$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5fbb04b8-d46a-3835-925d-81dd6a7986ea.roa File: 5fbb04b8-d46a-3835-925d-81dd6a7986ea.roa (raw, json) Hash identifier: wJfsxLGp2thXLIRfawhayR+TLJ52GtuRSM+n85cJi3c= Subject key identifier: F9:8E:C8:7E:4F:E5:A9:E0:F9:47:EF:40:97:35:B3:DC:C8:1D:F7:39 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D60D1A7CFCBD3DA5DB220 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5fbb04b8-d46a-3835-925d-81dd6a7986ea.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 172.255.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:60:d1:a7:cf:cb:d3:da:5d:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=60189418-d5b3-4c8c-aa54-b94ff685066c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:39:9e:35:ef:3f:4b:ec:ca:86:7b:0d:6e: 4d:08:3e:c7:28:92:30:26:11:af:16:75:94:9a:c0: da:c4:06:f5:5b:49:db:bc:6e:1d:24:6a:d8:f2:0d: d0:8f:64:59:67:07:e8:52:c1:87:2a:0f:f7:42:6f: d0:c5:70:69:fb:45:1d:ec:5a:3f:67:81:2e:04:46: 07:b0:66:7d:49:79:7c:70:c6:e0:2d:e1:8e:f8:de: c5:9e:9a:5f:e3:4c:4b:48:10:22:12:1c:76:a1:63: ce:e8:bc:ff:0d:ec:cb:3b:30:7c:ad:5f:78:96:ec: 37:40:5c:5e:2b:39:42:b6:22:f5:50:d4:55:37:6a: 26:64:7a:27:79:3b:dc:9e:54:ba:6e:76:09:9e:35: b0:58:40:c9:62:b9:51:6a:0c:e0:57:66:30:20:7f: b5:21:b8:f1:a3:d3:f8:41:c6:44:12:6f:3e:02:47: 2b:e5:a9:3b:d4:4e:41:53:71:b8:45:17:85:87:c3: a1:de:61:bb:8f:4e:6d:48:74:71:67:eb:d8:2a:43: 2c:71:53:44:fd:15:5e:6c:ce:a4:80:06:3a:07:fb: 9a:3c:58:fe:27:2f:b3:33:9b:ee:ee:3c:0b:c5:c9: e9:02:68:54:64:ce:44:5a:cd:fb:e3:50:61:ba:89: e6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8E:C8:7E:4F:E5:A9:E0:F9:47:EF:40:97:35:B3:DC:C8:1D:F7:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5fbb04b8-d46a-3835-925d-81dd6a7986ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ce:52:d1:a7:28:29:71:91:2a:c5:13:d3:f9:7e:7d:63:89: 79:45:5d:20:36:d0:4a:a5:0d:f1:2c:26:2d:cb:29:b8:4e:fb: 7a:3c:83:da:63:47:49:c8:ac:7d:39:ed:6d:ba:af:36:1a:51: 15:5d:bc:c6:f7:9b:0e:98:52:72:ec:e7:e5:7a:5c:e2:1f:12: ef:16:5a:c0:e1:87:29:d1:bf:60:fa:1c:b1:d9:88:63:70:df: 95:2b:0a:d6:f4:d7:1f:77:7d:f1:4c:4b:dd:b2:90:1f:ed:a2: bb:a7:6a:34:c5:06:d0:9b:cf:57:57:88:ba:43:ef:f1:73:92: 54:bf:4d:15:ec:ef:db:37:9f:03:33:11:36:b9:44:22:6a:f4: 65:f2:ee:a0:80:ae:df:9f:14:76:49:5c:2f:eb:88:47:df:49: 07:fc:c0:17:4d:3b:4d:3c:09:e3:76:95:28:86:f2:86:87:4f: fc:ce:55:f5:fe:89:d6:ed:b4:4d:ee:bd:6f:15:aa:2e:24:96: d7:2c:21:46:c2:ce:87:26:66:82:80:59:c7:a1:0c:a4:21:60: 27:68:79:e0:67:3a:c8:91:14:c4:41:5b:f9:7d:47:9e:9a:dc: a3:fc:7b:0a:62:a9:3d:2f:14:63:79:4f:6c:71:77:a8:11:0b: 65:91:bf:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWDRp8/L09pdsiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NjAxODk0MTgtZDViMy00YzhjLWFhNTQtYjk0ZmY2ODUwNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK05njXvP0vsyoZ7DW5NCD7HKJIwJhGvFnWU msDaxAb1W0nbvG4dJGrY8g3Qj2RZZwfoUsGHKg/3Qm/QxXBp+0Ud7Fo/Z4EuBEYH sGZ9SXl8cMbgLeGO+N7Fnppf40xLSBAiEhx2oWPO6Lz/DezLOzB8rV94luw3QFxe KzlCtiL1UNRVN2omZHoneTvcnlS6bnYJnjWwWEDJYrlRagzgV2YwIH+1Ibjxo9P4 QcZEEm8+Akcr5ak71E5BU3G4RReFh8Oh3mG7j05tSHRxZ+vYKkMscVNE/RVebM6k gAY6B/uaPFj+Jy+zM5vu7jwLxcnpAmhUZM5EWs3741BhuonmUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmOyH5P5ang+UfvQJc1s9zIHfc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNWZiYjA0YjgtZDQ2YS0z ODM1LTkyNWQtODFkZDZhNzk4NmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrP+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3OUtGnKClxkSrFE9P5fn1jiXlFXSA20EqlDfEsJi3LKbhO+3o8g9pj R0nIrH057W26rzYaURVdvMb3mw6YUnLs5+V6XOIfEu8WWsDhhynRv2D6HLHZiGNw 35UrCtb01x93ffFMS92ykB/torunajTFBtCbz1dXiLpD7/FzklS/TRXs79s3nwMz ETa5RCJq9GXy7qCArt+fFHZJXC/riEffSQf8wBdNO008CeN2lSiG8oaHT/zOVfX+ idbttE3uvW8Vqi4kltcsIUbCzocmZoKAWcehDKQhYCdoeeBnOsiRFMRBW/l9R56a 3KP8ewpiqT0vFGN5T2xxd6gRC2WRvz8= -----END CERTIFICATE-----Generated at Thu Oct 15 05:12:01 2026 by rpki-client