$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/39a5f7f2-ff52-3395-8645-d8436b52b7e1.roa File: 39a5f7f2-ff52-3395-8645-d8436b52b7e1.roa (raw, json) Hash identifier: BWLehsUwTYjPqrPD2Wpmk69oYjCqujM1xJe5fy1wl18= Subject key identifier: C1:78:46:D5:9D:66:D4:49:92:2F:A9:98:F8:5D:7C:7E:94:67:D9:64 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97F9E408A55C7C4972AD80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/39a5f7f2-ff52-3395-8645-d8436b52b7e1.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 142.234.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:f9:e4:08:a5:5c:7c:49:72:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=03c06d44-1cf3-470b-833a-ba342dbc6252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:01:d3:99:99:32:66:26:18:64:c1:81:e3: 2e:d3:af:bc:c2:82:f2:61:8b:13:eb:c4:cf:b4:88: db:ab:0b:d6:24:b1:e5:f8:b6:ec:87:97:31:ef:95: 96:33:53:16:03:c1:41:4f:24:b2:e4:e4:6a:d5:31: 19:e7:fc:8e:13:a3:2e:38:34:7d:19:08:27:25:40: 9f:b0:ab:5c:1d:67:18:85:f4:cd:4a:06:84:7d:8a: 1c:a5:63:89:27:49:75:8a:7c:d4:8e:45:dd:8a:5b: 2c:b8:92:30:a7:63:4f:7a:a2:a3:86:79:75:53:74: cb:be:1e:33:d9:49:4e:c3:65:4b:63:79:be:4b:33: 18:26:11:67:75:9a:35:a8:cf:cf:46:c0:d6:6f:21: fd:65:b9:24:e4:b4:eb:b4:d9:e1:85:c4:8f:8f:9d: d0:44:3a:c1:25:c7:b1:a7:ad:4a:0a:8b:e6:b0:20: dd:66:aa:79:a7:67:4c:45:06:d9:4a:74:d8:30:02: 11:cc:91:10:d1:a4:88:86:64:fe:bf:e6:e1:84:96: 5d:fd:51:57:7c:a4:1c:7a:e4:51:82:5b:91:41:b5: 22:51:a9:19:c0:a8:5c:dd:ae:89:e6:5a:d6:da:e0: 39:6a:4a:c6:af:6f:b2:36:2a:9b:ca:04:d7:bd:d9: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:78:46:D5:9D:66:D4:49:92:2F:A9:98:F8:5D:7C:7E:94:67:D9:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/39a5f7f2-ff52-3395-8645-d8436b52b7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.234.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:70:87:f7:5f:22:06:58:62:17:7c:ac:d8:17:14:b1:d3:56: 19:dd:9c:19:25:9b:eb:a5:e4:f8:0f:a9:cc:f5:b3:68:ff:40: dc:d9:6b:d6:8c:fa:e0:35:13:24:c8:2d:9b:e1:81:41:d3:5b: 11:83:a3:ac:70:89:db:d8:0e:31:4f:60:78:e9:3c:32:b3:b2: 78:97:85:f3:de:aa:73:97:0d:75:e5:3e:92:26:1d:bc:75:cf: 84:c2:7d:f5:8b:38:2a:4b:be:20:31:37:9f:ee:7e:fb:9a:0f: d6:a6:21:f8:82:1c:ea:37:71:73:c0:86:05:ad:75:69:d5:94: 42:09:e4:5c:33:07:79:ab:41:69:54:b1:53:68:be:2e:83:fe: c4:58:2f:11:78:62:8e:d0:19:c2:4b:52:62:70:f2:5a:f7:71: d1:90:be:1f:f1:a3:a3:5c:60:b5:53:aa:f9:31:3f:27:f8:5f: 1d:11:cc:99:3d:72:7b:29:92:61:7f:ac:cc:a2:8a:31:35:2c: 82:ef:dd:99:73:ac:60:e3:e5:00:21:6d:07:5c:81:d0:5d:a4: 4c:81:f0:14:73:cf:29:b2:f9:5b:d6:c3:13:33:de:fe:ab:a8: f7:f7:0a:cf:e8:0c:b9:70:51:53:45:95:2f:72:06:89:43:bb: 02:a3:eb:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/nkCKVcfElyrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MDNjMDZkNDQtMWNmMy00NzBiLTgzM2EtYmEzNDJkYmM2MjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZUB05mZMmYmGGTBgeMu06+8woLyYYsT68TP tIjbqwvWJLHl+Lbsh5cx75WWM1MWA8FBTySy5ORq1TEZ5/yOE6MuODR9GQgnJUCf sKtcHWcYhfTNSgaEfYocpWOJJ0l1inzUjkXdilssuJIwp2NPeqKjhnl1U3TLvh4z 2UlOw2VLY3m+SzMYJhFndZo1qM/PRsDWbyH9Zbkk5LTrtNnhhcSPj53QRDrBJcex p61KCovmsCDdZqp5p2dMRQbZSnTYMAIRzJEQ0aSIhmT+v+bhhJZd/VFXfKQceuRR gluRQbUiUakZwKhc3a6J5lrW2uA5akrGr2+yNiqbygTXvdk3uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF4RtWdZtRJki+pmPhdfH6UZ9lkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMzlhNWY3ZjItZmY1Mi0z Mzk1LTg2NDUtZDg0MzZiNTJiN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRwh/dfIgZYYhd8rNgXFLHTVhndnBklm+ul5PgPqcz1s2j/QNzZa9aM +uA1EyTILZvhgUHTWxGDo6xwidvYDjFPYHjpPDKzsniXhfPeqnOXDXXlPpImHbx1 z4TCffWLOCpLviAxN5/ufvuaD9amIfiCHOo3cXPAhgWtdWnVlEIJ5FwzB3mrQWlU sVNovi6D/sRYLxF4Yo7QGcJLUmJw8lr3cdGQvh/xo6NcYLVTqvkxPyf4Xx0RzJk9 cnspkmF/rMyiijE1LILv3ZlzrGDj5QAhbQdcgdBdpEyB8BRzzymy+VvWwxMz3v6r qPf3Cs/oDLlwUVNFlS9yBolDuwKj624= -----END CERTIFICATE-----Generated at Wed Oct 14 15:09:04 2026 by rpki-client