$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/19457d5e-80c2-3b4d-89a6-5d69229fd385.roa File: 19457d5e-80c2-3b4d-89a6-5d69229fd385.roa (raw, json) Hash identifier: G/S2SQL1CBqM4dtf8ByqeN3H2sBytN7OpM+LBLKgD8c= Subject key identifier: 3F:E7:4C:87:A7:BA:75:37:20:89:B4:04:7B:E5:08:AA:D9:7C:2F:28 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B1F22F91816FAEAAC200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/19457d5e-80c2-3b4d-89a6-5d69229fd385.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 108.62.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b1:f2:2f:91:81:6f:ae:aa:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=cfe43d05-4956-4331-a75f-563e4b671eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:d2:b1:7c:76:29:c1:72:06:b1:7d:2c:c7: 47:70:aa:e3:a8:98:d1:f1:32:7a:fe:2e:aa:91:00: f7:f9:89:5b:49:60:81:69:a0:1d:34:67:24:52:fc: 76:32:29:41:a2:85:ad:b1:39:31:97:67:b1:3b:39: 60:6b:84:56:d7:38:f3:2c:30:08:a7:02:86:ca:f4: 44:06:f5:99:39:dc:d7:c9:bb:68:2e:57:1e:aa:e8: c2:f1:f8:f0:cb:3e:46:52:cc:09:d2:ec:0a:b7:f8: d1:db:15:29:32:29:9f:5a:33:53:d4:49:ee:2f:17: 8b:7b:3b:ea:97:84:02:3d:49:ea:ea:68:d2:68:74: 69:b8:05:ec:2e:64:ad:33:46:1a:ea:02:54:0a:6e: c6:f8:40:08:21:6a:ae:a0:6c:b4:bf:0b:a8:1e:f5: 36:0e:e2:0d:ff:84:d6:81:5c:21:43:5f:28:41:fc: 85:ee:5f:29:e1:35:7e:f1:67:51:32:77:5b:b6:fb: 69:f3:cc:af:48:d3:d5:46:c9:85:67:8a:90:79:90: 2d:a7:4b:d7:cf:6b:1c:0e:16:1b:11:77:98:25:0d: 78:89:f6:e2:d1:2b:29:60:21:88:e4:8b:e2:4e:1f: ca:26:91:c8:9f:a4:2f:19:a3:7c:07:e2:e7:b0:10: b2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E7:4C:87:A7:BA:75:37:20:89:B4:04:7B:E5:08:AA:D9:7C:2F:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/19457d5e-80c2-3b4d-89a6-5d69229fd385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:64:e2:64:d3:8e:3d:ad:d5:6e:bf:b4:8d:f6:99:14:d1:f9: cf:9c:d0:66:b0:f9:63:93:39:71:25:a1:2a:7b:71:33:43:5f: ef:8a:b2:10:13:eb:17:f4:d2:56:08:45:e3:ad:a6:55:c0:52: 68:d2:81:f1:49:2b:81:d4:72:88:4b:71:c1:34:15:68:19:11: 7f:93:a4:19:dc:e6:0b:87:97:fc:20:56:f4:94:c4:ee:d0:88: a1:94:ff:d7:4d:1e:cf:35:50:5b:37:74:fd:92:3f:34:07:99: be:a9:4a:0b:f3:b3:ee:b9:85:75:96:f4:e9:01:37:25:1f:41: 1b:10:fa:34:42:95:b9:c8:b5:32:96:b7:fd:05:3e:c5:85:ca: 8b:ef:2d:67:31:fa:e8:c5:7c:1f:e8:f5:cc:f7:50:cc:51:f6: cb:1d:84:99:15:47:74:62:7c:a7:b0:ba:d9:52:95:cc:8c:c6: 33:04:9e:3f:cd:84:86:97:c4:5e:42:48:bc:39:80:e1:b1:5c: 6e:71:68:4b:42:54:23:04:74:3c:12:38:ac:6a:b8:0d:6d:37: b0:15:54:5e:ea:25:27:20:21:20:80:40:32:ec:00:b5:ca:2d: 59:af:8d:88:4a:38:10:c5:7d:ec:e6:37:19:eb:60:e9:31:99: 81:0e:10:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrHyL5GBb66qwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2ZlNDNkMDUtNDk1Ni00MzMxLWE3NWYtNTYzZTRiNjcxZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0anSsXx2KcFyBrF9LMdHcKrjqJjR8TJ6/i6q kQD3+YlbSWCBaaAdNGckUvx2MilBooWtsTkxl2exOzlga4RW1zjzLDAIpwKGyvRE BvWZOdzXybtoLlcequjC8fjwyz5GUswJ0uwKt/jR2xUpMimfWjNT1EnuLxeLezvq l4QCPUnq6mjSaHRpuAXsLmStM0Ya6gJUCm7G+EAIIWquoGy0vwuoHvU2DuIN/4TW gVwhQ18oQfyF7l8p4TV+8WdRMndbtvtp88yvSNPVRsmFZ4qQeZAtp0vXz2scDhYb EXeYJQ14ifbi0SspYCGI5IviTh/KJpHIn6QvGaN8B+LnsBCyVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/nTIenunU3IIm0BHvlCKrZfC8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMTk0NTdkNWUtODBjMi0z YjRkLTg5YTYtNWQ2OTIyOWZkMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbD7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1k4mTTjj2t1W6/tI32mRTR+c+c0Gaw+WOTOXEloSp7cTNDX++KshAT 6xf00lYIReOtplXAUmjSgfFJK4HUcohLccE0FWgZEX+TpBnc5guHl/wgVvSUxO7Q iKGU/9dNHs81UFs3dP2SPzQHmb6pSgvzs+65hXWW9OkBNyUfQRsQ+jRClbnItTKW t/0FPsWFyovvLWcx+ujFfB/o9cz3UMxR9ssdhJkVR3RifKewutlSlcyMxjMEnj/N hIaXxF5CSLw5gOGxXG5xaEtCVCMEdDwSOKxquA1tN7AVVF7qJScgISCAQDLsALXK LVmvjYhKOBDFfezmNxnrYOkxmYEOEF0= -----END CERTIFICATE-----Generated at Wed Oct 14 09:07:19 2026 by rpki-client