$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/46db9c36-7200-3a51-ba13-1046216a4e05.roa File: 46db9c36-7200-3a51-ba13-1046216a4e05.roa (raw, json) Hash identifier: bcC92OlD8Bj8kEuw2EtrbzUWYip0FmlkL14Zkihf5wo= Subject key identifier: D7:75:50:95:77:AA:31:67:59:7A:53:93:32:46:5E:48:23:FB:03:18 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D61DE0116E3503C0B8DA0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/46db9c36-7200-3a51-ba13-1046216a4e05.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 173.234.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 17 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:61:de:01:16:e3:50:3c:0b:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=aad3fbfd-2f86-476a-94d6-39e6129e6d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:72:b8:2c:12:a1:10:30:3d:af:88:c6:ed:59: f4:d6:47:f4:78:04:91:ab:a3:d6:43:13:2c:4d:f6: c8:52:c2:31:f9:bc:49:e0:27:f3:92:83:24:c0:5a: e2:e5:82:5f:08:97:0c:d3:ea:ec:01:17:e7:c7:6c: a8:b0:e8:cf:3b:b8:0d:9b:74:fb:ce:7a:7a:3c:8e: dc:39:c7:21:ac:37:1e:0f:b5:58:f2:43:ba:d2:1c: f0:62:f8:83:01:73:7b:79:31:0f:e5:99:17:40:aa: 7a:0d:b3:12:bd:fe:58:cb:f8:c7:24:92:c4:90:48: a1:52:75:b7:e9:1e:73:c4:4e:70:a3:87:31:95:82: cc:dd:1f:cc:5c:af:3c:e6:16:f2:b2:d2:7b:fb:0c: 53:ea:1a:12:bd:89:3b:3f:16:f4:49:56:c7:e0:6d: fc:2b:a8:25:7a:9e:34:cb:e0:7c:43:4b:fc:a3:6e: 49:fa:ea:3d:23:4f:7f:fc:95:b1:58:62:e8:44:88: 6a:30:97:ed:2e:af:06:98:9c:25:06:06:16:25:fb: 9e:b4:8f:15:5e:1c:48:69:af:24:a8:cf:29:e2:fe: 4a:e5:f4:25:95:71:f2:3d:df:9b:c8:ea:42:c1:11: 20:39:8d:dd:b5:f3:bb:b1:c9:0f:b3:e5:1b:22:67: 2c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:75:50:95:77:AA:31:67:59:7A:53:93:32:46:5E:48:23:FB:03:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/46db9c36-7200-3a51-ba13-1046216a4e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:49:db:c7:2e:98:c8:b3:83:f7:b3:94:c4:d1:c4:06:4d:fc: 73:17:7a:a1:64:c6:87:d4:7d:3e:38:a7:8b:b9:e6:b3:16:ec: 61:70:1f:b1:f0:04:d8:ff:e8:ad:cc:ec:2b:49:30:a8:d7:7a: f9:79:5b:99:09:8c:1f:56:7f:48:9d:24:03:cd:eb:5e:ba:a3: 38:41:76:b7:c4:78:b4:a1:a9:6c:92:23:9a:6a:3c:9e:ae:ff: e2:83:9f:39:0c:d3:5d:e2:9b:91:b5:35:58:47:0f:13:3c:86: 84:ed:bc:1f:d6:a2:6f:c5:ee:01:62:89:7d:c7:d6:9f:10:e4: 5f:2c:65:59:2c:80:d8:59:39:be:8d:34:b3:e9:65:0a:91:de: 23:83:e5:eb:e2:b3:31:15:df:b1:d0:2d:54:e6:b5:c6:01:d8: c6:aa:91:ad:18:04:92:1e:04:c6:1c:fb:8e:c9:47:c5:7a:ad: 66:68:06:e2:f8:9f:a8:0a:e6:ff:25:57:f9:dd:65:b3:b5:79: 62:de:bc:4d:f9:b6:38:f2:01:5b:1f:ac:fa:78:ff:98:e8:57: a5:cc:e0:fd:7b:f3:cf:3d:ea:dc:1f:e3:fe:4d:06:12:a2:c9: 58:2b:07:93:31:d5:9e:3b:d8:b2:10:1b:d8:ff:da:f5:d6:c0: 92:61:1b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWHeARbjUDwLjaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YWFkM2ZiZmQtMmY4Ni00NzZhLTk0ZDYtMzllNjEyOWU2ZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3K4LBKhEDA9r4jG7Vn01kf0eASRq6PWQxMs TfbIUsIx+bxJ4CfzkoMkwFri5YJfCJcM0+rsARfnx2yosOjPO7gNm3T7znp6PI7c OcchrDceD7VY8kO60hzwYviDAXN7eTEP5ZkXQKp6DbMSvf5Yy/jHJJLEkEihUnW3 6R5zxE5wo4cxlYLM3R/MXK885hbystJ7+wxT6hoSvYk7Pxb0SVbH4G38K6glep40 y+B8Q0v8o25J+uo9I09//JWxWGLoRIhqMJftLq8GmJwlBgYWJfuetI8VXhxIaa8k qM8p4v5K5fQllXHyPd+byOpCwREgOY3dtfO7sckPs+UbImcsBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNd1UJV3qjFnWXpTkzJGXkgj+wMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDZkYjljMzYtNzIwMC0z YTUxLWJhMTMtMTA0NjIxNmE0ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrep8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9J28cumMizg/ezlMTRxAZN/HMXeqFkxofUfT44p4u55rMW7GFwH7Hw BNj/6K3M7CtJMKjXevl5W5kJjB9Wf0idJAPN6166ozhBdrfEeLShqWySI5pqPJ6u /+KDnzkM013im5G1NVhHDxM8hoTtvB/Wom/F7gFiiX3H1p8Q5F8sZVksgNhZOb6N NLPpZQqR3iOD5eviszEV37HQLVTmtcYB2Maqka0YBJIeBMYc+47JR8V6rWZoBuL4 n6gK5v8lV/ndZbO1eWLevE35tjjyAVsfrPp4/5joV6XM4P1788896twf4/5NBhKi yVgrB5Mx1Z472LIQG9j/2vXWwJJhG30= -----END CERTIFICATE-----Generated at Thu Oct 15 20:57:15 2026 by rpki-client