$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3c6a424e-6b62-358e-8a57-1b38b81379e9.roa File: 3c6a424e-6b62-358e-8a57-1b38b81379e9.roa (raw, json) Hash identifier: PGQdAGHfDjPU8asCEsx/aqxsmERshqeoS3Hl+j7p6vs= Subject key identifier: D1:E7:61:09:5A:35:8F:A5:73:66:5B:F4:A6:2A:E5:84:36:BD:1D:9C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D648C540C2E95F94E1580 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3c6a424e-6b62-358e-8a57-1b38b81379e9.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 142.91.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:64:8c:54:0c:2e:95:f9:4e:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=3c806c40-5b46-41e5-9ed2-caa9a2d5fb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:6e:7b:a7:ef:87:83:72:0a:b2:09:df:81: 0d:5b:8a:45:28:be:6b:ee:7e:ca:be:a3:42:a0:a1: ca:34:9d:c2:e5:af:b2:2e:4f:6f:2f:86:a5:c7:83: 10:ff:f7:d6:dd:73:a2:51:ed:b2:32:5d:48:13:06: e6:5a:ca:c6:ba:13:9f:9e:ee:b2:e1:ee:8e:e2:c7: 99:ac:fc:85:e4:69:a0:7b:9b:3d:1a:28:cb:5e:fb: 00:81:11:9b:30:2f:5b:46:45:24:9a:88:04:15:92: 81:3c:97:12:25:c6:d9:6b:d3:11:94:1a:e6:10:e5: d9:f4:ad:4d:1e:b9:f8:11:1a:f1:90:11:ec:e8:c0: 29:1b:48:1e:4b:a5:d6:80:bd:ec:8e:02:a7:6d:94: 21:ec:6e:f5:aa:39:27:ec:e8:d4:54:1d:ab:8c:2a: dc:b9:be:d6:ae:67:c4:c8:83:40:a9:b4:97:0c:eb: 35:1a:ad:3a:27:3b:99:f1:bc:e2:32:1f:92:94:ef: c1:a7:08:05:02:ad:7f:fb:7a:c4:e9:13:5a:b3:b4: 86:d8:9a:f8:22:03:0e:ce:d7:2a:21:2a:cc:f2:e2: c5:8f:3a:d5:6e:e2:5f:4c:92:b9:e0:29:95:82:09: 89:21:e1:93:99:d2:43:ff:e1:47:19:23:bd:d7:4e: 72:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E7:61:09:5A:35:8F:A5:73:66:5B:F4:A6:2A:E5:84:36:BD:1D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3c6a424e-6b62-358e-8a57-1b38b81379e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.91.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ad:64:39:e4:ea:5d:de:e4:58:63:e0:eb:2c:48:85:9b:92: 46:e7:7e:c4:df:a5:9b:85:01:a7:55:a0:df:52:cb:32:fe:53: 26:c2:9a:a4:5c:aa:83:e7:7d:be:92:50:d3:20:37:00:ef:71: 42:6c:71:53:5b:9c:fd:cf:b9:02:5c:15:09:0d:7b:b2:fa:87: 3a:de:e4:ff:d0:f0:de:24:f4:75:cd:4e:eb:11:8a:6d:f1:55: d3:00:1d:7c:9b:5d:8f:cb:1f:08:1e:f5:35:a7:bd:a3:4f:c2: 8d:7d:92:05:fc:71:cf:d9:2e:37:74:42:7c:e1:d8:95:fe:1d: 3e:80:ef:31:9d:36:ec:af:15:c5:63:d6:d4:f6:f6:fd:a6:b2: 24:50:43:05:ac:a5:f1:b5:c5:bf:28:30:01:f6:7e:ae:55:92: 93:fd:73:fe:4b:0e:b3:a4:a5:cc:1d:fa:c5:87:89:c6:01:8f: d0:de:53:df:29:58:f0:7a:c5:eb:69:77:2e:a7:79:c7:3d:7f: ea:7c:32:e1:b8:f0:c0:51:e5:dd:e2:2f:08:46:d2:00:13:19: b0:15:59:90:f7:4b:5b:29:42:2d:e4:aa:bb:73:95:f0:22:c2: 87:fe:4e:a5:ab:b6:9c:e8:e5:d7:26:a3:e3:cb:19:a8:2a:c6: 46:0b:6f:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWSMVAwulflOFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk M2M4MDZjNDAtNWI0Ni00MWU1LTllZDItY2FhOWEyZDVmYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokhue6fvh4NyCrIJ34ENW4pFKL5r7n7KvqNC oKHKNJ3C5a+yLk9vL4alx4MQ//fW3XOiUe2yMl1IEwbmWsrGuhOfnu6y4e6O4seZ rPyF5Gmge5s9GijLXvsAgRGbMC9bRkUkmogEFZKBPJcSJcbZa9MRlBrmEOXZ9K1N Hrn4ERrxkBHs6MApG0geS6XWgL3sjgKnbZQh7G71qjkn7OjUVB2rjCrcub7WrmfE yINAqbSXDOs1Gq06JzuZ8bziMh+SlO/BpwgFAq1/+3rE6RNas7SG2Jr4IgMOztcq ISrM8uLFjzrVbuJfTJK54CmVggmJIeGTmdJD/+FHGSO9105ySQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHnYQlaNY+lc2Zb9KYq5YQ2vR2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2M2YTQyNGUtNmI2Mi0z NThlLThhNTctMWIzOGI4MTM3OWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjlsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWtZDnk6l3e5Fhj4OssSIWbkkbnfsTfpZuFAadVoN9SyzL+UybCmqRc qoPnfb6SUNMgNwDvcUJscVNbnP3PuQJcFQkNe7L6hzre5P/Q8N4k9HXNTusRim3x VdMAHXybXY/LHwge9TWnvaNPwo19kgX8cc/ZLjd0Qnzh2JX+HT6A7zGdNuyvFcVj 1tT29v2msiRQQwWspfG1xb8oMAH2fq5VkpP9c/5LDrOkpcwd+sWHicYBj9DeU98p WPB6xetpdy6necc9f+p8MuG48MBR5d3iLwhG0gATGbAVWZD3S1spQi3kqrtzlfAi wof+TqWrtpzo5dcmo+PLGagqxkYLbz8= -----END CERTIFICATE-----Generated at Wed Oct 14 07:01:17 2026 by rpki-client