$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4a2eeeb1-568a-3671-887c-7a4618854701.roa File: 4a2eeeb1-568a-3671-887c-7a4618854701.roa (raw, json) Hash identifier: IWx++WfBNaFI7ir+3yMj8Zpw5oEv1JSsGkPPYDqWPR4= Subject key identifier: 33:EF:B7:E0:EB:3D:22:F3:F5:55:14:94:E0:7E:46:B3:6B:6C:C2:E3 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D617CFB7F5E8948996740 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4a2eeeb1-568a-3671-887c-7a4618854701.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 172.255.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 17 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:61:7c:fb:7f:5e:89:48:99:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=9a2ef6be-2cef-47ad-9555-6ec35bfe6cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:c9:bb:ae:3a:76:24:42:5f:4c:c1:42:e6: 22:4e:dd:9c:6c:f6:b2:2b:d9:c7:2c:5b:dd:3f:bc: e1:c4:c3:a0:b6:d9:49:08:3f:1b:5e:00:bc:76:9d: ac:6f:54:4c:2b:fc:28:24:72:e8:f1:c1:f5:b2:32: e4:0d:95:96:1d:ce:43:38:6d:2c:c3:8b:9c:bb:28: e0:b9:a2:af:cb:9a:c7:c5:1a:f6:1b:ba:55:e6:1b: 10:ca:df:62:ff:d6:e1:17:2c:8c:5a:5d:c6:91:83: 06:3d:e0:0e:b7:49:78:93:c2:33:01:16:d2:80:04: 33:2d:80:96:98:9d:95:fa:39:03:93:f9:8e:ee:30: f0:16:da:58:fa:8b:b2:d0:7d:2d:d1:2c:7c:20:d3: e2:44:95:22:67:8c:0b:96:4f:86:24:3a:3a:84:b3: 9f:a8:a9:74:10:ec:de:36:2f:c8:6f:da:5e:9c:07: fb:f3:88:d6:a4:c6:4b:ba:47:f8:05:1c:d1:4a:95: 6c:ea:5a:1b:68:ac:58:39:b1:7d:de:7d:03:c9:01: 2f:7b:92:0b:08:3a:c2:ad:a7:23:56:49:12:27:35: 55:cb:e0:fe:82:8f:c9:12:9c:d5:ec:49:35:64:21: 9e:53:84:4f:22:5e:68:a1:49:a8:f7:66:15:8e:91: 3d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EF:B7:E0:EB:3D:22:F3:F5:55:14:94:E0:7E:46:B3:6B:6C:C2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4a2eeeb1-568a-3671-887c-7a4618854701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:50:07:c6:b2:77:e2:2c:4d:ab:7f:d0:37:99:07:f0:e3:4d: 43:14:e4:ac:d8:6c:cb:d1:74:91:9b:73:6c:97:cb:81:96:90: 03:00:42:db:ee:df:e8:b4:25:86:61:1c:5d:98:79:c7:b2:a0: 02:88:56:9f:4a:b7:d2:7b:7f:85:6e:5f:98:68:d3:e3:2f:b6: 26:34:06:3d:3a:9d:8b:f2:f9:d7:33:8f:c4:52:8a:ac:39:db: 22:d1:6a:8f:9e:7d:16:ce:00:cb:6d:f1:b4:e0:e8:ef:a7:02: 5c:92:30:28:27:67:cd:2f:05:fa:a6:f0:f1:27:1d:a1:a4:cc: b5:fe:52:1b:4c:c1:fd:5f:77:00:87:cd:36:a4:6d:16:a7:31: 6d:4d:f3:7a:8e:d9:75:b5:b7:8f:90:84:a6:bd:46:db:bb:27: 8d:f6:a4:40:5d:08:f0:44:45:d5:22:23:03:a2:be:92:2a:81: 41:1a:f7:1e:21:31:1a:62:42:97:0d:4a:d5:79:5e:b4:99:d4: 6a:e5:46:9d:70:aa:23:b6:e1:79:29:ac:2b:6d:b3:20:de:ce: ec:92:d6:78:d1:67:13:ec:00:08:65:9e:24:d3:e8:5d:71:5d: e7:70:35:f8:07:2f:3c:29:55:35:f9:e3:b0:e5:e8:55:25:01: 08:20:d7:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWF8+39eiUiZZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OWEyZWY2YmUtMmNlZi00N2FkLTk1NTUtNmVjMzViZmU2Y2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjnJu646diRCX0zBQuYiTt2cbPayK9nHLFvd P7zhxMOgttlJCD8bXgC8dp2sb1RMK/woJHLo8cH1sjLkDZWWHc5DOG0sw4ucuyjg uaKvy5rHxRr2G7pV5hsQyt9i/9bhFyyMWl3GkYMGPeAOt0l4k8IzARbSgAQzLYCW mJ2V+jkDk/mO7jDwFtpY+ouy0H0t0Sx8INPiRJUiZ4wLlk+GJDo6hLOfqKl0EOze Ni/Ib9penAf784jWpMZLukf4BRzRSpVs6lobaKxYObF93n0DyQEve5ILCDrCracj VkkSJzVVy+D+go/JEpzV7Ek1ZCGeU4RPIl5ooUmo92YVjpE9fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPvt+DrPSLz9VUUlOB+RrNrbMLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNGEyZWVlYjEtNTY4YS0z NjcxLTg4N2MtN2E0NjE4ODU0NzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrP/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJQB8ayd+IsTat/0DeZB/DjTUMU5KzYbMvRdJGbc2yXy4GWkAMAQtvu 3+i0JYZhHF2YeceyoAKIVp9Kt9J7f4VuX5ho0+MvtiY0Bj06nYvy+dczj8RSiqw5 2yLRao+efRbOAMtt8bTg6O+nAlySMCgnZ80vBfqm8PEnHaGkzLX+UhtMwf1fdwCH zTakbRanMW1N83qO2XW1t4+QhKa9Rtu7J432pEBdCPBERdUiIwOivpIqgUEa9x4h MRpiQpcNStV5XrSZ1GrlRp1wqiO24XkprCttsyDezuyS1njRZxPsAAhlniTT6F1x XedwNfgHLzwpVTX547Dl6FUlAQgg130= -----END CERTIFICATE-----Generated at Fri Oct 16 08:03:48 2026 by rpki-client