$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/fc7d5805-7bd5-3dfe-9943-9059063f3200.roa File: fc7d5805-7bd5-3dfe-9943-9059063f3200.roa (raw, json) Hash identifier: J7bUgQmkUJHOXpSGIY7S+o05f3p0c+rIQ+Hm9e/MpmI= Subject key identifier: C7:19:45:08:EC:FF:04:A3:EE:02:19:AF:71:C4:8E:3B:DC:18:32:8A Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F4328584F85784F2A1D455B85C612FD00 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/fc7d5805-7bd5-3dfe-9943-9059063f3200.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 22611 IP address blocks: 168.235.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:4f:2a:1d:45:5b:85:c6:12:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=4246a306-c4d9-4883-9184-c9ad04f28c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:f2:d5:49:89:38:72:7b:ee:de:b1:fe:9b: a1:24:e1:ea:8b:9d:67:93:35:a8:23:39:9b:7e:9c: 02:1f:7c:91:05:6d:cb:c0:63:77:a2:8b:df:1d:ea: bb:6d:5b:9f:21:1d:40:1e:fb:af:58:40:9b:ad:13: 29:90:56:ea:8e:41:63:25:ff:96:63:17:8b:c2:10: 70:3a:4a:c2:f3:03:c8:82:ed:5a:42:7e:38:cc:63: 73:56:ef:ab:51:93:17:80:81:e1:57:da:b4:2b:e7: f7:c0:92:92:b9:c5:80:d6:dc:6b:1f:b4:ec:e5:d3: eb:c0:76:b9:6a:c8:3a:f3:e2:40:5f:29:0d:7e:39: 7e:d0:c8:70:b0:07:55:58:94:96:c4:33:31:99:b7: 66:c9:f7:d7:3d:c1:8e:4a:b9:ab:62:1e:92:ad:eb: fa:bc:58:b9:fd:75:69:a8:b0:32:76:a8:0f:3e:9d: 83:e9:69:77:7e:86:af:36:46:cb:b6:35:d3:69:56: 59:26:54:10:2f:0f:a2:f2:e4:aa:39:59:cf:57:2e: e7:3e:2d:37:fa:06:35:91:e9:48:c7:cf:8a:3e:97: 22:c4:3f:a1:ad:b6:4e:69:d6:e7:86:2d:aa:2c:42: aa:08:90:ff:69:1a:a2:5b:66:fc:64:21:68:cb:b1: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:19:45:08:EC:FF:04:A3:EE:02:19:AF:71:C4:8E:3B:DC:18:32:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/fc7d5805-7bd5-3dfe-9943-9059063f3200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 168.235.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:1b:33:16:60:99:23:d2:a6:c9:06:96:c1:9a:9e:af:02:86: 01:e6:4f:1f:c7:14:7f:06:fa:e0:4e:a5:f0:29:71:20:75:52: 8c:43:44:a9:d9:4a:04:20:ce:08:7d:6c:f1:5f:77:99:6d:a7: 26:c2:5d:61:01:4c:08:6e:b6:45:65:8f:cf:aa:8d:ce:e9:66: 59:00:04:68:98:4f:ce:b8:ed:7e:e3:d7:64:3c:e4:e4:d9:81: 75:68:7f:13:79:d4:a5:ad:63:23:a1:d2:21:51:11:2d:20:2e: 9b:63:4a:9b:a8:5e:de:34:6c:d9:0b:b1:e0:9b:bd:94:70:54: a8:af:e3:c0:66:27:5a:06:17:7a:5a:90:3d:ce:6e:c2:58:d5: bf:79:a0:f7:0b:81:3c:aa:9a:b7:9c:a1:87:5f:81:50:a4:96: 9d:e5:97:f9:1d:40:f4:79:b8:ad:59:7d:44:7e:6f:47:f9:a9: 60:2f:5a:a5:26:8d:3c:ef:46:40:51:6a:6a:1f:60:79:2e:06: 07:87:2e:91:b3:fa:98:ff:9c:cc:68:28:d9:f3:ca:c4:6e:9c: 15:2c:71:d7:9f:73:fa:58:ff:1d:43:69:10:07:d9:c9:92:7b: b1:98:ea:a7:66:59:3b:3f:42:a2:1c:b1:26:25:05:8e:a3:e8: f1:2f:65:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeE8qHUVbhcYS/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk NDI0NmEzMDYtYzRkOS00ODgzLTkxODQtYzlhZDA0ZjI4YzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr7y1UmJOHJ77t6x/puhJOHqi51nkzWoIzmb fpwCH3yRBW3LwGN3oovfHeq7bVufIR1AHvuvWECbrRMpkFbqjkFjJf+WYxeLwhBw OkrC8wPIgu1aQn44zGNzVu+rUZMXgIHhV9q0K+f3wJKSucWA1txrH7Ts5dPrwHa5 asg68+JAXykNfjl+0MhwsAdVWJSWxDMxmbdmyffXPcGOSrmrYh6Srev6vFi5/XVp qLAydqgPPp2D6Wl3foavNkbLtjXTaVZZJlQQLw+i8uSqOVnPVy7nPi03+gY1kelI x8+KPpcixD+hrbZOadbnhi2qLEKqCJD/aRqiW2b8ZCFoy7EFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcZRQjs/wSj7gIZr3HEjjvcGDKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvZmM3ZDU4MDUtN2JkNS0z ZGZlLTk5NDMtOTA1OTA2M2YzMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqOt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8bMxZgmSPSpskGlsGanq8ChgHmTx/HFH8G+uBOpfApcSB1UoxDRKnZ SgQgzgh9bPFfd5ltpybCXWEBTAhutkVlj8+qjc7pZlkABGiYT8647X7j12Q85OTZ gXVofxN51KWtYyOh0iFRES0gLptjSpuoXt40bNkLseCbvZRwVKiv48BmJ1oGF3pa kD3ObsJY1b95oPcLgTyqmrecoYdfgVCklp3ll/kdQPR5uK1ZfUR+b0f5qWAvWqUm jTzvRkBRamofYHkuBgeHLpGz+pj/nMxoKNnzysRunBUscdefc/pY/x1DaRAH2cmS e7GY6qdmWTs/QqIcsSYlBY6j6PEvZSM= -----END CERTIFICATE-----Generated at Sun Nov 1 02:05:36 2026 by rpki-client