$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/23e66a0b-da04-39d2-9896-60d35dbfa7d1.roa File: 23e66a0b-da04-39d2-9896-60d35dbfa7d1.roa (raw, json) Hash identifier: Y8zP/ZfN2eu51AwOEN18IZRlmii9oudpef/o7XNbWlo= Subject key identifier: 27:C7:4A:7C:3A:49:E1:CA:61:A7:35:74:A0:92:00:58:E7:0F:32:BE Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B68376B2BCACB0B2FF80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/23e66a0b-da04-39d2-9896-60d35dbfa7d1.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 394380 IP address blocks: 172.241.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b6:83:76:b2:bc:ac:b0:b2:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b7181837-288a-4c17-814a-b58b52edeb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:f0:b5:4a:64:88:0c:79:87:7c:9f:13:4a: ec:cc:41:38:ac:82:43:79:67:2f:ea:7f:41:c4:db: c4:2a:3d:fc:8e:b5:76:f0:27:00:c2:49:71:50:6b: 98:71:e2:3e:13:e9:02:02:35:ae:00:a7:03:80:db: 56:a4:a7:c5:50:cf:33:80:88:6c:96:f8:3e:ee:b0: 3f:aa:b0:a2:89:ae:b5:44:f6:c2:21:ed:fa:59:83: e3:7f:24:43:cd:bd:ff:35:a6:cf:cd:ef:c0:ba:bc: 9c:2a:37:57:bc:1b:fb:3c:35:a0:92:ca:5b:9a:e1: 66:0e:6d:d2:47:42:72:60:ba:f2:7f:1e:58:a3:c5: be:40:08:b7:9a:2b:af:64:9a:4d:d8:43:8f:26:cd: 87:e7:60:10:08:68:59:17:0d:7f:aa:c2:df:b7:40: b8:13:73:67:81:20:6d:21:c9:ae:d7:ed:46:b8:8a: 95:40:94:90:25:9f:10:6f:23:27:9e:29:9b:2d:92: bc:81:f0:1d:c1:55:08:35:95:8c:0b:97:96:32:a2: 7c:b3:93:61:24:fa:cc:2e:23:d6:6d:85:c2:77:f5: 07:09:83:65:69:2c:34:90:30:5b:1b:8f:ac:84:cc: 6a:b9:10:e5:71:94:1c:14:c0:96:42:5c:c3:9d:0f: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C7:4A:7C:3A:49:E1:CA:61:A7:35:74:A0:92:00:58:E7:0F:32:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/23e66a0b-da04-39d2-9896-60d35dbfa7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:89:4d:6c:a3:50:fd:d2:98:6d:6e:f8:a4:ee:f7:74:08:73: 7a:45:97:fd:cd:ca:aa:b8:58:98:1d:9c:54:a3:80:ee:4b:0f: ac:7e:5f:85:da:26:bd:0d:ed:82:97:d3:4b:c0:30:58:df:40: db:59:76:b9:58:6d:43:77:8f:e2:56:52:db:d5:e0:79:aa:8b: 80:2a:d7:57:fd:b5:aa:7a:48:0a:34:19:bf:6e:09:6c:9b:e4: 0c:de:c3:ea:42:2e:62:dc:1c:9e:9d:17:54:93:7b:a0:0d:bb: 0c:43:eb:4a:44:99:35:82:63:04:08:11:52:c3:a9:24:f0:5d: a9:08:57:02:4a:d3:a5:61:e9:0c:c0:eb:4f:d1:d6:64:29:0b: d1:ac:87:ab:b3:cb:e8:01:96:0e:15:33:85:e9:6e:fb:b2:85: a7:2d:01:db:52:c4:57:34:ba:2d:66:a7:d2:01:8e:de:18:03: 4f:cc:3a:aa:a9:30:cf:7e:f9:01:71:db:66:bb:72:64:2a:5d: 4f:26:de:ce:bc:e5:a7:3d:9d:37:f2:b4:6a:9b:56:90:08:94: 88:21:bf:dc:79:66:69:fc:39:e9:55:f3:e7:4e:bb:73:2e:19: 33:f1:e8:5c:3d:86:08:a9:8c:2c:19:b6:2c:77:95:91:c1:6d: ba:9a:11:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikraDdrK8rLCy/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjcxODE4MzctMjg4YS00YzE3LTgxNGEtYjU4YjUyZWRlYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNbwtUpkiAx5h3yfE0rszEE4rIJDeWcv6n9B xNvEKj38jrV28CcAwklxUGuYceI+E+kCAjWuAKcDgNtWpKfFUM8zgIhslvg+7rA/ qrCiia61RPbCIe36WYPjfyRDzb3/NabPze/AurycKjdXvBv7PDWgkspbmuFmDm3S R0JyYLryfx5Yo8W+QAi3miuvZJpN2EOPJs2H52AQCGhZFw1/qsLft0C4E3NngSBt Icmu1+1GuIqVQJSQJZ8QbyMnnimbLZK8gfAdwVUINZWMC5eWMqJ8s5NhJPrMLiPW bYXCd/UHCYNlaSw0kDBbG4+shMxquRDlcZQcFMCWQlzDnQ98YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfHSnw6SeHKYac1dKCSAFjnDzK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjNlNjZhMGItZGEwNC0z OWQyLTk4OTYtNjBkMzVkYmZhN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqJTWyjUP3SmG1u+KTu93QIc3pFl/3Nyqq4WJgdnFSjgO5LD6x+X4Xa Jr0N7YKX00vAMFjfQNtZdrlYbUN3j+JWUtvV4Hmqi4Aq11f9tap6SAo0Gb9uCWyb 5Azew+pCLmLcHJ6dF1STe6ANuwxD60pEmTWCYwQIEVLDqSTwXakIVwJK06Vh6QzA 60/R1mQpC9Gsh6uzy+gBlg4VM4XpbvuyhactAdtSxFc0ui1mp9IBjt4YA0/MOqqp MM9++QFx22a7cmQqXU8m3s685ac9nTfytGqbVpAIlIghv9x5Zmn8OelV8+dOu3Mu GTPx6Fw9hgipjCwZtix3lZHBbbqaEa0= -----END CERTIFICATE-----Generated at Wed Oct 14 07:52:52 2026 by rpki-client