$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cafcf931-ce85-3a59-9345-be309645f2fd.roa File: cafcf931-ce85-3a59-9345-be309645f2fd.roa (raw, json) Hash identifier: 92aESO20AaUhYrCErn9e95qZscFHu4ZpLm8CU07gekQ= Subject key identifier: 56:C8:5D:8D:4B:58:0C:CF:A9:2A:F2:45:29:1B:E9:96:88:99:01:2E Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC292F2ACA8CE832D995D5C80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cafcf931-ce85-3a59-9345-be309645f2fd.roa Signing time: Fri 07 Aug 2026 17:31:25 +0000 ROA not before: Fri 07 Aug 2026 17:31:25 +0000 ROA not after: Thu 05 Nov 2026 18:31:25 +0000 asID: 395954 IP address blocks: 147.255.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:92:f2:ac:a8:ce:83:2d:99:5d:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 7 17:31:25 2026 GMT Not After : Nov 5 18:31:25 2026 GMT Subject: CN=253d5f6f-1d1d-4b2e-a8e4-8e5a29212708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:bd:b8:0c:ef:7d:a7:86:a9:12:4b:15:7c: c8:5c:e8:4c:5d:cc:3c:40:94:0a:34:5b:26:7d:3a: 70:6e:8c:80:75:62:ed:dd:9d:00:52:3d:fd:49:42: f8:5e:83:2d:56:54:23:74:41:a2:bf:45:5b:ef:b7: 1a:a8:fd:ba:89:c7:d1:99:ae:1f:7f:44:bb:5d:e4: df:04:b1:7a:d2:68:e7:c0:ff:ce:b4:3a:9b:d5:b8: 01:27:4e:6c:f6:2f:01:6e:0a:45:0e:b3:34:57:a9: 8a:8f:b5:af:58:f8:5f:5e:37:15:0f:c2:10:bd:5a: 23:21:61:6e:ef:80:47:fc:2e:26:03:b5:3c:ff:03: a8:3c:e5:2a:e7:76:01:fb:15:b6:8c:fc:b2:90:67: 56:d8:15:a2:aa:6e:55:fb:ca:e6:e6:2d:9e:d6:9b: 5e:ee:60:6d:81:7a:c0:b9:1f:fe:79:3d:11:f7:ac: 2f:bf:73:26:5f:52:69:c6:53:b9:db:b7:43:ca:a9: 80:ea:cf:6f:c2:17:85:b8:ca:1c:a0:99:7c:d9:2a: 9d:10:ad:51:fa:89:33:cb:1a:6a:16:54:89:f3:ad: 6f:12:dd:3e:65:ee:c0:19:b1:d9:81:07:c8:9e:57: c5:d4:ec:11:42:d1:99:49:17:a3:bf:67:91:48:a6: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C8:5D:8D:4B:58:0C:CF:A9:2A:F2:45:29:1B:E9:96:88:99:01:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cafcf931-ce85-3a59-9345-be309645f2fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:31:8e:2b:b8:91:a0:a2:ff:7c:d3:fa:c8:77:d9:e8:6b:a5: 7a:b2:12:17:e4:82:46:7c:02:59:2e:8c:49:b5:ed:de:3e:13: de:71:06:3e:02:19:1e:ef:ce:a2:de:f4:a2:e6:86:c8:d5:d1: 94:3e:57:8f:6f:69:81:38:44:90:07:c2:5f:6e:68:34:a7:2c: f9:ad:85:9f:2f:22:6c:72:98:36:ea:b9:5b:51:b9:ba:6f:ce: a7:fa:b3:52:ec:55:18:ae:81:d3:41:eb:a3:95:79:16:39:12: 82:19:02:3c:20:6f:77:b9:57:61:f6:0d:fd:19:6c:df:31:18: f1:7a:7b:2f:f5:3f:03:47:c9:ef:26:30:ec:e3:45:22:1b:b8: 2f:3b:ad:9d:a2:61:ea:96:a3:1a:f2:15:ff:68:61:9c:37:6f: 64:d2:02:de:c3:1b:ee:6b:9a:80:2e:10:5a:12:de:de:7d:79: 7f:77:7f:a7:f9:58:7d:d8:03:ba:a1:9c:6c:dd:d8:7a:84:5e: c9:92:0e:c7:a1:af:cf:e6:13:82:88:5f:d8:a6:20:68:63:b8: 41:06:41:6a:53:fb:de:28:f3:d8:f0:8b:72:73:a9:d8:57:bd: 6f:88:2f:af:45:c8:dc:50:81:63:bc:b6:ec:f3:a2:74:f9:5d: b1:56:b0:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CkvKsqM6DLZldXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNzE3MzEyNVoXDTI2MTEwNTE4MzEyNVowLzEtMCsGA1UEAxMk MjUzZDVmNmYtMWQxZC00YjJlLWE4ZTQtOGU1YTI5MjEyNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyau9uAzvfaeGqRJLFXzIXOhMXcw8QJQKNFsm fTpwboyAdWLt3Z0AUj39SUL4XoMtVlQjdEGiv0Vb77caqP26icfRma4ff0S7XeTf BLF60mjnwP/OtDqb1bgBJ05s9i8BbgpFDrM0V6mKj7WvWPhfXjcVD8IQvVojIWFu 74BH/C4mA7U8/wOoPOUq53YB+xW2jPyykGdW2BWiqm5V+8rm5i2e1pte7mBtgXrA uR/+eT0R96wvv3MmX1JpxlO527dDyqmA6s9vwheFuMocoJl82SqdEK1R+okzyxpq FlSJ861vEt0+Ze7AGbHZgQfInlfF1OwRQtGZSRejv2eRSKYTPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbIXY1LWAzPqSryRSkb6ZaImQEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvY2FmY2Y5MzEtY2U4NS0z YTU5LTkzNDUtYmUzMDk2NDVmMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk//wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcxjiu4kaCi/3zT+sh32ehrpXqyEhfkgkZ8AlkujEm17d4+E95xBj4C GR7vzqLe9KLmhsjV0ZQ+V49vaYE4RJAHwl9uaDSnLPmthZ8vImxymDbquVtRubpv zqf6s1LsVRiugdNB66OVeRY5EoIZAjwgb3e5V2H2Df0ZbN8xGPF6ey/1PwNHye8m MOzjRSIbuC87rZ2iYeqWoxryFf9oYZw3b2TSAt7DG+5rmoAuEFoS3t59eX93f6f5 WH3YA7qhnGzd2HqEXsmSDsehr8/mE4KIX9imIGhjuEEGQWpT+94o89jwi3JzqdhX vW+IL69FyNxQgWO8tuzzonT5XbFWsKE= -----END CERTIFICATE-----Generated at Thu Aug 27 17:38:08 2026 by rpki-client