$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/31d5e10f-8947-30b7-b1aa-691cf696190c.roa File: 31d5e10f-8947-30b7-b1aa-691cf696190c.roa (raw, json) Hash identifier: CWqhQB2gr/wQSqX1nTq+EUZQTvOX5NDSKKEZUVtBbPo= Subject key identifier: EA:67:18:FA:8F:DC:24:35:29:A3:CA:C1:50:F4:45:7F:D6:E5:A7:38 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292BBB204FA8938838F3900 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/31d5e10f-8947-30b7-b1aa-691cf696190c.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 108.62.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:bb:b2:04:fa:89:38:83:8f:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=2f7d3b4e-caa4-40c4-a526-f4a5a5cebf70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:8d:3c:dc:70:a3:10:4d:47:1c:54:8f:f4: e7:49:f8:72:f7:86:9b:89:57:75:dc:fe:86:ff:16: de:da:a5:cb:90:2c:26:1e:d3:d6:6e:5c:e0:86:42: 95:58:20:73:de:90:86:82:cc:6f:1f:5c:c3:c3:2f: 0d:ba:c6:f4:79:11:6a:39:e2:b6:be:57:64:7c:f8: 43:fd:4c:0c:71:c9:28:f7:f5:86:d8:f2:58:e6:a9: 6e:bc:7f:38:3c:14:80:ad:26:11:7b:74:e3:fd:a5: 12:71:35:38:2f:7a:6a:63:54:e3:68:2a:ad:43:fc: 1e:48:7f:f6:ce:35:3c:d4:18:23:37:98:74:c4:7a: b7:08:65:6a:9e:c2:a5:fc:bf:81:7b:09:8c:eb:1b: 2b:9e:65:a0:69:c2:8b:69:14:4d:3d:a1:78:ac:03: a6:d6:5d:28:0a:62:5d:74:04:81:47:d2:c0:9a:e7: e1:6d:c7:d0:a3:1a:65:f2:6f:89:5b:01:b1:a2:80: 5b:36:29:a0:9a:0b:76:5c:a9:04:cf:e2:d7:c4:f1: 0d:4a:a4:6b:be:ff:ec:5d:69:f6:38:ce:a0:cc:50: 4c:2f:89:24:e4:48:f3:ad:b4:7d:eb:fc:fe:98:23: 50:00:71:6f:24:8b:20:35:7f:3c:17:38:59:0e:89: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:67:18:FA:8F:DC:24:35:29:A3:CA:C1:50:F4:45:7F:D6:E5:A7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/31d5e10f-8947-30b7-b1aa-691cf696190c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:60:b7:57:c1:db:d0:45:e5:71:92:a5:fb:7c:3f:28:d0:70: 59:34:ef:eb:61:b5:02:8c:8d:98:ae:29:cc:52:fb:50:4f:92: f5:79:c1:31:c6:e9:d0:f1:de:82:2e:d0:58:12:7f:1d:df:b9: d7:3f:71:70:37:2c:86:74:9c:f8:7b:7e:1a:4f:2c:3f:89:66: 20:11:bc:7a:87:c0:bf:d0:70:06:ab:3d:fa:73:36:03:37:e5: 07:fa:8f:43:cd:75:59:50:a3:8f:4a:75:75:13:48:5c:d8:e0: d6:c5:ac:b3:86:9a:dc:ce:5a:c1:ce:96:59:8d:65:6f:e9:a5: 35:d3:f7:72:0e:bc:ca:83:b0:43:5e:d3:07:27:10:0d:89:7a: d5:f3:a4:bf:83:3c:c0:67:cd:af:57:5a:b4:93:99:98:07:ba: 01:4d:6d:1d:e1:cd:69:c0:ba:99:e5:3d:56:5c:63:84:47:30: 4b:33:84:e0:b0:55:ac:7b:f1:e6:1a:04:57:ea:f9:0f:c0:bf: 40:26:fa:ea:af:76:fd:15:33:de:43:09:4c:06:a2:00:ec:06: e1:85:b5:9d:df:80:cb:c2:68:c9:f0:b8:b7:5c:79:5f:4f:5d: 55:a9:89:5d:20:9a:b3:25:ee:97:00:33:1e:8b:f2:e5:65:13: 3c:14:cf:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikruyBPqJOIOPOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MmY3ZDNiNGUtY2FhNC00MGM0LWE1MjYtZjRhNWE1Y2ViZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAqNPNxwoxBNRxxUj/TnSfhy94abiVd13P6G /xbe2qXLkCwmHtPWblzghkKVWCBz3pCGgsxvH1zDwy8Nusb0eRFqOeK2vldkfPhD /UwMccko9/WG2PJY5qluvH84PBSArSYRe3Tj/aUScTU4L3pqY1TjaCqtQ/weSH/2 zjU81BgjN5h0xHq3CGVqnsKl/L+BewmM6xsrnmWgacKLaRRNPaF4rAOm1l0oCmJd dASBR9LAmufhbcfQoxpl8m+JWwGxooBbNimgmgt2XKkEz+LXxPENSqRrvv/sXWn2 OM6gzFBML4kk5EjzrbR96/z+mCNQAHFvJIsgNX88FzhZDomNyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpnGPqP3CQ1KaPKwVD0RX/W5ac4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMzFkNWUxMGYtODk0Ny0z MGI3LWIxYWEtNjkxY2Y2OTYxOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbD6yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpgt1fB29BF5XGSpft8PyjQcFk07+thtQKMjZiuKcxS+1BPkvV5wTHG 6dDx3oIu0FgSfx3fudc/cXA3LIZ0nPh7fhpPLD+JZiARvHqHwL/QcAarPfpzNgM3 5Qf6j0PNdVlQo49KdXUTSFzY4NbFrLOGmtzOWsHOllmNZW/ppTXT93IOvMqDsENe 0wcnEA2JetXzpL+DPMBnza9XWrSTmZgHugFNbR3hzWnAupnlPVZcY4RHMEszhOCw Vax78eYaBFfq+Q/Av0Am+uqvdv0VM95DCUwGogDsBuGFtZ3fgMvCaMnwuLdceV9P XVWpiV0gmrMl7pcAMx6L8uVlEzwUz5k= -----END CERTIFICATE-----Generated at Wed Oct 14 09:08:54 2026 by rpki-client