg4 ZmVjMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk YTE5YWE0MTQtZmViNi00YWE2LTk2NmEtYjY3NjcxZWE5YmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5rHF/9tasOtFentdpOygUElqb9nnEbT1ZJ6 3Upx5+DzUH8Fm03YwLaEnhqWx/DFrMLqLdOXB30tKLShufUZNQx17z3x6IMCG/vi X9sM2LwvN3/yR7HrhXq8wxM5aZ9oBvdd9YdHbBV3kXlLfsY+ndBq+6EK8i3USgAk Xlan8efgVs+Qlzv5Irbac4TO53XET9DsueucqCSR0dnyk6EotaoRXqXNDKcPnWRA NlfIyw9gWv0hq/yXGbDPSQTTnnLdkg8ycLGO60Bbqgpust5WdKBybqmLfp1/dhBO /IgPZDH1iW0nZkFZdCBE5w1qOyXPyTin4szorPbpspmUsw2vBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFI6W5PM2PkPVZihoZAIw/OKta0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRi Y2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlmODhmZWMvYWZlNjZmOTUtYmU0YS0z NmY5LWI0MWEtZDhhMmZkNWRiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM0YmNmYzgtZTZlNy00NTAwLWI5 ODUtNWNiODU5Zjg4ZmVjLzBjNGJjZmM4LWU2ZTctNDUwMC1iOTg1LTVjYjg1OWY4 OGZlYy5jcmwwHwYDVR0jBBgwFoAUQ4ArWOknD9c2EmD/DAY9OJTkCZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4 NTlmODhmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrH4pRazrejttJJlkowgJtZUh2A56HzmBduanNVe1Wgdy1ANedFiaSp FcLNZjckt7sjWcaJqbGi1XSkKXa6rntMTqn/Qjb3GpoePrdrMR2te409UAirWDXP Z/Z9mAeI0zJq5cIUYC+3elsjcEWi6IYphBAmlD5NEOZWilp9IyIfSnJ+AI0PrFrR gXTugb7oohyJ1PwwrddLoCm0KplR0kWpy83fCJO8ruWY9E3SJqkGEES/vgCaWNUG 2S1hmZ8gTgO+s7xlAznceC6Jtgx3vCWZODXoPvQH2qk4hE47Ct3wlERM8L+iOr/B 7C3blkfnd8KNeTe+z35J4BlpdO1E5yc= -----END CERTIFICATE-----Generated at Sat Sep 5 08:34:43 2026 by rpki-client