$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/03a2d686-d27d-36b2-8390-72e8ef8dbaff.roa File: 03a2d686-d27d-36b2-8390-72e8ef8dbaff.roa (raw, json) Hash identifier: K15tgYdYeI2qLP+wQ8OWl+s1i5Fi5fwFegy1PEJha6I= Subject key identifier: E8:38:6F:F4:C7:67:6D:54:09:06:0E:D9:8A:98:97:7D:93:47:F2:42 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97FB50E233A29456964780 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/03a2d686-d27d-36b2-8390-72e8ef8dbaff.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 147.255.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fb:50:e2:33:a2:94:56:96:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=ba3fbb49-b33a-421b-af23-425d482aedf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:d3:68:76:e8:1e:6b:6e:74:eb:92:be:96: 90:48:ff:dc:f3:d3:ba:13:93:7a:c6:34:62:2f:13: 8b:5f:89:ba:43:6b:51:a4:36:3f:a0:01:92:03:50: 54:60:36:61:71:cf:43:b6:95:00:f0:4d:0f:7f:53: cf:e8:ae:79:00:3c:b2:c6:50:c4:9d:4c:31:eb:e0: fc:d0:59:c9:4a:1d:23:0d:0e:18:ef:83:f9:92:a7: 55:92:32:43:94:41:b6:f5:63:32:7c:87:5f:5e:46: 8d:03:2b:c5:ab:2c:7c:12:bf:f0:c1:24:d8:26:d6: 0d:bf:e4:ea:73:bb:c4:0a:a8:fb:89:96:75:d9:03: e9:29:48:64:2f:fe:2d:b3:f9:2b:82:a1:d2:e7:56: ba:bf:76:14:b2:16:1a:9c:31:83:4b:21:b5:f4:aa: 59:c3:ce:4d:ed:d0:49:6f:5e:5b:ab:86:aa:1f:8f: 65:76:68:f3:ef:bb:a2:48:06:1b:7f:c9:1a:51:5b: 1f:98:59:c4:1f:a8:4d:ba:2b:1f:09:f1:ee:f4:1f: 31:1c:24:bb:a9:c2:da:1f:1f:28:82:5f:73:03:69: 2b:c3:1d:c5:02:1e:11:56:a0:6f:95:10:8c:48:6c: cc:e7:46:36:1e:1b:98:b3:68:6d:96:c7:be:1f:79: 1a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:38:6F:F4:C7:67:6D:54:09:06:0E:D9:8A:98:97:7D:93:47:F2:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/03a2d686-d27d-36b2-8390-72e8ef8dbaff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b2:9e:0e:b9:24:8e:5c:9b:69:ac:d6:66:38:26:d5:bd:55: 08:77:6a:1e:ec:7f:cd:43:44:d5:b7:4a:5f:82:6b:5d:cb:b8: 3b:2d:b5:c7:a8:00:b2:9c:9d:80:fc:c0:e6:b7:60:0e:15:de: 53:06:3d:75:f9:6c:ab:22:b8:b3:0a:0c:9d:a9:76:55:f7:ed: 8f:47:d6:d4:a8:09:6d:64:ca:21:93:cd:48:9e:ec:1d:87:ef: f8:d1:23:b3:20:c6:df:5c:d1:62:82:6e:52:74:e6:c0:23:1e: f5:f0:46:71:e5:4c:60:82:46:77:95:97:58:0b:8e:cd:75:09: 28:85:a1:a6:22:5f:0b:36:d7:9b:7f:83:32:97:1d:ac:be:cf: 3f:d1:98:89:3d:79:85:96:f6:e9:69:ab:0f:50:46:9e:92:de: 69:25:b9:ed:28:e7:0b:60:5a:33:f4:69:c1:2c:57:fe:69:e6: 3b:fb:28:f2:99:f6:41:cb:cc:26:bc:74:c8:47:c3:0b:c1:7b: 71:d7:6f:2a:03:e3:25:ac:81:a3:7d:6a:61:30:42:3e:75:04: be:4c:10:d6:bf:f9:99:48:d1:62:b4:2c:7a:3b:ba:d7:22:75: b8:a1:3e:fd:a8:21:6e:25:fd:d7:75:90:c3:7f:5a:67:7f:4b: 6b:b9:84:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/tQ4jOilFaWR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk YmEzZmJiNDktYjMzYS00MjFiLWFmMjMtNDI1ZDQ4MmFlZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcfTaHboHmtudOuSvpaQSP/c89O6E5N6xjRi LxOLX4m6Q2tRpDY/oAGSA1BUYDZhcc9DtpUA8E0Pf1PP6K55ADyyxlDEnUwx6+D8 0FnJSh0jDQ4Y74P5kqdVkjJDlEG29WMyfIdfXkaNAyvFqyx8Er/wwSTYJtYNv+Tq c7vECqj7iZZ12QPpKUhkL/4ts/krgqHS51a6v3YUshYanDGDSyG19KpZw85N7dBJ b15bq4aqH49ldmjz77uiSAYbf8kaUVsfmFnEH6hNuisfCfHu9B8xHCS7qcLaHx8o gl9zA2krwx3FAh4RVqBvlRCMSGzM50Y2HhuYs2htlse+H3kaawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOg4b/THZ21UCQYO2YqYl32TR/JCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDNhMmQ2ODYtZDI3ZC0z NmIyLTgzOTAtNzJlOGVmOGRiYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk/8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2yng65JI5cm2ms1mY4JtW9VQh3ah7sf81DRNW3Sl+Ca13LuDsttceo ALKcnYD8wOa3YA4V3lMGPXX5bKsiuLMKDJ2pdlX37Y9H1tSoCW1kyiGTzUie7B2H 7/jRI7Mgxt9c0WKCblJ05sAjHvXwRnHlTGCCRneVl1gLjs11CSiFoaYiXws215t/ gzKXHay+zz/RmIk9eYWW9ulpqw9QRp6S3mklue0o5wtgWjP0acEsV/5p5jv7KPKZ 9kHLzCa8dMhHwwvBe3HXbyoD4yWsgaN9amEwQj51BL5MENa/+ZlI0WK0LHo7utci dbihPv2oIW4l/dd1kMN/Wmd/S2u5hCQ= -----END CERTIFICATE-----Generated at Wed Oct 14 10:08:01 2026 by rpki-client