$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3bb65b29-5190-3b88-93f8-e42d0be57d5a.roa File: 3bb65b29-5190-3b88-93f8-e42d0be57d5a.roa (raw, json) Hash identifier: RXXwM1keml1ZH6xMDNH4lQKkI4yPHlMD20XPDYJP+4U= Subject key identifier: 72:06:B6:E7:B9:D5:75:DC:D5:94:85:13:76:05:C1:FB:2A:D1:38:F8 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F612D712E650903F62F6907E8 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3bb65b29-5190-3b88-93f8-e42d0be57d5a.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 396362 IP address blocks: 108.62.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:71:2e:65:09:03:f6:2f:69:07:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=d9158982-7b39-444e-96ae-07e0cf3b5daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:09:c3:d3:cf:18:87:1e:c3:47:b0:d3:0a:1d: cf:6d:7b:bc:4a:0e:7e:db:87:4b:c7:30:82:44:8e: de:1e:bb:c0:48:5e:97:64:54:00:1c:70:82:33:b6: 2d:07:54:a4:2f:3d:68:9f:18:a1:b7:b3:de:7e:68: 2b:28:3c:39:2c:f4:21:19:0c:44:51:ae:4a:73:4d: 49:97:b1:c8:72:a3:84:43:fa:2c:86:ac:c0:d4:4f: 80:6a:38:25:cd:11:32:36:02:b4:26:51:77:f9:b3: 85:35:40:b2:aa:4e:c1:6a:4f:c7:d9:c0:23:f0:0c: df:fb:f1:76:9b:89:fe:e8:13:c8:f9:be:71:20:57: 3f:05:85:ff:fe:af:96:51:db:80:5e:ba:f0:db:ff: de:8d:ad:7e:b3:d5:af:3a:91:0f:3c:b7:b6:22:73: 0c:b7:ca:6e:7e:8a:e8:3a:87:4c:1b:ae:d7:3d:fd: c3:14:23:e7:05:39:62:30:85:a6:1d:82:66:42:d1: c3:67:6d:82:4c:75:e3:45:00:f8:bc:2e:c8:4b:a6: 9a:ac:04:86:52:79:d2:b9:3d:75:8c:c7:f5:10:af: d9:cc:6f:5a:6c:7d:ea:71:0b:f7:c4:9e:db:0b:a5: 66:09:67:98:4b:66:19:90:62:72:99:d3:5b:d9:21: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:06:B6:E7:B9:D5:75:DC:D5:94:85:13:76:05:C1:FB:2A:D1:38:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3bb65b29-5190-3b88-93f8-e42d0be57d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:22:68:86:c6:00:c2:7b:38:e1:fe:7a:45:02:21:0f:15:8c: 76:a9:a2:1e:2e:7b:ff:41:9a:ae:b7:06:70:9e:84:22:6c:20: fd:ce:78:76:51:e7:66:ed:ff:c9:f4:05:64:38:40:28:7b:36: 51:c4:64:e6:d3:2a:50:16:db:ef:6e:77:d2:b2:0f:ed:38:fc: ba:e2:8e:05:93:aa:bb:64:6e:95:85:e1:e0:7c:63:40:a8:44: c3:58:f2:26:08:93:0d:12:ff:8b:9f:a6:97:f7:a1:f7:a4:9f: 14:d5:89:89:6c:a2:d7:4e:d4:f6:0f:ca:da:69:fd:47:ad:03: 23:c2:48:41:59:de:27:48:2d:63:43:57:18:57:f9:8a:d5:86: af:87:e7:ca:2d:91:bd:fb:d0:c4:a4:41:44:f8:34:32:f4:92: 09:38:a1:ef:62:42:90:85:5e:cb:ac:e3:e0:dd:d7:43:26:4e: c7:fd:b8:64:bd:4d:10:8c:3d:1c:b4:37:49:80:cd:ff:37:08: 52:9d:47:06:a6:d6:6f:55:92:86:59:b3:7f:36:cd:6c:aa:b9: ab:b3:fb:f0:ce:9c:e7:d5:da:42:c1:f2:28:02:12:d2:96:6a: 3b:f3:92:ea:d1:15:33:9c:09:5e:85:79:b7:06:0c:f2:27:48: 8d:5a:e1:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLXEuZQkD9i9pB+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZDkxNTg5ODItN2IzOS00NDRlLTk2YWUtMDdlMGNmM2I1ZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAignD088Yhx7DR7DTCh3PbXu8Sg5+24dLxzCC RI7eHrvASF6XZFQAHHCCM7YtB1SkLz1onxiht7PefmgrKDw5LPQhGQxEUa5Kc01J l7HIcqOEQ/oshqzA1E+AajglzREyNgK0JlF3+bOFNUCyqk7Bak/H2cAj8Azf+/F2 m4n+6BPI+b5xIFc/BYX//q+WUduAXrrw2//eja1+s9WvOpEPPLe2InMMt8puforo OodMG67XPf3DFCPnBTliMIWmHYJmQtHDZ22CTHXjRQD4vC7IS6aarASGUnnSuT11 jMf1EK/ZzG9abH3qcQv3xJ7bC6VmCWeYS2YZkGJymdNb2SFeGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIGtue51XXc1ZSFE3YFwfsq0Tj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2JiNjViMjktNTE5MC0z Yjg4LTkzZjgtZTQyZDBiZTU3ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbD7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEiaIbGAMJ7OOH+ekUCIQ8VjHapoh4ue/9Bmq63BnCehCJsIP3OeHZR 52bt/8n0BWQ4QCh7NlHEZObTKlAW2+9ud9KyD+04/LrijgWTqrtkbpWF4eB8Y0Co RMNY8iYIkw0S/4ufppf3ofeknxTViYlsotdO1PYPytpp/UetAyPCSEFZ3idILWND VxhX+YrVhq+H58otkb370MSkQUT4NDL0kgk4oe9iQpCFXsus4+Dd10MmTsf9uGS9 TRCMPRy0N0mAzf83CFKdRwam1m9VkoZZs382zWyquauz+/DOnOfV2kLB8igCEtKW ajvzkurRFTOcCV6FebcGDPInSI1a4W0= -----END CERTIFICATE-----Generated at Sun Oct 4 07:18:56 2026 by rpki-client