$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa File: afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa (raw, json) Hash identifier: O5hSFw0txhwVTKydaAatsZjnelYEJc2np8w9YS/ktwI= Subject key identifier: F8:8A:E1:E7:58:40:13:FA:37:F6:56:60:86:68:97:44:70:83:78:EC Certificate issuer: /CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Certificate serial: 010D0C9F4328584F2F2334ACE8013CB7F95D5140 Authority key identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa Signing time: Tue 15 Sep 2026 14:49:23 +0000 ROA not before: Tue 15 Sep 2026 14:49:23 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 30110 IP address blocks: 198.59.140.0/22 maxlen: 24 2605:ce00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:23:34:ac:e8:01:3c:b7:f9:5d:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Validity Not Before: Sep 15 14:49:23 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=64ef810f-6756-47c3-ae8e-49ad9aa89bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:f0:68:4a:1f:32:71:40:70:d2:cb:98:c4: b2:8c:0d:f1:14:8e:ee:d9:c5:26:7d:31:71:e2:3c: 9f:90:08:23:48:61:fa:d6:c2:64:77:4a:4f:81:a2: 87:89:29:0b:38:ed:49:71:ea:3e:8b:e6:57:18:7a: 85:cb:6f:00:c7:fd:5a:ca:49:ea:e7:0a:c7:dd:a3: 27:0b:fd:94:bd:29:e2:19:38:20:b9:d9:bc:e6:d5: 47:2a:c6:88:55:d1:ff:11:cd:37:a7:29:84:5f:cc: 24:e4:66:d7:1d:ce:ba:1b:1a:92:58:7b:6f:00:26: 48:c2:9a:a0:8f:cc:6a:73:07:43:8a:fa:5d:3c:2b: de:0e:70:35:d7:9c:23:c6:19:52:c2:17:f9:9b:56: a9:1b:c8:4f:21:50:a2:09:f0:c7:92:8a:b9:51:cb: 35:ac:c0:a2:b8:90:bb:40:8c:22:43:6f:f9:cb:40: 70:ef:58:49:7a:c8:cc:73:77:7f:cc:ae:68:15:07: a6:ef:a5:98:4e:73:d1:f8:e9:4e:4e:05:18:18:ba: 0a:fb:48:9d:48:d4:75:2e:51:25:0b:08:fb:97:56: e1:bf:47:dc:9c:a3:53:60:ff:63:6c:2c:3f:6b:d2: 92:5d:95:74:34:58:a3:9c:f4:66:c3:2e:ab:e4:48: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8A:E1:E7:58:40:13:FA:37:F6:56:60:86:68:97:44:70:83:78:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl X509v3 Authority Key Identifier: keyid:43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer sbgp-ipAddrBlock: critical IPv4: 198.59.140.0/22 IPv6: 2605:ce00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7b:7f:1a:76:73:4e:f6:e6:47:b0:9d:b0:8c:9d:80:90:d8: 12:62:1d:fb:13:22:2e:44:d6:38:f4:d6:43:89:e7:c6:88:72: d1:eb:20:13:82:57:4a:1e:8d:d9:c7:33:12:68:e1:b0:c1:62: a0:91:1c:59:6d:2f:3a:e0:d3:4f:e9:d1:80:69:ef:87:b1:c2: ca:da:a0:13:d4:c3:47:b0:1d:bd:43:06:14:06:6f:5a:bb:7a: f6:2e:21:c8:56:c3:25:6b:b3:2e:40:36:af:fb:e1:ee:65:59: fc:0c:b6:f3:50:53:f6:43:f6:21:8d:59:89:52:12:f3:c5:3a: 7e:83:54:b1:96:d7:1d:49:83:77:fd:d1:bd:03:3e:a8:24:5b: 31:80:a8:10:51:3b:05:05:fa:7a:d8:02:eb:f5:a8:4f:90:12: c0:2b:88:4f:08:9f:a4:0d:f2:e1:ae:d2:51:18:ed:4c:05:23: 5d:63:78:5e:fa:2a:65:c6:9f:97:af:22:d6:00:73:95:c3:14: 86:91:72:f1:2b:54:a7:01:4d:86:17:70:7e:e6:0f:41:06:11: c9:41:f2:f9:14:a3:23:78:cb:44:f9:a3:00:eb:21:a6:32:a2: 61:f8:b4:38:af:5c:76:25:65:7e:a2:ba:7d:37:42:5b:6e:b4: 6d:fb:b7:7e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE8vIzSs6AE8t/ldUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM0YmNmYzgtZTZlNy00NTAwLWI5ODUtNWNiODU5Zjg4 ZmVjMB4XDTI2MDkxNTE0NDkyM1oXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NjRlZjgxMGYtNjc1Ni00N2MzLWFlOGUtNDlhZDlhYTg5YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApafwaEofMnFAcNLLmMSyjA3xFI7u2cUmfTFx 4jyfkAgjSGH61sJkd0pPgaKHiSkLOO1Jceo+i+ZXGHqFy28Ax/1ayknq5wrH3aMn C/2UvSniGTggudm85tVHKsaIVdH/Ec03pymEX8wk5GbXHc66GxqSWHtvACZIwpqg j8xqcwdDivpdPCveDnA115wjxhlSwhf5m1apG8hPIVCiCfDHkoq5Ucs1rMCiuJC7 QIwiQ2/5y0Bw71hJesjMc3d/zK5oFQem76WYTnPR+OlOTgUYGLoK+0idSNR1LlEl Cwj7l1bhv0fcnKNTYP9jbCw/a9KSXZV0NFijnPRmwy6r5EiyAQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFPiK4edYQBP6N/ZWYIZol0Rwg3jsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRi Y2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlmODhmZWMvYWZlNjZmOTUtYmU0YS0z NmY5LWI0MWEtZDhhMmZkNWRiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM0YmNmYzgtZTZlNy00NTAwLWI5 ODUtNWNiODU5Zjg4ZmVjLzBjNGJjZmM4LWU2ZTctNDUwMC1iOTg1LTVjYjg1OWY4 OGZlYy5jcmwwHwYDVR0jBBgwFoAUQ4ArWOknD9c2EmD/DAY9OJTkCZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4 NTlmODhmZWMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCxjuMMA0E AgACMAcDBQAmBc4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADd7fxp2c0725kewnbCMnYCQ2BJiHfsTIi5E 1jj01kOJ58aIctHrIBOCV0oejdnHMxJo4bDBYqCRHFltLzrg00/p0YBp74exwsra oBPUw0ewHb1DBhQGb1q7evYuIchWwyVrsy5ANq/74e5lWfwMtvNQU/ZD9iGNWYlS EvPFOn6DVLGW1x1Jg3f90b0DPqgkWzGAqBBROwUF+nrYAuv1qE+QEsAriE8In6QN 8uGu0lEY7UwFI11jeF76KmXGn5evItYAc5XDFIaRcvErVKcBTYYXcH7mD0EGEclB 8vkUoyN4y0T5owDrIaYyomH4tDivXHYlZX6iun03QltutG37t34= -----END CERTIFICATE-----Generated at Fri Sep 25 00:38:51 2026 by rpki-client