$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cafcf931-ce85-3a59-9345-be309645f2fd.roa File: cafcf931-ce85-3a59-9345-be309645f2fd.roa (raw, json) Hash identifier: OgxlljywuV3HQbZctJpOF+WOOD/izOMrlopP5lL0JLw= Subject key identifier: 8D:8E:53:C3:B3:92:10:75:42:53:A3:38:5B:BF:64:99:26:DE:AF:BD Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D651A5AF05DAC7958D380 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cafcf931-ce85-3a59-9345-be309645f2fd.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 147.255.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:65:1a:5a:f0:5d:ac:79:58:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=294ffef0-9d1e-42a9-b8eb-d16deeab9367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:f4:2c:e6:f3:b1:65:d6:43:ab:77:08:57: 5f:ec:b9:3b:d5:55:34:53:33:df:cd:c6:43:52:c0: fa:85:69:02:7e:b9:0a:57:9f:04:2d:d8:a9:21:69: 58:a1:be:d2:05:14:ed:27:90:4d:00:06:e8:2d:e3: 2a:21:54:28:c8:d0:e3:d5:c3:31:43:2a:74:27:50: a8:40:72:a1:75:25:00:e5:05:99:8c:61:0c:7e:c4: 46:64:49:59:48:1b:ab:26:77:0c:f7:c9:7e:ae:2e: f7:84:ff:90:32:54:ad:a1:ca:3f:80:1e:d8:96:a2: 23:1f:ee:05:e1:ee:ea:2c:cb:59:d1:26:bf:e6:32: b1:50:23:cf:48:f4:b2:8e:38:d5:ce:5e:a7:9b:d0: 1c:7c:da:df:9b:ef:c9:f2:a2:09:bb:6a:9f:5f:50: 5b:da:ff:5d:f4:c9:b5:40:ca:21:17:77:9e:3e:1d: 46:cf:14:44:80:c4:da:f1:51:f4:01:32:da:ef:70: a4:18:28:d5:8b:c0:06:45:a7:d0:e1:37:a2:e5:72: 0d:5e:bd:2d:a5:ec:11:2e:e9:00:16:88:f1:69:1a: 60:95:79:da:39:aa:52:35:da:96:4b:b7:f0:2f:3a: b3:80:f5:c4:79:15:24:e2:bd:bc:31:09:4e:7b:05: b0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8E:53:C3:B3:92:10:75:42:53:A3:38:5B:BF:64:99:26:DE:AF:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cafcf931-ce85-3a59-9345-be309645f2fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e3:c8:7d:46:ba:6c:e5:64:b4:77:06:f6:ed:87:2b:b9:4c: bf:27:78:e4:bf:ab:c9:a2:88:3c:86:72:6a:a5:79:62:64:1c: a3:9b:c5:ef:8d:bb:b1:8a:f7:b5:d6:8e:d4:cf:47:93:0b:5c: ad:50:51:da:79:86:db:d9:54:3a:0e:1a:1b:8a:05:ff:f3:4f: b8:c4:af:5c:21:ab:bd:fd:dc:ef:6c:26:bf:71:14:e2:7b:08: d1:12:4b:37:84:fb:96:7e:4e:33:39:e4:15:bc:ad:9a:6d:9f: 4f:fc:88:76:2a:d5:8a:b6:38:6d:c9:7b:8f:c6:53:4a:27:bb: 77:bc:b3:eb:f2:2e:33:ae:6d:81:1b:30:e5:70:3c:66:dd:2c: 33:90:ae:2f:b7:83:f2:46:54:43:d2:8a:c4:ee:e1:8d:9a:20: 09:a7:ba:6d:e4:d2:2e:5a:f6:8a:f0:36:eb:3b:b1:32:df:98: fd:7b:72:e3:4c:ec:bf:cc:9d:fd:41:61:5b:11:41:d2:22:2f: 31:b4:ab:56:0c:82:29:c6:13:78:38:60:be:00:41:05:e4:7b: 4c:20:6e:9e:72:90:a9:66:76:66:8e:83:49:fd:0b:b3:98:e3: c7:50:ad:41:0d:80:6f:37:cf:13:23:4b:bf:77:40:a7:3c:9e: 47:81:03:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWUaWvBdrHlY04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk Mjk0ZmZlZjAtOWQxZS00MmE5LWI4ZWItZDE2ZGVlYWI5MzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4f0LObzsWXWQ6t3CFdf7Lk71VU0UzPfzcZD UsD6hWkCfrkKV58ELdipIWlYob7SBRTtJ5BNAAboLeMqIVQoyNDj1cMxQyp0J1Co QHKhdSUA5QWZjGEMfsRGZElZSBurJncM98l+ri73hP+QMlStoco/gB7YlqIjH+4F 4e7qLMtZ0Sa/5jKxUCPPSPSyjjjVzl6nm9AcfNrfm+/J8qIJu2qfX1Bb2v9d9Mm1 QMohF3eePh1GzxREgMTa8VH0ATLa73CkGCjVi8AGRafQ4Tei5XINXr0tpewRLukA FojxaRpglXnaOapSNdqWS7fwLzqzgPXEeRUk4r28MQlOewWw2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2OU8OzkhB1QlOjOFu/ZJkm3q+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvY2FmY2Y5MzEtY2U4NS0z YTU5LTkzNDUtYmUzMDk2NDVmMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk//wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvjyH1GumzlZLR3Bvbthyu5TL8neOS/q8miiDyGcmqleWJkHKObxe+N u7GK97XWjtTPR5MLXK1QUdp5htvZVDoOGhuKBf/zT7jEr1whq7393O9sJr9xFOJ7 CNESSzeE+5Z+TjM55BW8rZptn0/8iHYq1Yq2OG3Je4/GU0onu3e8s+vyLjOubYEb MOVwPGbdLDOQri+3g/JGVEPSisTu4Y2aIAmnum3k0i5a9orwNus7sTLfmP17cuNM 7L/Mnf1BYVsRQdIiLzG0q1YMginGE3g4YL4AQQXke0wgbp5ykKlmdmaOg0n9C7OY 48dQrUENgG83zxMjS793QKc8nkeBA70= -----END CERTIFICATE-----Generated at Wed Oct 14 09:04:02 2026 by rpki-client