$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5d36061e-1d4f-33ad-aefe-f601be5a04e8.roa File: 5d36061e-1d4f-33ad-aefe-f601be5a04e8.roa (raw, json) Hash identifier: gMipNLqkakiG8TOWSIzkpkOMZ74YkP5FYp8XDW6a0NY= Subject key identifier: 6F:F5:85:36:35:E1:18:71:12:AB:E8:A3:3C:0A:BA:A9:DC:3A:E5:FD Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D64125CFDAF5D7B9D1100 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5d36061e-1d4f-33ad-aefe-f601be5a04e8.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 142.91.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:64:12:5c:fd:af:5d:7b:9d:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=69abc116-f352-4755-92c0-c201be806f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:13:5d:d1:a6:02:ed:70:d0:4d:f5:86:da: ee:22:ec:13:49:3b:7e:78:7f:a3:a7:5f:a8:c1:4f: 2d:cd:89:e4:1f:91:05:52:94:95:07:fc:48:d4:57: 5b:1a:b4:d3:66:64:f3:6f:c7:db:e3:16:86:85:e1: 97:06:91:78:03:c0:a5:39:d3:5c:9d:7d:08:b7:66: 69:b7:75:66:e4:50:bd:ad:ee:10:2b:0d:01:c0:b7: 6c:cf:af:c0:82:e9:1f:71:e3:a8:cc:0c:fd:c0:2a: f6:a8:4a:72:12:69:64:bb:a3:b2:d8:90:1d:f6:a9: 41:78:c0:84:8e:8d:b8:5c:b5:bd:a6:64:10:bc:84: bf:11:8e:ec:98:d8:52:c0:50:be:d5:c4:fe:5b:c8: 11:4f:44:c0:83:e5:53:fa:88:c6:fb:30:9b:49:8b: 1b:2b:0b:25:42:85:c4:dd:24:cc:a4:61:7a:f4:de: 20:4a:6f:3b:77:9f:20:1d:53:d7:33:52:23:eb:18: 7b:92:5c:06:f8:f1:c3:52:f1:7c:6b:28:42:12:b5: c9:77:e1:58:bb:a3:82:91:fb:35:e5:e4:0c:04:50: 1a:fd:68:27:fc:ce:a1:df:10:7a:51:c0:c6:85:ff: 04:16:4d:71:a0:6d:12:09:0e:83:a5:bb:1a:13:00: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F5:85:36:35:E1:18:71:12:AB:E8:A3:3C:0A:BA:A9:DC:3A:E5:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5d36061e-1d4f-33ad-aefe-f601be5a04e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.91.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ea:f6:a3:81:2c:4d:dc:e8:4d:10:b6:4f:17:26:de:32:84: eb:cc:b5:b2:58:e2:13:72:4c:38:67:ce:ff:60:d8:03:c1:5f: 9e:1e:25:89:5d:56:4f:17:0c:c4:7e:47:5e:42:34:d1:62:c1: 79:8a:2c:c6:22:02:47:65:bb:87:ff:12:b7:cc:7e:24:dc:9e: 90:c4:09:f4:e1:6f:12:40:c7:2c:9e:32:ef:4b:fa:dd:f1:97: 71:22:13:cd:bf:c4:44:49:89:30:f4:2b:7e:b3:7a:6e:3e:15: ed:e7:cd:f3:3a:cc:67:c8:2e:c3:1e:c9:b5:1c:ad:1e:cd:a2: 22:15:b9:16:40:28:17:55:99:cb:61:6b:c3:38:2a:80:4c:9e: 16:21:3f:fd:73:5e:4c:53:30:2a:b3:60:f8:30:46:89:6a:20: 9a:67:c3:6e:86:7d:e2:e8:e5:4f:41:ad:d0:12:a6:fd:e6:29: 0c:6a:1b:a6:21:a8:25:00:2b:85:4b:b9:85:4f:71:9b:40:71: 2f:10:65:71:ba:03:45:bd:f8:13:6a:0f:39:1d:7b:f1:7f:47: 2a:9f:e9:60:99:94:59:5a:e3:4a:24:58:6d:70:4e:6e:1f:bf: 89:6b:78:ec:dd:d9:14:91:a5:0e:d6:63:d4:f4:d3:e9:72:38: d9:43:fa:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWQSXP2vXXudEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NjlhYmMxMTYtZjM1Mi00NzU1LTkyYzAtYzIwMWJlODA2ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpsTXdGmAu1w0E31htruIuwTSTt+eH+jp1+o wU8tzYnkH5EFUpSVB/xI1FdbGrTTZmTzb8fb4xaGheGXBpF4A8ClOdNcnX0It2Zp t3Vm5FC9re4QKw0BwLdsz6/AgukfceOozAz9wCr2qEpyEmlku6Oy2JAd9qlBeMCE jo24XLW9pmQQvIS/EY7smNhSwFC+1cT+W8gRT0TAg+VT+ojG+zCbSYsbKwslQoXE 3STMpGF69N4gSm87d58gHVPXM1Ij6xh7klwG+PHDUvF8ayhCErXJd+FYu6OCkfs1 5eQMBFAa/Wgn/M6h3xB6UcDGhf8EFk1xoG0SCQ6DpbsaEwD+5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/1hTY14RhxEqvoozwKuqncOuX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNWQzNjA2MWUtMWQ0Zi0z M2FkLWFlZmUtZjYwMWJlNWEwNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjlugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPq9qOBLE3c6E0Qtk8XJt4yhOvMtbJY4hNyTDhnzv9g2APBX54eJYld Vk8XDMR+R15CNNFiwXmKLMYiAkdlu4f/ErfMfiTcnpDECfThbxJAxyyeMu9L+t3x l3EiE82/xERJiTD0K36zem4+Fe3nzfM6zGfILsMeybUcrR7NoiIVuRZAKBdVmcth a8M4KoBMnhYhP/1zXkxTMCqzYPgwRolqIJpnw26GfeLo5U9BrdASpv3mKQxqG6Yh qCUAK4VLuYVPcZtAcS8QZXG6A0W9+BNqDzkde/F/Ryqf6WCZlFla40okWG1wTm4f v4lreOzd2RSRpQ7WY9T00+lyONlD+gs= -----END CERTIFICATE-----Generated at Wed Oct 14 08:13:04 2026 by rpki-client