$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4e2ef101-d371-3b28-a419-e13ef6386bf7.roa File: 4e2ef101-d371-3b28-a419-e13ef6386bf7.roa (raw, json) Hash identifier: Le7aBsSBFYv34+h+v5zjVix4sRy80BTU2+YcuDggyHc= Subject key identifier: 6E:D3:D8:EE:13:12:26:4F:33:D2:66:F3:92:29:17:CB:AA:A0:28:D5 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC28CABCEF8C597E78FF66F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4e2ef101-d371-3b28-a419-e13ef6386bf7.roa Signing time: Fri 07 Aug 2026 17:18:46 +0000 ROA not before: Fri 07 Aug 2026 17:18:46 +0000 ROA not after: Thu 05 Nov 2026 18:18:46 +0000 asID: 395954 IP address blocks: 142.91.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:8c:ab:ce:f8:c5:97:e7:8f:f6:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 7 17:18:46 2026 GMT Not After : Nov 5 18:18:46 2026 GMT Subject: CN=321e859a-54aa-4807-aa02-eaf5a4168519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7f:ba:c5:e8:6c:e4:a1:df:98:d8:68:ca:21: 26:aa:3e:da:05:68:62:a6:7b:3c:a8:b8:96:3e:26: 3c:0d:81:96:dc:c1:25:67:39:b6:13:9a:e3:cc:93: 70:ed:bd:14:f4:22:1c:44:08:2e:5c:ac:f4:a8:09: 24:19:87:f2:38:59:18:df:a2:cd:78:60:30:af:95: 76:70:d6:1f:bf:5d:ea:78:16:60:8d:b0:8b:e4:bf: 51:5b:27:13:6b:b5:16:c7:eb:57:c5:50:1c:20:bd: 63:0c:13:6d:2d:8b:8d:44:4d:6e:d9:8e:61:d8:25: c8:6b:68:dc:fd:67:df:39:84:12:24:01:85:7e:75: bb:71:78:2b:00:75:24:82:f1:d1:51:88:6d:92:0e: 2f:a7:af:4b:fc:10:10:f7:db:09:93:4e:9a:0b:86: c5:9e:43:90:6d:ab:a3:ca:e9:2e:ab:e4:ab:06:0d: 93:e8:71:b1:02:1e:b6:e5:7c:ad:21:0c:4e:6d:ea: a5:85:53:65:dc:90:46:d3:d1:c8:51:a4:71:19:58: 47:99:32:d4:45:0b:c5:30:84:88:a6:d5:b3:a5:1b: c8:1b:d1:83:2f:52:7c:5d:d6:13:54:12:e9:48:ab: 3b:96:94:7d:16:fe:8a:19:92:1e:b8:93:8d:29:9f: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D3:D8:EE:13:12:26:4F:33:D2:66:F3:92:29:17:CB:AA:A0:28:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4e2ef101-d371-3b28-a419-e13ef6386bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.91.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:72:cf:a5:90:ce:fc:03:f9:ae:8c:a5:44:ee:60:9a:0f:a0: 9c:82:89:32:16:57:3f:b3:cc:8b:9c:19:7d:4f:4b:54:20:92: bb:4a:22:43:c0:06:7a:b5:ed:df:b8:eb:96:d7:53:de:9c:2c: 93:9b:ca:ed:d6:4d:22:fc:6e:d2:9c:4d:8e:f1:4e:43:eb:77: ca:c5:c6:3c:15:62:a0:c6:43:9e:b5:c9:bc:5f:db:79:e0:98: 21:57:ac:e2:80:df:04:88:12:1b:91:7c:da:85:95:bc:b7:c2: 84:a3:cc:58:a8:76:1b:44:8e:30:96:fc:42:6c:05:08:7c:d3: 18:01:8f:2a:4c:57:62:3c:ed:a3:4d:ac:96:b3:cb:77:ad:ff: d9:bf:c4:0c:86:4f:01:78:e1:d2:fd:8e:73:27:79:41:99:a6: c4:a6:22:6b:af:b7:6a:4b:d6:eb:4f:5b:db:3f:87:c2:79:01: 2c:4b:47:cc:8c:8f:db:fc:74:bb:e4:2f:64:c4:37:0a:d2:67: 38:30:88:55:b0:af:12:72:3b:b6:21:49:a5:cd:3c:60:c2:2f: 0b:1c:78:1c:c3:9b:56:0f:06:c4:ef:c5:89:8b:3c:b1:5c:e4: 53:2f:56:ea:ae:32:17:40:c1:0d:22:9a:0f:eb:a4:fc:65:bc: e0:dc:47:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CjKvO+MWX54/2b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNzE3MTg0NloXDTI2MTEwNTE4MTg0NlowLzEtMCsGA1UEAxMk MzIxZTg1OWEtNTRhYS00ODA3LWFhMDItZWFmNWE0MTY4NTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX+6xehs5KHfmNhoyiEmqj7aBWhipns8qLiW PiY8DYGW3MElZzm2E5rjzJNw7b0U9CIcRAguXKz0qAkkGYfyOFkY36LNeGAwr5V2 cNYfv13qeBZgjbCL5L9RWycTa7UWx+tXxVAcIL1jDBNtLYuNRE1u2Y5h2CXIa2jc /WffOYQSJAGFfnW7cXgrAHUkgvHRUYhtkg4vp69L/BAQ99sJk06aC4bFnkOQbauj yukuq+SrBg2T6HGxAh625XytIQxObeqlhVNl3JBG09HIUaRxGVhHmTLURQvFMISI ptWzpRvIG9GDL1J8XdYTVBLpSKs7lpR9Fv6KGZIeuJONKZ9KrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7T2O4TEiZPM9Jm85IpF8uqoCjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNGUyZWYxMDEtZDM3MS0z YjI4LWE0MTktZTEzZWY2Mzg2YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjlvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtyz6WQzvwD+a6MpUTuYJoPoJyCiTIWVz+zzIucGX1PS1QgkrtKIkPA Bnq17d+465bXU96cLJObyu3WTSL8btKcTY7xTkPrd8rFxjwVYqDGQ561ybxf23ng mCFXrOKA3wSIEhuRfNqFlby3woSjzFiodhtEjjCW/EJsBQh80xgBjypMV2I87aNN rJazy3et/9m/xAyGTwF44dL9jnMneUGZpsSmImuvt2pL1utPW9s/h8J5ASxLR8yM j9v8dLvkL2TENwrSZzgwiFWwrxJyO7YhSaXNPGDCLwsceBzDm1YPBsTvxYmLPLFc 5FMvVuquMhdAwQ0img/rpPxlvODcRzo= -----END CERTIFICATE-----Generated at Thu Aug 27 19:04:18 2026 by rpki-client