$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5498a4be-5e72-3526-8bce-512a32fa40d5.roa File: 5498a4be-5e72-3526-8bce-512a32fa40d5.roa (raw, json) Hash identifier: fkHpyYnRKW3/Vn7KQlVSSmzgjk29HFwUl2K2Z58I5H8= Subject key identifier: 0A:32:2D:2C:24:21:66:27:45:F4:FD:60:06:CF:05:59:04:79:27:DD Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF7ADC0F84BC7881B610D000 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5498a4be-5e72-3526-8bce-512a32fa40d5.roa Signing time: Thu 06 Aug 2026 14:55:27 +0000 ROA not before: Thu 06 Aug 2026 14:55:27 +0000 ROA not after: Wed 04 Nov 2026 15:55:27 +0000 asID: 394380 IP address blocks: 172.241.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:7a:dc:0f:84:bc:78:81:b6:10:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:55:27 2026 GMT Not After : Nov 4 15:55:27 2026 GMT Subject: CN=52cee1ba-66c6-487d-b3d9-f0297d9881ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:0c:c2:28:c2:14:ae:49:81:4f:8f:00:c4: 6d:b3:0a:9f:7d:98:02:e2:ae:7c:aa:10:90:fa:4a: 39:d3:21:ef:99:51:13:01:a0:da:20:03:76:f4:b1: 82:07:f0:cd:c2:12:a2:20:90:70:e5:ab:bb:af:42: 96:44:a8:02:fd:e7:66:51:e8:01:2f:c9:54:8e:ad: 66:bf:85:66:f9:5e:7c:6b:f4:21:66:a9:43:7c:30: 1d:6d:11:bc:13:e5:bd:22:c8:01:ab:03:f4:ac:56: f2:8b:77:b7:7f:b2:bd:e0:0c:f4:e1:b0:d4:1a:c2: 90:99:21:11:67:1e:5d:ff:60:74:0a:01:29:b3:8d: ce:cf:56:04:89:78:88:2d:26:0e:19:a2:4d:2f:13: 88:96:6a:57:d1:61:b9:f9:a3:2a:c9:15:f8:d7:cd: 1f:a3:91:30:8c:4b:33:9b:ad:ce:08:9c:4a:65:bb: 0a:9b:ea:0c:72:25:42:c7:e0:42:ff:38:e4:e3:85: 56:48:bd:6a:2d:53:7f:18:a4:91:0d:31:3c:81:5f: 26:9b:43:e2:2c:98:c2:eb:e9:a2:d0:e7:35:d8:f2: 9f:93:fe:8a:ec:a3:3e:6d:3f:2e:97:f9:21:a3:52: 5c:5e:96:92:f1:5c:fc:78:f7:33:92:1c:6b:fc:7e: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:32:2D:2C:24:21:66:27:45:F4:FD:60:06:CF:05:59:04:79:27:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5498a4be-5e72-3526-8bce-512a32fa40d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:1d:c2:66:b6:a9:06:2e:e2:92:19:04:07:cd:ea:ae:0c:38: 19:b6:f5:a8:d3:9f:5e:c9:bf:e8:41:ac:3a:01:62:06:01:29: 79:0c:97:c1:f3:39:5a:08:44:bb:2b:85:99:92:61:68:dd:44: 15:15:fc:97:38:dc:90:7b:a0:d7:8e:d4:f5:72:bd:13:94:00: f8:3b:6b:fa:da:16:ca:39:14:3d:50:d2:6d:59:56:8d:25:e4: a3:e3:85:ac:1f:ae:05:27:1e:c0:45:3c:27:5d:b4:02:46:db: 36:f0:8b:92:49:ad:0e:6d:71:da:05:68:66:51:3c:19:64:54: 6d:01:ea:44:27:43:2f:86:41:14:f2:da:3a:85:39:73:a6:44: 33:0c:95:3d:6e:ad:20:44:97:c9:cb:1c:a0:f9:bd:aa:ef:a0: 09:14:7b:1a:2f:c9:c6:09:3d:4e:29:a6:75:4e:5f:de:05:b3: bd:e2:33:55:f8:e6:2d:d7:ce:4e:bc:2a:bb:86:9a:e3:86:ce: 4a:5e:e5:84:cd:06:24:af:97:2c:1a:40:36:9b:8c:68:43:ea: 0c:96:7e:a5:84:22:c6:f9:2b:ec:38:b4:49:19:8d:1e:39:db: 94:6d:c1:91:0d:64:b0:81:40:87:78:23:b3:74:bc:64:fd:45: 7e:02:be:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/etwPhLx4gbYQ0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0NTUyN1oXDTI2MTEwNDE1NTUyN1owLzEtMCsGA1UEAxMk NTJjZWUxYmEtNjZjNi00ODdkLWIzZDktZjAyOTdkOTg4MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMIMwijCFK5JgU+PAMRtswqffZgC4q58qhCQ +ko50yHvmVETAaDaIAN29LGCB/DNwhKiIJBw5au7r0KWRKgC/edmUegBL8lUjq1m v4Vm+V58a/QhZqlDfDAdbRG8E+W9IsgBqwP0rFbyi3e3f7K94Az04bDUGsKQmSER Zx5d/2B0CgEps43Oz1YEiXiILSYOGaJNLxOIlmpX0WG5+aMqyRX4180fo5EwjEsz m63OCJxKZbsKm+oMciVCx+BC/zjk44VWSL1qLVN/GKSRDTE8gV8mm0PiLJjC6+mi 0Oc12PKfk/6K7KM+bT8ul/kho1JcXpaS8Vz8ePczkhxr/H5/NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoyLSwkIWYnRfT9YAbPBVkEeSfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNTQ5OGE0YmUtNWU3Mi0z NTI2LThiY2UtNTEyYTMyZmE0MGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkdwma2qQYu4pIZBAfN6q4MOBm29ajTn17Jv+hBrDoBYgYBKXkMl8Hz OVoIRLsrhZmSYWjdRBUV/Jc43JB7oNeO1PVyvROUAPg7a/raFso5FD1Q0m1ZVo0l 5KPjhawfrgUnHsBFPCddtAJG2zbwi5JJrQ5tcdoFaGZRPBlkVG0B6kQnQy+GQRTy 2jqFOXOmRDMMlT1urSBEl8nLHKD5varvoAkUexovycYJPU4ppnVOX94Fs73iM1X4 5i3Xzk68KruGmuOGzkpe5YTNBiSvlywaQDabjGhD6gyWfqWEIsb5K+w4tEkZjR45 25RtwZENZLCBQId4I7N0vGT9RX4CvhI= -----END CERTIFICATE-----Generated at Thu Aug 27 18:19:40 2026 by rpki-client