$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa File: cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa (raw, json) Hash identifier: JPuBabgoDcbNdZPX/29RQtBYsJh3c+hAvK5/tWFrl5Q= Subject key identifier: 2A:86:C0:57:59:93:3E:51:D6:A7:17:3D:98:42:B4:4D:EB:2C:77:D0 Certificate issuer: /CN=545b8526-3b5a-46c2-b925-6c40139289cd Certificate serial: 010D0C9F4328584ED2CC78595E0D4D27AAAE7100 Authority key identifier: 9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 53388 IP address blocks: 142.249.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:78:59:5e:0d:4d:27:aa:ae:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=545b8526-3b5a-46c2-b925-6c40139289cd Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=76b472e4-a78f-481d-a249-576ce8c8b8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6e:e4:ce:2f:11:b5:fa:7e:19:1f:eb:eb:3a: 47:d3:26:fe:34:f8:5a:16:c9:d5:8d:53:c0:39:0d: 6d:ef:a7:af:2e:89:78:a1:f9:07:e4:67:27:7a:b5: 91:17:73:5c:3f:55:b4:a6:a8:d4:17:71:78:24:4e: f9:82:a9:13:44:36:02:b9:d1:42:ab:69:27:08:4d: 5b:d0:39:55:c6:c9:c0:3c:6a:8e:85:38:88:a6:1b: 36:3c:0f:81:68:45:64:e6:bf:aa:18:d7:0b:e6:af: 11:eb:89:69:34:41:a2:91:9a:65:28:c6:52:e6:02: 6d:41:09:f9:b1:77:ff:62:d2:8e:42:7b:b9:cd:6a: 0f:a5:10:2b:ec:bb:82:a0:9a:15:1f:11:ee:ff:59: 79:7c:83:26:b3:f4:95:d5:2a:2f:cf:24:b6:4c:8f: 83:2b:46:00:b5:ab:c0:2d:39:1b:d5:8c:e6:ee:e2: 36:aa:69:11:62:24:b0:b1:8a:b1:3c:68:3f:37:16: 9f:73:84:ea:5b:eb:2d:e8:4a:77:5a:10:fa:d5:f7: 50:d0:4a:1a:f6:15:6f:00:14:89:c5:f9:c8:70:18: b4:4d:7d:52:71:4a:d2:d5:e2:91:b5:49:d2:f4:af: 0e:11:f8:09:1a:a8:ab:8a:41:e8:46:32:f0:8b:1f: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:86:C0:57:59:93:3E:51:D6:A7:17:3D:98:42:B4:4D:EB:2C:77:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.crl X509v3 Authority Key Identifier: keyid:9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer sbgp-ipAddrBlock: critical IPv4: 142.249.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:11:89:03:8d:c6:d4:6f:87:00:b0:df:53:16:3d:2c:43:05: f7:6b:68:13:fc:15:d5:e8:a0:af:12:b1:dd:76:2b:44:ea:06: 2b:b2:ed:83:ed:0b:c1:0b:b7:f1:51:e0:7d:3e:9e:9f:ad:59: fb:4f:75:23:0c:9f:4d:40:0f:75:4f:18:58:16:c0:46:49:66: 89:c9:c1:2c:08:ad:5d:be:f3:ba:30:73:c6:0a:b1:cf:c2:ed: 86:cc:87:c3:b2:00:6b:61:ed:f5:36:da:7a:66:8a:36:12:d4: 70:ab:71:15:07:ac:0b:f8:3a:84:16:db:ec:45:3f:e9:2b:62: 4f:72:e6:7c:e8:e4:54:62:5c:5a:14:3b:ea:b1:d0:10:81:88: f7:90:a4:da:76:03:c5:f0:19:f3:99:9a:05:f3:67:45:3c:e2: a0:47:57:76:ac:21:ab:50:69:da:ba:db:78:9b:3c:f3:dd:09: d5:23:55:7a:5b:59:b8:35:34:c3:ff:ae:8f:d9:15:47:be:15: 73:e9:e9:fd:22:10:ea:c5:67:22:ef:d2:de:f0:c8:3c:d3:f5: 4b:42:22:bd:dd:a9:45:b2:8b:47:f1:b8:0f:4c:22:17:9a:3f: 6e:22:f4:d9:85:25:0f:f6:9e:e5:83:d4:c6:af:30:23:35:0d: e4:4e:37:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SzHhZXg1NJ6qucQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ1Yjg1MjYtM2I1YS00NmMyLWI5MjUtNmM0MDEzOTI4 OWNkMB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk NzZiNDcyZTQtYTc4Zi00ODFkLWEyNDktNTc2Y2U4YzhiOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG7kzi8Rtfp+GR/r6zpH0yb+NPhaFsnVjVPA OQ1t76evLol4ofkH5GcnerWRF3NcP1W0pqjUF3F4JE75gqkTRDYCudFCq2knCE1b 0DlVxsnAPGqOhTiIphs2PA+BaEVk5r+qGNcL5q8R64lpNEGikZplKMZS5gJtQQn5 sXf/YtKOQnu5zWoPpRAr7LuCoJoVHxHu/1l5fIMms/SV1SovzyS2TI+DK0YAtavA LTkb1Yzm7uI2qmkRYiSwsYqxPGg/Nxafc4TqW+st6Ep3WhD61fdQ0Eoa9hVvABSJ xfnIcBi0TX1ScUrS1eKRtUnS9K8OEfgJGqirikHoRjLwix8ImQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqGwFdZkz5R1qcXPZhCtE3rLHfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDVi ODUyNi0zYjVhLTQ2YzItYjkyNS02YzQwMTM5Mjg5Y2QvY2YzZjJhNDQtNjUxZC0z MDgwLWExZmQtMzE1ODRkMWQzY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQ1Yjg1MjYtM2I1YS00NmMyLWI5 MjUtNmM0MDEzOTI4OWNkLzU0NWI4NTI2LTNiNWEtNDZjMi1iOTI1LTZjNDAxMzky ODljZC5jcmwwHwYDVR0jBBgwFoAUm3H71WvhRr1EkTToTzVL0RJXo1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDViODUyNi0zYjVhLTQ2YzItYjkyNS02YzQw MTM5Mjg5Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8RiQONxtRvhwCw31MWPSxDBfdraBP8FdXooK8Ssd12K0TqBiuy7YPt C8ELt/FR4H0+np+tWftPdSMMn01AD3VPGFgWwEZJZonJwSwIrV2+87owc8YKsc/C 7YbMh8OyAGth7fU22npmijYS1HCrcRUHrAv4OoQW2+xFP+krYk9y5nzo5FRiXFoU O+qx0BCBiPeQpNp2A8XwGfOZmgXzZ0U84qBHV3asIatQadq623ibPPPdCdUjVXpb Wbg1NMP/ro/ZFUe+FXPp6f0iEOrFZyLv0t7wyDzT9UtCIr3dqUWyi0fxuA9MIhea P24i9NmFJQ/2nuWD1MavMCM1DeRON70= -----END CERTIFICATE-----Generated at Sun Sep 27 00:19:38 2026 by rpki-client