$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/13af890f-ce66-3cf3-9662-7b9b1a9bf5f7.roa File: 13af890f-ce66-3cf3-9662-7b9b1a9bf5f7.roa (raw, json) Hash identifier: fELs74fl96lHh8Loiyq+AF/5Pm/gUJh2NhZj4dMPN4A= Subject key identifier: 7A:E5:7C:84:19:5C:29:39:68:18:C4:C1:16:87:8D:B5:61:32:A4:7B Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5E62DCE4F6184CDD49565204 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/13af890f-ce66-3cf3-9662-7b9b1a9bf5f7.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 27411 IP address blocks: 64.120.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:dc:e4:f6:18:4c:dd:49:56:52:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=7b921acb-2241-4ec6-9b06-2e562d4953a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:ad:c4:6c:11:de:b9:98:81:f6:d6:3a:6d: 59:ef:a5:d1:b3:e7:4a:85:42:3e:49:c3:f1:e1:7d: 53:0f:a7:f0:e8:7c:74:cb:d3:9d:86:41:9b:7a:32: 1d:69:55:ce:29:13:9d:73:20:a0:55:44:73:d5:bc: df:53:41:90:6e:ea:a3:94:95:0d:e2:3b:f4:63:63: ed:57:e4:0e:1c:31:3b:58:c2:fd:a7:fd:43:1a:07: 15:22:09:36:7f:84:05:b8:1f:d5:d5:d4:e0:ce:bc: 3d:32:1c:17:47:24:3f:a1:bb:20:a1:7b:24:0e:19: a2:86:c0:b8:6a:0c:d1:b9:4a:d4:29:2c:83:64:76: 4c:fa:c7:9d:90:4a:f9:81:65:72:2d:4c:fa:fe:c8: a3:02:64:e5:39:64:89:1a:dc:e6:6e:80:08:4e:1f: af:7d:25:c5:5e:a1:77:94:fa:4f:c6:4b:d3:9f:ff: 92:33:21:ce:15:0a:8d:d8:ed:43:4e:76:39:6b:27: ea:c1:01:b1:3e:fa:65:24:7f:85:10:1d:6e:75:7a: c0:57:a1:3b:0a:ab:6c:88:69:8b:c0:7b:16:6f:ca: 64:a9:f5:7d:11:8c:3c:99:4d:d5:82:86:0e:6d:8c: 63:df:fb:30:98:ed:96:85:e7:75:dc:2b:ee:2a:f7: e5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E5:7C:84:19:5C:29:39:68:18:C4:C1:16:87:8D:B5:61:32:A4:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/13af890f-ce66-3cf3-9662-7b9b1a9bf5f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 64.120.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d6:0e:70:29:1b:c3:e0:0f:4b:dd:53:79:e1:53:21:51:94: 98:a6:76:6d:77:3c:da:92:a0:f1:17:b6:d7:2a:5c:66:6a:5d: ea:30:9f:7a:a2:ce:94:4d:55:18:41:54:23:81:66:3b:de:de: 28:c8:7a:e7:90:12:41:1f:57:66:37:69:a2:95:2c:33:bf:70: be:91:44:46:7e:fa:6f:07:ca:da:54:76:b5:3b:18:f7:dc:9f: 4a:93:74:05:10:14:06:b3:2f:76:ea:0e:9d:d6:f5:8c:0c:c2: f4:c3:f5:5c:a4:86:88:af:62:a4:c6:83:51:02:44:61:21:9f: 68:46:f1:81:9c:08:bf:48:81:d7:e0:70:29:d7:8a:f3:e9:ab: c9:08:7f:c0:81:b7:73:66:ba:89:2b:a6:ac:c8:77:e1:66:40: 4a:d3:19:44:9a:5f:28:6f:25:4d:b7:5d:65:32:4d:2e:3e:1e: 19:8a:1c:9d:a5:bb:21:60:65:8f:2c:f2:f2:2c:09:4b:b1:0e: b3:43:2c:87:ef:1c:25:c3:cf:1c:43:09:2b:1e:20:84:20:f8: 0a:32:e5:ad:cc:d5:2f:39:75:ac:ee:22:01:e4:95:e5:ca:1d: bc:90:12:e8:31:1e:ec:47:e5:e0:83:0d:c0:ea:39:f6:f3:45: 95:0f:72:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtzk9hhM3UlWUgQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk N2I5MjFhY2ItMjI0MS00ZWM2LTliMDYtMmU1NjJkNDk1M2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhqtxGwR3rmYgfbWOm1Z76XRs+dKhUI+ScPx 4X1TD6fw6Hx0y9OdhkGbejIdaVXOKROdcyCgVURz1bzfU0GQbuqjlJUN4jv0Y2Pt V+QOHDE7WML9p/1DGgcVIgk2f4QFuB/V1dTgzrw9MhwXRyQ/obsgoXskDhmihsC4 agzRuUrUKSyDZHZM+sedkEr5gWVyLUz6/sijAmTlOWSJGtzmboAITh+vfSXFXqF3 lPpPxkvTn/+SMyHOFQqN2O1DTnY5ayfqwQGxPvplJH+FEB1udXrAV6E7CqtsiGmL wHsWb8pkqfV9EYw8mU3VgoYObYxj3/swmO2Whed13CvuKvflIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrlfIQZXCk5aBjEwRaHjbVhMqR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMTNhZjg5MGYtY2U2Ni0z Y2YzLTk2NjItN2I5YjFhOWJmNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfWDnApG8PgD0vdU3nhUyFRlJimdm13PNqSoPEXttcqXGZqXeown3qi zpRNVRhBVCOBZjve3ijIeueQEkEfV2Y3aaKVLDO/cL6RREZ++m8HytpUdrU7GPfc n0qTdAUQFAazL3bqDp3W9YwMwvTD9VykhoivYqTGg1ECRGEhn2hG8YGcCL9Igdfg cCnXivPpq8kIf8CBt3NmuokrpqzId+FmQErTGUSaXyhvJU23XWUyTS4+HhmKHJ2l uyFgZY8s8vIsCUuxDrNDLIfvHCXDzxxDCSseIIQg+Aoy5a3M1S85dazuIgHkleXK HbyQEugxHuxH5eCDDcDqOfbzRZUPcjE= -----END CERTIFICATE-----Generated at Tue Oct 13 17:46:37 2026 by rpki-client