$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3c85ebb9-1b66-3da1-9702-6b2bcd84e7f6.roa File: 3c85ebb9-1b66-3da1-9702-6b2bcd84e7f6.roa (raw, json) Hash identifier: tZ/5bS99N6yYHyOswEdVIL7WV2r1voNPwvoFqD687vY= Subject key identifier: 66:24:41:DE:A7:CA:10:15:8E:1E:B3:11:47:CC:46:64:62:26:E8:49 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5CFD4FA0351D421C0B394700 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3c85ebb9-1b66-3da1-9702-6b2bcd84e7f6.roa Signing time: Fri 02 Oct 2026 01:00:12 +0000 ROA not before: Fri 02 Oct 2026 01:00:12 +0000 ROA not after: Thu 31 Dec 2026 02:00:12 +0000 asID: 7203 IP address blocks: 172.241.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:fd:4f:a0:35:1d:42:1c:0b:39:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 01:00:12 2026 GMT Not After : Dec 31 02:00:12 2026 GMT Subject: CN=1b32706f-7d09-41ce-b3b5-b678f93521cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:77:a5:bf:bf:6e:73:ab:bd:14:5e:5b:62: 8d:e7:24:9f:06:d2:c0:c9:90:01:d4:6a:c6:1e:16: 94:a0:ce:14:3d:a2:21:8b:06:77:e4:dd:b6:16:9c: e8:07:24:e9:4d:00:55:7c:f5:c7:45:56:62:b9:15: 3d:2b:66:cf:8f:e3:da:ca:75:9c:bb:79:a1:fc:69: ff:89:9a:56:8b:68:6b:63:ed:18:09:ce:f0:33:13: 38:62:1a:02:04:3e:79:f8:61:d7:a1:25:47:a6:cd: 95:48:1e:02:23:f3:8c:cd:c7:e7:72:a9:b3:ab:84: ae:29:84:76:c2:9f:30:2c:e2:e4:ef:8a:cd:93:47: fc:eb:98:95:3f:ef:d8:ea:b9:09:cb:b3:b8:e2:4f: 82:1f:dd:a6:03:f8:cc:c1:77:6c:89:a8:2d:86:1a: 2b:35:54:c9:3b:dc:b9:33:b4:79:24:77:b4:b6:be: 40:48:ae:8f:0b:66:c8:bf:72:01:10:0e:8d:51:a9: 43:69:5b:93:35:5c:8d:1d:57:dc:07:68:f2:47:31: f5:b4:1a:76:48:7c:12:f0:2f:9d:cb:b3:ba:2b:f6: e6:49:99:70:63:d8:ad:8c:5c:29:bd:13:69:46:96: 8d:91:40:36:13:36:9c:65:d7:4e:2d:92:94:45:28: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:24:41:DE:A7:CA:10:15:8E:1E:B3:11:47:CC:46:64:62:26:E8:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3c85ebb9-1b66-3da1-9702-6b2bcd84e7f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:47:a7:84:77:77:bb:c6:2c:55:19:f4:cd:33:0a:05:a7:41: 44:bf:17:3f:42:31:98:53:1b:d5:86:e3:f0:e9:1c:8a:5d:10: 4f:6a:b4:81:66:ec:4d:c6:e7:99:12:ca:47:38:0b:44:dd:85: f5:3e:5f:9a:8a:37:df:90:85:b0:9d:9a:2f:59:70:47:54:18: 42:0b:c5:91:6c:9c:c2:c0:68:0d:f2:91:20:ed:00:4e:b0:28: 8c:c2:8e:8b:5c:7b:e7:82:14:21:4f:69:2c:88:a9:a8:94:59: a9:54:0c:c6:16:66:eb:ee:bd:ed:c7:03:eb:d8:02:67:f3:22: c2:49:84:7b:b0:94:b2:9d:d8:23:89:4a:ca:a4:80:a0:78:2a: de:71:a4:4f:28:f4:7c:4b:89:9b:c9:94:d5:9e:4e:6a:52:c2: cf:d1:da:86:cb:12:5d:6f:d4:aa:7b:ad:19:29:79:9a:94:4f: 66:db:2d:2e:b3:4b:65:6d:b6:d1:6a:a4:1d:7f:6c:08:2e:34: b1:93:be:ae:97:20:ce:b3:c7:b5:cd:27:70:15:2e:c4:b0:1c: 82:bd:ac:f5:8d:6f:9f:f6:3f:18:e7:62:f6:5b:ce:90:f0:25: 8d:df:bd:dd:12:ce:9e:e5:ac:64:5c:c9:27:c0:3c:c2:14:4b: 51:eb:76:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/U+gNR1CHAs5RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk MWIzMjcwNmYtN2QwOS00MWNlLWIzYjUtYjY3OGY5MzUyMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/R3pb+/bnOrvRReW2KN5ySfBtLAyZAB1GrG HhaUoM4UPaIhiwZ35N22FpzoByTpTQBVfPXHRVZiuRU9K2bPj+PaynWcu3mh/Gn/ iZpWi2hrY+0YCc7wMxM4YhoCBD55+GHXoSVHps2VSB4CI/OMzcfncqmzq4SuKYR2 wp8wLOLk74rNk0f865iVP+/Y6rkJy7O44k+CH92mA/jMwXdsiagthhorNVTJO9y5 M7R5JHe0tr5ASK6PC2bIv3IBEA6NUalDaVuTNVyNHVfcB2jyRzH1tBp2SHwS8C+d y7O6K/bmSZlwY9itjFwpvRNpRpaNkUA2EzacZddOLZKURSiuXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYkQd6nyhAVjh6zEUfMRmRiJuhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2M4NWViYjktMWI2Ni0z ZGExLTk3MDItNmIyYmNkODRlN2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtHp4R3d7vGLFUZ9M0zCgWnQUS/Fz9CMZhTG9WG4/DpHIpdEE9qtIFm 7E3G55kSykc4C0TdhfU+X5qKN9+QhbCdmi9ZcEdUGEILxZFsnMLAaA3ykSDtAE6w KIzCjotce+eCFCFPaSyIqaiUWalUDMYWZuvuve3HA+vYAmfzIsJJhHuwlLKd2COJ SsqkgKB4Kt5xpE8o9HxLiZvJlNWeTmpSws/R2obLEl1v1Kp7rRkpeZqUT2bbLS6z S2VtttFqpB1/bAguNLGTvq6XIM6zx7XNJ3AVLsSwHIK9rPWNb5/2PxjnYvZbzpDw JY3fvd0Szp7lrGRcySfAPMIUS1HrdvU= -----END CERTIFICATE-----Generated at Wed Oct 14 17:47:53 2026 by rpki-client