$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4abb3ab5-5a15-38e4-9645-90867f423228.roa File: 4abb3ab5-5a15-38e4-9645-90867f423228.roa (raw, json) Hash identifier: 3UtrMJXNuKrOToCYll4lR1oWLJMUrQut5Mkg22oHrRo= Subject key identifier: AA:83:E3:DE:65:7D:2B:1D:29:1E:5E:A7:E3:3A:67:08:AA:E5:1B:7C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0FB828544E610162E0EE0040 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4abb3ab5-5a15-38e4-9645-90867f423228.roa Signing time: Fri 04 Sep 2026 08:43:38 +0000 ROA not before: Fri 04 Sep 2026 08:43:38 +0000 ROA not after: Thu 03 Dec 2026 09:43:38 +0000 asID: 395954 IP address blocks: 174.34.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:b8:28:54:4e:61:01:62:e0:ee:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 08:43:38 2026 GMT Not After : Dec 3 09:43:38 2026 GMT Subject: CN=49a9f71f-7c6d-4b62-aab3-896ddd0f4568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:dd:ea:94:b1:83:96:a3:f7:77:5b:b8:7c: c7:5f:86:b8:1f:2d:6b:9a:6b:00:de:36:1c:d2:1d: 82:ce:13:e8:8b:2c:f3:e2:33:2c:5d:34:e3:ec:fc: bc:2f:ef:27:18:f5:a6:60:ba:cd:94:f5:f5:8b:92: f2:92:9a:04:9e:e7:47:2b:4f:b1:e8:b9:2c:7f:6d: c8:04:77:10:bb:73:c3:1f:02:a8:d4:aa:bc:f1:e6: 0b:4c:63:87:f0:e6:83:80:4f:f2:63:c3:2c:26:4e: c3:f4:b5:64:7b:8f:fc:5c:87:9a:f5:80:4e:28:5e: 54:70:14:a9:37:fd:04:58:5a:c2:3b:03:47:6e:a1: e5:a6:a5:7d:4d:af:fa:64:ec:df:fe:4a:22:a8:9b: c6:61:6e:18:84:da:55:46:43:ea:8e:78:91:85:6f: 59:8e:4f:a5:54:6d:eb:f1:47:2c:43:77:fc:d6:53: 6a:fc:71:7f:30:c4:cd:6a:17:83:67:94:ad:b4:40: ef:00:7e:0e:45:cc:2b:93:fd:99:fa:cf:63:6a:5f: e3:ce:a3:0d:40:68:16:76:69:90:02:f6:4d:4e:4a: 48:aa:84:40:c8:3a:a3:92:ee:5a:b0:4a:2c:15:ba: 39:8a:cd:6d:5d:c9:a9:71:fd:9c:f6:31:22:56:20: 1d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:83:E3:DE:65:7D:2B:1D:29:1E:5E:A7:E3:3A:67:08:AA:E5:1B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4abb3ab5-5a15-38e4-9645-90867f423228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 174.34.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:16:04:e0:dc:aa:55:19:0a:64:44:7e:b9:b0:6e:f2:1c:1c: 30:4e:55:e4:82:f6:27:6c:a9:68:7b:f4:dc:cb:14:e6:2d:47: bc:ab:f8:82:18:78:57:d6:3b:12:0c:01:b8:53:2c:46:23:c7: a3:36:f9:c5:83:a8:f4:da:59:81:0f:9e:14:d7:74:3a:ed:e4: 47:34:e8:d4:c6:8a:46:67:78:43:5a:75:0e:d0:6b:bb:24:f8: 78:f7:99:88:25:af:c3:01:f8:b6:d2:b5:76:b1:86:d7:d8:19: 7e:a1:db:49:c7:94:c3:ff:fd:44:ac:32:e9:ca:f4:cf:82:30: 85:8c:dc:94:c2:cc:35:16:38:ae:f3:e9:19:b1:3b:ab:62:28: 29:3a:35:96:4f:a3:6d:c2:8e:82:51:29:bc:30:02:77:ff:e5: 3e:d8:fa:8c:8c:18:72:c0:26:d7:a4:3b:38:1d:85:f3:a8:b2: cb:61:32:05:97:7a:07:5e:b5:58:7c:2c:15:fb:0d:f9:ce:16: 7c:fa:c3:dc:2a:01:dc:ee:01:9d:22:62:79:94:61:5c:37:5f: 73:d6:ac:b0:ed:1c:6c:57:15:bf:2b:54:d6:13:52:d7:af:3f: 68:ab:34:7b:26:b9:b0:44:25:3d:8b:30:1b:be:72:95:e8:17: 53:9a:a2:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8PuChUTmEBYuDuAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA4NDMzOFoXDTI2MTIwMzA5NDMzOFowLzEtMCsGA1UEAxMk NDlhOWY3MWYtN2M2ZC00YjYyLWFhYjMtODk2ZGRkMGY0NTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lrd6pSxg5aj93dbuHzHX4a4Hy1rmmsA3jYc 0h2CzhPoiyzz4jMsXTTj7Py8L+8nGPWmYLrNlPX1i5LykpoEnudHK0+x6Lksf23I BHcQu3PDHwKo1Kq88eYLTGOH8OaDgE/yY8MsJk7D9LVke4/8XIea9YBOKF5UcBSp N/0EWFrCOwNHbqHlpqV9Ta/6ZOzf/koiqJvGYW4YhNpVRkPqjniRhW9Zjk+lVG3r 8UcsQ3f81lNq/HF/MMTNaheDZ5SttEDvAH4ORcwrk/2Z+s9jal/jzqMNQGgWdmmQ AvZNTkpIqoRAyDqjku5asEosFbo5is1tXcmpcf2c9jEiViAdFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqD495lfSsdKR5ep+M6Zwiq5Rt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNGFiYjNhYjUtNWExNS0z OGU0LTk2NDUtOTA4NjdmNDIzMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBriKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkWBODcqlUZCmREfrmwbvIcHDBOVeSC9idsqWh79NzLFOYtR7yr+IIY eFfWOxIMAbhTLEYjx6M2+cWDqPTaWYEPnhTXdDrt5Ec06NTGikZneENadQ7Qa7sk +Hj3mYglr8MB+LbStXaxhtfYGX6h20nHlMP//USsMunK9M+CMIWM3JTCzDUWOK7z 6RmxO6tiKCk6NZZPo23CjoJRKbwwAnf/5T7Y+oyMGHLAJtekOzgdhfOossthMgWX egdetVh8LBX7DfnOFnz6w9wqAdzuAZ0iYnmUYVw3X3PWrLDtHGxXFb8rVNYTUtev P2irNHsmubBEJT2LMBu+cpXoF1Oaoro= -----END CERTIFICATE-----Generated at Thu Sep 10 13:01:13 2026 by rpki-client