$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/408a24d1-a772-3014-9c2c-2e1e63ed2802.roa File: 408a24d1-a772-3014-9c2c-2e1e63ed2802.roa (raw, json) Hash identifier: HRbgDP1QpcdEq7cMINNu5DlEUROiT+QjyyBdXxVEAjQ= Subject key identifier: 56:02:3C:4C:B3:6E:9D:44:94:8A:E3:D8:28:5B:A7:7A:48:40:7B:04 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC28A5586933F3BD67525D020 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/408a24d1-a772-3014-9c2c-2e1e63ed2802.roa Signing time: Fri 07 Aug 2026 17:14:03 +0000 ROA not before: Fri 07 Aug 2026 17:14:03 +0000 ROA not after: Thu 05 Nov 2026 18:14:03 +0000 asID: 395954 IP address blocks: 142.91.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:8a:55:86:93:3f:3b:d6:75:25:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 7 17:14:03 2026 GMT Not After : Nov 5 18:14:03 2026 GMT Subject: CN=fa126e9a-0067-4f74-a15c-95ab7ff29a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:4c:33:a5:38:b1:a6:62:14:ab:2b:d1:93: bc:a4:24:98:d2:b3:18:95:29:94:a8:6c:c3:80:25: fb:56:39:98:33:91:b2:cb:b5:32:fb:35:3f:48:cc: 87:63:a2:15:30:59:95:e7:9c:5d:34:ab:47:fc:13: 98:32:9a:9f:54:3c:76:1e:e6:03:d6:b6:3f:89:38: 98:18:c6:1b:ba:36:11:e8:fb:82:96:2d:d0:a3:d1: ee:2a:a5:fc:6e:6d:f7:87:d6:78:d2:a7:ac:b9:7e: 1e:3a:e0:30:c9:62:d8:3b:63:34:13:55:98:0f:e7: a1:d0:c5:aa:a1:29:66:72:78:b1:ec:fe:1a:d5:ee: c8:83:6a:4b:3f:67:57:37:75:81:22:ed:41:97:89: c8:01:d7:2f:b2:93:26:c4:5d:3e:84:81:c9:0a:04: fb:42:2f:78:c4:14:21:6b:be:18:49:f2:95:4c:4c: dd:5b:94:13:6f:09:e7:0a:f4:cb:15:7c:f8:e4:79: bb:d3:df:d1:f4:fa:1a:0f:24:5c:2e:e7:2b:95:de: af:48:7e:46:59:21:d3:bd:7b:6d:07:6f:4f:7f:02: 83:83:2e:a8:09:c9:ce:64:1c:7f:44:38:0e:bb:96: 25:46:85:6f:28:67:7e:32:75:3a:ab:58:a4:05:54: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:3C:4C:B3:6E:9D:44:94:8A:E3:D8:28:5B:A7:7A:48:40:7B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/408a24d1-a772-3014-9c2c-2e1e63ed2802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.91.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7d:4c:f5:42:40:71:bf:1d:92:d7:8d:d8:3b:de:fc:4e:f6: e2:1e:90:60:88:49:18:ae:15:b3:20:a3:13:31:37:32:41:75: d4:c9:f2:81:80:51:8f:66:15:91:a1:3c:1d:a4:e4:1a:72:ba: 10:ac:db:62:a5:27:17:0f:d9:6f:a4:ce:5d:ed:44:99:9a:1f: 38:fb:17:e1:f1:ee:46:a5:fa:3d:55:66:0e:8b:0a:50:d0:5e: 51:7d:1c:b4:92:15:04:9e:43:e9:89:6d:ed:0a:8b:9f:39:f7: 3b:e4:5c:e6:22:da:fd:d2:e8:59:0e:3a:df:eb:95:53:69:59: 07:2b:f7:25:f2:24:e9:94:03:79:bf:8f:8d:7a:f0:8b:06:3e: f8:97:bf:65:10:21:9d:e0:38:86:21:4a:ed:0f:df:2e:a8:30: a1:d2:6f:c1:7c:21:83:67:0f:7d:0c:95:11:cf:57:7f:2e:d4: 9b:d0:ab:2b:dc:8f:f8:2e:10:3e:3d:78:05:82:0d:69:77:71: 77:bf:a4:e5:4a:85:fd:20:95:a7:85:a3:8c:8e:db:c8:75:f6: db:4a:a6:18:ee:17:55:9f:a5:38:f1:ce:c4:3e:32:a8:aa:fb: 6c:b7:b0:e4:d7:99:2b:7c:22:e0:62:87:37:7f:42:a1:bd:12: f5:5b:0c:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CilWGkz871nUl0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNzE3MTQwM1oXDTI2MTEwNTE4MTQwM1owLzEtMCsGA1UEAxMk ZmExMjZlOWEtMDA2Ny00Zjc0LWExNWMtOTVhYjdmZjI5YThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIVMM6U4saZiFKsr0ZO8pCSY0rMYlSmUqGzD gCX7VjmYM5Gyy7Uy+zU/SMyHY6IVMFmV55xdNKtH/BOYMpqfVDx2HuYD1rY/iTiY GMYbujYR6PuCli3Qo9HuKqX8bm33h9Z40qesuX4eOuAwyWLYO2M0E1WYD+eh0MWq oSlmcnix7P4a1e7Ig2pLP2dXN3WBIu1Bl4nIAdcvspMmxF0+hIHJCgT7Qi94xBQh a74YSfKVTEzdW5QTbwnnCvTLFXz45Hm709/R9PoaDyRcLucrld6vSH5GWSHTvXtt B29PfwKDgy6oCcnOZBx/RDgOu5YlRoVvKGd+MnU6q1ikBVQaVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYCPEyzbp1ElIrj2Chbp3pIQHsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDA4YTI0ZDEtYTc3Mi0z MDE0LTljMmMtMmUxZTYzZWQyODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjluAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ9TPVCQHG/HZLXjdg73vxO9uIekGCISRiuFbMgoxMxNzJBddTJ8oGA UY9mFZGhPB2k5BpyuhCs22KlJxcP2W+kzl3tRJmaHzj7F+Hx7kal+j1VZg6LClDQ XlF9HLSSFQSeQ+mJbe0Ki5859zvkXOYi2v3S6FkOOt/rlVNpWQcr9yXyJOmUA3m/ j4168IsGPviXv2UQIZ3gOIYhSu0P3y6oMKHSb8F8IYNnD30MlRHPV38u1JvQqyvc j/guED49eAWCDWl3cXe/pOVKhf0glaeFo4yO28h19ttKphjuF1WfpTjxzsQ+Mqiq +2y3sOTXmSt8IuBihzd/QqG9EvVbDHI= -----END CERTIFICATE-----Generated at Thu Aug 27 18:19:36 2026 by rpki-client