$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2fdb0b72-00f6-3891-b0f2-88032c1ec01f.roa File: 2fdb0b72-00f6-3891-b0f2-88032c1ec01f.roa (raw, json) Hash identifier: pcTd7rgV21DtCcjzQAET880iB0x1YKwZtXBFQmkZmDs= Subject key identifier: 90:41:0B:1C:AD:70:4A:EB:34:D0:D7:35:58:ED:89:3B:99:A7:6A:EC Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97FB7DD65843E2CEB0F0D8 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2fdb0b72-00f6-3891-b0f2-88032c1ec01f.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 147.255.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fb:7d:d6:58:43:e2:ce:b0:f0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=dd37cf79-6c85-4588-890c-a010ad34e430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:86:91:37:e5:6f:6b:16:a6:e3:d6:f4:e7:10: b4:a4:41:f5:91:78:ce:05:07:ce:c0:5f:8c:fa:1b: 71:d8:f1:83:83:15:9a:dc:e2:80:6c:a2:02:7b:48: b1:dc:cd:20:88:a8:e5:08:5e:a3:27:79:de:c1:9c: 96:3c:d2:43:81:4d:1f:09:8f:02:aa:8a:d9:7a:e5: 52:de:cf:a1:b8:f3:7d:76:f2:9d:c6:86:f5:0b:6c: 98:16:2c:79:6c:ab:67:a6:ce:a8:8a:37:f1:88:7c: 1d:03:64:ed:81:aa:d5:ba:a2:56:f6:a8:df:04:47: 90:81:0b:d8:13:c3:df:5f:32:c6:8c:8c:51:91:d1: 78:46:6f:07:e9:2e:c3:38:b9:b6:c0:23:a2:ee:e8: 59:19:ad:c3:68:aa:a4:f1:c7:88:f1:8e:d2:2b:b3: 62:43:f8:34:60:b9:cb:bf:24:a7:1a:ef:25:af:5f: 16:2c:10:cf:54:81:e3:45:f5:0b:fc:8d:85:a1:74: 88:16:5b:90:56:ff:6c:44:41:7c:47:80:ef:88:d2: f3:f8:73:25:5a:87:21:32:7a:2b:6a:9b:cd:9c:e2: 35:8b:39:9d:36:7e:8b:d7:23:79:bd:85:de:f6:5b: 4d:d2:35:f3:13:97:f0:a6:a8:d7:65:23:24:cb:63: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:41:0B:1C:AD:70:4A:EB:34:D0:D7:35:58:ED:89:3B:99:A7:6A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2fdb0b72-00f6-3891-b0f2-88032c1ec01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:43:24:1d:d6:b9:72:94:ff:44:e0:74:89:0f:20:c6:b8:af: ca:cf:f1:10:10:53:64:76:46:46:02:69:a9:3d:7d:16:56:3e: af:de:fd:73:1d:c9:96:ac:53:15:bd:f3:65:53:4d:07:b7:69: b1:78:bf:8b:d8:e2:c9:4d:8f:66:b9:b7:9d:9a:2b:8d:58:29: f2:c6:3b:a4:a5:ff:00:64:55:b0:7d:35:33:39:1a:fc:ec:c5: 7c:bd:70:ad:76:0a:ad:25:b3:5d:57:1b:05:20:e3:6b:06:61: c7:a9:f3:23:c9:79:17:29:d4:23:f9:c6:c2:44:7e:52:82:72: 7f:53:db:b4:c3:58:b4:be:71:2f:f0:0e:09:d4:52:75:81:e3: 37:1a:7a:54:32:c9:5a:9b:26:6c:2b:d3:e7:fb:74:64:dc:5b: d0:75:a9:b9:f8:dd:3a:22:18:c4:53:ff:f9:69:90:b6:35:6d: 04:a8:34:23:20:c3:d4:1c:b1:81:c7:9c:29:0b:0a:87:4f:5a: 00:ab:9e:99:3a:45:53:82:f4:da:3b:33:99:68:dd:f5:5c:77: a3:91:46:da:16:4e:79:07:d5:35:25:41:2b:ff:3e:ab:96:38: 94:bd:11:6c:31:76:90:60:51:6e:14:a9:c3:80:43:14:fd:f0: 03:28:b2:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/t91lhD4s6w8NgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk ZGQzN2NmNzktNmM4NS00NTg4LTg5MGMtYTAxMGFkMzRlNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IaRN+Vvaxam49b05xC0pEH1kXjOBQfOwF+M +htx2PGDgxWa3OKAbKICe0ix3M0giKjlCF6jJ3newZyWPNJDgU0fCY8CqorZeuVS 3s+huPN9dvKdxob1C2yYFix5bKtnps6oijfxiHwdA2TtgarVuqJW9qjfBEeQgQvY E8PfXzLGjIxRkdF4Rm8H6S7DOLm2wCOi7uhZGa3DaKqk8ceI8Y7SK7NiQ/g0YLnL vySnGu8lr18WLBDPVIHjRfUL/I2FoXSIFluQVv9sREF8R4DviNLz+HMlWochMnor apvNnOI1izmdNn6L1yN5vYXe9ltN0jXzE5fwpqjXZSMky2OOIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBBCxytcErrNNDXNVjtiTuZp2rsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmZkYjBiNzItMDBmNi0z ODkxLWIwZjItODgwMzJjMWVjMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk/+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJDJB3WuXKU/0TgdIkPIMa4r8rP8RAQU2R2RkYCaak9fRZWPq/e/XMd yZasUxW982VTTQe3abF4v4vY4slNj2a5t52aK41YKfLGO6Sl/wBkVbB9NTM5Gvzs xXy9cK12Cq0ls11XGwUg42sGYcep8yPJeRcp1CP5xsJEflKCcn9T27TDWLS+cS/w DgnUUnWB4zcaelQyyVqbJmwr0+f7dGTcW9B1qbn43ToiGMRT//lpkLY1bQSoNCMg w9QcsYHHnCkLCodPWgCrnpk6RVOC9No7M5lo3fVcd6ORRtoWTnkH1TUlQSv/PquW OJS9EWwxdpBgUW4UqcOAQxT98AMosm8= -----END CERTIFICATE-----Generated at Wed Oct 14 12:55:41 2026 by rpki-client