$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0490f2e1-eda8-3022-9751-e34349cc5f5b.roa File: 0490f2e1-eda8-3022-9751-e34349cc5f5b.roa (raw, json) Hash identifier: 9Fp4a1jAX+ZBHteTQHH0lUwms7gfEdXO7Uw4lPo2VNQ= Subject key identifier: 86:DC:36:F3:9D:D7:D4:F5:05:2A:5A:5D:69:CC:30:72:BA:36:E0:17 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F612D7079EC3129E696222400 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0490f2e1-eda8-3022-9751-e34349cc5f5b.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 396362 IP address blocks: 173.234.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:70:79:ec:31:29:e6:96:22:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=3145cdbc-a1df-4764-bcc8-946d3a3095e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:28:5c:2e:cf:d3:31:9a:ed:3e:40:fc:e0: 80:d5:02:9f:86:0b:c2:2a:58:98:cf:67:b4:08:94: a5:68:3b:4f:20:95:9e:07:38:c6:e7:1f:05:33:94: 3d:2a:00:48:6d:f5:d6:73:cb:f2:fc:08:0f:88:8f: a2:f1:17:eb:8b:2d:95:e7:61:9a:97:55:68:ee:ce: 7e:34:8d:1b:4d:99:b2:fe:62:f5:c1:69:bf:b1:af: 34:39:9e:12:db:6d:99:cb:04:d2:f4:b7:f5:8f:c5: f4:7c:e2:ea:0b:74:ad:fc:59:ff:8b:99:3c:50:a2: db:0b:bd:92:66:94:44:c0:b4:59:f2:ba:07:93:01: 8c:2a:ff:14:0f:9a:4e:7f:c8:0c:c0:3b:6f:02:1d: ff:70:48:9f:89:06:fa:b2:b8:6e:a6:2d:ac:36:a0: 17:4b:db:d6:9c:49:9f:7f:a9:65:2c:ab:be:d8:c7: 91:5e:04:9d:e7:d9:74:8a:1d:46:90:57:e9:6a:0b: da:2d:97:5e:b2:39:b0:8e:01:40:6e:95:e8:c1:12: eb:33:02:78:ab:0f:bc:8d:97:29:df:01:99:3c:2a: 65:f2:9a:a4:be:23:37:c2:d7:e7:c3:66:95:4c:49: 9b:c7:38:8e:a2:9a:57:76:45:f8:6a:c1:71:ce:13: f4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DC:36:F3:9D:D7:D4:F5:05:2A:5A:5D:69:CC:30:72:BA:36:E0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0490f2e1-eda8-3022-9751-e34349cc5f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b0:2e:85:08:97:a0:ed:31:58:55:c9:03:4a:cc:5d:91:c7: a4:b4:93:3e:e1:b1:91:75:89:3f:5f:6e:31:91:52:1a:80:a7: 87:59:b5:9f:56:b9:b7:16:42:5a:16:6b:c9:a8:1c:de:31:34: bf:d2:6e:5e:a6:5b:a5:97:f0:a5:6b:94:24:e7:5d:88:7b:7a: 58:88:a9:58:08:05:6a:ca:b1:1d:65:84:02:0a:f2:af:59:9e: 97:99:28:ce:e9:fb:bb:83:61:1d:64:2d:87:00:cf:1a:2f:25: d1:c3:5d:83:70:6d:04:37:6d:64:f5:18:03:26:2b:14:88:7f: 6f:43:e3:7d:58:ef:99:8f:e5:90:3c:de:ac:39:62:6c:16:13: 23:b0:ff:9d:df:25:2c:67:5f:45:69:4b:a5:a4:2b:61:26:27: 8f:70:a3:93:12:ff:78:04:a6:3a:82:18:a7:48:c2:fe:3b:93: 5f:66:2e:92:b4:5b:9a:9d:6e:86:a2:48:58:5f:53:7e:5f:bd: 47:9c:64:24:68:00:b1:0f:1f:46:cf:1d:47:53:7c:0b:7d:ce: 5b:1a:df:47:4b:61:d1:66:16:a1:8f:44:e6:ca:a0:81:a6:6d: 61:eb:c1:c5:0b:1c:83:42:89:a9:75:00:1b:1c:7b:01:aa:76: e4:96:aa:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLXB57DEp5pYiJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MzE0NWNkYmMtYTFkZi00NzY0LWJjYzgtOTQ2ZDNhMzA5NWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrcoXC7P0zGa7T5A/OCA1QKfhgvCKliYz2e0 CJSlaDtPIJWeBzjG5x8FM5Q9KgBIbfXWc8vy/AgPiI+i8Rfriy2V52Gal1Vo7s5+ NI0bTZmy/mL1wWm/sa80OZ4S222ZywTS9Lf1j8X0fOLqC3St/Fn/i5k8UKLbC72S ZpREwLRZ8roHkwGMKv8UD5pOf8gMwDtvAh3/cEifiQb6srhupi2sNqAXS9vWnEmf f6llLKu+2MeRXgSd59l0ih1GkFfpagvaLZdesjmwjgFAbpXowRLrMwJ4qw+8jZcp 3wGZPCpl8pqkviM3wtfnw2aVTEmbxziOoppXdkX4asFxzhP02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbcNvOd19T1BSpaXWnMMHK6NuAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDQ5MGYyZTEtZWRhOC0z MDIyLTk3NTEtZTM0MzQ5Y2M1ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCreqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2wLoUIl6DtMVhVyQNKzF2Rx6S0kz7hsZF1iT9fbjGRUhqAp4dZtZ9W ubcWQloWa8moHN4xNL/Sbl6mW6WX8KVrlCTnXYh7eliIqVgIBWrKsR1lhAIK8q9Z npeZKM7p+7uDYR1kLYcAzxovJdHDXYNwbQQ3bWT1GAMmKxSIf29D431Y75mP5ZA8 3qw5YmwWEyOw/53fJSxnX0VpS6WkK2EmJ49wo5MS/3gEpjqCGKdIwv47k19mLpK0 W5qdboaiSFhfU35fvUecZCRoALEPH0bPHUdTfAt9zlsa30dLYdFmFqGPRObKoIGm bWHrwcULHINCial1ABscewGqduSWqu4= -----END CERTIFICATE-----Generated at Mon Oct 5 06:35:24 2026 by rpki-client