$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/673e140e-be2f-3aaa-8af7-f1ac1515b0bd.roa File: 673e140e-be2f-3aaa-8af7-f1ac1515b0bd.roa (raw, json) Hash identifier: 3ts6t/AAtRtORaPw12I8DSCralrAIxYxXp09kCKcftE= Subject key identifier: 95:F3:71:06:2C:23:99:93:FC:5D:C4:79:13:49:35:88:FF:4A:25:D4 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B985D015F0688103C800 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/673e140e-be2f-3aaa-8af7-f1ac1515b0bd.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 172.255.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b9:85:d0:15:f0:68:81:03:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1d9c8929-9388-4c2f-b244-c183655eab65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ea:b4:0b:b4:62:23:a7:38:04:02:b3:0e:a2: 4a:a6:59:ce:16:9a:19:15:50:8c:74:e0:fb:65:c6: 8d:0a:5a:76:71:0e:eb:09:52:24:fe:a9:9c:a3:7c: 12:12:91:ef:07:22:68:64:c4:dd:8d:f3:6f:72:a2: 2a:a5:5f:ec:99:0f:ff:e6:58:9b:26:f7:e8:b7:61: 8a:7b:7c:4b:72:97:b7:68:24:a3:e4:d6:75:28:8b: 5f:b1:9e:1b:81:40:c7:3f:71:08:53:57:8d:aa:19: c8:7c:d0:8f:7c:a3:7c:b0:a8:d5:ba:45:e2:25:50: 5f:98:52:68:2d:e1:88:c8:28:14:4d:c5:c1:03:da: 8d:e6:69:8f:77:38:af:84:73:9b:47:ef:51:4b:f0: 77:ab:72:7b:14:b5:15:d7:f9:54:48:a3:82:25:3d: 9b:e6:88:d9:92:b0:6b:14:24:f2:fa:5b:44:c2:71: e9:16:38:67:5e:d4:f8:83:5f:7c:6d:ca:e1:1d:f0: 2f:44:48:99:3c:75:fa:2d:1f:50:0d:89:7e:81:38: 4a:98:60:8f:db:12:4a:4b:70:96:71:2b:1c:75:ef: fc:2d:37:4b:28:38:1c:7d:16:b0:6b:6a:cb:21:5b: 5a:cc:6c:af:89:ad:0c:f4:81:0b:8f:8b:af:96:c8: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F3:71:06:2C:23:99:93:FC:5D:C4:79:13:49:35:88:FF:4A:25:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/673e140e-be2f-3aaa-8af7-f1ac1515b0bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f5:16:dc:9e:95:55:5b:2c:d0:97:e7:e8:a1:49:f5:7b:23: e9:89:03:ec:1f:b6:4a:3c:3a:94:b1:7a:78:44:2e:32:e1:75: 8f:c2:d1:24:8d:da:ad:7e:26:9c:20:5b:7c:69:03:df:b7:e8: 0d:66:99:19:f8:ca:8c:e0:41:e7:57:19:70:9f:b8:2f:ea:50: e3:26:2e:fe:f3:bc:9a:a1:da:6c:27:1d:31:30:a4:5d:da:66: 87:d9:7c:89:09:35:60:85:2c:2c:e7:24:87:cf:b4:5c:01:7f: 32:6c:0c:10:74:26:e0:8e:40:86:20:f1:f7:cd:bc:fc:d5:d7: 15:7a:af:32:18:dd:b1:36:01:3a:80:21:fd:72:60:0b:c5:4d: 91:d5:a7:fe:78:b7:aa:aa:35:7e:8d:43:e6:aa:69:c7:83:e8: aa:61:bc:bf:ef:fd:bc:21:61:91:89:19:01:50:bb:d6:ee:99: 60:26:c0:31:c5:ac:5b:67:a7:c9:1c:46:91:59:64:df:37:ab: 10:15:7d:12:6b:79:92:5d:04:c1:d5:c5:e6:da:15:ef:ba:3c: 5f:91:31:a2:74:b1:b9:da:df:3e:1c:19:f6:7e:ec:71:e6:80: 49:74:1b:a1:8b:d4:28:5a:a1:34:28:7b:62:79:33:27:4a:eb: 57:58:46:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrmF0BXwaIEDyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWQ5Yzg5MjktOTM4OC00YzJmLWIyNDQtYzE4MzY1NWVhYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOq0C7RiI6c4BAKzDqJKplnOFpoZFVCMdOD7 ZcaNClp2cQ7rCVIk/qmco3wSEpHvByJoZMTdjfNvcqIqpV/smQ//5libJvfot2GK e3xLcpe3aCSj5NZ1KItfsZ4bgUDHP3EIU1eNqhnIfNCPfKN8sKjVukXiJVBfmFJo LeGIyCgUTcXBA9qN5mmPdzivhHObR+9RS/B3q3J7FLUV1/lUSKOCJT2b5ojZkrBr FCTy+ltEwnHpFjhnXtT4g198bcrhHfAvREiZPHX6LR9QDYl+gThKmGCP2xJKS3CW cSscde/8LTdLKDgcfRawa2rLIVtazGyvia0M9IELj4uvlsh4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXzcQYsI5mT/F3EeRNJNYj/SiXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjczZTE0MGUtYmUyZi0z YWFhLThhZjctZjFhYzE1MTViMGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrP8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/1FtyelVVbLNCX5+ihSfV7I+mJA+wftko8OpSxenhELjLhdY/C0SSN 2q1+JpwgW3xpA9+36A1mmRn4yozgQedXGXCfuC/qUOMmLv7zvJqh2mwnHTEwpF3a ZofZfIkJNWCFLCznJIfPtFwBfzJsDBB0JuCOQIYg8ffNvPzV1xV6rzIY3bE2ATqA If1yYAvFTZHVp/54t6qqNX6NQ+aqaceD6KphvL/v/bwhYZGJGQFQu9bumWAmwDHF rFtnp8kcRpFZZN83qxAVfRJreZJdBMHVxebaFe+6PF+RMaJ0sbna3z4cGfZ+7HHm gEl0G6GL1ChaoTQoe2J5MydK61dYRoM= -----END CERTIFICATE-----Generated at Wed Oct 14 20:39:25 2026 by rpki-client