$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/7ed6dd62-2e69-372c-be0f-6a1e72260ee8.roa File: 7ed6dd62-2e69-372c-be0f-6a1e72260ee8.roa (raw, json) Hash identifier: YLmKlZ+12Xw7lHa3x4+30cbG0+AflvxBAvLCM1tq3VU= Subject key identifier: A0:60:75:16:2C:32:E1:94:9D:D1:12:CA:9F:24:6C:CC:70:C5:E8:14 Certificate issuer: /CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Certificate serial: 010D0C9F4328584F6F22FE0D84A0CC902EF0AE80 Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/7ed6dd62-2e69-372c-be0f-6a1e72260ee8.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 42 IP address blocks: 199.120.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:fe:0d:84:a0:cc:90:2e:f0:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=ffc212aa-7fdf-40c7-bc22-86cb5f984478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:79:08:79:ed:d4:04:59:c3:ab:54:e3:bd:58: 14:37:6f:db:76:b9:e2:63:02:91:05:cd:36:d3:cb: 9d:0e:b1:16:98:e3:cd:cf:c2:ac:d3:e4:1d:da:2c: 53:ef:eb:e1:96:f3:e0:1f:97:fe:e6:96:82:37:45: e6:3b:be:ef:ea:47:54:85:ce:13:1a:9e:29:03:d6: 76:8f:bf:f5:b8:c5:a9:d3:ec:1b:df:31:28:92:69: 04:0c:ef:ee:67:d4:22:13:12:42:88:97:3b:83:c4: c2:ad:3c:5e:a7:31:e8:25:13:5b:a7:1f:21:95:81: 16:5a:00:6e:62:d9:21:f4:bf:3e:f4:52:b6:04:b9: 75:8c:56:d3:be:6a:04:0e:8c:e0:e6:fe:4f:af:be: f0:83:91:ef:c9:cf:78:eb:70:ab:e2:0d:0c:79:82: bd:ea:2f:23:f9:2a:5b:44:6a:37:d7:f1:5b:1f:9c: c6:3a:6f:25:5b:f0:81:2c:75:f7:b5:29:29:2c:27: e6:a6:da:ab:7b:6e:b3:fa:d1:f0:f5:c8:3f:e5:1d: 3b:74:70:6f:37:b7:9a:95:c5:f0:98:d2:5a:3b:35: d0:46:c7:08:22:a3:d3:5e:e4:a3:a2:43:0a:aa:ee: bd:63:4d:1e:5d:2b:4b:00:52:3d:eb:b7:29:fe:da: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:60:75:16:2C:32:E1:94:9D:D1:12:CA:9F:24:6C:CC:70:C5:E8:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/7ed6dd62-2e69-372c-be0f-6a1e72260ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl X509v3 Authority Key Identifier: keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer sbgp-ipAddrBlock: critical IPv4: 199.120.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:36:b3:14:c6:20:20:b8:c7:db:96:fd:c7:4a:c2:f6:6b:e2: a4:92:de:56:6b:5e:46:b1:7e:77:f0:55:c7:5a:d1:0c:4b:d7: 60:ed:d4:74:01:29:b4:da:21:9c:94:8f:84:a4:a5:6f:34:18: 55:c8:18:4d:38:27:65:d3:84:5b:a7:b9:d7:3c:5b:64:eb:87: 2a:fc:2a:ab:5c:fd:74:9b:6d:63:d1:17:a8:ed:33:1e:a7:84: c4:c5:ab:fe:bc:df:88:af:be:cd:29:bf:83:7c:37:b2:ed:b0: 39:54:6f:3c:d0:7c:af:bb:23:a7:b3:25:bf:13:80:87:65:27: 2e:95:58:63:48:76:87:8a:e4:fa:d9:58:5e:4f:98:2e:8b:ba: d8:d1:3c:f8:c2:cb:ce:c0:b2:70:c9:01:55:0d:3d:79:6d:64: 71:71:8e:78:77:f8:71:2c:6d:65:01:29:9a:fc:16:61:28:b1: 43:b2:15:77:d2:23:1f:10:73:bf:0e:d0:2d:78:c8:42:c4:a4: ba:10:36:52:13:7e:0c:52:3d:99:e0:76:11:e1:dc:a9:32:a1: cf:ac:30:66:af:d6:2c:70:59:08:a3:61:71:63:c2:a7:43:39: 2a:29:57:3b:e9:1f:7e:77:89:1a:70:c0:25:19:90:95:26:c0: 28:7e:1e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIv4NhKDMkC7wroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlMjBmYWUtMzkyYi00YjIyLWI0NzUtYzZkZmY3MTQy ZmE2MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZmZjMjEyYWEtN2ZkZi00MGM3LWJjMjItODZjYjVmOTg0NDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHkIee3UBFnDq1TjvVgUN2/bdrniYwKRBc02 08udDrEWmOPNz8Ks0+Qd2ixT7+vhlvPgH5f+5paCN0XmO77v6kdUhc4TGp4pA9Z2 j7/1uMWp0+wb3zEokmkEDO/uZ9QiExJCiJc7g8TCrTxepzHoJRNbpx8hlYEWWgBu Ytkh9L8+9FK2BLl1jFbTvmoEDozg5v5Pr77wg5Hvyc9463Cr4g0MeYK96i8j+Spb RGo31/FbH5zGOm8lW/CBLHX3tSkpLCfmptqre26z+tHw9cg/5R07dHBvN7ealcXw mNJaOzXQRscIIqPTXuSjokMKqu69Y00eXStLAFI967cp/tqrAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBgdRYsMuGUndESyp8kbMxwxegUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2Uy MGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRmZjcxNDJmYTYvN2VkNmRkNjItMmU2OS0z NzJjLWJlMGYtNmExZTcyMjYwZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTdlMjBmYWUtMzkyYi00YjIyLWI0 NzUtYzZkZmY3MTQyZmE2LzE3ZTIwZmFlLTM5MmItNGIyMi1iNDc1LWM2ZGZmNzE0 MmZhNi5jcmwwHwYDVR0jBBgwFoAUoZKM+VjaRQcioLzJduE97gj3ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2UyMGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRm ZjcxNDJmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx3iOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU2sxTGICC4x9uW/cdKwvZr4qSS3lZrXkaxfnfwVcda0QxL12Dt1HQB KbTaIZyUj4SkpW80GFXIGE04J2XThFunudc8W2Trhyr8Kqtc/XSbbWPRF6jtMx6n hMTFq/6834ivvs0pv4N8N7LtsDlUbzzQfK+7I6ezJb8TgIdlJy6VWGNIdoeK5PrZ WF5PmC6LutjRPPjCy87AsnDJAVUNPXltZHFxjnh3+HEsbWUBKZr8FmEosUOyFXfS Ix8Qc78O0C14yELEpLoQNlITfgxSPZngdhHh3Kkyoc+sMGav1ixwWQijYXFjwqdD OSopVzvpH353iRpwwCUZkJUmwCh+Hkc= -----END CERTIFICATE-----Generated at Mon Nov 2 14:29:18 2026 by rpki-client