$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/74138aa8-6be4-3c2e-908a-6a9339260e4a.roa File: 74138aa8-6be4-3c2e-908a-6a9339260e4a.roa (raw, json) Hash identifier: gRBXzjU8ZxcuEiNk1uOdKX8bLRAoRbLr0gXz0qn1MFU= Subject key identifier: 01:B3:73:58:66:BB:3A:8B:E1:D9:B7:3D:F4:CE:C1:5A:8F:91:F8:3C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D6284FE1EBEECB3B41180 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/74138aa8-6be4-3c2e-908a-6a9339260e4a.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 173.234.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:62:84:fe:1e:be:ec:b3:b4:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=ca4d9664-5fe8-45d9-95a6-5a765f9f44ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:60:eb:0a:3b:bb:45:aa:fb:17:35:20:54: fe:70:23:8f:c8:e0:9d:b7:02:2f:72:f4:c2:5a:96: 53:a9:22:b4:8a:35:2c:95:d9:bd:64:74:fb:9e:22: a8:ff:5e:54:0e:96:fa:f3:5a:d4:68:2d:c4:ac:64: 84:2f:46:ac:9d:94:5f:32:19:89:74:91:c6:26:21: e7:94:f4:18:d5:65:03:5f:f9:04:13:1d:7a:d2:85: 7e:ae:0c:e5:34:60:e9:f3:32:c0:e4:ef:ed:10:a9: 6a:87:a1:af:98:9b:31:b2:44:28:f3:61:4c:77:e2: 14:85:c2:97:eb:12:ed:25:e8:c6:9e:42:dd:7d:4a: 5c:db:5e:46:01:8e:86:75:6f:ab:1c:29:e9:e2:45: eb:53:7e:71:ae:cb:9d:7d:cc:e8:37:23:53:23:75: d4:4b:67:ca:8a:f2:2a:b1:c9:c1:de:99:b2:e1:13: 19:67:48:33:ae:db:47:f0:2f:59:6f:f4:1e:0c:68: d7:4d:e1:b1:96:27:43:93:d2:15:3d:ea:41:68:8a: af:b8:fd:be:3d:86:a1:96:bb:6f:98:aa:67:b7:d8: 0e:69:f0:19:dd:31:31:cc:e3:4c:b8:24:38:07:cf: ac:1e:35:41:65:99:a6:55:7c:8b:ad:67:94:c9:cf: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:73:58:66:BB:3A:8B:E1:D9:B7:3D:F4:CE:C1:5A:8F:91:F8:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/74138aa8-6be4-3c2e-908a-6a9339260e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:88:96:8c:a4:6e:dc:7d:2d:11:3b:93:98:40:92:88:66:04: 97:f5:d5:73:87:77:8d:7a:9f:ee:ce:e4:5b:6f:d9:02:00:0c: ce:19:db:52:88:a6:08:99:f7:a0:0b:1a:9e:0b:33:38:91:a3: f5:8d:78:8d:9e:36:e5:1b:07:58:60:1e:94:e7:d6:ab:44:39: 3c:28:d2:c5:1f:56:6c:70:b3:b9:b3:50:c4:e7:71:57:8d:f9: 5a:e4:82:cf:45:0d:b0:37:6b:d7:db:a5:40:09:c5:4c:9a:37: 16:bb:99:1b:d6:0e:e7:6a:cd:fb:60:93:64:bb:51:41:1b:fe: aa:02:a2:5b:3e:54:d5:08:00:99:b9:fc:e6:7a:c5:61:8d:66: 88:3a:c3:60:5f:9d:e0:d4:57:f4:aa:00:fd:c2:ca:9f:97:f1: 5e:09:e9:8c:da:e9:c2:23:7a:c1:c8:c8:23:a7:92:58:10:0b: 7f:7a:08:90:16:ae:f3:b7:41:3c:98:54:2b:db:08:aa:ea:d7: b6:6f:85:22:bc:4a:6c:f6:17:18:0b:83:11:ed:5b:d4:bc:aa: af:d1:f1:dd:43:da:36:bf:30:96:30:4f:2a:88:d7:66:f3:1c: 72:9d:55:6c:57:08:d9:9a:7e:e1:8a:81:fa:48:c7:c3:24:95: e9:0b:b8:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWKE/h6+7LO0EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk Y2E0ZDk2NjQtNWZlOC00NWQ5LTk1YTYtNWE3NjVmOWY0NGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Zg6wo7u0Wq+xc1IFT+cCOPyOCdtwIvcvTC WpZTqSK0ijUsldm9ZHT7niKo/15UDpb681rUaC3ErGSEL0asnZRfMhmJdJHGJiHn lPQY1WUDX/kEEx160oV+rgzlNGDp8zLA5O/tEKlqh6GvmJsxskQo82FMd+IUhcKX 6xLtJejGnkLdfUpc215GAY6GdW+rHCnp4kXrU35xrsudfczoNyNTI3XUS2fKivIq scnB3pmy4RMZZ0gzrttH8C9Zb/QeDGjXTeGxlidDk9IVPepBaIqvuP2+PYahlrtv mKpnt9gOafAZ3TExzONMuCQ4B8+sHjVBZZmmVXyLrWeUyc+JlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGzc1hmuzqL4dm3PfTOwVqPkfg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNzQxMzhhYTgtNmJlNC0z YzJlLTkwOGEtNmE5MzM5MjYwZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCreo0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGIloykbtx9LRE7k5hAkohmBJf11XOHd416n+7O5Ftv2QIADM4Z21KI pgiZ96ALGp4LMziRo/WNeI2eNuUbB1hgHpTn1qtEOTwo0sUfVmxws7mzUMTncVeN +Vrkgs9FDbA3a9fbpUAJxUyaNxa7mRvWDudqzftgk2S7UUEb/qoCols+VNUIAJm5 /OZ6xWGNZog6w2BfneDUV/SqAP3Cyp+X8V4J6Yza6cIjesHIyCOnklgQC396CJAW rvO3QTyYVCvbCKrq17ZvhSK8Smz2FxgLgxHtW9S8qq/R8d1D2ja/MJYwTyqI12bz HHKdVWxXCNmafuGKgfpIx8MklekLuKQ= -----END CERTIFICATE-----Generated at Thu Oct 15 10:38:46 2026 by rpki-client