$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/673e140e-be2f-3aaa-8af7-f1ac1515b0bd.roa File: 673e140e-be2f-3aaa-8af7-f1ac1515b0bd.roa (raw, json) Hash identifier: FW1oqqKtWN8ZF+n6bV5t3KuV2upnSp+kA+JHu4atMHs= Subject key identifier: E9:08:0C:12:6C:88:D6:6A:52:06:F9:DB:2E:0F:37:33:9C:FB:E5:5A Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBFF66A0B9B63EBC35B1A3AC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/673e140e-be2f-3aaa-8af7-f1ac1515b0bd.roa Signing time: Thu 06 Aug 2026 19:04:24 +0000 ROA not before: Thu 06 Aug 2026 19:04:24 +0000 ROA not after: Wed 04 Nov 2026 20:04:24 +0000 asID: 395954 IP address blocks: 172.255.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:f6:6a:0b:9b:63:eb:c3:5b:1a:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 19:04:24 2026 GMT Not After : Nov 4 20:04:24 2026 GMT Subject: CN=f3a923e9-e545-46be-95b9-cbf248f5ebf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d8:53:77:a1:b5:0f:6d:5d:98:64:49:93:47: 12:52:dd:ba:62:3b:ac:88:7a:2e:b2:14:42:99:70: 9f:d2:ab:b5:eb:13:48:d4:b3:97:92:b9:34:1e:a4: 51:44:f4:2d:12:a1:fd:34:c1:64:b0:00:3a:ec:13: 85:ac:9a:d4:06:e0:3e:4f:62:03:1c:1b:2d:c7:72: 1b:7f:1c:00:e4:fc:69:7a:b5:66:99:f2:0d:ce:c7: fa:a1:96:06:c4:86:e6:a2:59:72:8e:7d:89:3f:10: 8d:a9:0a:84:14:02:a3:06:77:aa:8b:66:1b:2d:a3: 16:a9:07:23:ce:5a:dc:0f:e0:1d:a9:93:9f:94:e9: 9d:dc:e6:6c:dc:28:26:ca:8d:b2:20:9c:d8:d1:a6: 36:8a:ad:f6:e6:84:05:0e:e6:0a:9c:7d:bd:06:bb: 51:86:fa:43:f3:51:86:10:7a:71:c6:60:0c:1a:e8: 96:80:48:d1:0a:ae:f2:b5:7b:0b:d0:2e:27:a0:be: 28:7d:20:da:fb:8e:ec:78:91:be:1d:41:d7:d2:20: 58:c0:a8:61:e4:38:7d:84:d0:73:c3:06:ee:c9:ed: 14:fe:71:e5:bb:2f:fe:39:43:90:e6:43:c7:06:76: 8e:10:5a:32:40:26:9f:56:56:b0:f0:91:9a:08:59: 86:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:08:0C:12:6C:88:D6:6A:52:06:F9:DB:2E:0F:37:33:9C:FB:E5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/673e140e-be2f-3aaa-8af7-f1ac1515b0bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:7b:e3:e1:af:d6:3d:ea:3e:9c:fd:ee:99:b1:a3:5c:4c:0b: da:a1:9c:db:fe:b8:04:a0:7d:79:74:eb:5a:be:5e:26:78:58: d0:6b:58:85:21:a3:f5:33:c8:a1:f3:ab:87:73:6a:20:f6:7c: 92:bc:99:33:e2:94:6d:ff:5f:30:be:db:71:28:d0:b0:a6:ac: 34:ce:a4:7b:6e:26:bb:4b:4c:5b:c2:9a:6c:27:7e:77:9a:40: fe:6f:26:23:00:94:35:a9:13:91:09:7b:35:8d:8a:56:2e:ec: af:d8:f8:89:33:c1:4d:96:91:40:0d:17:d7:b9:03:b4:7a:a8: 2e:86:3e:44:d9:67:15:d0:e6:e9:38:af:d9:0a:38:a3:f4:92: 14:5d:1b:86:fc:81:4d:77:74:a8:6c:49:7b:8a:39:b3:e4:ce: 33:3e:36:7d:62:40:32:8f:dc:28:e0:16:a9:f4:46:83:fd:62: c9:a0:2e:e8:fc:2b:7f:82:ed:3c:cc:4a:41:8a:24:41:16:16: 77:99:9e:c1:84:42:98:45:52:cd:6b:bf:59:5c:56:be:b1:63: 78:6c:e8:5b:39:34:17:e0:5f:93:9d:b5:6e:db:cc:f0:0e:95: d0:c1:25:bc:8d:3e:3a:71:63:46:7f:ca:53:4a:26:18:cd:88: f0:a5:b6:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/9moLm2Prw1saOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE5MDQyNFoXDTI2MTEwNDIwMDQyNFowLzEtMCsGA1UEAxMk ZjNhOTIzZTktZTU0NS00NmJlLTk1YjktY2JmMjQ4ZjVlYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNhTd6G1D21dmGRJk0cSUt26YjusiHoushRC mXCf0qu16xNI1LOXkrk0HqRRRPQtEqH9NMFksAA67BOFrJrUBuA+T2IDHBstx3Ib fxwA5PxperVmmfINzsf6oZYGxIbmollyjn2JPxCNqQqEFAKjBneqi2YbLaMWqQcj zlrcD+AdqZOflOmd3OZs3Cgmyo2yIJzY0aY2iq325oQFDuYKnH29BrtRhvpD81GG EHpxxmAMGuiWgEjRCq7ytXsL0C4noL4ofSDa+47seJG+HUHX0iBYwKhh5Dh9hNBz wwbuye0U/nHluy/+OUOQ5kPHBnaOEFoyQCafVlaw8JGaCFmG+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkIDBJsiNZqUgb52y4PNzOc++VaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjczZTE0MGUtYmUyZi0z YWFhLThhZjctZjFhYzE1MTViMGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrP8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACB74+Gv1j3qPpz97pmxo1xMC9qhnNv+uASgfXl061q+XiZ4WNBrWIUh o/UzyKHzq4dzaiD2fJK8mTPilG3/XzC+23Eo0LCmrDTOpHtuJrtLTFvCmmwnfnea QP5vJiMAlDWpE5EJezWNilYu7K/Y+IkzwU2WkUANF9e5A7R6qC6GPkTZZxXQ5uk4 r9kKOKP0khRdG4b8gU13dKhsSXuKObPkzjM+Nn1iQDKP3CjgFqn0RoP9YsmgLuj8 K3+C7TzMSkGKJEEWFneZnsGEQphFUs1rv1lcVr6xY3hs6Fs5NBfgX5OdtW7bzPAO ldDBJbyNPjpxY0Z/ylNKJhjNiPCltk4= -----END CERTIFICATE-----Generated at Thu Aug 27 18:20:33 2026 by rpki-client