$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0ce952a4-b414-3be6-8901-9b1edabcfa7e.roa File: 0ce952a4-b414-3be6-8901-9b1edabcfa7e.roa (raw, json) Hash identifier: gOa/hhlQd9DzfFP6XwGFU+SVScEwMAm7bMtKIkh4dxg= Subject key identifier: 49:84:3B:27:CA:18:64:6D:24:9B:77:34:57:3F:55:B1:65:6E:FD:9C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5E62D9F857FBDABA9B928D40 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0ce952a4-b414-3be6-8901-9b1edabcfa7e.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 19148 IP address blocks: 108.62.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d9:f8:57:fb:da:ba:9b:92:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=b3206ea4-5c80-4352-b1fc-cff34855c942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f3:cc:23:5f:5f:58:91:2e:02:bb:d6:56:27: 32:dd:74:07:d7:c1:8c:bb:07:a2:8e:9d:ad:e5:91: d5:36:c3:d2:3c:14:a8:0f:1e:b5:b7:f9:4d:1b:bd: 71:9d:de:45:95:c8:34:1a:51:1c:32:13:c0:ed:be: f1:10:e9:e1:da:71:61:31:0e:b3:15:31:31:e3:b6: f0:ae:29:72:02:55:59:dc:17:21:ac:58:9e:ac:ef: 7e:9e:23:f7:22:21:6a:d6:18:4c:80:2a:13:da:d6: ea:f1:d5:29:92:74:00:93:9f:94:b9:1d:13:25:59: 77:dd:23:34:e7:06:a9:7b:7e:11:32:9b:45:3c:a2: 4d:1b:10:a5:76:21:ec:31:32:09:fc:4a:5d:5f:7a: 75:a9:82:5b:ce:dc:0f:5d:74:1b:b0:03:6e:6e:7c: 4f:38:75:f3:4e:3a:b8:69:77:6c:dc:e5:a0:ce:f1: e7:cf:e2:1b:43:80:4b:a9:d2:50:3c:df:3e:e5:48: fd:1b:25:d2:28:52:12:7c:1b:9d:6d:ee:36:5e:1c: b3:ab:bf:43:e5:ee:03:c2:1c:69:89:5a:b7:2d:20: 13:7a:51:7e:0b:93:b6:35:54:0b:6e:88:99:3e:76: 65:31:65:ad:84:a0:ca:7e:d6:5c:73:c3:59:cd:d9: 59:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:84:3B:27:CA:18:64:6D:24:9B:77:34:57:3F:55:B1:65:6E:FD:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0ce952a4-b414-3be6-8901-9b1edabcfa7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4d:25:e8:c0:2b:e9:9f:80:5c:67:a3:ad:96:9a:46:50:a8: d7:ba:60:87:d1:c9:d7:f3:a2:73:6f:96:dd:39:10:5f:60:80: d6:1d:0d:5c:6c:31:6c:58:f4:2e:22:c2:e1:0b:ac:07:7d:40: 58:c0:5e:ea:b7:18:26:f0:13:d9:ee:b7:26:fe:10:02:6c:7e: db:b8:9e:38:2c:b1:31:ba:5e:88:d9:6e:12:7a:a8:6c:a2:20: 17:1b:b4:75:ab:4c:fa:af:16:e6:4f:28:e5:49:0a:9e:05:6c: d6:61:9c:f6:ea:4e:3a:13:b9:5a:c6:93:6e:8d:79:9f:14:8c: 79:fd:43:b0:5f:23:b5:7d:7e:fa:8c:3c:82:2c:27:6c:63:61: 5f:be:89:da:27:80:d4:ad:89:aa:a1:4d:02:10:55:4d:c0:66: 63:fc:74:7f:84:1e:bd:32:57:20:83:cf:48:9e:cb:48:4f:a3: 26:da:ba:01:c7:8a:08:90:66:0d:55:ab:b7:d3:ac:08:fc:91: 69:a0:c4:06:e4:4a:ba:f6:ef:9c:59:d4:57:34:db:de:a5:5c: 2b:2f:42:f0:5b:dd:6f:76:26:48:25:1f:46:2e:53:aa:76:82: 11:29:48:c0:cb:28:2c:f6:91:04:e7:0d:b8:1c:99:2a:c9:88: 56:9e:6d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtn4V/vaupuSjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YjMyMDZlYTQtNWM4MC00MzUyLWIxZmMtY2ZmMzQ4NTVjOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/PMI19fWJEuArvWVicy3XQH18GMuweijp2t 5ZHVNsPSPBSoDx61t/lNG71xnd5Flcg0GlEcMhPA7b7xEOnh2nFhMQ6zFTEx47bw rilyAlVZ3BchrFierO9+niP3IiFq1hhMgCoT2tbq8dUpknQAk5+UuR0TJVl33SM0 5wape34RMptFPKJNGxCldiHsMTIJ/EpdX3p1qYJbztwPXXQbsANubnxPOHXzTjq4 aXds3OWgzvHnz+IbQ4BLqdJQPN8+5Uj9GyXSKFISfBudbe42Xhyzq79D5e4Dwhxp iVq3LSATelF+C5O2NVQLboiZPnZlMWWthKDKftZcc8NZzdlZGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmEOyfKGGRtJJt3NFc/VbFlbv2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMGNlOTUyYTQtYjQxNC0z YmU2LTg5MDEtOWIxZWRhYmNmYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbD4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlNJejAK+mfgFxno62WmkZQqNe6YIfRydfzonNvlt05EF9ggNYdDVxs MWxY9C4iwuELrAd9QFjAXuq3GCbwE9nutyb+EAJsftu4njgssTG6XojZbhJ6qGyi IBcbtHWrTPqvFuZPKOVJCp4FbNZhnPbqTjoTuVrGk26NeZ8UjHn9Q7BfI7V9fvqM PIIsJ2xjYV++idongNStiaqhTQIQVU3AZmP8dH+EHr0yVyCDz0iey0hPoybaugHH igiQZg1Vq7fTrAj8kWmgxAbkSrr275xZ1Fc0296lXCsvQvBb3W92JkglH0YuU6p2 ghEpSMDLKCz2kQTnDbgcmSrJiFaebT8= -----END CERTIFICATE-----Generated at Wed Oct 14 01:59:57 2026 by rpki-client