$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/15de56d2-8d15-3b8b-aba5-e77f1f9bdc8a.roa File: 15de56d2-8d15-3b8b-aba5-e77f1f9bdc8a.roa (raw, json) Hash identifier: 4cItvA7sLZcmoBJb4U1KvToBpqtOknuEWpQW+2z4Sq8= Subject key identifier: C1:4E:D4:67:C2:AB:5E:E3:3F:BC:F0:DC:E0:29:81:09:F9:A1:59:05 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF7C1AD5391351907C19DC40 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/15de56d2-8d15-3b8b-aba5-e77f1f9bdc8a.roa Signing time: Thu 06 Aug 2026 14:57:58 +0000 ROA not before: Thu 06 Aug 2026 14:57:58 +0000 ROA not after: Wed 04 Nov 2026 15:57:58 +0000 asID: 394380 IP address blocks: 173.208.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:7c:1a:d5:39:13:51:90:7c:19:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:57:58 2026 GMT Not After : Nov 4 15:57:58 2026 GMT Subject: CN=e07f4c26-fd30-44c4-95aa-ad455bf8a314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c2:6e:58:36:13:26:d0:03:12:32:98:37:3d: 4e:16:cc:74:10:46:96:3f:10:59:de:83:4d:6a:e9: 77:c1:b2:7e:75:07:dd:50:32:0a:67:1a:52:cb:8f: 9d:b4:7f:34:87:23:60:bf:2c:15:be:ab:2e:0b:ca: 24:22:0c:26:6a:05:f3:3d:96:4d:9e:09:87:6d:8d: b7:9c:fd:a8:a6:30:86:4a:34:92:f3:f0:b0:95:cd: 0d:a8:80:f9:40:aa:0a:2b:52:ec:54:c5:f4:f3:c7: e0:89:d3:bc:ce:56:48:b8:61:6d:b0:65:17:df:d6: e2:51:95:ba:73:17:1b:47:b6:c2:4f:f0:b1:29:3a: 4b:9a:58:ce:23:64:c1:9a:f7:37:ca:64:ad:3b:c9: 9c:a9:1d:83:0b:5e:93:48:ff:b2:03:6b:31:28:d1: 17:4b:3c:31:15:58:92:4d:b1:03:e1:fc:1a:03:53: d8:4c:a6:6d:de:85:88:3f:09:d0:6c:dc:9a:36:d8: 44:5a:c7:69:4a:0e:65:dc:41:00:ad:84:74:76:0a: 64:87:05:68:14:ae:b3:aa:5c:5f:d0:04:8a:db:6e: 48:ec:33:de:a1:70:47:5b:5f:ae:8f:50:ee:05:38: 34:a4:46:ed:36:40:0c:5a:5b:25:20:26:b0:60:39: d3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4E:D4:67:C2:AB:5E:E3:3F:BC:F0:DC:E0:29:81:09:F9:A1:59:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/15de56d2-8d15-3b8b-aba5-e77f1f9bdc8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.208.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:59:55:97:c6:31:b1:84:90:53:48:5d:a4:92:dd:d1:7c:d9: e3:ca:c7:fd:69:06:5e:02:ba:c0:0a:a9:11:58:35:34:8f:9d: cb:73:3b:12:04:36:12:ad:36:9c:19:32:ef:fa:76:78:15:42: 45:de:63:59:bd:88:e3:a5:cc:4a:ba:30:0b:a0:a6:e5:35:8c: a7:d3:21:64:48:36:9e:bb:3a:e2:78:5b:02:7a:7a:c3:67:96: 40:dd:b4:70:f2:a0:78:1b:ff:af:6f:27:e1:e9:9b:cf:fc:58: 0b:89:f3:b1:bd:51:0f:31:80:b6:fa:e2:2b:b9:2a:62:c2:54: 49:48:93:f5:3c:a4:68:4b:a6:f5:d8:e0:9d:e1:15:51:bf:27: b8:62:da:5c:83:9f:d5:27:15:69:0d:0e:54:6a:c3:eb:0c:2f: 61:4e:b1:89:13:f6:99:d7:d3:03:03:91:1c:98:26:4c:b6:8e: ee:53:2f:21:43:95:3f:6a:d6:e2:19:71:e8:e1:04:b5:b3:a7: 6b:90:7f:18:ef:67:f5:12:c1:b9:bc:f1:fb:65:4a:b0:4c:4a: f3:76:95:48:1a:3e:b9:38:4f:63:65:08:a0:ba:84:9e:ba:43: 70:3a:da:3b:32:f8:fc:e8:c2:7a:db:4f:cf:bf:90:85:ee:ad: 26:d8:ed:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/fBrVORNRkHwZ3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0NTc1OFoXDTI2MTEwNDE1NTc1OFowLzEtMCsGA1UEAxMk ZTA3ZjRjMjYtZmQzMC00NGM0LTk1YWEtYWQ0NTViZjhhMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8JuWDYTJtADEjKYNz1OFsx0EEaWPxBZ3oNN aul3wbJ+dQfdUDIKZxpSy4+dtH80hyNgvywVvqsuC8okIgwmagXzPZZNngmHbY23 nP2opjCGSjSS8/Cwlc0NqID5QKoKK1LsVMX088fgidO8zlZIuGFtsGUX39biUZW6 cxcbR7bCT/CxKTpLmljOI2TBmvc3ymStO8mcqR2DC16TSP+yA2sxKNEXSzwxFViS TbED4fwaA1PYTKZt3oWIPwnQbNyaNthEWsdpSg5l3EEArYR0dgpkhwVoFK6zqlxf 0ASK225I7DPeoXBHW1+uj1DuBTg0pEbtNkAMWlslICawYDnTZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFO1GfCq17jP7zw3OApgQn5oVkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMTVkZTU2ZDItOGQxNS0z YjhiLWFiYTUtZTc3ZjFmOWJkYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9ZVZfGMbGEkFNIXaSS3dF82ePKx/1pBl4CusAKqRFYNTSPnctzOxIE NhKtNpwZMu/6dngVQkXeY1m9iOOlzEq6MAugpuU1jKfTIWRINp67OuJ4WwJ6esNn lkDdtHDyoHgb/69vJ+Hpm8/8WAuJ87G9UQ8xgLb64iu5KmLCVElIk/U8pGhLpvXY 4J3hFVG/J7hi2lyDn9UnFWkNDlRqw+sML2FOsYkT9pnX0wMDkRyYJky2ju5TLyFD lT9q1uIZcejhBLWzp2uQfxjvZ/USwbm88ftlSrBMSvN2lUgaPrk4T2NlCKC6hJ66 Q3A62jsy+PzownrbT8+/kIXurSbY7eo= -----END CERTIFICATE-----Generated at Thu Aug 27 19:04:05 2026 by rpki-client