$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3946439f-3135-3e08-ac15-6e9a77ff8102.roa File: 3946439f-3135-3e08-ac15-6e9a77ff8102.roa (raw, json) Hash identifier: ct0LzgU4eKDgJlWfdyerXySNbxsHiaNWwqpMfTwkcTo= Subject key identifier: D1:69:01:77:83:33:37:4F:7C:FD:47:96:95:2D:92:56:F6:7E:FD:41 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0FA6F0B5F44B54F751E14C68 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3946439f-3135-3e08-ac15-6e9a77ff8102.roa Signing time: Fri 04 Sep 2026 08:08:56 +0000 ROA not before: Fri 04 Sep 2026 08:08:56 +0000 ROA not after: Thu 03 Dec 2026 09:08:56 +0000 asID: 30633 IP address blocks: 207.244.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:a6:f0:b5:f4:4b:54:f7:51:e1:4c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 08:08:56 2026 GMT Not After : Dec 3 09:08:56 2026 GMT Subject: CN=07aff44a-1e53-4432-95e3-17b7a25de0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:db:59:0c:47:e9:3c:fc:ec:d7:2b:e1:25:38: 11:44:5e:74:50:0c:48:3e:6c:b5:9e:69:3e:84:ca: 2d:71:d2:5e:ab:05:a4:63:8a:89:d7:93:08:13:e6: a6:56:ba:99:66:d5:4a:b2:23:84:86:a8:c9:c9:50: 84:c6:ec:17:91:c9:43:31:2c:59:a1:15:11:a6:e9: 62:b5:2f:b2:b2:66:e7:70:c9:64:02:6d:ac:d7:c6: 12:7b:19:b0:f9:4c:fd:09:b8:7a:5c:3d:ea:f9:dd: 51:5b:8c:92:93:a2:c1:76:4a:25:01:8a:3a:32:d7: de:4f:af:d8:16:44:f5:c2:7f:41:86:8e:02:65:87: f5:a3:48:f7:f8:75:22:fe:b0:b3:fd:f0:fa:52:45: 7c:1e:15:ac:36:e5:20:9d:93:8c:08:4a:31:33:cb: 64:08:b7:65:b7:d1:8c:81:89:75:12:9b:3d:be:53: 16:e2:b3:56:55:c8:0b:f5:76:e8:9f:37:d3:ab:79: c3:3a:a5:2e:89:c1:ea:e3:66:2d:40:de:c7:ae:4d: 17:73:9b:5c:9a:04:0e:cc:f3:6a:40:78:e9:49:e2: e8:c3:32:aa:8b:df:e9:78:9e:46:97:31:fe:47:f9: 42:6a:17:a5:20:e5:3f:19:9f:9b:0c:85:bd:57:29: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:69:01:77:83:33:37:4F:7C:FD:47:96:95:2D:92:56:F6:7E:FD:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3946439f-3135-3e08-ac15-6e9a77ff8102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 207.244.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:95:7c:0e:e8:bd:84:84:9b:a5:19:41:17:c8:e2:29:e3:ce: bb:8b:62:27:80:17:36:7b:58:9a:d1:d7:0f:bb:6c:35:81:66: 4b:c2:6b:4a:9e:c7:ea:03:16:e5:ca:68:44:c0:0b:b6:13:81: 02:88:c7:62:cc:b2:68:16:78:86:b6:58:67:17:f0:b5:e8:9c: fb:49:09:b0:98:a2:6f:7e:e4:b4:ea:30:e9:20:1d:c7:5b:9b: 05:e3:4b:92:40:bc:d6:5d:dd:a8:f0:f5:b1:a5:c0:c5:ca:e1: 24:f7:a2:29:7e:ba:97:43:de:40:51:de:ef:94:5d:03:9d:16: db:f6:c7:14:94:36:29:c1:8e:a5:e6:90:34:64:41:d6:86:d8: da:2e:8f:6f:01:dd:88:58:79:bc:80:ed:4f:a6:11:f0:08:d6: 90:e9:c7:34:76:19:dc:a9:37:af:1c:90:ab:7b:02:65:f7:0a: 14:49:a2:4b:22:f1:92:dd:08:57:23:d6:20:02:24:55:12:98: 3d:5a:2b:62:f4:f9:16:6b:d0:3c:00:99:8d:8a:eb:1a:52:f5: e2:74:9e:3a:5e:fe:19:a5:c1:e7:73:6f:21:a8:f4:96:72:05: 14:9a:52:73:cb:9d:b8:8a:32:0b:d4:47:92:37:14:73:cb:0d: 16:7a:ba:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8PpvC19EtU91HhTGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA4MDg1NloXDTI2MTIwMzA5MDg1NlowLzEtMCsGA1UEAxMk MDdhZmY0NGEtMWU1My00NDMyLTk1ZTMtMTdiN2EyNWRlMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnttZDEfpPPzs1yvhJTgRRF50UAxIPmy1nmk+ hMotcdJeqwWkY4qJ15MIE+amVrqZZtVKsiOEhqjJyVCExuwXkclDMSxZoRURpuli tS+ysmbncMlkAm2s18YSexmw+Uz9Cbh6XD3q+d1RW4ySk6LBdkolAYo6MtfeT6/Y FkT1wn9Bho4CZYf1o0j3+HUi/rCz/fD6UkV8HhWsNuUgnZOMCEoxM8tkCLdlt9GM gYl1Eps9vlMW4rNWVcgL9XbonzfTq3nDOqUuicHq42YtQN7Hrk0Xc5tcmgQOzPNq QHjpSeLowzKqi9/peJ5GlzH+R/lCahelIOU/GZ+bDIW9VynAnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFpAXeDMzdPfP1HlpUtklb2fv1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMzk0NjQzOWYtMzEzNS0z ZTA4LWFjMTUtNmU5YTc3ZmY4MTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz/RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKVfA7ovYSEm6UZQRfI4injzruLYieAFzZ7WJrR1w+7bDWBZkvCa0qe x+oDFuXKaETAC7YTgQKIx2LMsmgWeIa2WGcX8LXonPtJCbCYom9+5LTqMOkgHcdb mwXjS5JAvNZd3ajw9bGlwMXK4ST3oil+updD3kBR3u+UXQOdFtv2xxSUNinBjqXm kDRkQdaG2Nouj28B3YhYebyA7U+mEfAI1pDpxzR2GdypN68ckKt7AmX3ChRJoksi 8ZLdCFcj1iACJFUSmD1aK2L0+RZr0DwAmY2K6xpS9eJ0njpe/hmlwedzbyGo9JZy BRSaUnPLnbiKMgvUR5I3FHPLDRZ6uv0= -----END CERTIFICATE-----Generated at Fri Sep 4 21:26:00 2026 by rpki-client