$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2a99abf3-2fef-3dea-90f3-c1bca04677c5.roa File: 2a99abf3-2fef-3dea-90f3-c1bca04677c5.roa (raw, json) Hash identifier: jTLRjv1ulYzJfLJR/NP1waBRrmUGub91iNjm701wJg4= Subject key identifier: 90:AE:9A:76:A5:9B:D4:48:1B:B3:E0:EA:75:03:24:82:CC:64:19:57 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF78AEF10D3B4F61F689AD80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2a99abf3-2fef-3dea-90f3-c1bca04677c5.roa Signing time: Thu 06 Aug 2026 14:51:04 +0000 ROA not before: Thu 06 Aug 2026 14:51:04 +0000 ROA not after: Wed 04 Nov 2026 15:51:04 +0000 asID: 394380 IP address blocks: 172.241.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:78:ae:f1:0d:3b:4f:61:f6:89:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:51:04 2026 GMT Not After : Nov 4 15:51:04 2026 GMT Subject: CN=d3a00d07-4a8d-4d10-a8aa-8f96d0c0928b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d4:7a:cf:03:9f:e8:d6:d1:9f:ab:b2:78:87: 90:43:eb:4b:96:03:96:36:03:fb:6b:51:bb:66:2f: 7e:47:80:07:b1:10:43:19:22:fe:10:c7:6e:c9:3e: a7:9b:75:7a:3f:4c:c5:b7:17:5f:94:85:7c:5f:01: 93:c8:1b:f0:5b:78:08:36:77:d8:2a:a9:36:4a:b0: d6:db:12:b5:9c:49:96:54:6a:6a:5e:42:51:93:96: 64:23:af:0e:31:77:46:3c:4b:0f:90:01:70:9d:b8: 19:f6:00:85:24:6e:9b:9b:fd:e8:f7:86:28:01:c2: 9d:a9:b8:9d:a8:2d:15:45:74:7c:db:7a:e3:6a:be: bd:4d:ed:66:7d:64:c1:87:29:a5:89:1c:9b:e7:26: 9a:ae:c5:9f:1e:0d:eb:af:f8:64:7c:3e:87:31:95: b9:bd:18:54:cd:8d:80:29:44:cd:f4:48:e2:d9:ab: 96:ee:11:be:36:c3:76:c8:af:46:26:4b:d8:9a:a6: 16:81:c0:1b:37:ff:30:c3:05:7c:a0:35:ca:ed:dd: ca:75:ad:51:94:07:40:84:f3:6f:4f:d1:2d:fd:b6: 94:5b:af:ae:b1:c0:2c:48:55:bb:a4:ab:7a:f2:fe: 48:1b:86:90:e9:11:84:76:21:88:6f:7f:cb:f1:88: 74:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AE:9A:76:A5:9B:D4:48:1B:B3:E0:EA:75:03:24:82:CC:64:19:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2a99abf3-2fef-3dea-90f3-c1bca04677c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ae:25:50:66:32:37:16:20:06:ca:5d:1e:18:b0:2e:c2:08: fc:ac:3b:35:9d:0f:ef:86:1c:a2:96:1c:1c:9c:5a:7d:fc:d4: f8:94:b9:77:90:7d:b9:9a:06:65:bd:0c:63:57:c5:0d:3b:9c: 4d:e5:54:29:7e:3b:4c:41:4f:ed:cc:9d:38:a7:e4:f3:3e:8d: d0:84:a9:52:c6:4d:58:a7:4e:3a:21:d1:d2:ef:59:d7:b5:15: 2a:ab:44:3e:21:de:3e:eb:4b:2d:79:b6:92:35:7c:54:9d:df: fe:81:ec:71:81:59:0e:8b:72:c4:f0:3d:c4:45:4a:d1:9d:9d: f6:f9:18:32:69:82:56:5e:a6:d2:45:af:f3:5e:88:0b:91:ea: 7c:0a:c7:65:0f:3b:5c:43:24:c8:14:74:ee:9f:e5:e0:2b:ba: 8b:06:58:0c:db:9d:01:c6:7d:25:52:9b:8a:1b:83:bd:51:2c: 80:c5:a4:6d:b7:ac:18:f9:d7:f9:5c:9a:bb:30:f0:87:e2:df: 29:e5:ac:27:01:7f:c6:b0:da:18:13:ec:31:ee:54:e6:27:46: a5:19:3b:da:07:67:16:a7:e9:62:27:fa:e2:6a:16:f9:f2:38: 29:8d:42:33:0f:1e:e3:51:ae:ac:14:5e:13:aa:fb:ef:12:78: c3:6a:35:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/eK7xDTtPYfaJrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0NTEwNFoXDTI2MTEwNDE1NTEwNFowLzEtMCsGA1UEAxMk ZDNhMDBkMDctNGE4ZC00ZDEwLWE4YWEtOGY5NmQwYzA5MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdR6zwOf6NbRn6uyeIeQQ+tLlgOWNgP7a1G7 Zi9+R4AHsRBDGSL+EMduyT6nm3V6P0zFtxdflIV8XwGTyBvwW3gINnfYKqk2SrDW 2xK1nEmWVGpqXkJRk5ZkI68OMXdGPEsPkAFwnbgZ9gCFJG6bm/3o94YoAcKdqbid qC0VRXR823rjar69Te1mfWTBhymliRyb5yaarsWfHg3rr/hkfD6HMZW5vRhUzY2A KUTN9Eji2auW7hG+NsN2yK9GJkvYmqYWgcAbN/8wwwV8oDXK7d3Kda1RlAdAhPNv T9Et/baUW6+uscAsSFW7pKt68v5IG4aQ6RGEdiGIb3/L8Yh08QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCumnalm9RIG7Pg6nUDJILMZBlXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmE5OWFiZjMtMmZlZi0z ZGVhLTkwZjMtYzFiY2EwNDY3N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSuJVBmMjcWIAbKXR4YsC7CCPysOzWdD++GHKKWHBycWn381PiUuXeQ fbmaBmW9DGNXxQ07nE3lVCl+O0xBT+3MnTin5PM+jdCEqVLGTVinTjoh0dLvWde1 FSqrRD4h3j7rSy15tpI1fFSd3/6B7HGBWQ6LcsTwPcRFStGdnfb5GDJpglZeptJF r/NeiAuR6nwKx2UPO1xDJMgUdO6f5eAruosGWAzbnQHGfSVSm4obg71RLIDFpG23 rBj51/lcmrsw8Ifi3ynlrCcBf8aw2hgT7DHuVOYnRqUZO9oHZxan6WIn+uJqFvny OCmNQjMPHuNRrqwUXhOq++8SeMNqNV8= -----END CERTIFICATE-----Generated at Thu Aug 27 17:37:37 2026 by rpki-client