$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1e263dce-b758-3c99-b9f4-8f4da7e98b4d.roa File: 1e263dce-b758-3c99-b9f4-8f4da7e98b4d.roa (raw, json) Hash identifier: hhxZQ7fKiCcKNAu9ULBXnFuHP7oVXSnxTM+k2/SoE8c= Subject key identifier: 82:0A:CA:00:2F:0F:B8:E0:7B:71:91:E6:5B:2B:0A:3B:C3:16:28:E4 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292BB95D0D3A752B3474780 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1e263dce-b758-3c99-b9f4-8f4da7e98b4d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 108.62.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:bb:95:d0:d3:a7:52:b3:47:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=84daa2b7-b1f3-4488-9c0b-d099f06d2a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:6e:1d:c8:3b:23:57:d0:88:c8:84:cc:3b: 20:7d:49:fd:94:3f:4d:ba:df:87:c8:0a:b5:11:0f: 11:55:c4:65:45:be:dd:7c:da:bc:8e:48:56:2e:e4: 54:ad:f6:3a:d1:db:05:64:f7:96:7c:5c:2a:79:23: 27:2f:cb:0b:1c:9f:ad:1f:ca:c5:c1:b1:10:3d:96: 0b:b7:14:af:ff:da:3f:da:68:66:0f:5b:e5:c6:e5: f5:d7:81:06:db:f5:34:fc:b0:34:70:77:21:36:7c: 51:37:c5:46:90:72:0f:c0:a0:7d:42:af:13:b2:13: c1:ff:a9:ef:b4:33:78:c7:88:af:e1:f6:38:19:0a: 7d:45:15:e0:d8:b8:1c:6c:30:f2:d5:8b:b2:d7:31: ad:d5:b4:a3:e7:78:f9:41:25:9c:b1:db:34:25:59: 5b:11:19:ea:fa:28:27:dd:d2:a4:f3:3e:31:fc:80: dd:75:84:d3:fc:8f:39:cb:17:51:1c:54:19:8a:63: b0:84:4b:f4:c3:fa:82:02:a0:05:48:04:9e:72:e9: fa:1b:96:ce:be:72:db:b6:80:65:80:8b:60:6f:47: a0:64:98:e3:88:d4:94:bf:fd:bb:b7:06:e3:66:d9: a9:60:47:64:c1:56:4a:64:21:13:57:21:29:59:80: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0A:CA:00:2F:0F:B8:E0:7B:71:91:E6:5B:2B:0A:3B:C3:16:28:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1e263dce-b758-3c99-b9f4-8f4da7e98b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:33:e5:ae:77:c5:93:d4:27:e8:d7:5d:d5:ec:22:d4:cb:92: 8b:33:cf:0e:85:00:f3:20:80:8d:e0:e7:df:9b:d2:12:36:da: fb:bd:e0:99:04:b5:87:b0:83:e9:02:a6:aa:37:34:45:eb:ff: a7:20:a2:5a:d2:86:55:4e:7b:5e:fd:cc:3d:e4:db:31:04:c3: 3d:8f:8e:1c:99:62:18:f9:6e:57:f6:a7:5c:c2:f6:83:c0:2b: f7:54:a1:0b:bc:a5:57:d9:10:b1:c5:44:f4:54:7b:41:f8:8e: c7:62:2f:88:b8:7f:48:9e:d0:69:9d:72:fd:83:0c:a3:ae:e2: c0:56:3c:87:7c:1b:5c:73:e5:2b:71:2b:7f:ba:4c:19:ed:36: d1:fe:29:37:fc:52:16:06:eb:a6:c9:ce:fc:5f:d7:fc:a2:40: c5:f1:9a:d8:a2:3c:0a:00:ce:a1:fe:28:17:6f:70:0c:44:7b: 25:1f:b8:03:ae:08:3e:53:28:1d:cf:07:f7:fa:2e:e9:b2:9e: ea:4b:a3:29:07:4d:bd:bb:00:8e:52:25:98:12:8b:e8:76:36: 8e:98:eb:0f:df:58:59:93:cc:c9:ce:1f:78:35:45:4d:df:5f: ff:7b:09:2a:15:82:24:da:b5:39:5e:03:16:af:9c:b4:1f:28: c7:bb:5e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikruV0NOnUrNHR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ODRkYWEyYjctYjFmMy00NDg4LTljMGItZDA5OWYwNmQyYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN5uHcg7I1fQiMiEzDsgfUn9lD9Nut+HyAq1 EQ8RVcRlRb7dfNq8jkhWLuRUrfY60dsFZPeWfFwqeSMnL8sLHJ+tH8rFwbEQPZYL txSv/9o/2mhmD1vlxuX114EG2/U0/LA0cHchNnxRN8VGkHIPwKB9Qq8TshPB/6nv tDN4x4iv4fY4GQp9RRXg2LgcbDDy1Yuy1zGt1bSj53j5QSWcsds0JVlbERnq+ign 3dKk8z4x/IDddYTT/I85yxdRHFQZimOwhEv0w/qCAqAFSASecun6G5bOvnLbtoBl gItgb0egZJjjiNSUv/27twbjZtmpYEdkwVZKZCETVyEpWYAskwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIKygAvD7jge3GR5lsrCjvDFijkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMWUyNjNkY2UtYjc1OC0z Yzk5LWI5ZjQtOGY0ZGE3ZTk4YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbD6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQz5a53xZPUJ+jXXdXsItTLkoszzw6FAPMggI3g59+b0hI22vu94JkE tYewg+kCpqo3NEXr/6cgolrShlVOe179zD3k2zEEwz2PjhyZYhj5blf2p1zC9oPA K/dUoQu8pVfZELHFRPRUe0H4jsdiL4i4f0ie0Gmdcv2DDKOu4sBWPId8G1xz5Stx K3+6TBntNtH+KTf8UhYG66bJzvxf1/yiQMXxmtiiPAoAzqH+KBdvcAxEeyUfuAOu CD5TKB3PB/f6LumynupLoykHTb27AI5SJZgSi+h2No6Y6w/fWFmTzMnOH3g1RU3f X/97CSoVgiTatTleAxavnLQfKMe7XjM= -----END CERTIFICATE-----Generated at Wed Oct 14 07:54:23 2026 by rpki-client