$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1473b302-21a8-3454-93b0-b087302790b9.roa File: 1473b302-21a8-3454-93b0-b087302790b9.roa (raw, json) Hash identifier: vm/9xG5GVXFHruwzOq3QO5cSklGxdsdfQYkgOS5PQbo= Subject key identifier: 2B:D3:B5:39:BA:44:BF:18:7E:89:E3:07:2F:3D:F0:81:AD:39:E8:54 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB9B72A9975E87A77EF37B220 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1473b302-21a8-3454-93b0-b087302790b9.roa Signing time: Tue 04 Aug 2026 13:22:07 +0000 ROA not before: Tue 04 Aug 2026 13:22:07 +0000 ROA not after: Mon 02 Nov 2026 14:22:07 +0000 asID: 7203 IP address blocks: 172.255.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:b7:2a:99:75:e8:7a:77:ef:37:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 13:22:07 2026 GMT Not After : Nov 2 14:22:07 2026 GMT Subject: CN=72e55851-7ff4-4f3f-9fa0-527d2896fbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:4d:1d:3b:8c:cf:98:67:76:35:8e:1b:7f: 80:d4:c0:30:1d:f4:3f:95:30:bf:7a:bb:04:0c:5d: cd:fa:9e:53:db:e9:c4:5e:47:a7:11:f1:6c:d5:b4: dc:ec:d4:cd:fd:1d:a3:08:5e:71:55:36:44:9c:af: 34:c8:f4:f0:92:34:70:04:d3:61:57:de:f5:af:07: db:07:7e:58:df:cb:ab:b7:63:bf:de:a4:17:cc:c7: 0f:cc:28:91:c5:21:f0:46:ff:85:c0:11:d7:48:b4: 6a:0e:b0:b9:de:9c:73:df:c1:5d:fa:d9:a4:4f:1a: 00:2d:8c:da:32:62:26:df:1d:e3:5f:1d:17:82:04: 93:50:df:5b:f2:b3:94:d4:11:ff:fb:74:bb:ad:b0: 05:2c:94:6f:3b:77:12:4f:6a:dd:78:1c:ed:d9:35: 87:42:06:4f:38:cd:aa:40:0a:be:a5:2b:ba:e0:8a: 01:97:e7:3c:77:85:06:04:a2:47:0f:38:83:3e:33: 39:45:0e:af:3d:bf:01:50:7d:d6:82:b3:d8:d4:85: 24:ef:e2:45:b3:4c:6a:b1:b8:23:f3:53:25:1b:ab: a8:7e:74:46:e5:6a:f0:bc:bd:9b:10:53:12:31:15: 37:28:7b:d7:f9:67:b9:41:d5:b9:6a:b9:27:6c:6c: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D3:B5:39:BA:44:BF:18:7E:89:E3:07:2F:3D:F0:81:AD:39:E8:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1473b302-21a8-3454-93b0-b087302790b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:80:c0:fe:81:2f:5f:b2:1c:ee:31:30:e5:66:a9:36:cd:4d: 61:e0:96:75:f9:4d:ab:0b:63:26:a2:72:62:3b:d5:10:18:bf: 1a:23:c6:5f:ba:ea:b8:49:32:4b:0b:b4:4d:db:e2:37:a1:56: c0:7a:68:2d:09:b1:f6:6f:3a:66:80:07:bc:76:11:c4:2e:a5: 8e:9a:cf:89:fc:4c:51:7d:23:d5:3c:84:80:c2:3d:13:40:b7: 2d:d7:14:f9:06:89:e7:6a:37:5e:81:21:b6:02:e7:cb:e8:49: c6:8c:9b:9b:cc:de:db:5a:0b:35:5f:48:38:57:59:33:4b:ab: 19:77:43:e7:51:80:d4:80:99:e8:fd:af:cf:e9:2a:6d:4a:d3: 15:e5:f1:34:3d:12:96:d0:8a:af:fc:93:44:58:c7:17:ac:4a: 41:5b:14:b2:41:31:76:8e:cd:c3:36:22:e9:8b:cb:e2:35:c1: a9:c3:a0:9a:53:d2:95:e3:4a:de:02:ab:62:55:6a:6a:5a:19: ac:16:fa:81:ed:23:30:73:db:f9:29:33:87:93:4f:cf:43:5b: 36:7d:10:83:e0:08:04:b4:5a:d8:b0:03:cb:a9:75:cc:c2:39: 83:19:e7:b8:64:b1:2f:5c:3e:38:5c:8f:73:b5:75:52:ea:b3: b5:aa:80:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65tyqZdeh6d+83siAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDEzMjIwN1oXDTI2MTEwMjE0MjIwN1owLzEtMCsGA1UEAxMk NzJlNTU4NTEtN2ZmNC00ZjNmLTlmYTAtNTI3ZDI4OTZmYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26FNHTuMz5hndjWOG3+A1MAwHfQ/lTC/ersE DF3N+p5T2+nEXkenEfFs1bTc7NTN/R2jCF5xVTZEnK80yPTwkjRwBNNhV971rwfb B35Y38urt2O/3qQXzMcPzCiRxSHwRv+FwBHXSLRqDrC53pxz38Fd+tmkTxoALYza MmIm3x3jXx0XggSTUN9b8rOU1BH/+3S7rbAFLJRvO3cST2rdeBzt2TWHQgZPOM2q QAq+pSu64IoBl+c8d4UGBKJHDziDPjM5RQ6vPb8BUH3WgrPY1IUk7+JFs0xqsbgj 81MlG6uofnRG5WrwvL2bEFMSMRU3KHvX+We5QdW5arknbGybbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvTtTm6RL8YfonjBy898IGtOehUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMTQ3M2IzMDItMjFhOC0z NDU0LTkzYjAtYjA4NzMwMjc5MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrP98MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKAwP6BL1+yHO4xMOVmqTbNTWHglnX5TasLYyaicmI71RAYvxojxl+6 6rhJMksLtE3b4jehVsB6aC0JsfZvOmaAB7x2EcQupY6az4n8TFF9I9U8hIDCPRNA ty3XFPkGiedqN16BIbYC58voScaMm5vM3ttaCzVfSDhXWTNLqxl3Q+dRgNSAmej9 r8/pKm1K0xXl8TQ9EpbQiq/8k0RYxxesSkFbFLJBMXaOzcM2IumLy+I1wanDoJpT 0pXjSt4Cq2JVampaGawW+oHtIzBz2/kpM4eTT89DWzZ9EIPgCAS0WtiwA8updczC OYMZ57hksS9cPjhcj3O1dVLqs7WqgLc= -----END CERTIFICATE-----Generated at Thu Aug 27 18:21:33 2026 by rpki-client