$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/71fdeb78-f198-3e40-a3d7-d5ad5051830c.roa File: 71fdeb78-f198-3e40-a3d7-d5ad5051830c.roa (raw, json) Hash identifier: KuXhM5HnIg4+KsKbIpGP5mYBP5J5PKU6azeYy//FmD4= Subject key identifier: EB:D9:CB:41:E2:60:0A:D4:62:A4:A6:82:43:57:E0:27:5C:52:72:9E Certificate issuer: /CN=0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd Certificate serial: 010D0C9F4328584F2ABD2D9CA228B25B632CD280 Authority key identifier: 58:ED:26:50:5E:5A:09:2B:64:E7:DC:6D:EA:03:3E:74:A6:C1:EE:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/71fdeb78-f198-3e40-a3d7-d5ad5051830c.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 21564 IP address blocks: 142.239.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2d:9c:a2:28:b2:5b:63:2c:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=efea3fa2-2d79-4100-a213-56103c77b5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:62:91:f9:05:e3:1f:bb:68:2d:8f:dc:70: 49:1a:00:c5:7e:9f:8e:24:47:3b:f2:38:e0:17:42: b8:5f:df:16:91:54:5d:82:a1:7e:bd:38:7c:c3:8e: e1:46:5a:42:56:aa:40:5c:41:d1:1a:57:0c:54:bf: 9e:82:0d:37:9a:13:f0:3d:63:3f:94:48:43:6d:f6: 2a:53:96:aa:5e:06:50:c8:30:9b:7b:9e:c4:1c:a0: 80:dd:53:cc:c9:b1:8e:30:2d:ce:8b:8e:8e:83:a0: 8b:2f:77:ea:d5:23:cd:0a:97:39:71:8d:52:67:de: 80:58:de:0f:48:f3:7d:25:4d:8b:6d:3f:e9:e2:cd: 5e:01:98:75:84:ac:e2:74:f8:38:8c:ad:45:52:59: e2:aa:97:1d:8a:ef:71:b8:09:7f:ea:58:a8:89:31: f2:d7:46:89:c2:c6:92:65:b0:84:03:0c:4c:cf:3a: d2:51:ae:e6:23:2c:52:c4:d5:16:ef:3e:68:9c:d3: 3e:a8:2e:cb:87:20:81:9c:c1:87:7c:21:b3:4f:0a: c6:d0:9b:cf:61:0d:c0:80:c2:88:40:1f:e7:b5:58: 80:b6:d8:21:6b:f1:a0:ab:2c:0d:35:74:9b:6f:da: 92:22:21:27:14:55:ce:72:18:d8:fb:4b:c2:cf:00: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D9:CB:41:E2:60:0A:D4:62:A4:A6:82:43:57:E0:27:5C:52:72:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/71fdeb78-f198-3e40-a3d7-d5ad5051830c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.crl X509v3 Authority Key Identifier: keyid:58:ED:26:50:5E:5A:09:2B:64:E7:DC:6D:EA:03:3E:74:A6:C1:EE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.cer sbgp-ipAddrBlock: critical IPv4: 142.239.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7b:9b:c7:a3:26:4a:9a:20:c0:b4:13:28:a7:23:4a:37:ff: b5:67:03:13:49:e7:2d:36:20:8e:e5:0e:cd:36:96:ec:e7:73: 99:c2:84:db:c6:04:ac:59:9c:c3:5d:99:bb:46:4c:a5:d4:68: 24:6e:42:6a:13:ec:96:9b:b7:5c:47:0c:0d:1d:bc:76:49:cf: 6a:2d:6e:8d:8f:07:4f:0a:c5:75:90:3c:8d:dd:79:af:ac:23: c1:70:56:98:c7:10:cc:91:f5:0c:07:85:c5:e2:a9:c1:88:9a: 9c:78:df:52:b1:0f:4d:80:36:ad:12:cc:45:03:d6:54:2c:61: f0:49:27:55:22:dd:3b:7d:9a:5c:54:67:21:e5:ac:99:23:e4: 9c:49:68:bf:b2:5b:60:9c:1b:e0:25:74:e4:19:04:66:d7:0f: 44:3d:a2:44:08:a3:bf:fd:f6:32:56:93:1b:08:c9:cb:3b:be: 41:b4:99:38:13:6b:09:dc:75:08:d1:42:77:48:8a:97:17:3c: 92:75:d6:f3:4d:7f:03:69:48:07:26:ed:25:51:b3:44:fc:51: db:f4:d9:1a:68:bf:13:f3:d2:92:e2:f8:be:8d:d3:a9:15:9f: d9:02:f3:14:65:d7:ff:ea:76:64:1b:52:a7:a1:73:df:26:20: c5:a7:d2:12 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8qvS2coiiyW2Ms0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI4OTA1YTUtYzc4Zi00ZTdjLThlNmItOGQzY2Q1Yjgw NWZkMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZWZlYTNmYTItMmQ3OS00MTAwLWEyMTMtNTYxMDNjNzdiNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZZikfkF4x+7aC2P3HBJGgDFfp+OJEc78jjg F0K4X98WkVRdgqF+vTh8w47hRlpCVqpAXEHRGlcMVL+egg03mhPwPWM/lEhDbfYq U5aqXgZQyDCbe57EHKCA3VPMybGOMC3Oi46Og6CLL3fq1SPNCpc5cY1SZ96AWN4P SPN9JU2LbT/p4s1eAZh1hKzidPg4jK1FUlniqpcdiu9xuAl/6lioiTHy10aJwsaS ZbCEAwxMzzrSUa7mIyxSxNUW7z5onNM+qC7LhyCBnMGHfCGzTwrG0JvPYQ3AgMKI QB/ntViAttgha/GgqywNNXSbb9qSIiEnFFXOchjY+0vCzwBo/wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOvZy0HiYArUYqSmgkNX4CdcUnKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wYjg5 MDVhNS1jNzhmLTRlN2MtOGU2Yi04ZDNjZDViODA1ZmQvNzFmZGViNzgtZjE5OC0z ZTQwLWEzZDctZDVhZDUwNTE4MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMGI4OTA1YTUtYzc4Zi00ZTdjLThl NmItOGQzY2Q1YjgwNWZkLzBiODkwNWE1LWM3OGYtNGU3Yy04ZTZiLThkM2NkNWI4 MDVmZC5jcmwwHwYDVR0jBBgwFoAUWO0mUF5aCStk59xt6gM+dKbB7o4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wYjg5MDVhNS1jNzhmLTRlN2MtOGU2Yi04ZDNj ZDViODA1ZmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAju8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAeXubx6MmSpogwLQTKKcjSjf/tWcDE0nnLTYgjuUOzTaW7OdzmcKE28YE rFmcw12Zu0ZMpdRoJG5CahPslpu3XEcMDR28dknPai1ujY8HTwrFdZA8jd15r6wj wXBWmMcQzJH1DAeFxeKpwYianHjfUrEPTYA2rRLMRQPWVCxh8EknVSLdO32aXFRn IeWsmSPknElov7JbYJwb4CV05BkEZtcPRD2iRAijv/32MlaTGwjJyzu+QbSZOBNr Cdx1CNFCd0iKlxc8knXW801/A2lIBybtJVGzRPxR2/TZGmi/E/PSkuL4vo3TqRWf 2QLzFGXX/+p2ZBtSp6Fz3yYgxafSEg== -----END CERTIFICATE-----Generated at Mon Sep 21 22:59:41 2026 by rpki-client