$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/20b8cf53-8e77-3372-a102-061a08ad5f2c.roa File: 20b8cf53-8e77-3372-a102-061a08ad5f2c.roa (raw, json) Hash identifier: kvofjxKSgtK6LCK+EgKGvOqP0WSPJ19VgIXG4MPbBKs= Subject key identifier: E3:F8:59:F1:EF:B3:9E:51:45:08:FE:3D:94:B7:91:95:FA:C4:E5:9D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF3BE036E9B013998F4B6600 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/20b8cf53-8e77-3372-a102-061a08ad5f2c.roa Signing time: Thu 06 Aug 2026 12:48:33 +0000 ROA not before: Thu 06 Aug 2026 12:48:33 +0000 ROA not after: Wed 04 Nov 2026 13:48:33 +0000 asID: 396362 IP address blocks: 173.234.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:3b:e0:36:e9:b0:13:99:8f:4b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 12:48:33 2026 GMT Not After : Nov 4 13:48:33 2026 GMT Subject: CN=fbe82e52-e3ab-4570-8aaf-f57ed5c3c227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7a:ca:30:cb:85:89:0f:7c:5a:0c:fd:0d:d2: 26:89:3d:62:40:3b:ea:39:de:c2:fe:96:72:4e:c2: fd:ae:3f:59:67:9f:1f:5c:62:ba:fe:88:a0:09:71: dc:e4:15:e8:b1:13:ba:e0:bc:34:fb:41:bc:5b:e1: 78:db:be:a6:37:dd:39:b1:c8:56:42:94:0c:92:bd: fc:72:cb:de:fe:ef:8f:5a:6a:51:fb:02:a6:43:fb: ce:83:07:d4:38:c8:7a:b5:ed:5e:90:24:59:e3:20: f7:a5:c1:f7:cf:86:b5:74:28:a5:14:f7:1b:f5:5d: 29:b4:2d:a4:c9:ef:4b:63:12:35:b7:f7:fe:d0:d8: d7:ec:ac:3a:41:b7:89:db:cf:86:1c:00:4e:cb:fb: 0d:f6:49:8a:55:8f:55:d2:32:4d:90:bf:12:28:85: 08:d3:4c:f7:a6:17:d6:46:ea:c0:ea:98:70:17:86: df:1d:03:84:84:49:38:cf:ae:61:bb:1f:69:c5:4d: 89:fa:01:90:5f:05:ce:52:28:98:a7:bf:31:ea:30: a1:5b:c5:0f:5f:8d:de:df:5c:d1:66:b1:e3:ba:d7: 45:b4:e6:8f:52:04:83:1b:45:48:94:22:ec:8d:13: ff:85:f3:7f:29:cf:c7:f0:d5:54:a5:3a:42:0f:74: fc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F8:59:F1:EF:B3:9E:51:45:08:FE:3D:94:B7:91:95:FA:C4:E5:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/20b8cf53-8e77-3372-a102-061a08ad5f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e2:7f:13:f6:29:c2:0b:e3:9f:b0:e5:85:ef:e6:ee:9d:53: 61:0e:84:ee:1d:ff:5d:6a:da:9b:df:d9:79:aa:4a:ba:69:6b: 26:04:46:39:34:9b:5b:33:0b:8a:80:42:c2:db:51:54:c6:e0: 8c:15:92:95:9b:1b:96:bd:02:a8:3c:86:54:73:6d:3c:6f:b6: ba:53:3b:90:9c:12:74:d4:43:8b:4a:be:b3:aa:1f:ec:5d:ad: 92:e8:ab:82:ea:2d:bd:2a:95:02:80:a7:c2:d2:b1:e0:16:db: 24:44:e9:e5:6b:f1:f0:3a:26:30:62:80:d8:60:db:b6:bc:8d: 2d:8f:fd:99:b2:b7:7a:ad:a3:0a:b9:22:bf:86:d7:a2:71:55: c3:b8:13:5f:f1:1f:b2:4b:0c:b1:b3:73:d4:c4:4c:fb:39:80: 95:a4:ee:dd:48:5a:e3:f7:2c:80:12:e9:51:7a:27:c6:3b:10: 67:1f:32:4b:5c:f2:f8:b5:fc:6b:4c:46:03:32:fb:fc:9b:3b: 91:11:87:67:d6:d4:94:88:b5:46:b8:d4:94:3e:10:82:58:c9: 84:ef:07:95:1e:ba:b3:26:59:71:ce:9f:03:ae:bd:05:94:ce: f6:01:f5:46:5a:a7:da:59:d3:ee:ad:3d:08:68:06:fd:e4:b0: fd:33:33:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/O+A26bATmY9LZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjEyNDgzM1oXDTI2MTEwNDEzNDgzM1owLzEtMCsGA1UEAxMk ZmJlODJlNTItZTNhYi00NTcwLThhYWYtZjU3ZWQ1YzNjMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHrKMMuFiQ98Wgz9DdImiT1iQDvqOd7C/pZy TsL9rj9ZZ58fXGK6/oigCXHc5BXosRO64Lw0+0G8W+F4276mN905schWQpQMkr38 csve/u+PWmpR+wKmQ/vOgwfUOMh6te1ekCRZ4yD3pcH3z4a1dCilFPcb9V0ptC2k ye9LYxI1t/f+0NjX7Kw6QbeJ28+GHABOy/sN9kmKVY9V0jJNkL8SKIUI00z3phfW RurA6phwF4bfHQOEhEk4z65hux9pxU2J+gGQXwXOUiiYp78x6jChW8UPX43e31zR ZrHjutdFtOaPUgSDG0VIlCLsjRP/hfN/Kc/H8NVUpTpCD3T8qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP4WfHvs55RRQj+PZS3kZX6xOWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjBiOGNmNTMtOGU3Ny0z MzcyLWExMDItMDYxYTA4YWQ1ZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrep0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTifxP2KcIL45+w5YXv5u6dU2EOhO4d/11q2pvf2XmqSrppayYERjk0 m1szC4qAQsLbUVTG4IwVkpWbG5a9Aqg8hlRzbTxvtrpTO5CcEnTUQ4tKvrOqH+xd rZLoq4LqLb0qlQKAp8LSseAW2yRE6eVr8fA6JjBigNhg27a8jS2P/Zmyt3qtowq5 Ir+G16JxVcO4E1/xH7JLDLGzc9TETPs5gJWk7t1IWuP3LIAS6VF6J8Y7EGcfMktc 8vi1/GtMRgMy+/ybO5ERh2fW1JSItUa41JQ+EIJYyYTvB5UeurMmWXHOnwOuvQWU zvYB9UZap9pZ0+6tPQhoBv3ksP0zMws= -----END CERTIFICATE-----Generated at Fri Aug 14 14:15:16 2026 by rpki-client