$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5fbb04b8-d46a-3835-925d-81dd6a7986ea.roa File: 5fbb04b8-d46a-3835-925d-81dd6a7986ea.roa (raw, json) Hash identifier: YaD+cU4lzcAFO5v3Pml4W6nKq3hReClNUPBLNdgBPnE= Subject key identifier: A3:A3:D0:50:7A:C1:85:94:69:C8:92:34:C0:04:B6:B7:8F:0D:4A:9C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC230C17A0A8C2823999BE480 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5fbb04b8-d46a-3835-925d-81dd6a7986ea.roa Signing time: Fri 07 Aug 2026 14:13:34 +0000 ROA not before: Fri 07 Aug 2026 14:13:34 +0000 ROA not after: Thu 05 Nov 2026 15:13:34 +0000 asID: 395954 IP address blocks: 172.255.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:30:c1:7a:0a:8c:28:23:99:9b:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 7 14:13:34 2026 GMT Not After : Nov 5 15:13:34 2026 GMT Subject: CN=38512c8c-2922-4842-955e-c2ffb52509fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c6:a6:df:67:4e:99:e8:c8:11:38:bc:b2:49: 5c:74:76:da:a1:de:f0:e3:b1:73:b7:b7:ac:28:42: ff:f1:05:b3:63:25:54:97:b9:60:40:9a:19:9e:4e: c1:3c:07:a2:97:65:e8:f7:b7:d2:55:05:8d:d6:11: d9:9f:b0:2b:3e:12:5a:41:4b:f8:3f:d8:2d:c0:14: 78:5b:ea:f1:ea:46:58:0f:d9:a4:56:9f:19:18:1d: 63:0d:25:95:b4:b3:b4:3f:53:70:ad:89:1d:f4:d0: 42:1e:49:7e:72:86:f7:5f:4d:4e:66:dd:a8:f1:a0: 3b:a7:d5:ee:2d:0b:c2:26:2b:75:55:dd:33:dd:f9: 69:8c:17:90:00:75:58:3a:a4:b3:ad:5b:c0:96:3b: c5:8a:33:ab:f1:ac:d1:11:68:cc:2f:7b:8d:20:79: 5e:62:f7:fc:2c:6b:10:42:f5:c4:7e:fe:2d:7c:9b: e4:15:9d:33:40:ba:e3:e9:4b:b9:fd:e1:b9:e6:36: 47:3c:48:38:1f:b0:db:22:ad:0e:96:77:3b:49:ff: f6:c7:b1:0c:20:7f:7f:2b:cb:89:8d:f9:af:a1:6a: 25:7b:64:5d:1d:11:92:f4:35:0c:7b:4b:b9:1c:f3: b9:b8:e3:5f:71:74:24:bf:8c:b8:85:a2:7e:20:5a: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A3:D0:50:7A:C1:85:94:69:C8:92:34:C0:04:B6:B7:8F:0D:4A:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5fbb04b8-d46a-3835-925d-81dd6a7986ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:78:c5:5c:34:16:2c:04:26:12:c5:28:e1:8a:79:13:6a:93: aa:d7:a1:c0:07:15:07:59:5c:87:b6:7c:57:cd:44:94:25:34: 1f:c0:19:93:aa:84:df:3d:68:49:a9:57:40:73:67:a9:4e:12: f3:9d:6e:22:87:b6:56:36:c5:31:a9:bf:29:5f:9e:95:1d:87: 4f:b8:e5:a9:fd:6a:f1:fd:82:3c:8c:a8:7f:af:30:d8:bf:9e: 53:5b:ec:c5:98:8b:1a:46:30:f3:85:3b:62:66:87:8a:9b:ef: 36:e0:0a:8d:2e:3a:db:46:12:d5:01:4f:8e:aa:95:e5:02:08: 86:8a:d3:0c:b4:ab:ea:f3:21:31:bf:6a:a1:f7:b9:8f:13:b4: 8e:18:ea:d1:f8:f1:3a:ad:8c:da:fa:13:57:a6:b5:64:6f:7a: e8:36:21:cb:7d:cd:85:1d:64:43:d8:49:8b:2c:93:b3:5a:97: b6:77:bf:f1:85:a6:2f:d1:a3:99:66:1a:c2:d8:29:3f:c0:95: c9:93:cf:12:a5:48:25:b9:1b:48:8b:5a:12:01:f5:54:4d:6f: 3c:ff:ed:3e:cc:3c:76:89:2a:35:55:8d:8f:ac:c8:34:4d:ad: d6:c8:82:9a:9d:30:07:27:03:5b:78:f2:f7:a6:4d:66:02:69: b2:89:28:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CMMF6CowoI5mb5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNzE0MTMzNFoXDTI2MTEwNTE1MTMzNFowLzEtMCsGA1UEAxMk Mzg1MTJjOGMtMjkyMi00ODQyLTk1NWUtYzJmZmI1MjUwOWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8am32dOmejIETi8sklcdHbaod7w47Fzt7es KEL/8QWzYyVUl7lgQJoZnk7BPAeil2Xo97fSVQWN1hHZn7ArPhJaQUv4P9gtwBR4 W+rx6kZYD9mkVp8ZGB1jDSWVtLO0P1NwrYkd9NBCHkl+cob3X01OZt2o8aA7p9Xu LQvCJit1Vd0z3flpjBeQAHVYOqSzrVvAljvFijOr8azREWjML3uNIHleYvf8LGsQ QvXEfv4tfJvkFZ0zQLrj6Uu5/eG55jZHPEg4H7DbIq0Olnc7Sf/2x7EMIH9/K8uJ jfmvoWole2RdHRGS9DUMe0u5HPO5uONfcXQkv4y4haJ+IFrkpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOj0FB6wYWUaciSNMAEtrePDUqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNWZiYjA0YjgtZDQ2YS0z ODM1LTkyNWQtODFkZDZhNzk4NmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrP+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ4xVw0FiwEJhLFKOGKeRNqk6rXocAHFQdZXIe2fFfNRJQlNB/AGZOq hN89aEmpV0BzZ6lOEvOdbiKHtlY2xTGpvylfnpUdh0+45an9avH9gjyMqH+vMNi/ nlNb7MWYixpGMPOFO2Jmh4qb7zbgCo0uOttGEtUBT46qleUCCIaK0wy0q+rzITG/ aqH3uY8TtI4Y6tH48TqtjNr6E1emtWRveug2Ict9zYUdZEPYSYssk7Nal7Z3v/GF pi/Ro5lmGsLYKT/AlcmTzxKlSCW5G0iLWhIB9VRNbzz/7T7MPHaJKjVVjY+syDRN rdbIgpqdMAcnA1t48vemTWYCabKJKPs= -----END CERTIFICATE-----Generated at Thu Aug 27 18:19:34 2026 by rpki-client