$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/652170f2-11c6-306c-8798-b52e65610a68.roa File: 652170f2-11c6-306c-8798-b52e65610a68.roa (raw, json) Hash identifier: oEDhML7MThcZAqSJjriXjJy6OOsdJFfkff6k9cko6WM= Subject key identifier: C6:C4:0F:CB:D1:CB:FA:BE:4E:A8:00:6B:C7:52:FF:13:91:86:49:04 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D64E169A58D1CB7DA01E0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/652170f2-11c6-306c-8798-b52e65610a68.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 147.255.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:64:e1:69:a5:8d:1c:b7:da:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=90b22e31-c7d7-49d0-8a90-5a75d9dc68c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c1:68:ef:97:c8:c0:2e:d9:29:f8:20:6d:b3: 0a:b0:51:9b:fd:df:00:02:f0:2d:4f:fc:ff:ab:50: 80:a0:43:30:71:95:da:c2:50:aa:2e:30:45:df:27: e4:3a:65:17:c8:c4:35:40:70:bb:de:b7:3f:01:59: c1:e9:2c:55:ae:70:34:ff:f2:74:e4:81:01:d3:64: f6:33:58:31:08:81:25:65:8e:3f:7d:1a:2c:7f:11: 6e:1a:ed:65:d2:60:65:8e:71:33:aa:a9:10:37:6e: 21:d6:f3:4e:56:f6:69:bf:67:8a:53:b4:2a:ad:8d: 9d:53:13:aa:31:3f:c2:00:67:f1:d7:02:53:51:64: c6:68:95:5f:52:fa:9f:17:42:f4:54:36:f4:d0:a5: 42:5a:92:7a:9a:8b:74:3e:64:0f:53:c7:45:50:67: 24:ad:fb:ce:57:bf:17:e1:cc:0c:5d:35:23:d7:c0: 21:51:e2:2d:c2:fa:9d:79:43:36:99:8a:1a:1f:4b: f1:c0:77:5a:16:98:1d:25:03:ae:6c:e3:4d:40:3b: c2:71:cf:c1:16:3e:19:f4:d9:06:fd:84:42:8d:72: f2:fe:8b:72:3a:65:ef:e2:74:ee:b1:52:89:8b:91: 6c:ff:1d:1c:0b:ab:9b:f7:0c:11:dc:ab:ec:52:99: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C4:0F:CB:D1:CB:FA:BE:4E:A8:00:6B:C7:52:FF:13:91:86:49:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/652170f2-11c6-306c-8798-b52e65610a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e2:64:de:7c:ae:59:df:44:a0:a9:0e:d0:17:03:c3:91:24: 37:84:f2:8b:89:4e:6c:cf:5b:7f:0c:96:4c:4e:8c:66:5b:b9: 39:42:bd:02:f6:07:27:39:ab:eb:ed:b0:32:77:97:27:b8:86: a9:b9:6c:aa:ed:4a:6c:d0:4d:a9:88:e9:08:4d:95:95:46:34: 8c:1c:dc:a4:f6:f1:c5:4c:77:81:33:0c:91:20:1b:bd:76:0a: 13:ea:72:28:27:63:73:92:a7:1a:c3:2d:fd:6b:ed:d3:3a:bf: a2:70:94:da:e5:c3:db:f0:8d:a8:38:19:2f:b0:fb:f0:bb:3b: b0:cb:51:6f:f7:b9:5b:21:98:05:56:88:9f:dd:87:e6:58:24: de:5d:4c:47:ab:49:63:38:4f:3b:22:d6:e5:1e:2e:f1:be:ed: dc:e4:ab:7e:33:2f:bd:29:0a:db:b1:62:d4:34:cc:42:52:91: 57:48:31:94:bf:26:4a:13:2a:95:55:b1:6d:16:d0:94:d8:dc: d1:09:02:1b:0d:cf:a8:1a:0d:6d:9a:e0:e3:ed:51:a1:51:75: 62:86:28:21:17:c7:29:bf:f4:2d:e5:b8:a3:e6:25:bd:42:38: dc:4d:b3:c6:8c:c4:8a:2e:98:88:a6:4b:4b:20:94:2e:08:22: 59:a5:cc:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWThaaWNHLfaAeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OTBiMjJlMzEtYzdkNy00OWQwLThhOTAtNWE3NWQ5ZGM2OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsFo75fIwC7ZKfggbbMKsFGb/d8AAvAtT/z/ q1CAoEMwcZXawlCqLjBF3yfkOmUXyMQ1QHC73rc/AVnB6SxVrnA0//J05IEB02T2 M1gxCIElZY4/fRosfxFuGu1l0mBljnEzqqkQN24h1vNOVvZpv2eKU7QqrY2dUxOq MT/CAGfx1wJTUWTGaJVfUvqfF0L0VDb00KVCWpJ6mot0PmQPU8dFUGckrfvOV78X 4cwMXTUj18AhUeItwvqdeUM2mYoaH0vxwHdaFpgdJQOubONNQDvCcc/BFj4Z9NkG /YRCjXLy/otyOmXv4nTusVKJi5Fs/x0cC6ub9wwR3KvsUpnKGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbED8vRy/q+TqgAa8dS/xORhkkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjUyMTcwZjItMTFjNi0z MDZjLTg3OTgtYjUyZTY1NjEwYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk//AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLiZN58rlnfRKCpDtAXA8ORJDeE8ouJTmzPW38MlkxOjGZbuTlCvQL2 Byc5q+vtsDJ3lye4hqm5bKrtSmzQTamI6QhNlZVGNIwc3KT28cVMd4EzDJEgG712 ChPqcignY3OSpxrDLf1r7dM6v6JwlNrlw9vwjag4GS+w+/C7O7DLUW/3uVshmAVW iJ/dh+ZYJN5dTEerSWM4Tzsi1uUeLvG+7dzkq34zL70pCtuxYtQ0zEJSkVdIMZS/ JkoTKpVVsW0W0JTY3NEJAhsNz6gaDW2a4OPtUaFRdWKGKCEXxym/9C3luKPmJb1C ONxNs8aMxIoumIimS0sglC4IIlmlzEg= -----END CERTIFICATE-----Generated at Wed Oct 14 20:39:28 2026 by rpki-client