$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4b91efff-c7c8-3109-934e-1f1b7232de2b.roa File: 4b91efff-c7c8-3109-934e-1f1b7232de2b.roa (raw, json) Hash identifier: 5nILLDLM0AQPYPYcu0+GAzv2NicXyxC1PdCeblXzl/Y= Subject key identifier: 7F:D4:DB:F7:83:2B:E7:BF:25:14:45:C2:65:B4:4A:75:ED:1E:11:EA Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5E62DC36F5576D9F57E8CD80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4b91efff-c7c8-3109-934e-1f1b7232de2b.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 27411 IP address blocks: 173.234.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:dc:36:f5:57:6d:9f:57:e8:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=0829e602-d254-4780-a2f0-2ac14a80170e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:96:a4:b2:66:1b:bc:11:47:79:9a:d9:9d:f8: 17:02:a9:74:42:f5:5d:59:d1:3a:a4:31:17:62:27: 5a:00:c9:46:bc:a1:ba:ff:57:79:e3:d3:e4:d7:cc: b0:b8:1f:8f:a7:db:61:a2:d8:fb:93:5b:a9:37:8d: a9:8c:b3:ba:91:18:45:cc:d0:c6:31:f2:54:e1:86: b1:0b:d6:f7:da:a7:3c:96:db:7c:00:23:b2:f7:8a: 35:2e:1d:8f:fa:33:8e:fe:6b:73:2a:c2:24:d9:ed: 30:26:29:04:80:bc:7a:b3:14:b0:f6:a9:55:ff:f7: 67:85:be:78:04:7a:4c:a9:75:c4:ae:68:7c:31:6f: 3a:1a:5b:19:50:68:38:27:d4:db:e9:59:29:01:cb: 68:50:dc:a5:34:f2:a0:f9:e9:67:ff:b3:4d:26:8d: f5:cd:1b:af:01:43:95:19:88:3b:97:de:f1:2a:34: 69:76:48:61:42:60:76:d5:00:ae:b6:10:02:8c:49: fc:93:53:91:23:32:1b:2f:ed:4a:5a:3d:c1:d2:63: 2f:73:09:0b:f8:1d:58:92:4e:18:37:dc:00:3e:4d: 98:41:32:1a:29:6c:5d:e5:17:cf:1f:01:dd:c2:d5: 87:9b:9c:12:b5:90:3f:b8:7a:05:2e:5a:3a:d8:3b: 22:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D4:DB:F7:83:2B:E7:BF:25:14:45:C2:65:B4:4A:75:ED:1E:11:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4b91efff-c7c8-3109-934e-1f1b7232de2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:06:74:ca:ad:a2:f9:fe:5f:db:c3:de:17:34:58:43:8f:c8: 45:68:fd:b6:34:8a:07:e3:79:ca:a5:50:00:15:6d:60:02:ad: 74:2b:11:eb:7c:d8:09:c6:b1:00:89:1d:98:23:6b:a2:ed:a5: 0b:63:e2:a1:38:de:a5:f3:e7:45:4c:57:08:a8:88:5e:f3:0d: 63:42:21:17:00:4e:f1:9a:46:51:0e:28:59:9c:87:70:06:17: 37:15:39:cb:3d:cf:22:33:b6:42:2e:cf:85:98:4f:80:c3:57: 2f:6d:a2:10:a6:c0:5f:62:10:d7:ef:d0:63:13:da:82:6a:cb: a4:1b:fd:f4:09:82:d8:3f:b3:66:dd:82:49:03:79:de:43:80: ca:30:b1:55:03:2e:9f:e7:da:27:48:e9:0f:c0:ce:e4:c4:5a: e5:87:df:95:4d:a8:07:4c:5d:b3:97:2d:ba:60:24:68:e1:81: f7:40:ce:32:11:fb:4d:ec:57:b9:c9:bf:f8:d6:7e:e8:06:e3: 37:5c:c4:88:3e:48:23:63:c9:e8:cd:d6:b5:e4:03:18:08:a8: 39:81:3c:d1:00:73:d0:49:c3:06:35:ca:4f:cc:05:33:da:f8: 1f:63:72:93:e2:55:94:17:73:02:54:06:ec:d8:b1:bc:e9:49: d6:c0:79:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtw29Vdtn1fozYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MDgyOWU2MDItZDI1NC00NzgwLWEyZjAtMmFjMTRhODAxNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7paksmYbvBFHeZrZnfgXAql0QvVdWdE6pDEX YidaAMlGvKG6/1d549Pk18ywuB+Pp9thotj7k1upN42pjLO6kRhFzNDGMfJU4Yax C9b32qc8ltt8ACOy94o1Lh2P+jOO/mtzKsIk2e0wJikEgLx6sxSw9qlV//dnhb54 BHpMqXXErmh8MW86GlsZUGg4J9Tb6VkpActoUNylNPKg+eln/7NNJo31zRuvAUOV GYg7l97xKjRpdkhhQmB21QCuthACjEn8k1ORIzIbL+1KWj3B0mMvcwkL+B1Ykk4Y N9wAPk2YQTIaKWxd5RfPHwHdwtWHm5wStZA/uHoFLlo62DsibwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/U2/eDK+e/JRRFwmW0SnXtHhHqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNGI5MWVmZmYtYzdjOC0z MTA5LTkzNGUtMWYxYjcyMzJkZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDreo4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwGdMqtovn+X9vD3hc0WEOPyEVo/bY0igfjecqlUAAVbWACrXQrEet8 2AnGsQCJHZgja6LtpQtj4qE43qXz50VMVwioiF7zDWNCIRcATvGaRlEOKFmch3AG FzcVOcs9zyIztkIuz4WYT4DDVy9tohCmwF9iENfv0GMT2oJqy6Qb/fQJgtg/s2bd gkkDed5DgMowsVUDLp/n2idI6Q/AzuTEWuWH35VNqAdMXbOXLbpgJGjhgfdAzjIR +03sV7nJv/jWfugG4zdcxIg+SCNjyejN1rXkAxgIqDmBPNEAc9BJwwY1yk/MBTPa +B9jcpPiVZQXcwJUBuzYsbzpSdbAebk= -----END CERTIFICATE-----Generated at Tue Oct 13 12:50:48 2026 by rpki-client