$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/737e73f9-b4a9-3de1-b005-82f693cbd18f.roa File: 737e73f9-b4a9-3de1-b005-82f693cbd18f.roa (raw, json) Hash identifier: fOiOJZ7FYLMzYyhoc8ShtV+/+98KE2AvR3soMIppK0U= Subject key identifier: 2A:98:07:A2:58:9F:9D:E3:5A:39:51:F0:C7:1E:58:D4:D6:F9:52:1C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97FC37CDE5D93DC2579F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/737e73f9-b4a9-3de1-b005-82f693cbd18f.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 172.241.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fc:37:cd:e5:d9:3d:c2:57:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=d74d2ed5-c804-4c98-b1dd-4d0b97493fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:16:bd:98:2b:56:59:fa:d0:85:fc:fc:2d:ed: 40:03:38:14:dc:e0:9d:23:c5:5e:73:5a:b8:2d:cd: 8a:40:c3:30:18:26:02:17:f1:42:41:d6:3e:f3:cc: aa:ce:3f:09:47:18:b4:22:84:b9:49:48:a7:fe:4a: 41:65:a0:23:7f:86:25:ee:60:b8:e9:15:4c:a2:15: 78:5c:29:86:0a:15:72:4d:59:f6:3d:a6:1b:a9:9e: 20:0a:fd:75:d9:24:a8:5d:e9:f2:75:65:e7:f2:29: f8:76:bf:8f:74:50:7a:6b:5d:84:fa:8a:89:36:7f: c7:00:06:8c:28:22:d1:e3:b3:87:7e:4e:99:f0:3c: a5:5e:39:08:d1:50:6d:49:6e:76:14:ba:25:fa:ce: 41:0d:4c:4a:52:18:be:54:d9:6d:05:fa:a6:2a:a0: 35:82:a0:44:2b:d5:e5:db:34:cb:87:ef:d0:2a:73: 4e:ed:a1:ff:a3:8c:8f:0f:6e:be:fd:d3:7b:58:81: bc:5f:78:b8:d5:8d:b9:6b:7a:d4:81:2a:b3:f1:6c: ef:03:48:ef:6e:13:1f:c6:d7:0d:2c:d1:e1:d5:a9: 01:f8:31:9d:d6:95:12:cd:98:de:a7:6b:67:05:55: 67:9f:15:b4:5b:fd:9c:1f:09:cf:de:ba:0c:88:85: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:98:07:A2:58:9F:9D:E3:5A:39:51:F0:C7:1E:58:D4:D6:F9:52:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/737e73f9-b4a9-3de1-b005-82f693cbd18f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2a:08:4b:34:09:32:52:26:7c:89:d7:12:1a:0d:7d:26:c4: d1:0f:29:f7:60:2c:73:f0:31:6b:51:82:25:a5:9b:a4:4e:cf: 19:f8:f6:0d:5a:bc:b4:c8:24:2b:da:b3:6e:ce:1d:66:14:95: 00:85:89:8b:a5:2c:cf:f6:c6:aa:c9:b7:04:2d:a6:78:bf:d3: c8:0f:dd:66:c3:16:ea:62:94:6a:87:41:a5:59:4b:08:5c:c2: c5:c0:fe:d5:5a:01:22:bf:94:b2:9e:06:bb:0c:5c:69:be:cf: c0:57:79:d2:0c:34:48:8b:c4:82:5c:9c:ea:53:cb:5f:69:8f: 3a:22:7a:61:41:23:a6:b8:b4:ad:22:90:ff:c7:6b:26:7d:95: f6:aa:3d:3e:9f:b3:ee:47:4e:66:1d:0e:c1:11:a6:c0:fc:64: 8d:1b:74:a5:8a:c4:94:df:27:a4:80:75:e3:28:b2:ba:0f:38: 79:ab:02:28:8b:47:7c:42:ca:63:a2:62:4a:0e:9d:09:09:ad: 67:73:6d:d8:e2:5e:b4:be:c5:c9:c9:d0:84:f0:b4:a3:1f:5c: 3f:aa:67:de:61:fd:54:c8:9b:f4:16:4d:6d:68:3e:08:82:bc: 61:ad:1b:98:69:01:20:2d:a2:de:c8:e0:26:42:e6:5e:f7:8c: ce:f2:0c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/w3zeXZPcJXn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDc0ZDJlZDUtYzgwNC00Yzk4LWIxZGQtNGQwYjk3NDkzZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRa9mCtWWfrQhfz8Le1AAzgU3OCdI8Vec1q4 Lc2KQMMwGCYCF/FCQdY+88yqzj8JRxi0IoS5SUin/kpBZaAjf4Yl7mC46RVMohV4 XCmGChVyTVn2PaYbqZ4gCv112SSoXenydWXn8in4dr+PdFB6a12E+oqJNn/HAAaM KCLR47OHfk6Z8DylXjkI0VBtSW52FLol+s5BDUxKUhi+VNltBfqmKqA1gqBEK9Xl 2zTLh+/QKnNO7aH/o4yPD26+/dN7WIG8X3i41Y25a3rUgSqz8WzvA0jvbhMfxtcN LNHh1akB+DGd1pUSzZjep2tnBVVnnxW0W/2cHwnP3roMiIWuBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqYB6JYn53jWjlR8MceWNTW+VIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNzM3ZTczZjktYjRhOS0z ZGUxLWIwMDUtODJmNjkzY2JkMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMqCEs0CTJSJnyJ1xIaDX0mxNEPKfdgLHPwMWtRgiWlm6ROzxn49g1a vLTIJCvas27OHWYUlQCFiYulLM/2xqrJtwQtpni/08gP3WbDFupilGqHQaVZSwhc wsXA/tVaASK/lLKeBrsMXGm+z8BXedIMNEiLxIJcnOpTy19pjzoiemFBI6a4tK0i kP/HayZ9lfaqPT6fs+5HTmYdDsERpsD8ZI0bdKWKxJTfJ6SAdeMosroPOHmrAiiL R3xCymOiYkoOnQkJrWdzbdjiXrS+xcnJ0ITwtKMfXD+qZ95h/VTIm/QWTW1oPgiC vGGtG5hpASAtot7I4CZC5l73jM7yDJQ= -----END CERTIFICATE-----Generated at Wed Oct 14 11:54:42 2026 by rpki-client