$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/029932a0-9c84-3551-8265-bcf4eea4c821.roa File: 029932a0-9c84-3551-8265-bcf4eea4c821.roa (raw, json) Hash identifier: oR4Q8RpTVUJIhHGwIWhaGoRX4o59EOdDpbQThQ4x6D0= Subject key identifier: 16:45:10:20:57:5D:98:70:7B:0E:42:61:1E:B2:8E:FC:9B:3D:E0:F4 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584ECA9977C388B75E8A5F4A8780 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/029932a0-9c84-3551-8265-bcf4eea4c821.roa Signing time: Mon 10 Aug 2026 14:31:01 +0000 ROA not before: Mon 10 Aug 2026 14:31:01 +0000 ROA not after: Sun 08 Nov 2026 15:31:01 +0000 asID: 395954 IP address blocks: 64.120.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:99:77:c3:88:b7:5e:8a:5f:4a:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 10 14:31:01 2026 GMT Not After : Nov 8 15:31:01 2026 GMT Subject: CN=3f4984c8-9bbe-4c4e-b911-ed50631d26ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:35:ff:df:b1:b4:c4:20:1e:0e:c3:20:a1: ec:f8:00:61:64:d6:c3:de:ff:b3:9f:27:01:ca:8a: 9f:f8:2b:d2:8e:e3:9f:b3:4d:2e:a0:40:f4:55:ee: 16:8e:d6:e5:0e:3f:e4:6a:ac:39:e6:f2:cb:3a:67: c7:8f:35:b7:ed:44:93:89:c5:cb:1d:09:75:13:c9: bc:07:bd:2a:78:0c:0b:45:3a:3e:65:11:b2:5d:3b: 3f:ab:aa:58:b0:20:f6:ba:73:68:17:a7:c4:39:e2: 74:21:88:33:e4:e1:4c:a5:63:05:1c:d1:5e:30:59: 47:4c:04:76:16:bf:9f:b5:09:bc:a0:13:71:df:66: f1:fc:9c:ca:d3:a0:00:bc:3b:c3:99:21:06:de:42: 41:e1:8e:77:89:ba:ff:be:62:4c:72:30:d2:70:ad: 4c:8d:ed:43:e7:75:cc:a8:95:41:bb:f5:93:63:33: c2:ed:98:b8:64:c3:e0:60:d7:1a:67:12:b7:79:c9: 18:83:ea:04:00:af:51:58:80:9a:a4:47:1c:d7:7e: 27:0c:4f:ff:3a:95:ce:28:03:84:3b:c4:1b:8f:2b: 6d:29:92:e0:e9:18:99:69:13:26:de:c8:57:f2:87: ac:45:d8:55:1c:f1:b6:d8:9d:c5:9d:18:62:5e:d0: d7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:45:10:20:57:5D:98:70:7B:0E:42:61:1E:B2:8E:FC:9B:3D:E0:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/029932a0-9c84-3551-8265-bcf4eea4c821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 64.120.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:64:ea:c4:b0:51:71:37:f1:39:42:c9:e6:a2:0a:45:e6:d0: 2a:4e:20:e8:4a:76:62:44:f0:7a:08:db:75:87:79:d8:5f:bf: 69:72:01:48:ac:ab:43:78:47:9d:ce:ea:97:42:b7:44:53:ff: 2d:85:99:89:c6:7a:1d:32:e3:68:50:e2:5a:20:59:30:fe:e3: ae:6b:6c:82:41:ca:74:7f:44:5c:a1:6b:1f:7f:19:42:af:5f: f7:4d:e3:62:87:33:f0:97:9e:36:ee:ef:c2:77:98:27:4f:13: 3b:c5:02:27:fa:e8:58:77:0d:ce:1c:fc:c9:e8:fe:b2:85:c8: 73:85:f4:27:da:f1:66:01:01:42:24:ed:0b:35:6a:20:cc:bd: 81:ff:d8:1d:37:e0:69:58:1f:0d:dd:bd:32:45:a9:f3:b8:6c: 28:52:77:a9:28:43:52:ab:ce:72:56:c4:08:1c:15:a6:e1:fa: 14:5b:8f:d9:8d:a9:ed:e5:9f:4a:64:17:06:2f:c1:2c:4b:82: 73:8e:45:d2:6f:97:22:3e:7a:85:c2:13:5c:e7:65:6c:3e:38: 3f:f3:15:27:3d:7f:fb:6a:ad:85:94:23:f8:47:31:10:1b:5c: ea:be:2f:63:0b:87:db:cc:2f:8a:e9:76:a2:46:70:97:a5:d5: eb:ae:4b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KmXfDiLdeil9Kh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgxMDE0MzEwMVoXDTI2MTEwODE1MzEwMVowLzEtMCsGA1UEAxMk M2Y0OTg0YzgtOWJiZS00YzRlLWI5MTEtZWQ1MDYzMWQyNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27o1/9+xtMQgHg7DIKHs+ABhZNbD3v+znycB yoqf+CvSjuOfs00uoED0Ve4WjtblDj/kaqw55vLLOmfHjzW37USTicXLHQl1E8m8 B70qeAwLRTo+ZRGyXTs/q6pYsCD2unNoF6fEOeJ0IYgz5OFMpWMFHNFeMFlHTAR2 Fr+ftQm8oBNx32bx/JzK06AAvDvDmSEG3kJB4Y53ibr/vmJMcjDScK1Mje1D53XM qJVBu/WTYzPC7Zi4ZMPgYNcaZxK3eckYg+oEAK9RWICapEcc134nDE//OpXOKAOE O8QbjyttKZLg6RiZaRMm3shX8oesRdhVHPG22J3FnRhiXtDX8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZFECBXXZhwew5CYR6yjvybPeD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDI5OTMyYTAtOWM4NC0z NTUxLTgyNjUtYmNmNGVlYTRjODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNk6sSwUXE38TlCyeaiCkXm0CpOIOhKdmJE8HoI23WHedhfv2lyAUis q0N4R53O6pdCt0RT/y2FmYnGeh0y42hQ4logWTD+465rbIJBynR/RFyhax9/GUKv X/dN42KHM/CXnjbu78J3mCdPEzvFAif66Fh3Dc4c/Mno/rKFyHOF9Cfa8WYBAUIk 7Qs1aiDMvYH/2B034GlYHw3dvTJFqfO4bChSd6koQ1KrznJWxAgcFabh+hRbj9mN qe3ln0pkFwYvwSxLgnOORdJvlyI+eoXCE1znZWw+OD/zFSc9f/tqrYWUI/hHMRAb XOq+L2MLh9vML4rpdqJGcJel1euuS7M= -----END CERTIFICATE-----Generated at Thu Aug 27 17:38:42 2026 by rpki-client