$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/408a24d1-a772-3014-9c2c-2e1e63ed2802.roa File: 408a24d1-a772-3014-9c2c-2e1e63ed2802.roa (raw, json) Hash identifier: rfqADU9oz0q6acgGkrNazdVNyYGMz7ZSI/6sx5s7K9s= Subject key identifier: F0:96:5D:D3:9B:43:A6:F5:67:9A:4C:9B:A5:87:D1:6B:66:45:9F:EB Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D63F3701E4BCA68948F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/408a24d1-a772-3014-9c2c-2e1e63ed2802.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 142.91.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:63:f3:70:1e:4b:ca:68:94:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=abc82feb-beab-4008-b1b8-c89d95391e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ac:79:dd:e5:76:d7:19:fb:e1:64:ba:5a:fa: db:c9:c4:5f:0a:4d:30:1b:c5:79:ff:d7:d7:1d:de: c4:a9:07:dc:94:56:56:45:74:24:25:4f:f5:ed:e6: 3f:54:e0:06:69:50:09:0d:5d:78:e7:b2:d2:f5:d0: 8c:62:64:3e:77:48:c5:55:63:82:ae:e0:e3:56:ca: ab:c5:30:a4:96:0b:2f:04:17:78:50:80:f0:18:35: ac:87:34:f1:36:47:bb:69:55:3c:d4:34:72:92:ad: 86:81:06:06:de:9a:42:98:5c:92:c2:76:0c:f1:ad: 86:66:e5:87:2d:a8:56:d0:6c:7b:35:2e:31:5e:f1: f4:02:ec:f4:e8:84:74:7d:f0:e3:98:30:14:7b:f7: 70:b9:1a:54:9e:ee:d7:6d:3a:80:e9:21:13:7f:22: 46:d7:d4:ae:15:83:98:f9:37:bf:0a:e2:55:ec:61: 72:44:cc:0d:37:b3:bd:2e:fe:db:01:ef:13:68:13: aa:d0:bb:3e:bb:63:b8:95:6f:e7:84:55:29:53:00: e2:1b:27:45:f4:e3:b3:4e:2a:b8:63:6e:f1:0e:d2: 4a:c6:96:73:2a:30:e6:e9:51:18:27:2e:34:1a:7a: cd:2d:c0:4d:0f:9c:4d:01:10:d0:b2:2b:c2:2a:01: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:96:5D:D3:9B:43:A6:F5:67:9A:4C:9B:A5:87:D1:6B:66:45:9F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/408a24d1-a772-3014-9c2c-2e1e63ed2802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.91.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f8:24:5c:4c:3b:1b:fd:0c:30:97:ee:7f:b7:a0:83:2a:56: 8b:12:ac:05:28:c1:5c:ce:aa:4d:34:65:f5:04:6b:8b:1d:0e: 76:ad:57:b5:d9:b5:1a:97:bc:26:e2:06:74:de:bc:b3:30:86: 1e:1d:00:fc:72:75:d9:2a:11:ab:5d:f8:99:ef:98:dc:02:39: 4a:14:13:a6:de:92:ed:04:59:fd:7e:07:24:3b:ec:7f:1c:df: b3:be:76:06:a4:2d:3a:90:ac:8f:35:91:6c:5a:7e:45:41:84: 06:f8:36:51:53:e5:1a:d0:e6:d4:cd:67:e0:05:a1:f4:59:99: 35:41:37:b6:10:07:8c:61:f5:6f:cd:f4:76:68:89:2d:65:ba: 67:fe:a8:01:af:e3:38:89:d1:a8:f7:38:0e:47:f2:49:33:5a: e5:bf:d2:77:11:e3:5d:e4:c9:8b:34:58:a8:ef:09:85:cc:38: 2e:ca:e0:d8:59:ad:15:24:a8:8e:f7:6d:85:08:05:24:e8:85: 61:47:08:26:57:38:8b:eb:a1:f9:fe:8f:f4:42:77:3c:35:98: 11:63:1c:a1:05:72:6c:de:ce:31:a4:d6:44:f8:f6:1b:96:44: f6:e7:06:74:e3:e0:72:e6:df:38:17:b3:40:17:61:54:b1:0f: 97:c3:40:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWPzcB5LymiUj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YWJjODJmZWItYmVhYi00MDA4LWIxYjgtYzg5ZDk1MzkxZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqx53eV21xn74WS6WvrbycRfCk0wG8V5/9fX Hd7EqQfclFZWRXQkJU/17eY/VOAGaVAJDV1457LS9dCMYmQ+d0jFVWOCruDjVsqr xTCklgsvBBd4UIDwGDWshzTxNke7aVU81DRykq2GgQYG3ppCmFySwnYM8a2GZuWH LahW0Gx7NS4xXvH0Auz06IR0ffDjmDAUe/dwuRpUnu7XbTqA6SETfyJG19SuFYOY +Te/CuJV7GFyRMwNN7O9Lv7bAe8TaBOq0Ls+u2O4lW/nhFUpUwDiGydF9OOzTiq4 Y27xDtJKxpZzKjDm6VEYJy40GnrNLcBND5xNARDQsivCKgH9BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCWXdObQ6b1Z5pMm6WH0WtmRZ/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDA4YTI0ZDEtYTc3Mi0z MDE0LTljMmMtMmUxZTYzZWQyODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjluAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj4JFxMOxv9DDCX7n+3oIMqVosSrAUowVzOqk00ZfUEa4sdDnatV7XZ tRqXvCbiBnTevLMwhh4dAPxyddkqEatd+JnvmNwCOUoUE6beku0EWf1+ByQ77H8c 37O+dgakLTqQrI81kWxafkVBhAb4NlFT5RrQ5tTNZ+AFofRZmTVBN7YQB4xh9W/N 9HZoiS1lumf+qAGv4ziJ0aj3OA5H8kkzWuW/0ncR413kyYs0WKjvCYXMOC7K4NhZ rRUkqI73bYUIBSTohWFHCCZXOIvrofn+j/RCdzw1mBFjHKEFcmzezjGk1kT49huW RPbnBnTj4HLm3zgXs0AXYVSxD5fDQOI= -----END CERTIFICATE-----Generated at Wed Oct 14 10:09:30 2026 by rpki-client