$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2a99abf3-2fef-3dea-90f3-c1bca04677c5.roa File: 2a99abf3-2fef-3dea-90f3-c1bca04677c5.roa (raw, json) Hash identifier: 8FIawAgLPksyo/FHPuRnuu7tgXxXowfrL/+aLcDA2lo= Subject key identifier: B5:15:54:16:41:BB:E5:12:76:3B:93:36:39:7B:90:AD:18:51:B0:D9 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B65AD80796F115D33D80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2a99abf3-2fef-3dea-90f3-c1bca04677c5.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 394380 IP address blocks: 172.241.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b6:5a:d8:07:96:f1:15:d3:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=ff9e0ac7-722d-48c3-a64c-2c5b06182b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:17:19:fc:d5:dc:f7:74:af:1b:08:fa:d4: 49:38:9d:a0:72:24:cb:18:84:32:2a:55:84:7d:23: e4:0d:40:23:ea:43:01:91:85:2e:cc:6e:f2:cf:ce: ab:a1:95:ae:a6:6b:9e:a9:9a:93:d1:de:b6:e1:3b: 4a:ab:44:61:46:73:bb:49:f2:98:41:e9:a2:80:ef: a1:19:6d:3b:7c:56:85:25:e1:94:22:0b:1e:7b:38: 87:1c:25:a2:c2:5b:4d:19:fb:6c:27:97:54:d2:0e: 36:ff:99:7a:43:e3:72:b7:a6:23:80:33:ce:0b:dc: 82:d1:28:e8:51:24:a5:26:7d:d3:eb:20:11:39:4a: 80:34:44:2e:b7:d7:06:63:d2:7c:dc:02:be:59:26: d8:0a:0e:1e:4d:51:a9:81:ce:04:f8:20:b9:4b:b3: d1:33:9f:c5:8f:e0:da:e9:e5:9d:1c:3a:b7:95:c5: 31:96:eb:c7:56:43:93:dd:a8:bf:d8:f8:8d:cc:cb: 87:78:de:ab:8d:94:03:18:5f:07:6f:18:d6:9c:86: 2e:ee:52:ca:59:cd:0f:22:81:a5:26:46:a3:c3:39: a8:a0:50:0b:35:9d:b4:38:89:6f:85:68:0b:40:a5: 3b:9e:9f:c3:1d:63:e6:77:7a:81:5a:8f:50:86:53: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:15:54:16:41:BB:E5:12:76:3B:93:36:39:7B:90:AD:18:51:B0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2a99abf3-2fef-3dea-90f3-c1bca04677c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:cc:ec:c3:6d:5a:f3:a3:bf:79:67:e2:5a:1b:e2:14:02:d3: 0c:54:21:06:4f:61:bf:34:b9:6b:64:f5:36:97:98:77:b2:ce: 2f:07:7c:34:12:46:f2:48:36:df:01:8f:da:ca:85:4e:03:f3: 4c:77:f8:95:55:c7:50:79:fc:c4:8e:99:67:b3:0d:40:3e:fe: 50:ac:b7:78:64:9d:6a:28:6c:66:ca:98:27:47:94:c2:4c:01: af:7c:dc:11:03:65:51:e3:90:8f:83:20:b8:7e:fa:3e:14:ee: c1:7b:2a:e2:70:b2:0c:8b:b6:c7:8d:22:03:c3:9c:09:af:44: 5f:db:4a:41:65:5a:72:de:19:73:be:c9:d3:d3:1c:a5:41:33: 6e:1d:9a:a2:e5:9d:27:c4:47:93:97:a2:1c:c8:63:e6:e1:85: 28:77:25:af:f0:81:3c:93:87:c3:b6:0c:04:d7:1b:20:83:19: e7:37:43:0a:c3:16:0c:c2:40:b4:e7:9a:ac:91:fd:df:01:57: 96:49:c5:31:91:09:fa:2e:b0:e0:4b:c3:b0:bc:d4:01:c4:66: db:7b:79:63:fe:c5:68:ec:da:19:b2:ee:32:ef:43:69:28:ce: c7:62:c4:7f:d6:24:25:de:f8:b4:00:21:2f:b8:aa:50:27:33: 3d:69:81:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrZa2AeW8RXTPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZmY5ZTBhYzctNzIyZC00OGMzLWE2NGMtMmM1YjA2MTgyYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDMXGfzV3Pd0rxsI+tRJOJ2gciTLGIQyKlWE fSPkDUAj6kMBkYUuzG7yz86roZWupmueqZqT0d624TtKq0RhRnO7SfKYQemigO+h GW07fFaFJeGUIgseeziHHCWiwltNGftsJ5dU0g42/5l6Q+Nyt6YjgDPOC9yC0Sjo USSlJn3T6yAROUqANEQut9cGY9J83AK+WSbYCg4eTVGpgc4E+CC5S7PRM5/Fj+Da 6eWdHDq3lcUxluvHVkOT3ai/2PiNzMuHeN6rjZQDGF8HbxjWnIYu7lLKWc0PIoGl JkajwzmooFALNZ20OIlvhWgLQKU7np/DHWPmd3qBWo9QhlOoTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUVVBZBu+USdjuTNjl7kK0YUbDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmE5OWFiZjMtMmZlZi0z ZGVhLTkwZjMtYzFiY2EwNDY3N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/M7MNtWvOjv3ln4lob4hQC0wxUIQZPYb80uWtk9TaXmHeyzi8HfDQS RvJINt8Bj9rKhU4D80x3+JVVx1B5/MSOmWezDUA+/lCst3hknWoobGbKmCdHlMJM Aa983BEDZVHjkI+DILh++j4U7sF7KuJwsgyLtseNIgPDnAmvRF/bSkFlWnLeGXO+ ydPTHKVBM24dmqLlnSfER5OXohzIY+bhhSh3Ja/wgTyTh8O2DATXGyCDGec3QwrD FgzCQLTnmqyR/d8BV5ZJxTGRCfousOBLw7C81AHEZtt7eWP+xWjs2hmy7jLvQ2ko zsdixH/WJCXe+LQAIS+4qlAnMz1pgTQ= -----END CERTIFICATE-----Generated at Wed Oct 14 01:58:02 2026 by rpki-client