$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/ef582aa2-89d3-3629-b20f-33c8ef81de65.roa File: ef582aa2-89d3-3629-b20f-33c8ef81de65.roa (raw, json) Hash identifier: f0nwhFnNqYHmtB1JVoVIZ7LmIV/hMnsJjAUZw2DPhWc= Subject key identifier: DE:96:4A:A6:C5:53:63:0D:F3:D4:17:75:D5:D6:2C:0D:05:61:5C:E0 Certificate issuer: /CN=457522b0-cf44-4757-ac16-6215c2516e52 Certificate serial: 010D0C9F4328584EDDF738E79037F0547081D770 Authority key identifier: 90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/ef582aa2-89d3-3629-b20f-33c8ef81de65.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 401890 IP address blocks: 142.99.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:38:e7:90:37:f0:54:70:81:d7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457522b0-cf44-4757-ac16-6215c2516e52 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=c26272c2-e0d0-405f-b0f4-df941068d5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:5f:36:b9:7a:65:2a:36:b5:99:92:d8:32: 1c:e4:c0:9b:fc:dc:55:5d:5a:0d:c6:19:0f:20:73: 3c:cb:e9:82:28:27:cb:f0:47:f2:bf:a7:7f:d2:2f: 8f:d4:a8:be:7c:35:c9:21:46:c4:53:ec:e2:3c:2a: 6c:b9:cf:61:f0:ff:c3:31:41:ca:d4:86:73:c9:86: 6f:28:ab:60:f9:a3:87:e4:31:6e:5b:1b:21:24:0c: 6a:3b:bd:f4:9c:7e:d7:5d:f7:0c:21:b5:e7:f3:14: 92:1f:f4:65:8b:06:db:0f:1d:f4:48:f9:b3:63:69: 8e:88:b0:46:c6:75:3e:71:05:6f:31:28:ff:eb:a7: 43:79:45:51:32:94:5f:f3:bb:19:ae:d7:9b:86:59: cb:ac:d7:55:02:d8:94:9b:90:6c:f8:0a:47:fe:30: 97:96:43:13:4d:6c:3b:c4:c3:2b:14:d7:be:8c:5c: 32:27:cc:1a:8c:c0:c9:ec:d1:09:93:ad:ef:54:c6: 77:44:8f:52:2e:b7:7f:a7:37:e8:5d:43:37:ae:93: b1:24:8d:a4:7e:e0:29:0b:a1:0b:7c:a1:c3:13:23: 50:f5:5b:15:d4:86:58:15:d4:3b:c8:af:d2:25:26: 27:6b:f6:35:fd:a5:47:ee:ad:8a:6a:d4:d4:95:b8: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:96:4A:A6:C5:53:63:0D:F3:D4:17:75:D5:D6:2C:0D:05:61:5C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/ef582aa2-89d3-3629-b20f-33c8ef81de65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl X509v3 Authority Key Identifier: keyid:90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer sbgp-ipAddrBlock: critical IPv4: 142.99.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:74:79:89:9c:1e:32:e3:cf:ca:2e:83:5a:e4:1a:f4:27:e7: d2:5f:97:da:9d:05:3e:1f:a0:7a:32:75:e6:69:50:4e:02:00: 03:38:fb:5f:4d:8b:7b:b0:78:33:c9:96:02:28:7e:48:cc:8b: 4d:ba:59:b2:49:d9:03:06:bd:aa:67:70:0f:7c:1f:af:71:54: 03:22:ac:ff:2d:b3:9b:64:5a:6b:3b:04:cc:fe:bb:75:a5:81: 21:d0:46:e8:2f:19:c4:af:b0:d4:53:e2:e9:89:f4:ac:25:f8: 1c:1e:d8:5c:e2:96:99:59:05:b5:bb:a7:74:da:27:af:2d:f7: a7:4a:67:1a:ae:ae:d1:a2:3b:c4:79:bd:ba:b7:e3:89:1c:c0: ca:8b:07:1d:86:1e:c2:e6:a2:5c:6c:2c:0c:cd:46:68:c5:f1: 6c:ad:7b:7c:ae:c6:00:d0:59:b9:55:de:12:d6:cc:20:7a:e3: b0:20:dc:06:26:a4:b7:9d:53:68:25:cd:8a:05:2a:4a:68:57: a5:dc:6f:b0:bc:46:6a:5f:0f:64:93:c7:08:e5:dc:a2:3a:9f: 47:e3:8b:de:9e:7c:d5:cb:21:d3:16:e7:f4:2a:45:65:d2:6b: fd:c7:cb:f5:7c:7f:dd:fb:71:e0:07:27:4a:ab:7a:22:0e:3e: b7:7c:01:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d9zjnkDfwVHCB13AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU3NTIyYjAtY2Y0NC00NzU3LWFjMTYtNjIxNWMyNTE2 ZTUyMB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk YzI2MjcyYzItZTBkMC00MDVmLWIwZjQtZGY5NDEwNjhkNWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6NfNrl6ZSo2tZmS2DIc5MCb/NxVXVoNxhkP IHM8y+mCKCfL8Efyv6d/0i+P1Ki+fDXJIUbEU+ziPCpsuc9h8P/DMUHK1IZzyYZv KKtg+aOH5DFuWxshJAxqO730nH7XXfcMIbXn8xSSH/RliwbbDx30SPmzY2mOiLBG xnU+cQVvMSj/66dDeUVRMpRf87sZrtebhlnLrNdVAtiUm5Bs+ApH/jCXlkMTTWw7 xMMrFNe+jFwyJ8wajMDJ7NEJk63vVMZ3RI9SLrd/pzfoXUM3rpOxJI2kfuApC6EL fKHDEyNQ9VsV1IZYFdQ7yK/SJSYna/Y1/aVH7q2KatTUlbiLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6WSqbFU2MN89QXddXWLA0FYVzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1 MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1YzI1MTZlNTIvZWY1ODJhYTItODlkMy0z NjI5LWIyMGYtMzNjOGVmODFkZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU3NTIyYjAtY2Y0NC00NzU3LWFj MTYtNjIxNWMyNTE2ZTUyLzQ1NzUyMmIwLWNmNDQtNDc1Ny1hYzE2LTYyMTVjMjUx NmU1Mi5jcmwwHwYDVR0jBBgwFoAUkNOCVjLjh/164p+2zSPb1vY6+FkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1 YzI1MTZlNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjmMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp0eYmcHjLjz8oug1rkGvQn59Jfl9qdBT4foHoydeZpUE4CAAM4+19N i3uweDPJlgIofkjMi026WbJJ2QMGvapncA98H69xVAMirP8ts5tkWms7BMz+u3Wl gSHQRugvGcSvsNRT4umJ9Kwl+Bwe2FzilplZBbW7p3TaJ68t96dKZxqurtGiO8R5 vbq344kcwMqLBx2GHsLmolxsLAzNRmjF8Wyte3yuxgDQWblV3hLWzCB647Ag3AYm pLedU2glzYoFKkpoV6Xcb7C8RmpfD2STxwjl3KI6n0fji96efNXLIdMW5/QqRWXS a/3Hy/V8f937ceAHJ0qreiIOPrd8AUY= -----END CERTIFICATE-----Generated at Tue Sep 22 12:46:50 2026 by rpki-client