$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1505e028-fa61-3136-b572-5d3487ba895a.roa File: 1505e028-fa61-3136-b572-5d3487ba895a.roa (raw, json) Hash identifier: lwiBbqRK7G+D+7NaYbbApfEsqyawhZaxHLXfy8NNOeY= Subject key identifier: A9:F4:69:92:C6:7E:3C:5E:B2:92:E1:B5:6B:BB:B5:BE:CF:A7:21:03 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBBE8A73E6136F4B0A81BC280 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1505e028-fa61-3136-b572-5d3487ba895a.roa Signing time: Wed 05 Aug 2026 08:13:26 +0000 ROA not before: Wed 05 Aug 2026 08:13:26 +0000 ROA not after: Tue 03 Nov 2026 09:13:26 +0000 asID: 19148 IP address blocks: 108.62.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:e8:a7:3e:61:36:f4:b0:a8:1b:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 5 08:13:26 2026 GMT Not After : Nov 3 09:13:26 2026 GMT Subject: CN=8c131103-f42e-4470-ab8f-792e5b471d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:82:8c:ca:3c:d7:26:45:42:17:f7:f5:8b: 45:77:fc:ff:3e:b0:6b:d6:8b:86:a7:8b:d2:72:7d: 50:3f:f0:6d:35:90:74:46:7e:83:48:7e:cc:fe:13: 8f:df:07:7e:60:95:78:ff:ab:4d:39:0b:09:97:4f: d6:e8:2b:09:36:6b:b5:f3:69:4d:2d:3f:50:4a:a2: 6f:6e:db:b3:42:b2:d2:60:8a:7d:6e:a9:90:66:a5: cb:8c:45:e7:a6:3c:f6:f6:1e:91:e7:c4:2a:70:11: 42:72:ad:78:77:87:d2:66:98:48:26:81:62:e9:11: a0:fd:84:4c:13:2f:42:b6:3b:ac:60:47:47:5a:fe: 69:22:76:2a:f2:c3:f2:ca:12:dc:2b:ee:ce:68:92: fe:0d:a9:7c:c2:da:b6:b6:08:da:8d:c6:49:c9:83: 5e:ba:f2:30:0d:8a:d2:a2:45:10:d4:40:c8:93:e5: dd:a8:1f:46:63:5c:7b:aa:bf:4e:42:80:ea:ff:a5: bd:0d:0c:bb:57:67:54:0b:72:3b:e5:b0:82:34:38: 46:17:42:55:b0:64:da:3f:0f:24:07:58:a5:83:aa: 31:25:7d:b6:16:ea:42:fd:72:fa:30:4b:38:4a:90: 5f:03:4f:22:c8:c4:70:5d:2e:15:fc:01:f3:e5:e0: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F4:69:92:C6:7E:3C:5E:B2:92:E1:B5:6B:BB:B5:BE:CF:A7:21:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1505e028-fa61-3136-b572-5d3487ba895a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:44:56:4d:4f:e8:54:fe:4e:08:ec:a8:d5:50:29:d4:e8:44: 0b:be:f4:a2:7e:bb:f7:d5:8d:e8:4c:24:ac:d0:4b:7c:c4:45: 25:43:d9:b7:c5:e3:3d:f0:98:f6:42:7a:c4:a7:be:19:fd:0b: 5a:71:93:52:35:36:b8:fe:37:97:41:28:0f:8b:a4:8d:3f:d8: d6:e1:ba:fe:75:5d:3a:f9:61:da:c8:f8:77:4d:e8:ac:cd:6e: 53:61:cb:f8:27:41:83:fe:b1:70:fd:b7:59:9a:c7:45:c1:fd: 3d:2b:46:56:00:92:b9:83:20:9a:c2:f3:e3:38:97:03:5b:45: 46:c4:29:4c:fe:05:b8:aa:47:74:71:4f:a5:dd:ed:ad:cb:4d: 10:ab:ce:70:0d:2e:78:81:9a:01:41:e3:1d:94:ef:48:2f:b8: 71:f0:18:81:0a:b5:bc:c6:8f:f4:9f:9b:74:f7:e4:68:ff:1d: 0c:35:7a:83:54:0f:e7:7d:85:25:46:37:8c:67:b0:cd:24:5d: 29:27:e5:0f:eb:ae:71:b7:ad:8a:4c:a4:fa:fa:bb:05:e6:26: ef:52:c4:f3:c7:a0:b4:05:21:19:06:38:e0:9c:f7:91:33:bc: 9c:1b:c4:97:5f:d2:75:df:f3:ad:97:f8:64:dd:ea:d4:82:e9: fa:16:0b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE676Kc+YTb0sKgbwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNTA4MTMyNloXDTI2MTEwMzA5MTMyNlowLzEtMCsGA1UEAxMk OGMxMzExMDMtZjQyZS00NDcwLWFiOGYtNzkyZTViNDcxZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN6CjMo81yZFQhf39YtFd/z/PrBr1ouGp4vS cn1QP/BtNZB0Rn6DSH7M/hOP3wd+YJV4/6tNOQsJl0/W6CsJNmu182lNLT9QSqJv btuzQrLSYIp9bqmQZqXLjEXnpjz29h6R58QqcBFCcq14d4fSZphIJoFi6RGg/YRM Ey9CtjusYEdHWv5pInYq8sPyyhLcK+7OaJL+Dal8wtq2tgjajcZJyYNeuvIwDYrS okUQ1EDIk+XdqB9GY1x7qr9OQoDq/6W9DQy7V2dUC3I75bCCNDhGF0JVsGTaPw8k B1ilg6oxJX22FupC/XL6MEs4SpBfA08iyMRwXS4V/AHz5eA+bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn0aZLGfjxespLhtWu7tb7PpyEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMTUwNWUwMjgtZmE2MS0z MTM2LWI1NzItNWQzNDg3YmE4OTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbD7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZEVk1P6FT+TgjsqNVQKdToRAu+9KJ+u/fVjehMJKzQS3zERSVD2bfF 4z3wmPZCesSnvhn9C1pxk1I1Nrj+N5dBKA+LpI0/2Nbhuv51XTr5YdrI+HdN6KzN blNhy/gnQYP+sXD9t1max0XB/T0rRlYAkrmDIJrC8+M4lwNbRUbEKUz+BbiqR3Rx T6Xd7a3LTRCrznANLniBmgFB4x2U70gvuHHwGIEKtbzGj/Sfm3T35Gj/HQw1eoNU D+d9hSVGN4xnsM0kXSkn5Q/rrnG3rYpMpPr6uwXmJu9SxPPHoLQFIRkGOOCc95Ez vJwbxJdf0nXf862X+GTd6tSC6foWC68= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:12 2026 by rpki-client