$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/04d5dc04-ca1c-3061-a056-5bc2cec494fa.roa File: 04d5dc04-ca1c-3061-a056-5bc2cec494fa.roa (raw, json) Hash identifier: Le6MyPOKJbA2UkVAYEZqOcDV3dMxCYj33E7Fug3n9pk= Subject key identifier: 3E:45:9F:3D:2E:86:83:40:1C:11:7C:C6:7F:AD:AD:D5:41:B6:7D:09 Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Certificate serial: 010D0C9F4328584F2D87DCD2E21C93EB7F08B380 Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/04d5dc04-ca1c-3061-a056-5bc2cec494fa.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 142.214.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:dc:d2:e2:1c:93:eb:7f:08:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=60ec04c9-1eeb-4aaf-917f-289366f6e18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:f2:17:bc:31:90:9b:9c:a3:61:04:3e:60: 3d:04:87:f8:ae:be:7d:38:da:76:10:f6:7b:af:d2: a3:86:e4:cd:87:5c:42:f5:b5:09:c0:62:ab:1f:b5: cd:33:b6:3d:7a:ec:b7:02:b3:7c:95:8a:1e:66:dd: 77:0a:97:a0:c6:5f:cd:82:3e:e3:94:b7:85:ca:08: a2:2f:23:e4:82:72:a3:03:05:6b:d5:6f:40:6b:4f: d5:aa:a8:b6:75:72:4b:6b:b2:20:df:71:fd:ad:cb: 3b:6e:58:f9:e6:c6:a5:55:c9:d8:2d:35:65:78:b4: 32:26:23:cf:d4:39:5d:84:15:e4:4f:fb:40:03:3f: 04:bf:6b:e3:e6:d1:91:9a:db:19:5f:d6:07:9d:a5: 31:f9:6b:24:93:69:f1:f9:71:8a:22:e2:4a:62:4b: 26:fa:44:31:f1:7d:93:69:4a:5a:ad:58:f9:9a:35: 36:1d:c3:84:86:3c:73:6b:2f:98:f9:2c:87:23:38: 2b:cb:9b:7c:01:81:d2:bc:4f:f7:68:e2:0b:fc:fe: bb:04:0d:cb:21:6b:71:2d:7f:5b:c8:e8:e7:26:6f: 27:5e:fd:b6:d0:8c:8f:ff:b5:85:c6:44:a8:ee:80: 1a:3a:c3:bb:bc:ea:76:38:cf:c2:c2:94:53:83:d4: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:45:9F:3D:2E:86:83:40:1C:11:7C:C6:7F:AD:AD:D5:41:B6:7D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/04d5dc04-ca1c-3061-a056-5bc2cec494fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl X509v3 Authority Key Identifier: keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer sbgp-ipAddrBlock: critical IPv4: 142.214.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c8:1b:55:75:54:68:e5:15:b2:a0:06:07:c9:ab:dd:d5:bf: ff:d2:73:03:04:66:f2:d9:0d:01:28:e0:c4:28:e9:bd:3d:39: 96:ea:a0:17:0e:9c:b9:29:c0:f4:a8:1b:a3:c1:69:8d:f4:42: 0c:3a:4a:65:8a:89:91:95:5f:bd:3a:69:c5:88:a9:fa:cf:65: df:a7:9d:4e:45:89:ee:9a:b2:55:56:20:62:4b:28:dd:9e:3c: fd:25:f8:c1:0a:c8:36:14:58:58:e3:3d:06:21:9f:7d:8f:48: b5:f3:7b:35:06:71:04:cd:d4:9f:48:3f:21:d9:b3:d1:70:ac: 3d:a0:48:c2:ed:bd:40:54:5c:93:f1:ca:7d:1e:55:8b:00:7a: a9:dc:9c:0d:5e:3b:76:19:a3:76:a1:dc:4d:89:1a:1d:8d:df: d6:b4:75:ab:67:2a:44:2e:ee:44:97:e3:47:64:19:05:56:9f: 81:ed:06:b4:32:b4:83:15:a6:41:c6:96:c9:d3:46:2f:d4:a1: 9f:7e:15:67:87:dd:db:a7:48:38:65:80:7b:25:cf:3a:cf:fc: ac:04:06:72:b5:13:ac:a8:71:1c:0a:36:c8:01:67:b5:f1:28: fa:00:e1:fb:d8:cf:7d:f5:26:be:bd:41:ac:83:25:3b:83:27: 82:57:8f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th9zS4hyT638Is4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3 ODYxMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk NjBlYzA0YzktMWVlYi00YWFmLTkxN2YtMjg5MzY2ZjZlMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl/yF7wxkJuco2EEPmA9BIf4rr59ONp2EPZ7 r9KjhuTNh1xC9bUJwGKrH7XNM7Y9euy3ArN8lYoeZt13Cpegxl/Ngj7jlLeFygii LyPkgnKjAwVr1W9Aa0/Vqqi2dXJLa7Ig33H9rcs7blj55salVcnYLTVleLQyJiPP 1DldhBXkT/tAAz8Ev2vj5tGRmtsZX9YHnaUx+Wskk2nx+XGKIuJKYksm+kQx8X2T aUparVj5mjU2HcOEhjxzay+Y+SyHIzgry5t8AYHSvE/3aOIL/P67BA3LIWtxLX9b yOjnJm8nXv220IyP/7WFxkSo7oAaOsO7vOp2OM/CwpRTg9SaBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5Fnz0uhoNAHBF8xn+trdVBtn0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvMDRkNWRjMDQtY2ExYy0z MDYxLWEwNTYtNWJjMmNlYzQ5NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3 Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4 ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnIG1V1VGjlFbKgBgfJq93Vv//ScwMEZvLZDQEo4MQo6b09OZbqoBcO nLkpwPSoG6PBaY30Qgw6SmWKiZGVX706acWIqfrPZd+nnU5Fie6aslVWIGJLKN2e PP0l+MEKyDYUWFjjPQYhn32PSLXzezUGcQTN1J9IPyHZs9FwrD2gSMLtvUBUXJPx yn0eVYsAeqncnA1eO3YZo3ah3E2JGh2N39a0datnKkQu7kSX40dkGQVWn4HtBrQy tIMVpkHGlsnTRi/UoZ9+FWeH3dunSDhlgHslzzrP/KwEBnK1E6yocRwKNsgBZ7Xx KPoA4fvYz331Jr69QayDJTuDJ4JXj3M= -----END CERTIFICATE-----Generated at Sun Sep 20 20:04:03 2026 by rpki-client