$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa File: cfa7cf23-8b99-3993-9542-8d4224a4493e.roa (raw, json) Hash identifier: LWX8SkRtGtac9nb5YLrwZy6DSEKfsFlkQH7hMQSrxGE= Subject key identifier: 50:4A:CB:C1:98:7F:49:88:9B:D9:0D:39:64:F7:36:4D:F8:B0:0A:4F Certificate issuer: /CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895 Certificate serial: 010D0C9F4328584EA7961584D25A466B24C1CE80 Authority key identifier: 8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 142.147.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:15:84:d2:5a:46:6b:24:c1:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a1acc853-685e-48a0-9a3d-ddbb24411c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:49:31:5f:95:34:f3:84:90:8c:99:1f:69:80: 66:6f:ef:79:66:26:47:85:f1:0b:d7:a6:35:44:d2: b5:22:9c:3c:15:94:f7:b1:e3:3e:7a:39:7c:cc:20: 54:d0:bc:91:fa:44:ef:d0:f1:46:0e:47:a3:5c:54: 94:25:29:5f:28:0b:9f:51:bf:eb:7e:8f:0a:db:b5: 6f:f4:a2:17:f2:7f:65:f5:73:3d:76:c3:d7:8f:cf: d0:64:37:ae:df:53:0a:f7:51:8a:4e:a9:84:2d:a5: 46:f1:83:7c:41:ec:16:b6:14:d2:75:66:7a:bc:2a: fc:fc:44:a6:8a:83:8b:98:20:55:ad:f0:ad:0c:18: 2b:6e:54:83:f9:61:46:84:e2:22:e9:b5:8d:63:b1: 6d:70:88:99:54:9f:ec:8e:02:d6:c5:3b:c6:d3:56: 89:27:86:bc:31:0a:59:48:4e:48:53:80:84:fe:4f: 2f:fc:cf:d5:38:3c:fd:a6:99:82:f0:d3:53:bb:c0: 8f:d3:50:5d:34:2b:81:db:e5:7d:26:e1:26:66:0e: ea:d8:75:6e:23:12:dd:83:a5:b2:a7:2e:c3:c6:50: 3a:2d:cf:4c:11:ae:8f:06:0e:b3:06:2d:fe:7a:91: e7:75:33:63:d1:b9:11:87:a8:62:81:8a:35:a1:57: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4A:CB:C1:98:7F:49:88:9B:D9:0D:39:64:F7:36:4D:F8:B0:0A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl X509v3 Authority Key Identifier: keyid:8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer sbgp-ipAddrBlock: critical IPv4: 142.147.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:59:f0:d4:62:0c:52:df:06:1c:b4:be:eb:b1:83:54:ad:aa: 14:e4:22:ba:f5:07:5a:11:a4:4b:ca:40:c3:1e:80:a9:6c:ca: e0:25:87:bd:4c:5f:14:43:ce:35:e7:46:2b:78:8b:15:5e:05: 0b:1d:3c:78:66:28:7e:e7:cf:54:d7:d9:3d:79:51:cf:a9:6c: 31:51:a7:19:cf:03:01:ba:0b:37:18:39:e6:96:bf:d2:f6:74: 29:99:62:03:aa:8e:49:c6:2e:7c:54:4d:2f:04:43:74:df:99: 27:96:d0:5b:ec:8b:6b:33:dc:94:a1:4b:8f:68:55:cc:fa:86: 93:1d:92:0b:ac:3c:82:e1:01:4f:10:6a:fa:63:96:f8:88:79: 9c:d3:80:1d:f5:e0:46:f9:6f:40:bd:68:07:94:50:13:fa:21: 04:6e:86:c5:9e:4a:10:5f:b7:50:d5:42:b0:22:1e:a1:49:c2: 46:82:2d:6e:a9:a8:d4:81:b4:ff:16:e7:97:2f:fa:a3:49:49: 76:9e:90:ed:ea:dd:80:f6:67:0b:d5:59:67:56:ff:4d:27:2a: 53:04:71:d7:c1:65:0c:ac:bc:65:de:0b:31:dd:a2:6e:b9:b3: b7:1d:4f:71:dc:ec:d0:52:a6:4f:1d:71:55:9a:84:ec:ad:e4: ea:7b:39:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlhWE0lpGayTBzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVhZTBjYzYtYjAwZi00NzQyLWFhZGItYWI4ZWEzNTRk ODk1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTFhY2M4NTMtNjg1ZS00OGEwLTlhM2QtZGRiYjI0NDExYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UkxX5U084SQjJkfaYBmb+95ZiZHhfEL16Y1 RNK1Ipw8FZT3seM+ejl8zCBU0LyR+kTv0PFGDkejXFSUJSlfKAufUb/rfo8K27Vv 9KIX8n9l9XM9dsPXj8/QZDeu31MK91GKTqmELaVG8YN8QewWthTSdWZ6vCr8/ESm ioOLmCBVrfCtDBgrblSD+WFGhOIi6bWNY7FtcIiZVJ/sjgLWxTvG01aJJ4a8MQpZ SE5IU4CE/k8v/M/VODz9ppmC8NNTu8CP01BdNCuB2+V9JuEmZg7q2HVuIxLdg6Wy py7DxlA6Lc9MEa6PBg6zBi3+epHndTNj0bkRh6higYo1oVehgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBKy8GYf0mIm9kNOWT3Nk34sApPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWFl MGNjNi1iMDBmLTQ3NDItYWFkYi1hYjhlYTM1NGQ4OTUvY2ZhN2NmMjMtOGI5OS0z OTkzLTk1NDItOGQ0MjI0YTQ0OTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVhZTBjYzYtYjAwZi00NzQyLWFh ZGItYWI4ZWEzNTRkODk1L2Y1YWUwY2M2LWIwMGYtNDc0Mi1hYWRiLWFiOGVhMzU0 ZDg5NS5jcmwwHwYDVR0jBBgwFoAUi5tilTBbn1ebIuo/yJMwsTPO98UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWFlMGNjNi1iMDBmLTQ3NDItYWFkYi1hYjhl YTM1NGQ4OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpM2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNZ8NRiDFLfBhy0vuuxg1StqhTkIrr1B1oRpEvKQMMegKlsyuAlh71M XxRDzjXnRit4ixVeBQsdPHhmKH7nz1TX2T15Uc+pbDFRpxnPAwG6CzcYOeaWv9L2 dCmZYgOqjknGLnxUTS8EQ3TfmSeW0Fvsi2sz3JShS49oVcz6hpMdkgusPILhAU8Q avpjlviIeZzTgB314Eb5b0C9aAeUUBP6IQRuhsWeShBft1DVQrAiHqFJwkaCLW6p qNSBtP8W55cv+qNJSXaekO3q3YD2ZwvVWWdW/00nKlMEcdfBZQysvGXeCzHdom65 s7cdT3Hc7NBSpk8dcVWahOyt5Op7OeA= -----END CERTIFICATE-----Generated at Sat Sep 5 02:28:22 2026 by rpki-client