$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/652170f2-11c6-306c-8798-b52e65610a68.roa File: 652170f2-11c6-306c-8798-b52e65610a68.roa (raw, json) Hash identifier: 2hmZyIFhN8rXhFSzPH5aiLIN4F+jsM7j4jf3ASVwS0M= Subject key identifier: C4:AB:E4:8B:FB:99:2B:29:B1:3A:A0:41:07:E2:E0:F8:7E:06:E7:FD Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC29141F022DE74E23E775580 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/652170f2-11c6-306c-8798-b52e65610a68.roa Signing time: Fri 07 Aug 2026 17:28:00 +0000 ROA not before: Fri 07 Aug 2026 17:28:00 +0000 ROA not after: Thu 05 Nov 2026 18:28:00 +0000 asID: 395954 IP address blocks: 147.255.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:91:41:f0:22:de:74:e2:3e:77:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 7 17:28:00 2026 GMT Not After : Nov 5 18:28:00 2026 GMT Subject: CN=c20cc14e-8808-4a0c-be07-043bbe4f0bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:e4:97:33:4b:17:99:6f:c8:72:8c:a0:cf: 6e:25:6b:d3:e8:6c:26:20:16:94:dc:0e:45:da:ba: 1f:c0:9c:6e:a4:07:14:e3:e8:39:cc:33:5f:42:de: a8:3a:bd:a9:2c:63:b8:cb:2b:fb:73:34:cd:68:49: 29:bb:01:6d:ee:42:26:9c:6d:4c:57:eb:b6:14:38: e2:bb:37:de:64:aa:8e:ad:7a:8a:19:ce:42:c2:73: bb:cc:ba:0f:7e:5c:96:4a:74:ba:b8:6d:8c:76:ed: 2e:3f:c8:45:5c:1f:14:b3:49:e9:18:41:7e:77:34: 09:2c:51:b9:78:92:09:b3:4a:51:ad:84:93:8f:c6: 50:75:bd:71:58:67:78:42:49:5d:e0:c5:02:d8:5c: fe:ba:87:9c:b0:cd:aa:cd:a6:c0:0a:d4:bf:bd:7b: e1:0a:e1:42:74:a8:6f:0d:5a:fc:44:c5:0d:42:20: 79:45:44:41:1e:72:a5:78:18:b1:dc:5d:e5:96:19: 4b:ac:21:62:54:10:12:a1:c1:f9:4c:7a:18:91:dc: 16:56:49:f3:87:cd:4d:55:e9:6b:4c:b8:5f:fc:6e: fa:e8:fe:91:e8:dd:9d:ee:1d:07:8e:86:cf:9f:a6: 31:2a:64:85:0a:42:3e:8f:c7:e3:80:1e:0e:23:a3: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AB:E4:8B:FB:99:2B:29:B1:3A:A0:41:07:E2:E0:F8:7E:06:E7:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/652170f2-11c6-306c-8798-b52e65610a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:40:a5:be:5b:7f:8c:12:61:be:87:0a:a1:7a:02:b3:c5:1a: 98:20:e6:9a:0c:64:15:69:80:6e:82:34:f5:87:ba:a9:8c:ad: 59:7a:2d:ef:b2:3c:ff:81:c2:a1:5e:f6:fa:16:3e:61:f0:70: f7:3c:19:8b:76:57:cc:1f:88:d2:59:c3:46:94:ec:bb:6a:b0: 86:89:89:ec:07:2d:bc:c5:11:29:1e:2b:1d:d1:b0:05:bd:b3: 9b:5e:cc:19:cf:53:74:24:7d:20:9c:99:64:3c:8d:2f:04:ac: cd:6e:99:2f:77:4e:a3:a8:cf:14:01:3b:59:6c:33:2d:2c:d8: 81:85:f5:ab:27:c5:e0:3a:83:3c:69:25:af:1e:50:ba:d2:7d: 6c:51:83:09:aa:2a:7e:83:88:5f:d1:c8:ae:27:a8:6f:78:cf: 8a:2e:4c:08:68:f0:17:59:9f:71:7c:88:19:15:f2:cb:6d:b3: 87:3c:a2:d5:85:98:c4:f4:41:21:d1:83:0e:27:33:0b:7e:06: 80:ab:cd:4c:60:4d:e9:53:f4:ca:b0:37:66:b0:b1:df:31:94: c0:07:f9:f7:a7:87:c1:1b:d0:9e:55:d0:22:cc:1e:ad:19:27: eb:27:63:78:c1:17:b6:3b:4b:d4:80:f3:b3:3b:a4:df:12:ac: 27:b6:27:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CkUHwIt504j53VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNzE3MjgwMFoXDTI2MTEwNTE4MjgwMFowLzEtMCsGA1UEAxMk YzIwY2MxNGUtODgwOC00YTBjLWJlMDctMDQzYmJlNGYwYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhvklzNLF5lvyHKMoM9uJWvT6GwmIBaU3A5F 2rofwJxupAcU4+g5zDNfQt6oOr2pLGO4yyv7czTNaEkpuwFt7kImnG1MV+u2FDji uzfeZKqOrXqKGc5CwnO7zLoPflyWSnS6uG2Mdu0uP8hFXB8Us0npGEF+dzQJLFG5 eJIJs0pRrYSTj8ZQdb1xWGd4Qkld4MUC2Fz+uoecsM2qzabACtS/vXvhCuFCdKhv DVr8RMUNQiB5RURBHnKleBix3F3llhlLrCFiVBASocH5THoYkdwWVknzh81NVelr TLhf/G766P6R6N2d7h0HjobPn6YxKmSFCkI+j8fjgB4OI6ND7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSr5Iv7mSspsTqgQQfi4Ph+Buf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjUyMTcwZjItMTFjNi0z MDZjLTg3OTgtYjUyZTY1NjEwYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk//AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJApb5bf4wSYb6HCqF6ArPFGpgg5poMZBVpgG6CNPWHuqmMrVl6Le+y PP+BwqFe9voWPmHwcPc8GYt2V8wfiNJZw0aU7LtqsIaJiewHLbzFESkeKx3RsAW9 s5tezBnPU3QkfSCcmWQ8jS8ErM1umS93TqOozxQBO1lsMy0s2IGF9asnxeA6gzxp Ja8eULrSfWxRgwmqKn6DiF/RyK4nqG94z4ouTAho8BdZn3F8iBkV8stts4c8otWF mMT0QSHRgw4nMwt+BoCrzUxgTelT9MqwN2awsd8xlMAH+fenh8Eb0J5V0CLMHq0Z J+snY3jBF7Y7S9SA87M7pN8SrCe2Jyc= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:28 2026 by rpki-client