$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/cf946ccd-298e-3852-a04f-6a34b0aec559.roa File: cf946ccd-298e-3852-a04f-6a34b0aec559.roa (raw, json) Hash identifier: 4lVDEsq+nUGtzSVHMFJ3qcP1/lwGfShF1P+qlLjQuZc= Subject key identifier: 99:85:6E:78:E6:B6:27:E2:21:C9:CC:5A:F1:CB:5C:8C:C8:74:C9:37 Certificate issuer: /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Certificate serial: 010D0C9F4328584EDC91EEA2E6BE32AF1B962100 Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/cf946ccd-298e-3852-a04f-6a34b0aec559.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 395823 IP address blocks: 205.201.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:ee:a2:e6:be:32:af:1b:96:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=41f25a0b-e085-4f02-8573-66992e086161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:0e:99:99:6c:11:c9:0b:0e:fa:85:03:72: bb:e4:e5:30:d0:8b:6b:4a:de:1d:08:61:29:19:ff: 66:3f:3f:0b:36:1d:8d:75:35:61:0b:0b:3f:b7:ea: 09:e7:c8:5d:1b:1f:ee:ca:6e:54:9e:5f:9e:05:97: 1d:7a:31:5e:5b:5c:ab:f0:4c:17:28:db:d2:39:81: d5:0b:ef:e1:52:74:9a:f4:56:a4:e6:ca:21:4e:a8: c9:55:67:99:a7:f0:67:8e:5a:d3:a6:a5:cc:18:07: 45:74:10:dd:9d:a6:e2:95:7c:64:20:ef:88:6b:b4: 6f:36:42:28:ab:0f:a0:76:e6:c7:63:d4:5f:94:af: 46:3f:ca:cb:6f:56:e1:2f:25:8d:aa:b8:5d:76:33: ac:55:f6:46:2f:ee:c6:2d:fc:32:61:17:05:74:21: 33:04:e1:a1:04:f8:f3:68:f0:83:aa:43:19:15:5c: 7f:d4:80:04:b5:9f:f6:da:83:75:fa:d3:b5:eb:10: f9:0b:53:d4:67:48:16:cf:a9:a4:38:13:14:73:c9: 7d:00:84:5d:12:b8:b0:fd:45:2e:1c:13:92:a1:6d: a4:42:65:0b:25:bb:75:ff:5d:12:22:a8:b2:d2:a6: 80:f7:f3:91:aa:c5:53:80:1c:d2:be:ec:a0:8a:ca: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:85:6E:78:E6:B6:27:E2:21:C9:CC:5A:F1:CB:5C:8C:C8:74:C9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/cf946ccd-298e-3852-a04f-6a34b0aec559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl X509v3 Authority Key Identifier: keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer sbgp-ipAddrBlock: critical IPv4: 205.201.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:cb:c2:e6:e1:d4:48:ec:84:d2:c9:a5:37:4b:68:cf:cc:78: 95:38:4e:76:8a:23:50:c0:dd:2c:da:59:cf:8d:83:f4:24:dc: d3:ff:e7:3a:e7:16:b5:95:32:28:d8:05:70:c1:ce:52:57:a4: 11:34:08:9c:c2:65:8f:fb:35:97:d1:89:e1:f7:da:65:8c:91: 41:c1:ac:19:e7:d9:f0:64:50:0f:2a:ad:59:d2:27:07:79:46: 17:c4:d5:21:22:d2:d6:c9:2e:fc:b9:12:6a:38:a1:3f:e1:a0: d9:bf:9b:b2:b3:c7:85:ac:80:5b:1d:11:c0:1c:bb:80:6d:93: ce:6b:48:08:8a:cf:55:77:cc:7b:bf:34:cf:64:9e:5a:fb:f9: 88:7e:eb:1a:f0:6d:85:28:e6:a0:83:90:2f:cc:b1:84:5b:23: aa:ff:a6:40:c6:e2:69:2b:f3:27:ab:04:34:00:ae:8a:98:d8: 49:ac:68:44:46:8b:38:21:d2:00:36:9d:d5:4c:ca:06:47:13: c2:55:9b:cd:37:e9:3e:18:a5:c0:60:82:ac:0e:dd:0c:2b:f3: af:be:5f:9b:c6:a2:b7:53:26:d0:be:52:1e:3a:59:d0:e5:89: 80:6e:36:c1:1c:f4:18:79:c6:c4:2c:b5:43:92:a3:f6:7e:db: 29:5a:6c:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7cke6i5r4yrxuWIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ZTVlNjctNDE2MS00YTJkLWJkNzMtMmRlYjVmMWQ4 ZjUxMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk NDFmMjVhMGItZTA4NS00ZjAyLTg1NzMtNjY5OTJlMDg2MTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1EOmZlsEckLDvqFA3K75OUw0ItrSt4dCGEp Gf9mPz8LNh2NdTVhCws/t+oJ58hdGx/uym5Unl+eBZcdejFeW1yr8EwXKNvSOYHV C+/hUnSa9Fak5sohTqjJVWeZp/BnjlrTpqXMGAdFdBDdnabilXxkIO+Ia7RvNkIo qw+gdubHY9RflK9GP8rLb1bhLyWNqrhddjOsVfZGL+7GLfwyYRcFdCEzBOGhBPjz aPCDqkMZFVx/1IAEtZ/22oN1+tO16xD5C1PUZ0gWz6mkOBMUc8l9AIRdEriw/UUu HBOSoW2kQmULJbt1/10SIqiy0qaA9/ORqsVTgBzSvuygisrAfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmFbnjmtifiIcnMWvHLXIzIdMk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRl NWU2Ny00MTYxLTRhMmQtYmQ3My0yZGViNWYxZDhmNTEvY2Y5NDZjY2QtMjk4ZS0z ODUyLWEwNGYtNmEzNGIwYWVjNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE0ZTVlNjctNDE2MS00YTJkLWJk NzMtMmRlYjVmMWQ4ZjUxL2UxNGU1ZTY3LTQxNjEtNGEyZC1iZDczLTJkZWI1ZjFk OGY1MS5jcmwwHwYDVR0jBBgwFoAUG9dxIb6YBpSp8yztchxJVEi+aecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRlNWU2Ny00MTYxLTRhMmQtYmQ3My0yZGVi NWYxZDhmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzck/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnLwubh1EjshNLJpTdLaM/MeJU4TnaKI1DA3SzaWc+Ng/Qk3NP/5zrn FrWVMijYBXDBzlJXpBE0CJzCZY/7NZfRieH32mWMkUHBrBnn2fBkUA8qrVnSJwd5 RhfE1SEi0tbJLvy5Emo4oT/hoNm/m7Kzx4WsgFsdEcAcu4Btk85rSAiKz1V3zHu/ NM9knlr7+Yh+6xrwbYUo5qCDkC/MsYRbI6r/pkDG4mkr8yerBDQAroqY2EmsaERG izgh0gA2ndVMygZHE8JVm8036T4YpcBggqwO3Qwr86++X5vGordTJtC+Uh46WdDl iYBuNsEc9Bh5xsQstUOSo/Z+2ylabMo= -----END CERTIFICATE-----Generated at Mon Sep 21 17:06:10 2026 by rpki-client