$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/557db4cc-e542-3053-8f6f-c009c46a8ec0.roa File: 557db4cc-e542-3053-8f6f-c009c46a8ec0.roa (raw, json) Hash identifier: StYV8qNOWT+3M7BUFx+a33VO3ZlPJ0SLcVbsfLj9b6E= Subject key identifier: 14:49:E6:AD:C7:80:AE:F0:09:1F:D0:DA:0C:7E:73:FA:82:41:34:5F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC2873B96C9FB426DB094B340 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/557db4cc-e542-3053-8f6f-c009c46a8ec0.roa Signing time: Fri 07 Aug 2026 17:07:49 +0000 ROA not before: Fri 07 Aug 2026 17:07:49 +0000 ROA not after: Thu 05 Nov 2026 18:07:49 +0000 asID: 395954 IP address blocks: 142.234.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:87:3b:96:c9:fb:42:6d:b0:94:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 7 17:07:49 2026 GMT Not After : Nov 5 18:07:49 2026 GMT Subject: CN=3e2d1c03-4565-4656-8ebf-8d6f802005a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d6:44:5f:e2:ba:19:f2:90:a3:95:b1:db:77: 10:0f:44:2b:ba:fb:6c:f1:52:d5:fe:68:24:aa:2f: 3e:0e:62:66:1e:9c:aa:00:c4:0b:a8:7e:ad:a1:51: 41:75:83:06:98:99:04:ad:62:e6:82:42:9e:8d:16: 1a:ab:c7:53:9f:78:9b:f6:f1:5f:7a:ef:fe:92:a4: f4:10:f3:42:d7:aa:10:61:e8:8c:be:8f:f7:aa:c5: 07:eb:5b:6f:72:f4:9e:37:61:67:0f:ec:8c:3c:f8: 2c:a8:dc:c6:13:c6:fa:f8:94:11:7a:2c:d1:72:0e: 67:57:f4:c0:72:36:49:56:21:33:4c:f7:78:a9:96: fc:13:36:bf:da:42:a7:cd:50:4f:a9:a4:aa:34:03: 1b:33:11:26:bc:ec:99:2f:7f:d3:16:eb:fb:25:08: bf:bb:bd:c3:ba:47:fe:04:5f:0d:aa:fe:1c:9f:d4: 88:28:e8:3f:f6:0e:a7:38:b2:34:dc:dc:9c:31:d1: b0:6d:50:79:21:63:01:07:57:79:59:0c:cc:06:23: e1:de:94:df:c0:95:f2:a3:0a:b0:be:70:f3:dc:6a: 03:d7:23:67:c6:e3:5e:45:fd:a9:e5:1b:a5:61:87: ef:d5:4f:77:c9:1b:96:c9:c9:c9:e7:97:6b:8d:e9: 56:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:49:E6:AD:C7:80:AE:F0:09:1F:D0:DA:0C:7E:73:FA:82:41:34:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/557db4cc-e542-3053-8f6f-c009c46a8ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.234.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:78:2e:86:f2:90:66:49:bc:e0:10:ed:b8:96:7b:ce:c9:ca: b6:c4:18:3d:36:59:ff:78:69:74:29:ae:fd:fd:a6:6d:2f:ea: 5e:18:d8:60:98:2a:e7:80:60:4c:8d:06:0d:d8:03:eb:74:2d: 48:48:84:b2:67:fa:6c:d0:6c:e2:17:53:aa:13:ac:21:ee:89: c9:a8:0c:5c:55:cf:07:8d:5a:4a:cd:56:6b:7e:ef:4c:4e:4b: 83:1f:c1:60:fe:69:f0:f7:c3:b2:12:d5:c0:39:21:31:ec:58: 15:f9:fb:f7:50:c8:e2:6e:65:c0:59:b4:03:08:92:7e:5a:47: 01:b8:4b:f7:a2:ef:75:14:8a:48:97:61:e0:54:f2:15:8b:2d: 83:09:01:73:d5:03:65:5d:f1:d9:12:fd:5f:e7:21:0c:66:4a: 5e:0a:54:e4:d5:1f:47:63:1c:2d:f7:20:a7:21:4d:5a:f8:23: aa:ea:53:79:30:25:04:ad:b7:d6:2d:2c:94:ee:5a:4e:10:3c: 86:8b:c0:c6:ab:f3:03:ba:43:b4:20:ca:60:e3:63:90:1c:71: b2:1a:28:a8:b3:3f:b9:27:0b:ef:ca:38:93:2f:49:b8:c5:12: 43:35:77:75:21:5f:62:b3:86:55:f5:16:d4:16:e0:91:a4:42: e6:9a:de:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ChzuWyftCbbCUs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNzE3MDc0OVoXDTI2MTEwNTE4MDc0OVowLzEtMCsGA1UEAxMk M2UyZDFjMDMtNDU2NS00NjU2LThlYmYtOGQ2ZjgwMjAwNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdZEX+K6GfKQo5Wx23cQD0Qruvts8VLV/mgk qi8+DmJmHpyqAMQLqH6toVFBdYMGmJkErWLmgkKejRYaq8dTn3ib9vFfeu/+kqT0 EPNC16oQYeiMvo/3qsUH61tvcvSeN2FnD+yMPPgsqNzGE8b6+JQReizRcg5nV/TA cjZJViEzTPd4qZb8Eza/2kKnzVBPqaSqNAMbMxEmvOyZL3/TFuv7JQi/u73Dukf+ BF8Nqv4cn9SIKOg/9g6nOLI03NycMdGwbVB5IWMBB1d5WQzMBiPh3pTfwJXyowqw vnDz3GoD1yNnxuNeRf2p5RulYYfv1U93yRuWycnJ55drjelWswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRJ5q3HgK7wCR/Q2gx+c/qCQTRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNTU3ZGI0Y2MtZTU0Mi0z MDUzLThmNmYtYzAwOWM0NmE4ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjuooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMR4LobykGZJvOAQ7biWe87JyrbEGD02Wf94aXQprv39pm0v6l4Y2GCY KueAYEyNBg3YA+t0LUhIhLJn+mzQbOIXU6oTrCHuicmoDFxVzweNWkrNVmt+70xO S4MfwWD+afD3w7IS1cA5ITHsWBX5+/dQyOJuZcBZtAMIkn5aRwG4S/ei73UUikiX YeBU8hWLLYMJAXPVA2Vd8dkS/V/nIQxmSl4KVOTVH0djHC33IKchTVr4I6rqU3kw JQStt9YtLJTuWk4QPIaLwMar8wO6Q7QgymDjY5AccbIaKKizP7knC+/KOJMvSbjF EkM1d3UhX2KzhlX1FtQW4JGkQuaa3kY= -----END CERTIFICATE-----Generated at Thu Aug 27 17:37:31 2026 by rpki-client