$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2547dac6-e228-38cc-a83d-6b64a71eeae8.roa File: 2547dac6-e228-38cc-a83d-6b64a71eeae8.roa (raw, json) Hash identifier: 64JYbBnGGZMBvteDQiEh91d5r1fEeDy1a05rskErc/M= Subject key identifier: 4F:58:DF:D3:BF:A6:9E:0C:3B:1C:55:FB:E4:F1:31:07:12:CF:0B:DB Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D616BA32895E1A24F4FC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2547dac6-e228-38cc-a83d-6b64a71eeae8.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 172.255.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:61:6b:a3:28:95:e1:a2:4f:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=3771dae2-548b-4832-8bed-cd175ae4ff53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:be:9c:3c:4f:00:46:41:3d:75:9d:66:fb: c0:e8:ca:53:4d:f4:8b:83:57:8d:a4:b3:03:b6:26: 9a:3f:c0:59:d5:2c:9b:14:fd:ab:f5:fb:df:98:bb: c7:41:1d:9f:87:43:fc:cf:e1:2b:4c:11:fe:ef:35: 23:3d:a8:ad:3a:18:01:ce:b4:2a:74:2c:04:8e:e8: 64:0d:a6:8b:cf:09:6d:9a:ac:3c:8d:8b:4a:c2:6f: 93:3c:70:34:3c:4d:fa:a8:60:85:4b:d5:ff:96:32: 2a:cd:27:52:bb:de:ff:6f:f4:f5:fe:9c:d0:a6:16: f9:bb:5d:d5:4f:72:0b:9f:a5:dc:8d:0e:3d:18:c4: 22:e1:dc:fe:1f:95:8c:f4:54:4c:5a:85:95:7b:09: 86:4b:00:1a:d2:e4:1c:7d:86:da:87:1c:ed:5e:06: 17:c9:19:46:56:85:5b:43:d6:18:38:3a:f7:59:f8: f8:c6:a2:4c:c0:6a:da:d0:8b:63:6d:02:8f:eb:bf: 68:e4:4b:87:dd:63:3b:c3:c0:16:09:43:4a:0c:95: 2d:f6:bb:98:aa:63:34:f7:26:45:e2:86:28:7d:fc: b3:f7:45:20:eb:ca:1f:2a:80:18:ba:3b:80:9f:6b: 20:af:65:49:fd:04:08:d8:8a:94:47:e9:4b:25:d1: 3f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:58:DF:D3:BF:A6:9E:0C:3B:1C:55:FB:E4:F1:31:07:12:CF:0B:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2547dac6-e228-38cc-a83d-6b64a71eeae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e2:17:55:8f:99:8d:68:f8:d9:e4:dd:df:4f:a4:a0:78:e0: 10:29:71:30:8a:80:76:c0:9e:ec:1f:e8:98:ea:50:63:52:94: c7:5f:2f:b3:ed:a8:be:35:f6:61:03:1b:4e:5e:07:f6:4d:b4: d8:17:80:6d:61:ec:e5:e0:d1:c9:9d:8a:63:ea:e9:2e:41:33: ee:28:bf:2d:50:59:b6:5d:63:b4:5c:d7:3d:d1:fa:a2:82:54: 3d:53:f0:a4:42:3b:28:49:4f:c2:56:0c:34:ca:fc:b2:2c:66: b7:62:fa:05:b3:7f:e0:e8:fa:ab:4d:d1:85:8c:02:09:55:e3: 51:f8:e2:a6:fe:aa:72:2a:a4:f3:09:85:5b:19:4e:a3:de:3b: c8:a2:ea:0b:f7:e4:39:07:88:b5:96:09:f5:5a:7f:2b:58:62: d0:ac:40:ac:e5:2f:85:4a:8b:33:94:b5:1e:c3:8b:bd:5f:60: 67:93:91:13:ea:90:2c:d8:d1:d4:e4:c4:fd:2f:ae:62:a7:33: db:ff:94:c9:3a:4a:f1:66:72:8b:15:9e:bd:48:5d:c9:cb:02: 41:4e:9b:20:09:dd:49:6e:ea:f1:0b:26:53:94:4c:25:06:c0: 1d:d5:69:ed:3b:62:9a:6f:a8:62:76:ae:e1:ed:23:37:2a:79: da:e4:f9:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWFroyiV4aJPT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk Mzc3MWRhZTItNTQ4Yi00ODMyLThiZWQtY2QxNzVhZTRmZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJm+nDxPAEZBPXWdZvvA6MpTTfSLg1eNpLMD tiaaP8BZ1SybFP2r9fvfmLvHQR2fh0P8z+ErTBH+7zUjPaitOhgBzrQqdCwEjuhk DaaLzwltmqw8jYtKwm+TPHA0PE36qGCFS9X/ljIqzSdSu97/b/T1/pzQphb5u13V T3ILn6XcjQ49GMQi4dz+H5WM9FRMWoWVewmGSwAa0uQcfYbahxztXgYXyRlGVoVb Q9YYODr3Wfj4xqJMwGra0ItjbQKP679o5EuH3WM7w8AWCUNKDJUt9ruYqmM09yZF 4oYoffyz90Ug68ofKoAYujuAn2sgr2VJ/QQI2IqUR+lLJdE/+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9Y39O/pp4MOxxV++TxMQcSzwvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjU0N2RhYzYtZTIyOC0z OGNjLWE4M2QtNmI2NGE3MWVlYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrP+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDiF1WPmY1o+Nnk3d9PpKB44BApcTCKgHbAnuwf6JjqUGNSlMdfL7Pt qL419mEDG05eB/ZNtNgXgG1h7OXg0cmdimPq6S5BM+4ovy1QWbZdY7Rc1z3R+qKC VD1T8KRCOyhJT8JWDDTK/LIsZrdi+gWzf+Do+qtN0YWMAglV41H44qb+qnIqpPMJ hVsZTqPeO8ii6gv35DkHiLWWCfVafytYYtCsQKzlL4VKizOUtR7Di71fYGeTkRPq kCzY0dTkxP0vrmKnM9v/lMk6SvFmcosVnr1IXcnLAkFOmyAJ3Ulu6vELJlOUTCUG wB3Vae07YppvqGJ2ruHtIzcqedrk+Xc= -----END CERTIFICATE-----Generated at Wed Oct 14 07:54:52 2026 by rpki-client