$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/20671d21-ec39-34b3-8b67-cc02742c22d9.roa File: 20671d21-ec39-34b3-8b67-cc02742c22d9.roa (raw, json) Hash identifier: y7zuA9d6KPoxsxdu3Ccrt8cQHk1WbC4+qmO2luLIo4I= Subject key identifier: 9A:97:11:B0:B6:AF:18:DC:60:D2:6B:1F:EE:59:4F:58:C7:DE:4B:99 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B3D15CCD45779ECA5F20 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/20671d21-ec39-34b3-8b67-cc02742c22d9.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 173.234.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b3:d1:5c:cd:45:77:9e:ca:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=6edc3b00-0ea9-457d-84c9-b8fadeff4ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:bc:25:43:67:bd:32:4b:a2:d2:97:e2:fa: fd:75:ad:7a:ed:ee:30:be:00:46:89:ac:ad:27:f2: df:45:ae:86:34:3b:61:76:54:bc:54:fd:ca:bd:d6: c2:41:63:88:cf:4d:2d:b8:60:90:32:8c:ae:02:5b: ed:49:46:d3:46:cb:e6:47:b1:73:cb:61:df:26:8d: ea:92:15:d7:17:b7:14:61:30:cc:a6:a0:b4:57:99: c2:b2:88:55:03:de:cb:6b:5c:1b:e9:f8:3b:3f:e6: 34:a2:b1:09:e4:b6:dd:46:da:be:ec:30:88:c2:fa: d8:fa:c5:1f:bb:df:eb:88:02:a0:7d:d0:51:91:79: b4:ad:c2:ad:97:b1:3b:15:36:8d:05:99:a5:ef:54: e7:bb:74:8d:b7:1e:0d:53:ae:43:5d:f7:f1:e3:18: 8f:c5:3f:e8:a3:61:8b:bf:57:e8:1e:47:28:f6:b8: dc:e2:4a:c4:b0:8b:85:bf:3a:3f:f5:10:67:dd:0d: bc:27:e9:bd:ef:f9:07:8d:e3:e9:d2:69:05:0c:1e: 53:f8:a0:56:9a:eb:4b:69:59:a2:0e:39:d6:30:fb: 26:60:87:9e:fa:df:30:46:9a:63:0a:18:a4:6d:dd: 20:3b:df:31:94:b8:cd:b4:1d:ef:b5:46:21:66:d0: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:97:11:B0:B6:AF:18:DC:60:D2:6B:1F:EE:59:4F:58:C7:DE:4B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/20671d21-ec39-34b3-8b67-cc02742c22d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:56:45:fe:f8:91:4c:55:40:4b:d0:71:12:85:d1:53:13:36: 91:40:9b:26:32:71:85:7e:a9:a6:0a:77:64:17:e6:f5:78:1a: 7a:ef:43:81:fc:ce:ea:d5:48:09:77:df:b8:d8:92:c7:36:75: ad:b8:86:49:56:0d:9c:fa:69:03:9f:c1:4c:39:d7:cc:90:fe: b5:c9:23:97:21:3e:a2:9d:bd:24:8b:8f:e0:6f:94:29:80:17: 5f:a7:94:e6:a6:57:77:fc:af:62:35:6e:c2:cf:14:07:3f:47: c8:6a:20:0c:60:70:c7:61:8e:00:5e:02:b3:aa:a9:de:ac:61: 7f:e3:a7:31:e7:08:6a:cc:19:dc:fb:a7:7c:e7:cd:57:eb:77: fa:b1:fe:bf:e6:ec:5c:b9:2d:fe:fb:5f:98:9e:c6:a9:9f:ed: d5:c8:5a:e6:c2:dc:2a:61:c8:e5:3f:ff:3a:7f:f7:e5:a2:b4: a8:63:f8:cc:96:e0:2e:ac:e6:4d:d4:ee:4e:9c:1f:6f:6c:88: 1f:d0:f6:94:67:80:c8:df:c5:61:18:a3:62:dc:13:1c:24:1a: 1c:ef:df:6a:27:cd:10:f7:c4:fd:6c:a5:40:c4:09:91:9a:c2: 97:b9:0b:02:c0:a4:a4:63:c9:f6:8b:9d:38:6b:e7:d4:d2:7c: d3:1d:62:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrPRXM1Fd57KXyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NmVkYzNiMDAtMGVhOS00NTdkLTg0YzktYjhmYWRlZmY0ZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyea8JUNnvTJLotKX4vr9da167e4wvgBGiayt J/LfRa6GNDthdlS8VP3KvdbCQWOIz00tuGCQMoyuAlvtSUbTRsvmR7Fzy2HfJo3q khXXF7cUYTDMpqC0V5nCsohVA97La1wb6fg7P+Y0orEJ5LbdRtq+7DCIwvrY+sUf u9/riAKgfdBRkXm0rcKtl7E7FTaNBZml71Tnu3SNtx4NU65DXffx4xiPxT/oo2GL v1foHkco9rjc4krEsIuFvzo/9RBn3Q28J+m97/kHjePp0mkFDB5T+KBWmutLaVmi DjnWMPsmYIee+t8wRppjChikbd0gO98xlLjNtB3vtUYhZtC1gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqXEbC2rxjcYNJrH+5ZT1jH3kuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjA2NzFkMjEtZWMzOS0z NGIzLThiNjctY2MwMjc0MmMyMmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrepYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVWRf74kUxVQEvQcRKF0VMTNpFAmyYycYV+qaYKd2QX5vV4GnrvQ4H8 zurVSAl337jYksc2da24hklWDZz6aQOfwUw518yQ/rXJI5chPqKdvSSLj+BvlCmA F1+nlOamV3f8r2I1bsLPFAc/R8hqIAxgcMdhjgBeArOqqd6sYX/jpzHnCGrMGdz7 p3znzVfrd/qx/r/m7Fy5Lf77X5iexqmf7dXIWubC3CphyOU//zp/9+WitKhj+MyW 4C6s5k3U7k6cH29siB/Q9pRngMjfxWEYo2LcExwkGhzv32onzRD3xP1spUDECZGa wpe5CwLApKRjyfaLnThr59TSfNMdYjI= -----END CERTIFICATE-----Generated at Wed Oct 14 10:11:38 2026 by rpki-client