$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1cf73a95-5707-30f8-8fc8-90489261c6e4.roa File: 1cf73a95-5707-30f8-8fc8-90489261c6e4.roa (raw, json) Hash identifier: iCCymBu17rcIIGOjdklht66fy7t/8BYXyk05RKAF65I= Subject key identifier: 87:68:20:7A:75:FC:48:23:62:D4:E9:7D:F7:FA:5F:47:15:EA:0B:41 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B15466B1A9F825552BA0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1cf73a95-5707-30f8-8fc8-90489261c6e4.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 108.177.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b1:54:66:b1:a9:f8:25:55:2b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=2fe4420a-ce9e-401c-94a7-494a04eff1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:78:04:73:3a:fc:23:3d:df:ba:b5:92:ad: 72:d9:01:b3:b1:26:fc:d6:fc:55:b4:11:b4:85:f9: a0:ef:53:17:04:a6:2c:e2:ed:dc:75:02:9e:0f:c4: c4:42:da:14:d1:61:95:a5:99:61:4b:6b:07:19:43: 87:81:35:36:b6:15:97:dc:1c:01:76:1e:55:ed:bc: d0:29:50:c4:43:ab:0b:e8:f3:98:37:d1:a7:58:01: ed:c5:83:5f:76:a8:a9:49:4b:ad:ce:38:8c:df:a6: 34:83:58:cc:4b:52:e6:e3:e6:41:3d:04:7a:9c:1c: cb:9c:70:82:bd:8d:bc:c2:8a:d2:f4:3e:ab:e7:39: a6:98:09:f0:49:97:73:36:ef:25:4a:69:4d:a0:ff: 93:90:2f:7d:4d:17:01:c4:73:1b:58:37:a3:c1:ba: dd:d1:9e:e2:02:9c:4b:e0:96:c4:fc:e8:70:35:b4: 0b:90:75:b7:ee:a9:76:a9:a9:07:fc:fb:4b:0d:3a: 57:a8:fb:cf:80:67:bc:c3:27:6f:42:f4:e5:4e:4f: c3:c2:c6:4f:f2:a6:36:c2:c8:01:d1:be:b5:e3:05: d1:88:fb:c5:e6:86:7b:4d:63:3a:c1:6a:15:d0:ab: 52:6c:9a:d8:c2:6b:04:18:b8:e1:91:21:95:1b:4a: 12:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:20:7A:75:FC:48:23:62:D4:E9:7D:F7:FA:5F:47:15:EA:0B:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1cf73a95-5707-30f8-8fc8-90489261c6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.177.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a0:f1:e0:88:ed:4f:c8:97:ec:46:78:e2:22:06:c8:fc:10: 0e:e8:98:2a:ac:0f:cb:fa:54:a3:27:44:64:d4:98:e4:c9:20: 8b:3e:0d:78:dd:79:e5:c5:cc:c8:cd:f6:3d:51:7b:bf:f7:c3: 88:d4:d6:1e:51:06:be:0b:60:28:c7:75:f6:d8:f9:d1:e6:5a: cc:9f:58:3d:1d:67:43:85:71:43:96:b9:ed:94:87:24:2e:d5: e7:70:79:52:a8:87:22:77:58:dd:15:d7:db:37:53:d9:32:f1: 60:ec:e8:14:22:f7:33:4e:df:15:98:b8:2a:47:04:04:40:b2: 54:a0:3f:9b:8d:b5:53:dc:7f:ca:ff:b1:df:02:68:fb:17:dd: 00:2b:01:fd:e3:70:30:e7:b6:29:ce:89:18:6d:87:80:e7:a9: 43:e6:52:95:a6:96:9c:e9:b6:09:02:37:39:41:6d:8c:f7:46: b4:8b:4a:6b:ca:f9:e5:72:c4:db:90:50:92:47:2b:c3:32:30: 12:16:c1:f6:95:c8:2d:2d:25:79:20:e2:69:86:ba:8c:dc:06: a2:2e:de:c5:90:23:18:7c:37:34:d8:e2:4c:89:b7:18:8e:a7: 09:ec:b5:20:2b:7b:7d:81:b4:14:b7:48:4d:b1:46:a6:b6:64: fe:28:d8:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrFUZrGp+CVVK6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MmZlNDQyMGEtY2U5ZS00MDFjLTk0YTctNDk0YTA0ZWZmMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrp4BHM6/CM937q1kq1y2QGzsSb81vxVtBG0 hfmg71MXBKYs4u3cdQKeD8TEQtoU0WGVpZlhS2sHGUOHgTU2thWX3BwBdh5V7bzQ KVDEQ6sL6POYN9GnWAHtxYNfdqipSUutzjiM36Y0g1jMS1Lm4+ZBPQR6nBzLnHCC vY28worS9D6r5zmmmAnwSZdzNu8lSmlNoP+TkC99TRcBxHMbWDejwbrd0Z7iApxL 4JbE/OhwNbQLkHW37ql2qakH/PtLDTpXqPvPgGe8wydvQvTlTk/DwsZP8qY2wsgB 0b614wXRiPvF5oZ7TWM6wWoV0KtSbJrYwmsEGLjhkSGVG0oSvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdoIHp1/EgjYtTpfff6X0cV6gtBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMWNmNzNhOTUtNTcwNy0z MGY4LThmYzgtOTA0ODkyNjFjNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOg8eCI7U/Il+xGeOIiBsj8EA7omCqsD8v6VKMnRGTUmOTJIIs+DXjd eeXFzMjN9j1Re7/3w4jU1h5RBr4LYCjHdfbY+dHmWsyfWD0dZ0OFcUOWue2UhyQu 1edweVKohyJ3WN0V19s3U9ky8WDs6BQi9zNO3xWYuCpHBARAslSgP5uNtVPcf8r/ sd8CaPsX3QArAf3jcDDntinOiRhth4DnqUPmUpWmlpzptgkCNzlBbYz3RrSLSmvK +eVyxNuQUJJHK8MyMBIWwfaVyC0tJXkg4mmGuozcBqIu3sWQIxh8NzTY4kyJtxiO pwnstSAre32BtBS3SE2xRqa2ZP4o2DY= -----END CERTIFICATE-----Generated at Thu Oct 15 02:09:57 2026 by rpki-client