$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2da5f9d0-e4f8-33e6-8851-b6c2a9294808.roa File: 2da5f9d0-e4f8-33e6-8851-b6c2a9294808.roa (raw, json) Hash identifier: dL9Ctd/cB5nqpPT1AO4xvx4EWbzwm4mgbgSK7hp5H4Q= Subject key identifier: DE:CA:00:56:0F:A0:A6:BF:89:86:30:50:0B:1D:DE:83:DC:56:AA:06 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97FC45EB414C3277B3E900 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2da5f9d0-e4f8-33e6-8851-b6c2a9294808.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 172.241.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fc:45:eb:41:4c:32:77:b3:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=9881cc66-8c91-4336-895e-b2e80f9242d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:67:8f:60:8b:fa:10:9f:14:d5:5e:8f:ec:d6: 3b:02:4b:78:b0:6b:2c:37:64:c6:21:df:7a:ae:09: 6d:7d:5e:17:62:0a:26:ec:09:c6:db:3c:80:9d:70: 30:95:13:99:db:0f:ff:66:36:96:1f:0a:7d:2d:b7: 9b:1a:34:a6:f4:35:a9:0b:4f:c7:73:ee:48:81:6e: b4:54:c1:67:19:6b:13:57:06:0d:45:a7:55:e1:67: 51:6e:f3:f6:db:e8:63:52:75:50:33:9c:56:47:c3: ee:58:54:97:f0:76:6e:a9:5f:35:36:a6:23:b8:52: 51:bb:5d:50:80:b0:01:89:aa:75:56:73:99:17:1b: f0:20:eb:3a:da:06:fa:59:92:c7:b1:15:fb:94:3f: c3:6b:f2:04:31:9b:f8:2c:cd:eb:ea:28:ad:b5:91: a7:e3:55:be:ec:da:08:fe:35:f7:62:cd:32:5d:ce: 0a:00:b1:f7:c7:d6:f4:f5:69:a0:0e:6e:a5:0a:69: 5d:67:7c:f2:d9:65:b1:82:00:b4:fa:dd:a3:ca:c3: fe:19:6d:43:ba:a2:33:3a:bb:16:42:37:91:5c:bd: dd:ca:9a:ae:4f:dd:62:f3:8d:4c:9e:cd:82:87:76: f4:51:b5:96:5b:c0:ac:0c:f3:17:3c:00:eb:cb:c3: cf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CA:00:56:0F:A0:A6:BF:89:86:30:50:0B:1D:DE:83:DC:56:AA:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2da5f9d0-e4f8-33e6-8851-b6c2a9294808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:1d:47:2b:ed:1c:71:f3:8a:7c:79:65:04:43:17:fa:78:dc: 4d:f0:46:47:98:f9:8b:51:09:5c:ad:fc:f8:0a:c0:f7:4a:01: c8:b5:a0:02:1f:e8:b3:a9:47:74:ef:81:15:44:d9:9d:29:9d: 50:30:7f:bd:a4:02:86:59:fa:2a:3c:81:f4:bf:3b:20:6e:03: e7:71:91:7b:a7:e4:08:d7:72:b7:29:d4:37:f0:82:76:3b:f3: ea:92:ec:07:41:a7:bf:8c:36:12:a4:16:18:e1:12:2d:c2:c0: 43:af:43:20:8f:8c:e3:30:d6:76:7f:4b:e7:a6:4f:a8:b3:2c: bb:a8:9f:12:d1:7f:72:56:a4:56:6c:31:2d:79:b2:a7:6b:f4: db:6c:93:38:f0:9e:20:52:37:f9:15:88:9f:6a:d0:1a:a8:cf: fe:06:82:43:ca:ef:cb:ea:fc:aa:ce:15:55:03:e1:1a:ba:64: 50:67:8c:0e:ad:a3:1a:82:61:87:29:e2:49:3d:2d:bb:3b:80: 02:b7:d9:c1:5b:af:d4:c0:c0:2d:d3:e5:63:d0:2a:e8:9b:61: d7:4f:35:8d:ef:de:7d:86:03:ce:e5:f8:7c:d1:1a:1b:33:cd: 03:59:4b:77:19:da:1c:c9:3a:ed:26:04:85:93:8e:b9:f5:d8: 4d:83:1c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/xF60FMMnez6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk OTg4MWNjNjYtOGM5MS00MzM2LTg5NWUtYjJlODBmOTI0MmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGePYIv6EJ8U1V6P7NY7Akt4sGssN2TGId96 rgltfV4XYgom7AnG2zyAnXAwlROZ2w//ZjaWHwp9LbebGjSm9DWpC0/Hc+5IgW60 VMFnGWsTVwYNRadV4WdRbvP22+hjUnVQM5xWR8PuWFSX8HZuqV81NqYjuFJRu11Q gLABiap1VnOZFxvwIOs62gb6WZLHsRX7lD/Da/IEMZv4LM3r6iittZGn41W+7NoI /jX3Ys0yXc4KALH3x9b09WmgDm6lCmldZ3zy2WWxggC0+t2jysP+GW1DuqIzOrsW QjeRXL3dypquT91i841Mns2Ch3b0UbWWW8CsDPMXPADry8PPvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7KAFYPoKa/iYYwUAsd3oPcVqoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmRhNWY5ZDAtZTRmOC0z M2U2LTg4NTEtYjZjMmE5Mjk0ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAdRyvtHHHzinx5ZQRDF/p43E3wRkeY+YtRCVyt/PgKwPdKAci1oAIf 6LOpR3TvgRVE2Z0pnVAwf72kAoZZ+io8gfS/OyBuA+dxkXun5AjXcrcp1DfwgnY7 8+qS7AdBp7+MNhKkFhjhEi3CwEOvQyCPjOMw1nZ/S+emT6izLLuonxLRf3JWpFZs MS15sqdr9NtskzjwniBSN/kViJ9q0Bqoz/4GgkPK78vq/KrOFVUD4Rq6ZFBnjA6t oxqCYYcp4kk9Lbs7gAK32cFbr9TAwC3T5WPQKuibYddPNY3v3n2GA87l+HzRGhsz zQNZS3cZ2hzJOu0mBIWTjrn12E2DHMA= -----END CERTIFICATE-----Generated at Wed Oct 14 07:57:28 2026 by rpki-client