$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/561b7a02-ac86-3384-b9f1-7117aac14670.roa File: 561b7a02-ac86-3384-b9f1-7117aac14670.roa (raw, json) Hash identifier: hqyU99kSypvThpCOzpd53VrbY86X6dWEkfAPlaeQsTQ= Subject key identifier: 83:EB:0A:D5:04:1E:BF:07:F8:D8:E0:6F:AB:61:DD:ED:EF:8A:5D:1D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBC00CE25E35F83089E8D9C00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/561b7a02-ac86-3384-b9f1-7117aac14670.roa Signing time: Wed 05 Aug 2026 09:02:06 +0000 ROA not before: Wed 05 Aug 2026 09:02:06 +0000 ROA not after: Tue 03 Nov 2026 10:02:06 +0000 asID: 19148 IP address blocks: 23.81.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:00:ce:25:e3:5f:83:08:9e:8d:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 5 09:02:06 2026 GMT Not After : Nov 3 10:02:06 2026 GMT Subject: CN=8118d3d2-2a40-41c7-992e-c03b0d16b77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:d2:af:f6:dc:35:1d:35:f9:16:fc:19:b0: c5:fc:65:56:44:94:40:00:7d:09:2c:8e:17:8e:34: 48:07:8c:95:86:ef:ab:50:0c:71:e1:f2:b3:28:71: 2c:f2:d3:ea:7d:e2:44:6a:a4:ef:05:72:4e:6d:12: e0:d7:41:79:2f:94:43:2b:23:80:cd:a9:db:da:81: 50:9e:33:28:ec:3a:57:b5:ee:7e:54:fc:0d:a4:b2: 78:05:53:ae:e8:c6:43:18:7f:07:50:21:6f:cf:5c: d6:01:c8:a4:bb:0d:d5:1c:73:a5:03:44:58:45:e5: 46:46:38:96:56:6e:82:2a:06:80:63:36:7d:29:e5: 3e:ce:7d:66:cf:fe:a4:5c:c1:82:e4:a0:a4:b0:0b: 6b:f9:b2:62:4b:a0:ba:aa:b2:33:0f:31:54:2d:11: ab:8e:e3:5e:3d:dd:37:8d:2d:5c:49:1e:74:4e:66: 34:77:c1:d3:2d:df:31:1d:15:16:54:7b:c4:ff:7c: b4:0f:5b:5e:c2:13:c6:29:9d:c6:a9:98:e8:9b:3e: 5a:0d:7d:70:63:e7:95:60:78:ba:5e:01:71:62:ab: 5a:38:74:aa:15:aa:00:90:53:c1:1b:73:cb:e5:f6: fb:a3:b6:64:ae:d0:78:27:28:7a:00:14:65:b3:5a: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EB:0A:D5:04:1E:BF:07:F8:D8:E0:6F:AB:61:DD:ED:EF:8A:5D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/561b7a02-ac86-3384-b9f1-7117aac14670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.81.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:70:99:98:a3:aa:9e:9c:62:ba:bc:ee:f7:ee:31:cc:7e:a7: b3:05:49:4c:2f:9c:38:64:a3:d8:07:1b:de:57:a7:0d:9e:29: 26:14:38:86:9e:5b:71:9d:a0:3f:1e:73:e5:c6:47:c6:73:50: d8:84:73:00:36:fb:c7:d1:28:ea:f9:44:b4:50:36:31:4a:37: d1:0a:b5:f1:d2:5b:af:9a:b7:d5:68:46:50:4b:1c:ce:0c:5b: 82:98:c7:8c:fe:2f:50:c2:11:c1:9f:5d:f2:78:61:1d:06:e0: f9:ce:b8:21:6b:f2:7a:d3:9e:be:a2:e5:3f:93:f3:73:16:c3: c8:98:7a:f4:8f:ef:05:99:7d:88:e4:d7:a4:a7:60:dd:05:87: 29:d0:8e:c6:03:28:7b:5c:8e:da:86:81:c3:cd:62:b4:7b:79: c4:e1:27:2e:8a:55:c7:95:69:72:4c:59:d8:6a:4b:16:06:57: fc:1d:24:5d:92:cc:a5:97:f2:6f:08:b2:b2:26:00:d6:b0:d4: 4b:f2:d1:1d:8e:13:ad:10:42:25:94:c8:ff:af:d0:ab:20:a1: 97:02:74:4e:2f:05:08:0d:25:22:33:7e:29:89:f4:8f:23:e5: d7:2a:d6:de:82:9a:28:e8:2e:45:3d:44:9f:82:89:a9:5d:0a: 05:69:e5:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68AM4l41+DCJ6NnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNTA5MDIwNloXDTI2MTEwMzEwMDIwNlowLzEtMCsGA1UEAxMk ODExOGQzZDItMmE0MC00MWM3LTk5MmUtYzAzYjBkMTZiNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXfSr/bcNR01+Rb8GbDF/GVWRJRAAH0JLI4X jjRIB4yVhu+rUAxx4fKzKHEs8tPqfeJEaqTvBXJObRLg10F5L5RDKyOAzanb2oFQ njMo7DpXte5+VPwNpLJ4BVOu6MZDGH8HUCFvz1zWAcikuw3VHHOlA0RYReVGRjiW Vm6CKgaAYzZ9KeU+zn1mz/6kXMGC5KCksAtr+bJiS6C6qrIzDzFULRGrjuNePd03 jS1cSR50TmY0d8HTLd8xHRUWVHvE/3y0D1tewhPGKZ3GqZjomz5aDX1wY+eVYHi6 XgFxYqtaOHSqFaoAkFPBG3PL5fb7o7ZkrtB4Jyh6ABRls1ouNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPrCtUEHr8H+Njgb6th3e3vil0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNTYxYjdhMDItYWM4Ni0z Mzg0LWI5ZjEtNzExN2FhYzE0NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1FYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJwmZijqp6cYrq87vfuMcx+p7MFSUwvnDhko9gHG95Xpw2eKSYUOIae W3GdoD8ec+XGR8ZzUNiEcwA2+8fRKOr5RLRQNjFKN9EKtfHSW6+at9VoRlBLHM4M W4KYx4z+L1DCEcGfXfJ4YR0G4PnOuCFr8nrTnr6i5T+T83MWw8iYevSP7wWZfYjk 16SnYN0FhynQjsYDKHtcjtqGgcPNYrR7ecThJy6KVceVaXJMWdhqSxYGV/wdJF2S zKWX8m8IsrImANaw1Evy0R2OE60QQiWUyP+v0KsgoZcCdE4vBQgNJSIzfimJ9I8j 5dcq1t6CmijoLkU9RJ+CialdCgVp5Qs= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:25 2026 by rpki-client