$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/561b7a02-ac86-3384-b9f1-7117aac14670.roa File: 561b7a02-ac86-3384-b9f1-7117aac14670.roa (raw, json) Hash identifier: 0oKYz4OKCNEHa3zNwlh8YO4kOvJm004Z0BV3FrEKQzI= Subject key identifier: 02:FD:D5:AF:94:42:37:2D:A4:29:84:0A:14:EC:3E:6A:C8:18:AE:04 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5E62DB1353D500DB648DF900 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/561b7a02-ac86-3384-b9f1-7117aac14670.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 19148 IP address blocks: 23.81.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:db:13:53:d5:00:db:64:8d:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=45a1a148-836e-4b51-9122-8671bf833844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:f0:ff:19:69:de:5b:b2:d1:60:34:b9:fc: 0a:46:a5:55:6a:ab:1a:c9:a7:98:84:b1:02:86:52: a0:64:17:58:71:e7:4f:6f:c3:71:51:00:b3:85:24: fb:e5:2d:7b:58:86:23:e1:b9:cc:bd:10:d5:14:81: 6b:19:b3:9a:9a:77:35:2a:bb:2b:9c:d9:5f:d0:e0: fc:f2:38:64:a8:64:f0:1c:ce:89:b6:34:ad:6e:cb: 11:2f:c8:13:85:df:5f:08:9a:f6:a6:76:98:db:1c: 30:ad:cd:95:71:b9:a9:92:45:ab:f3:b8:17:2a:12: ae:05:b4:ca:a2:3b:2b:93:a8:b8:22:c8:7c:c1:c4: 25:72:03:2d:d6:10:90:c7:1e:8d:8f:2c:e3:9d:d8: 9d:b0:42:30:7b:c5:6a:93:20:f3:9b:10:e6:6a:d4: 47:87:29:14:f6:00:5c:a9:cb:61:96:86:ae:8c:c0: a6:7f:7f:fe:5c:8e:47:5d:2d:37:72:bb:dd:22:06: e6:b0:f6:10:34:1e:26:8f:46:f9:5f:1a:70:65:dc: 70:e5:1a:31:8b:f6:0e:87:42:0b:a0:eb:28:12:bd: 7f:bd:88:9b:93:7d:63:b1:d6:cb:80:5e:cc:05:d2: 09:40:b0:5a:24:55:0d:bc:8e:e6:60:fd:09:35:52: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FD:D5:AF:94:42:37:2D:A4:29:84:0A:14:EC:3E:6A:C8:18:AE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/561b7a02-ac86-3384-b9f1-7117aac14670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.81.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:53:a5:05:c2:e4:db:9a:49:8e:c0:85:d3:5f:8a:95:69:d0: 8b:fc:8f:f4:d0:c4:2b:72:40:8a:a2:aa:d4:28:ac:1b:b0:35: 28:24:ed:65:18:44:78:07:73:04:29:06:cc:6c:26:1d:d1:2e: 29:18:cc:88:51:a1:66:b8:93:b1:40:61:1d:03:e5:43:db:7c: 2f:1f:55:60:6c:3c:0a:3c:5a:74:d6:b7:99:ab:79:17:11:04: 44:90:23:7f:ce:ab:67:5c:d2:b8:ef:78:2a:27:06:26:c3:c7: 65:fe:d4:a7:bb:48:78:2c:d6:c6:8a:83:14:71:1f:cd:7b:14: e1:71:8a:0d:94:e4:e1:6a:2b:45:8d:12:35:ef:1b:11:4a:02: 2f:2e:56:dc:44:e2:53:51:d5:54:fb:48:11:3f:35:30:b1:c8: 3c:a0:57:23:63:d0:e4:30:92:4d:96:b9:4f:ab:e0:17:c6:ac: 36:ca:6a:15:11:80:b5:04:ea:c6:63:e4:5d:1a:b6:51:73:94: 08:e7:7f:14:e8:19:af:77:91:19:45:bf:f7:e4:72:55:10:cf: 00:71:bd:54:b3:9a:f8:38:40:38:8d:8a:36:82:e4:83:02:29: 8d:1e:d9:0c:28:87:f5:2a:b2:47:36:c2:ca:9e:4d:33:3a:7d: ee:73:19:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtsTU9UA22SN+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NDVhMWExNDgtODM2ZS00YjUxLTkxMjItODY3MWJmODMzODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mvw/xlp3luy0WA0ufwKRqVVaqsayaeYhLEC hlKgZBdYcedPb8NxUQCzhST75S17WIYj4bnMvRDVFIFrGbOamnc1KrsrnNlf0OD8 8jhkqGTwHM6JtjStbssRL8gThd9fCJr2pnaY2xwwrc2VcbmpkkWr87gXKhKuBbTK ojsrk6i4Ish8wcQlcgMt1hCQxx6NjyzjndidsEIwe8VqkyDzmxDmatRHhykU9gBc qcthloaujMCmf3/+XI5HXS03crvdIgbmsPYQNB4mj0b5XxpwZdxw5Roxi/YOh0IL oOsoEr1/vYibk31jsdbLgF7MBdIJQLBaJFUNvI7mYP0JNVIbXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL91a+UQjctpCmEChTsPmrIGK4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNTYxYjdhMDItYWM4Ni0z Mzg0LWI5ZjEtNzExN2FhYzE0NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1FYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhTpQXC5NuaSY7AhdNfipVp0Iv8j/TQxCtyQIqiqtQorBuwNSgk7WUY RHgHcwQpBsxsJh3RLikYzIhRoWa4k7FAYR0D5UPbfC8fVWBsPAo8WnTWt5mreRcR BESQI3/Oq2dc0rjveConBibDx2X+1Ke7SHgs1saKgxRxH817FOFxig2U5OFqK0WN EjXvGxFKAi8uVtxE4lNR1VT7SBE/NTCxyDygVyNj0OQwkk2WuU+r4BfGrDbKahUR gLUE6sZj5F0atlFzlAjnfxToGa93kRlFv/fkclUQzwBxvVSzmvg4QDiNijaC5IMC KY0e2Qwoh/Uqskc2wsqeTTM6fe5zGWY= -----END CERTIFICATE-----Generated at Wed Oct 14 13:11:22 2026 by rpki-client