$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/af21acb2-d957-39f9-8f3b-1d4755add99f.roa File: af21acb2-d957-39f9-8f3b-1d4755add99f.roa (raw, json) Hash identifier: RM95ZpeM4V33OUyBunnEtLS9RkjD1DWUB7Vwlup73VI= Subject key identifier: E2:81:30:7B:E1:F2:9D:3E:CF:12:CD:A1:66:89:16:27:27:C6:6E:FC Certificate issuer: /CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad Certificate serial: 010D0C9F4328584EC63C70D5CDC9D94C17674F00 Authority key identifier: C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/af21acb2-d957-39f9-8f3b-1d4755add99f.roa Signing time: Sun 09 Aug 2026 01:00:12 +0000 ROA not before: Sun 09 Aug 2026 01:00:12 +0000 ROA not after: Sat 07 Nov 2026 02:00:12 +0000 asID: 20118 IP address blocks: 142.248.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c6:3c:70:d5:cd:c9:d9:4c:17:67:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad Validity Not Before: Aug 9 01:00:12 2026 GMT Not After : Nov 7 02:00:12 2026 GMT Subject: CN=94629dc6-ef62-428e-bc0c-2fd616b115d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:17:b7:90:b4:be:57:79:95:6b:58:e5:29:59: 5a:21:89:74:90:a2:12:e2:66:99:3d:db:31:48:be: e8:a0:10:b2:80:f8:a8:42:2c:0a:0d:4a:6c:15:eb: 7c:e0:0b:95:c7:8b:ab:38:85:55:8c:ad:40:8d:02: d9:45:94:a9:0c:0d:ad:58:f1:4d:4e:13:15:08:26: 6b:56:15:b1:11:12:84:7d:3e:bf:40:d9:1b:87:dc: cf:fa:c3:61:4d:35:08:04:25:26:a0:34:64:a1:bc: a3:a7:28:8b:65:9a:32:f3:e4:d6:a9:d0:10:27:a5: 39:d3:67:cd:67:36:52:8f:22:90:bb:48:30:e1:11: 5b:62:de:e9:d1:f7:05:28:a1:d3:79:fe:e6:f6:70: c1:32:f7:02:60:1a:da:79:bc:52:5b:af:ce:53:85: ad:4f:98:46:43:23:76:e7:c6:ee:96:87:a0:40:7c: 27:5c:8c:fa:c9:6e:c6:bd:dd:96:f8:d0:dd:1a:2e: 18:d7:89:b8:74:4c:47:e0:f4:58:c7:f9:c6:d1:5d: b7:a9:e9:a0:0e:f9:10:b0:75:31:44:08:99:d1:29: 25:72:15:07:26:7f:28:04:b0:95:f4:b0:98:7d:1d: 46:7d:4f:2d:80:00:5e:33:75:51:f6:eb:2d:b8:35: c3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:81:30:7B:E1:F2:9D:3E:CF:12:CD:A1:66:89:16:27:27:C6:6E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/af21acb2-d957-39f9-8f3b-1d4755add99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.crl X509v3 Authority Key Identifier: keyid:C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer sbgp-ipAddrBlock: critical IPv4: 142.248.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:98:2e:e3:65:59:7f:51:a3:4f:dc:17:03:4e:cb:43:27:54: 92:aa:b3:d2:8e:03:c4:a9:c7:b1:65:d4:b9:71:58:db:14:be: 72:fe:5e:98:ea:e0:84:c8:bb:b3:da:dd:70:9d:bf:50:66:17: 89:89:48:28:b4:9b:b9:49:79:cd:f0:36:3d:af:9f:ce:af:6b: d8:be:53:c4:76:03:30:e6:57:83:75:6a:a7:12:85:55:e0:89: 68:68:68:10:48:fa:ae:f0:4a:36:54:41:8a:b8:9a:74:e6:18: 5d:47:29:69:12:07:96:32:04:fd:f0:e0:24:73:4e:de:dd:62: bf:13:94:79:e2:db:fe:a8:0f:53:0a:e2:17:59:bd:ec:8d:f9: 8b:7a:18:86:46:75:95:e2:24:3e:a9:1e:49:5e:c3:45:e9:b1: fd:0f:16:64:5c:f3:df:2c:f3:57:da:73:db:ae:d7:c4:a6:da: e9:f8:26:35:22:4b:3a:1c:55:c9:6d:51:9d:ac:03:5c:68:bf: aa:70:7e:3b:b7:75:ae:1c:a5:5f:0c:cd:40:30:85:08:79:f6: 17:4c:3f:6b:b3:f5:d1:b3:fc:32:62:e3:7c:43:89:14:19:a9: 86:04:c8:e0:c7:1f:80:10:da:c5:46:00:04:88:d5:e3:ad:59: fe:11:1f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7GPHDVzcnZTBdnTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFkN2EzMTEtMzUxOC00NGQyLWFhNDgtZWViMjkyNjNh NmFkMB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk OTQ2MjlkYzYtZWY2Mi00MjhlLWJjMGMtMmZkNjE2YjExNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xe3kLS+V3mVa1jlKVlaIYl0kKIS4maZPdsx SL7ooBCygPioQiwKDUpsFet84AuVx4urOIVVjK1AjQLZRZSpDA2tWPFNThMVCCZr VhWxERKEfT6/QNkbh9zP+sNhTTUIBCUmoDRkobyjpyiLZZoy8+TWqdAQJ6U502fN ZzZSjyKQu0gw4RFbYt7p0fcFKKHTef7m9nDBMvcCYBraebxSW6/OU4WtT5hGQyN2 58buloegQHwnXIz6yW7Gvd2W+NDdGi4Y14m4dExH4PRYx/nG0V23qemgDvkQsHUx RAiZ0SklchUHJn8oBLCV9LCYfR1GfU8tgABeM3VR9ustuDXDlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKBMHvh8p0+zxLNoWaJFicnxm78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kMWQ3 YTMxMS0zNTE4LTQ0ZDItYWE0OC1lZWIyOTI2M2E2YWQvYWYyMWFjYjItZDk1Ny0z OWY5LThmM2ItMWQ0NzU1YWRkOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDFkN2EzMTEtMzUxOC00NGQyLWFh NDgtZWViMjkyNjNhNmFkL2QxZDdhMzExLTM1MTgtNDRkMi1hYTQ4LWVlYjI5MjYz YTZhZC5jcmwwHwYDVR0jBBgwFoAUxhmSlwtkSgIFr8R2Y4qy9ezDolYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kMWQ3YTMxMS0zNTE4LTQ0ZDItYWE0OC1lZWIy OTI2M2E2YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjvhcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKYLuNlWX9Ro0/cFwNOy0MnVJKqs9KOA8Spx7Fl1LlxWNsUvnL+Xpjq 4ITIu7Pa3XCdv1BmF4mJSCi0m7lJec3wNj2vn86va9i+U8R2AzDmV4N1aqcShVXg iWhoaBBI+q7wSjZUQYq4mnTmGF1HKWkSB5YyBP3w4CRzTt7dYr8TlHni2/6oD1MK 4hdZveyN+Yt6GIZGdZXiJD6pHklew0Xpsf0PFmRc898s81fac9uu18Sm2un4JjUi SzocVcltUZ2sA1xov6pwfju3da4cpV8MzUAwhQh59hdMP2uz9dGz/DJi43xDiRQZ qYYEyODHH4AQ2sVGAASI1eOtWf4RH1A= -----END CERTIFICATE-----Generated at Sun Sep 13 10:21:44 2026 by rpki-client