$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/45f291d6-7876-3aa6-bc15-a967d1068cd5.roa File: 45f291d6-7876-3aa6-bc15-a967d1068cd5.roa (raw, json) Hash identifier: Q+cz4rAtMv908coB7TAKg3+QCtnVhhEluszb9LYCsy8= Subject key identifier: EB:EB:CC:03:0D:0E:20:AD:6F:45:31:F1:43:05:6F:52:D8:DD:17:70 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0FA6B960DFECFB38A3AB3700 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/45f291d6-7876-3aa6-bc15-a967d1068cd5.roa Signing time: Fri 04 Sep 2026 08:08:30 +0000 ROA not before: Fri 04 Sep 2026 08:08:30 +0000 ROA not after: Thu 03 Dec 2026 09:08:30 +0000 asID: 30633 IP address blocks: 206.214.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:a6:b9:60:df:ec:fb:38:a3:ab:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 08:08:30 2026 GMT Not After : Dec 3 09:08:30 2026 GMT Subject: CN=f999dfaa-df75-4a73-80fd-1efbc0155a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:82:11:1f:a9:39:fe:6e:05:ed:38:8f:5e: 5d:97:c0:e2:71:7e:dd:1f:09:08:ef:90:d2:c8:cd: b3:6e:6a:70:01:e0:50:e2:9e:e0:1c:d9:ac:74:7f: 14:8a:f3:46:40:94:20:70:14:16:6d:75:b2:26:e5: 8e:8a:1c:30:a8:da:59:34:77:c2:2a:25:3c:de:19: b2:68:10:f0:14:ef:69:b9:f5:e9:0e:d0:f8:cd:58: cd:67:41:ee:bd:4d:c8:62:44:85:e3:93:ab:9e:1c: cd:83:5e:56:c7:86:79:76:72:4d:11:71:c3:dd:e1: b9:09:3e:13:be:3d:94:84:3a:fc:8d:3c:a2:d7:0c: 96:8a:c1:5f:42:5b:e4:92:bf:a6:c9:83:69:d7:b7: 60:9c:62:3c:c7:89:24:96:bc:69:9e:dd:63:50:2f: 8d:e9:18:4e:c0:3d:42:8d:ad:a9:f0:96:dd:aa:a9: 19:d0:27:89:99:0b:ac:96:20:f5:2b:b8:2f:ba:0e: bc:c7:ad:40:ae:d7:29:e8:94:49:cf:9a:37:5f:5d: 63:04:df:70:32:31:ea:f7:88:f0:fb:da:8d:ef:c3: d1:59:20:8b:6d:6c:bb:7d:9b:26:16:5a:80:c6:3b: 85:4d:46:1c:2a:de:d5:19:bd:31:c7:b1:0b:01:e9: 17:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EB:CC:03:0D:0E:20:AD:6F:45:31:F1:43:05:6F:52:D8:DD:17:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/45f291d6-7876-3aa6-bc15-a967d1068cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 206.214.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a4:2a:af:63:db:45:89:a6:6c:b3:05:18:29:04:61:fe:3a: e4:0f:61:c7:50:56:d8:f7:c0:00:a6:47:3e:6f:29:45:c7:21: 85:7c:e3:af:3e:bc:61:b4:7a:70:68:1b:bf:e2:9d:29:ec:92: 5b:bd:d7:f8:94:9c:28:4a:2e:d1:43:71:dd:3e:27:f5:09:da: 2e:0e:d8:5e:9f:c2:89:5d:5a:ff:11:96:10:1d:d7:df:ab:c5: ed:d6:3d:38:97:ec:65:8c:f2:e4:64:3f:26:22:a2:ed:ce:94: a7:36:15:5c:23:7c:e1:a4:d1:d1:6e:49:48:04:fd:45:8e:13: 67:b6:c0:d8:56:71:55:5b:03:e6:57:4a:6c:08:0d:f8:97:54: 39:2a:af:b6:5e:fc:74:79:40:b0:f5:2d:86:74:de:a5:02:50: 45:d2:34:f8:f9:db:f6:27:d3:23:b0:65:e9:c8:7b:6e:98:b7: 75:1d:2e:61:11:70:90:a0:36:78:a2:3d:1c:a3:79:f8:75:6d: 65:3f:5f:79:60:53:6e:19:66:12:48:13:5d:30:b8:3b:d7:11: 48:e6:b9:4d:22:1d:c0:89:a9:1f:26:fd:88:ae:02:c4:5f:01: c8:0e:3e:9a:b1:6a:78:bb:88:d4:3c:9f:97:0c:d6:f0:3c:12: 9d:90:98:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Pprlg3+z7OKOrNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA4MDgzMFoXDTI2MTIwMzA5MDgzMFowLzEtMCsGA1UEAxMk Zjk5OWRmYWEtZGY3NS00YTczLTgwZmQtMWVmYmMwMTU1YTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxACCER+pOf5uBe04j15dl8DicX7dHwkI75DS yM2zbmpwAeBQ4p7gHNmsdH8UivNGQJQgcBQWbXWyJuWOihwwqNpZNHfCKiU83hmy aBDwFO9pufXpDtD4zVjNZ0HuvU3IYkSF45OrnhzNg15Wx4Z5dnJNEXHD3eG5CT4T vj2UhDr8jTyi1wyWisFfQlvkkr+myYNp17dgnGI8x4kklrxpnt1jUC+N6RhOwD1C ja2p8JbdqqkZ0CeJmQusliD1K7gvug68x61Artcp6JRJz5o3X11jBN9wMjHq94jw +9qN78PRWSCLbWy7fZsmFlqAxjuFTUYcKt7VGb0xx7ELAekXuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvrzAMNDiCtb0Ux8UMFb1LY3RdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDVmMjkxZDYtNzg3Ni0z YWE2LWJjMTUtYTk2N2QxMDY4Y2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDztbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCkKq9j20WJpmyzBRgpBGH+OuQPYcdQVtj3wACmRz5vKUXHIYV8468+ vGG0enBoG7/inSnsklu91/iUnChKLtFDcd0+J/UJ2i4O2F6fwoldWv8RlhAd19+r xe3WPTiX7GWM8uRkPyYiou3OlKc2FVwjfOGk0dFuSUgE/UWOE2e2wNhWcVVbA+ZX SmwIDfiXVDkqr7Ze/HR5QLD1LYZ03qUCUEXSNPj52/Yn0yOwZenIe26Yt3UdLmER cJCgNniiPRyjefh1bWU/X3lgU24ZZhJIE10wuDvXEUjmuU0iHcCJqR8m/YiuAsRf AcgOPpqxani7iNQ8n5cM1vA8Ep2QmHA= -----END CERTIFICATE-----Generated at Fri Sep 4 22:13:51 2026 by rpki-client