$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/39a5f7f2-ff52-3395-8645-d8436b52b7e1.roa File: 39a5f7f2-ff52-3395-8645-d8436b52b7e1.roa (raw, json) Hash identifier: P14w17aaeaoQIz8jRvv4akp/HstgCkpz2Guq+BXICPk= Subject key identifier: 67:9A:D3:A9:A4:73:62:05:41:E9:36:B7:4B:B3:9C:81:A0:58:C7:45 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB9487EE056080787B7D38100 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/39a5f7f2-ff52-3395-8645-d8436b52b7e1.roa Signing time: Tue 04 Aug 2026 09:39:08 +0000 ROA not before: Tue 04 Aug 2026 09:39:08 +0000 ROA not after: Mon 02 Nov 2026 10:39:08 +0000 asID: 7203 IP address blocks: 142.234.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:48:7e:e0:56:08:07:87:b7:d3:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 09:39:08 2026 GMT Not After : Nov 2 10:39:08 2026 GMT Subject: CN=d4c3a44a-f8a3-4d62-b0b0-e503f05f0fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:ca:35:03:ca:8b:f4:cc:39:8c:9f:f5:04: ed:72:c6:e1:96:0b:be:bb:b5:85:17:c5:fd:02:86: 82:77:1c:a3:de:4b:ac:72:dd:7d:e5:c1:4f:ca:ab: f8:0f:78:44:88:a7:7e:66:d0:25:d2:9b:03:58:55: 24:14:c1:8a:c7:a0:7a:43:bb:af:eb:38:f1:71:c4: 90:17:16:e3:d4:7a:4a:f5:8e:6e:51:2e:91:d9:84: 75:d6:75:7e:08:d8:f3:68:f6:40:ce:82:3d:92:74: 6e:cd:0e:1a:ab:ed:3d:68:c5:2b:e6:58:2f:ba:ad: 89:dc:0e:42:26:b4:9d:cd:de:f3:ce:66:1b:77:7c: e2:61:ff:83:c6:1f:d2:5f:06:dd:8b:91:f2:d9:17: 4a:90:3c:dc:d8:81:25:66:39:b0:bf:9f:09:14:b5: 23:6b:26:5f:de:50:23:37:7a:47:9d:d6:c9:cc:d2: b2:61:bc:6e:3e:b7:a6:40:78:55:e4:4a:b0:99:2f: c4:cc:44:2e:26:99:f9:66:30:c3:7a:41:13:9b:84: 54:46:cb:62:ab:0b:e1:73:1c:c3:14:16:37:8a:fa: 8c:fa:0f:eb:97:6a:2c:8a:f1:e5:16:5f:a5:99:2a: 56:b6:9e:d5:7f:ee:1d:b9:dc:54:5a:08:47:cc:b1: 96:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9A:D3:A9:A4:73:62:05:41:E9:36:B7:4B:B3:9C:81:A0:58:C7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/39a5f7f2-ff52-3395-8645-d8436b52b7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.234.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ec:75:b2:e8:15:60:e3:ac:0f:08:3a:6f:6e:cf:67:00:5d: d2:e1:55:69:cb:10:72:31:b5:1a:88:2e:2f:48:64:58:45:7f: a2:10:05:4c:81:70:a4:aa:49:47:58:27:ae:40:29:e1:47:c9: 30:8a:8a:6e:a4:8c:de:26:10:9f:17:e6:ff:c7:22:bc:5b:b6: 80:5a:3a:21:83:b1:ee:1c:53:41:74:20:71:88:3b:e5:b6:6c: 36:2a:a1:b9:0b:bc:3b:17:87:80:42:1d:10:2e:07:b1:e6:9d: 7d:6f:9e:66:a8:1d:8c:c9:5a:61:16:c2:de:e0:41:15:cd:37: e7:eb:a3:4f:6e:89:53:9f:6d:28:e4:12:75:b9:9d:47:10:79: 53:ef:74:32:a7:06:ab:0d:5e:cd:dc:df:11:bc:93:59:f2:71: a6:70:23:df:12:17:07:51:c1:20:c2:7c:41:89:b9:c7:f0:6b: bd:1e:de:78:76:d2:36:85:d4:9a:9d:fb:45:66:f5:73:59:be: 82:47:58:2c:2f:dc:13:7f:5d:2f:b1:ff:6c:3c:99:3b:0c:78: 53:87:85:97:dc:e9:17:8a:cd:8e:b9:c4:b0:a0:24:af:d2:c9: 0f:92:a1:2f:a7:48:54:e2:8a:47:4b:57:26:4b:ae:22:2f:a8: 33:00:59:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65SH7gVggHh7fTgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDA5MzkwOFoXDTI2MTEwMjEwMzkwOFowLzEtMCsGA1UEAxMk ZDRjM2E0NGEtZjhhMy00ZDYyLWIwYjAtZTUwM2YwNWYwZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm33KNQPKi/TMOYyf9QTtcsbhlgu+u7WFF8X9 AoaCdxyj3kusct195cFPyqv4D3hEiKd+ZtAl0psDWFUkFMGKx6B6Q7uv6zjxccSQ Fxbj1HpK9Y5uUS6R2YR11nV+CNjzaPZAzoI9knRuzQ4aq+09aMUr5lgvuq2J3A5C JrSdzd7zzmYbd3ziYf+Dxh/SXwbdi5Hy2RdKkDzc2IElZjmwv58JFLUjayZf3lAj N3pHndbJzNKyYbxuPremQHhV5EqwmS/EzEQuJpn5ZjDDekETm4RURstiqwvhcxzD FBY3ivqM+g/rl2osivHlFl+lmSpWtp7Vf+4dudxUWghHzLGWLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGea06mkc2IFQek2t0uznIGgWMdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMzlhNWY3ZjItZmY1Mi0z Mzk1LTg2NDUtZDg0MzZiNTJiN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvsdbLoFWDjrA8IOm9uz2cAXdLhVWnLEHIxtRqILi9IZFhFf6IQBUyB cKSqSUdYJ65AKeFHyTCKim6kjN4mEJ8X5v/HIrxbtoBaOiGDse4cU0F0IHGIO+W2 bDYqobkLvDsXh4BCHRAuB7HmnX1vnmaoHYzJWmEWwt7gQRXNN+fro09uiVOfbSjk EnW5nUcQeVPvdDKnBqsNXs3c3xG8k1nycaZwI98SFwdRwSDCfEGJucfwa70e3nh2 0jaF1Jqd+0Vm9XNZvoJHWCwv3BN/XS+x/2w8mTsMeFOHhZfc6ReKzY65xLCgJK/S yQ+SoS+nSFTiikdLVyZLriIvqDMAWXY= -----END CERTIFICATE-----Generated at Thu Aug 27 17:38:20 2026 by rpki-client