$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5902acc7-e333-3cc9-b2f4-2a5da6241924.roa File: 5902acc7-e333-3cc9-b2f4-2a5da6241924.roa (raw, json) Hash identifier: z/zWVHAizYDtFF96RJvvptKHXrzwK4RqMSF5g8pkW7w= Subject key identifier: B4:0C:9D:FC:AB:D5:4A:1B:5A:A7:FE:43:D3:4F:F1:98:B6:7A:35:7F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97F9D2B63F42F64BF06180 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5902acc7-e333-3cc9-b2f4-2a5da6241924.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 142.234.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:f9:d2:b6:3f:42:f6:4b:f0:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=787ffecb-fa04-4f35-a4b0-c7cabb2f389e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:25:58:dd:a6:9d:32:61:57:5e:19:cf:9b: 5a:6e:3f:3e:b9:4c:69:69:10:29:0a:f3:9c:41:7d: 63:ea:c9:2c:47:d1:d9:8f:27:82:d2:4a:20:50:86: bd:0f:82:61:a8:6e:e9:35:03:d8:5c:d8:4d:95:ab: 98:82:0f:ad:b4:72:92:85:fb:b8:00:60:d4:df:74: 9f:2a:31:fa:9d:28:de:91:01:2a:44:2e:0a:9b:ed: b9:48:22:fc:77:63:d7:73:16:50:fc:34:5f:d1:14: cd:f8:7f:c3:70:57:fc:f8:d5:e2:af:97:42:05:8d: d2:8b:e2:40:af:1a:f5:e9:53:2a:8e:c5:61:ad:09: 61:ae:dd:03:28:cf:d9:68:0b:08:5b:e7:0a:7f:2d: ff:76:df:a9:90:61:d1:14:0b:dc:cc:43:ff:6b:f8: 7e:e0:29:48:4f:fd:57:b7:e7:92:b2:7c:d8:2c:86: 53:da:86:e8:2c:89:25:d4:59:9a:e4:35:a8:a6:64: 28:74:63:eb:0a:97:8c:d4:41:f6:b2:d5:76:a3:0d: 9e:36:54:08:0d:ea:3b:1b:42:4a:a2:77:53:9c:26: 18:ab:71:f0:c1:34:01:8d:8a:45:9e:26:e8:f7:ca: 45:7c:46:1c:c6:cb:a1:cc:c5:ae:5f:21:c4:75:d1: 71:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0C:9D:FC:AB:D5:4A:1B:5A:A7:FE:43:D3:4F:F1:98:B6:7A:35:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5902acc7-e333-3cc9-b2f4-2a5da6241924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.234.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:60:45:1b:9a:92:d9:d2:3d:4c:7e:72:11:25:4c:3f:85:5e: 0f:9f:2e:71:4d:b5:a0:fd:fd:2f:17:6d:72:e0:c7:e2:22:6b: 5f:07:0e:53:c3:e3:cc:18:7f:30:38:c1:f3:41:d4:19:70:35: ea:45:49:5e:78:f0:3e:f3:62:34:a5:b8:61:60:e9:50:83:e0: 97:18:94:ea:74:64:06:5f:86:19:72:eb:39:7d:26:64:21:8d: a2:c7:7b:a8:62:b2:12:43:06:34:bf:bf:c4:d3:8c:57:77:0e: cb:37:57:67:a1:6d:f8:dc:d4:85:fa:bd:0c:3a:c9:f5:9f:d3: d9:94:92:6d:f0:00:4e:3f:36:c3:b3:10:be:79:31:c0:96:87: e6:69:cc:6e:73:0a:89:34:bd:a6:d9:04:5c:07:53:d7:ca:a1: 98:a3:cc:54:0c:f5:fc:51:e3:7b:b2:73:e0:1b:50:e0:1a:88: aa:7e:cf:ed:ad:3d:cb:51:d8:06:bb:38:5a:07:29:55:84:1b: c0:44:a8:71:06:a5:e3:e2:2c:73:02:aa:05:fd:a6:83:9c:2d: bb:b2:79:7a:74:ca:f2:50:26:a8:95:ea:c7:f0:44:13:9d:92: 25:31:a3:47:48:83:64:31:77:d5:e5:31:53:8e:2b:2b:bc:c7: ab:e4:81:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/nStj9C9kvwYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk Nzg3ZmZlY2ItZmEwNC00ZjM1LWE0YjAtYzdjYWJiMmYzODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0wlWN2mnTJhV14Zz5tabj8+uUxpaRApCvOc QX1j6sksR9HZjyeC0kogUIa9D4JhqG7pNQPYXNhNlauYgg+ttHKShfu4AGDU33Sf KjH6nSjekQEqRC4Km+25SCL8d2PXcxZQ/DRf0RTN+H/DcFf8+NXir5dCBY3Si+JA rxr16VMqjsVhrQlhrt0DKM/ZaAsIW+cKfy3/dt+pkGHRFAvczEP/a/h+4ClIT/1X t+eSsnzYLIZT2oboLIkl1Fma5DWopmQodGPrCpeM1EH2stV2ow2eNlQIDeo7G0JK ondTnCYYq3HwwTQBjYpFnibo98pFfEYcxsuhzMWuXyHEddFx0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQMnfyr1UobWqf+Q9NP8Zi2ejV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNTkwMmFjYzctZTMzMy0z Y2M5LWIyZjQtMmE1ZGE2MjQxOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5gRRuaktnSPUx+chElTD+FXg+fLnFNtaD9/S8XbXLgx+Iia18HDlPD 48wYfzA4wfNB1BlwNepFSV548D7zYjSluGFg6VCD4JcYlOp0ZAZfhhly6zl9JmQh jaLHe6hishJDBjS/v8TTjFd3Dss3V2ehbfjc1IX6vQw6yfWf09mUkm3wAE4/NsOz EL55McCWh+ZpzG5zCok0vabZBFwHU9fKoZijzFQM9fxR43uyc+AbUOAaiKp+z+2t PctR2Aa7OFoHKVWEG8BEqHEGpePiLHMCqgX9poOcLbuyeXp0yvJQJqiV6sfwRBOd kiUxo0dIg2Qxd9XlMVOOKyu8x6vkgbk= -----END CERTIFICATE-----Generated at Wed Oct 14 10:09:19 2026 by rpki-client