$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/07c64342-d6ff-3d46-95b8-a84fc1f9f39e.roa File: 07c64342-d6ff-3d46-95b8-a84fc1f9f39e.roa (raw, json) Hash identifier: 88AKXaVTb+690FMAZTDG6GIuKEM7k/vzm+g1+M/eJyU= Subject key identifier: 81:EE:70:F2:71:32:99:84:FF:D7:6D:40:39:7D:ED:49:42:AB:78:7B Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B3683C1D3684F595B280 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/07c64342-d6ff-3d46-95b8-a84fc1f9f39e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 172.241.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b3:68:3c:1d:36:84:f5:95:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=29041c8e-be5c-44f0-a358-92aedfb8407c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6a:2d:e9:2e:7e:0a:24:93:71:75:12:6b:47: 45:6c:5d:86:5a:45:ab:29:96:44:61:23:97:e7:0a: 1d:41:f9:eb:ad:a5:09:98:4b:dd:02:b4:6c:d4:80: e7:2f:b1:4e:95:23:79:fc:8a:e5:15:d1:b9:3e:7e: e4:64:8d:28:7f:52:46:b8:f1:9c:34:5f:2b:b4:3f: 1f:2c:1e:74:0e:fb:d2:5d:2b:f5:14:f0:0d:a7:dd: ad:bf:7a:17:09:6c:63:5f:84:34:5b:3c:2d:50:03: bf:79:27:5d:1a:cc:72:21:d2:17:03:48:5a:59:3a: 62:4d:3f:a3:87:c2:d4:1a:20:33:8f:02:46:3e:92: 79:a8:65:6d:f8:d6:a4:5b:a4:3a:c5:75:c6:ae:ab: a5:27:54:c8:32:44:ed:61:16:db:ad:ff:3f:28:5f: 8d:a3:5a:05:03:40:b8:fb:24:1b:40:28:83:d8:4c: 6c:37:3c:36:af:71:28:ea:98:4e:93:46:ee:d9:13: 47:71:9f:96:2f:7b:39:4e:1a:de:62:16:8a:5c:09: 94:2b:68:18:45:46:db:97:9d:9d:1f:79:28:51:d5: f4:ff:e9:ce:9c:d3:d5:82:27:72:0b:62:5d:a7:c3: d2:70:2a:64:15:b9:a2:6e:6d:55:3c:80:cf:15:62: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EE:70:F2:71:32:99:84:FF:D7:6D:40:39:7D:ED:49:42:AB:78:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/07c64342-d6ff-3d46-95b8-a84fc1f9f39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:01:5a:58:4f:26:bc:19:dd:b6:f6:f1:02:75:c7:0f:a8:cb: 8b:31:fa:b8:f2:bf:63:55:ae:e2:00:4e:de:be:19:e0:aa:67: 00:63:31:04:21:79:37:0a:b9:9e:dd:87:c2:00:ad:8f:ee:34: 5d:3e:57:ca:c8:78:cd:1e:f5:fd:f0:56:e9:96:f0:4a:94:f9: 3b:3e:61:be:85:ae:c6:d7:a0:ba:51:34:92:a3:dd:d4:a8:4d: 48:4d:77:34:e9:b5:a9:d7:5c:14:0f:d3:d5:bd:df:22:eb:fa: d8:3b:87:aa:fc:28:26:81:08:fd:fa:19:86:e7:ca:53:af:40: 54:79:c8:d4:2f:83:92:c4:40:4b:39:ee:28:ec:1a:56:4f:12: a5:5d:6e:d5:d4:a6:d4:04:26:80:78:b5:2b:ec:bf:91:93:dc: 86:ad:a9:7b:fb:38:54:ec:14:f1:b2:a4:45:e6:33:d7:cc:6b: 7b:40:16:c1:19:f5:2d:6c:7a:86:83:f1:c5:0a:45:68:ab:59: 74:f2:72:e5:73:b9:70:94:9b:c8:99:4a:0a:22:b9:d8:c8:fb: 0e:22:17:50:79:e3:a0:5a:5b:ce:f7:21:a9:28:d4:e2:c5:f3: 8b:9e:82:4b:83:8d:53:ba:9b:76:41:83:bb:8d:f6:c9:58:7c: 34:27:40:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrNoPB02hPWVsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MjkwNDFjOGUtYmU1Yy00NGYwLWEzNTgtOTJhZWRmYjg0MDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGot6S5+CiSTcXUSa0dFbF2GWkWrKZZEYSOX 5wodQfnrraUJmEvdArRs1IDnL7FOlSN5/IrlFdG5Pn7kZI0of1JGuPGcNF8rtD8f LB50DvvSXSv1FPANp92tv3oXCWxjX4Q0WzwtUAO/eSddGsxyIdIXA0haWTpiTT+j h8LUGiAzjwJGPpJ5qGVt+NakW6Q6xXXGrqulJ1TIMkTtYRbbrf8/KF+No1oFA0C4 +yQbQCiD2ExsNzw2r3Eo6phOk0bu2RNHcZ+WL3s5ThreYhaKXAmUK2gYRUbbl52d H3koUdX0/+nOnNPVgidyC2Jdp8PScCpkFbmibm1VPIDPFWI1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHucPJxMpmE/9dtQDl97UlCq3h7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDdjNjQzNDItZDZmZi0z ZDQ2LTk1YjgtYTg0ZmMxZjlmMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQBWlhPJrwZ3bb28QJ1xw+oy4sx+rjyv2NVruIATt6+GeCqZwBjMQQh eTcKuZ7dh8IArY/uNF0+V8rIeM0e9f3wVumW8EqU+Ts+Yb6FrsbXoLpRNJKj3dSo TUhNdzTptanXXBQP09W93yLr+tg7h6r8KCaBCP36GYbnylOvQFR5yNQvg5LEQEs5 7ijsGlZPEqVdbtXUptQEJoB4tSvsv5GT3IatqXv7OFTsFPGypEXmM9fMa3tAFsEZ 9S1seoaD8cUKRWirWXTycuVzuXCUm8iZSgoiudjI+w4iF1B546BaW873Iako1OLF 84uegkuDjVO6m3ZBg7uN9slYfDQnQIg= -----END CERTIFICATE-----Generated at Wed Oct 14 18:57:07 2026 by rpki-client