$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/75deed90-8e98-3a52-9f9d-ae60270a9787.roa File: 75deed90-8e98-3a52-9f9d-ae60270a9787.roa (raw, json) Hash identifier: vX4G5B7nG5wXdZQZr2HA9wovT6wp3r+IQHLq7YHrxJg= Subject key identifier: 86:CD:00:50:22:1C:80:EA:ED:F4:B6:EC:89:D0:C6:B0:08:62:2D:5F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC28873BAAA5CBCBD1D918500 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/75deed90-8e98-3a52-9f9d-ae60270a9787.roa Signing time: Fri 07 Aug 2026 17:10:16 +0000 ROA not before: Fri 07 Aug 2026 17:10:16 +0000 ROA not after: Thu 05 Nov 2026 18:10:16 +0000 asID: 395954 IP address blocks: 142.234.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:88:73:ba:aa:5c:bc:bd:1d:91:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 7 17:10:16 2026 GMT Not After : Nov 5 18:10:16 2026 GMT Subject: CN=2ec75601-450c-4e19-8de6-ca657c01c9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e8:70:a5:5e:6d:ef:6a:b3:39:8d:2a:33:76: 5f:2e:1d:6c:c7:ca:51:28:01:1f:0f:e7:df:05:ba: c8:72:fa:f3:b7:e8:3b:3a:7c:ad:25:99:a2:be:85: 00:8f:a9:18:b8:ac:77:d5:3a:2b:98:9c:86:df:d4: 17:2f:e3:f6:79:30:a3:d4:7e:d0:07:7e:db:29:d5: 40:2f:7a:ac:10:27:b4:f4:eb:f2:27:39:3a:41:47: 9f:c8:ac:99:77:15:58:da:d9:4f:0e:3e:6b:85:f8: 0d:c1:18:c5:51:47:57:73:d2:73:96:ea:a9:04:27: 93:d1:2e:24:e5:d5:06:99:ef:23:73:12:10:da:fb: 4f:12:c7:ed:83:cf:63:09:63:23:73:b3:d6:81:e7: de:46:4a:58:17:c9:1c:37:71:e5:76:49:7f:51:cf: 9a:3b:02:7d:1a:71:6d:02:9c:b4:01:ca:07:1e:07: d1:cf:a1:b7:d5:16:67:c8:ee:e0:d4:1a:93:9e:94: f0:0b:35:c7:cb:99:e3:66:c6:bf:00:8d:fd:82:80: 31:d5:1c:17:b8:33:89:1c:11:da:a8:2c:ff:2e:bf: 20:68:17:68:3c:ed:5c:9c:47:96:13:5a:4a:bb:a3: 2a:21:87:80:5a:5c:40:13:2f:7d:8e:29:09:51:4b: d7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CD:00:50:22:1C:80:EA:ED:F4:B6:EC:89:D0:C6:B0:08:62:2D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/75deed90-8e98-3a52-9f9d-ae60270a9787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.234.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3d:00:4b:ff:9d:28:7a:cb:c4:17:7c:04:14:f8:5e:84:e2: d4:23:4a:bf:0a:20:1c:ed:d2:62:55:0a:ae:45:8a:71:22:23: a1:2d:5b:a9:17:96:f1:da:2d:e7:50:ad:ee:81:de:77:27:e3: cb:21:89:32:11:2c:5c:65:3e:9e:8c:cb:8b:c1:dd:2f:c0:9f: c7:38:f3:8f:1d:39:9b:28:48:51:8e:82:0d:0e:3e:a0:54:7a: 6b:a9:dd:83:70:09:63:43:8b:b5:5a:e7:a9:5a:e1:6f:ba:a6: b4:a1:aa:9a:7c:08:a6:96:82:3c:38:61:07:a4:79:9d:27:82: 02:c5:3d:10:5f:f1:f7:a1:d0:19:a0:aa:4b:4f:b0:2e:8f:b0: 7d:54:f9:0f:c8:88:2a:39:bd:42:82:86:83:7d:d0:60:c7:df: 84:e3:f6:71:92:15:40:2f:1b:bb:13:82:3a:ea:7f:f4:74:a0: 1e:26:fd:5c:f0:dc:46:3a:a5:fa:36:47:e9:fa:4a:63:a9:09: bc:10:6e:d6:80:6b:70:1d:91:1a:17:7c:d0:53:c0:01:24:8d: d5:be:61:e2:c3:a7:c8:15:52:af:7f:44:f7:aa:25:08:ab:4c: d4:a8:16:fd:c6:a3:80:13:1f:75:6b:3a:f0:2c:a5:1c:d0:b9: f8:48:36:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CiHO6qly8vR2RhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNzE3MTAxNloXDTI2MTEwNTE4MTAxNlowLzEtMCsGA1UEAxMk MmVjNzU2MDEtNDUwYy00ZTE5LThkZTYtY2E2NTdjMDFjOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOhwpV5t72qzOY0qM3ZfLh1sx8pRKAEfD+ff BbrIcvrzt+g7OnytJZmivoUAj6kYuKx31TormJyG39QXL+P2eTCj1H7QB37bKdVA L3qsECe09OvyJzk6QUefyKyZdxVY2tlPDj5rhfgNwRjFUUdXc9JzluqpBCeT0S4k 5dUGme8jcxIQ2vtPEsftg89jCWMjc7PWgefeRkpYF8kcN3Hldkl/Uc+aOwJ9GnFt Apy0AcoHHgfRz6G31RZnyO7g1BqTnpTwCzXHy5njZsa/AI39goAx1RwXuDOJHBHa qCz/Lr8gaBdoPO1cnEeWE1pKu6MqIYeAWlxAEy99jikJUUvXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbNAFAiHIDq7fS27InQxrAIYi1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNzVkZWVkOTAtOGU5OC0z YTUyLTlmOWQtYWU2MDI3MGE5Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjupYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU9AEv/nSh6y8QXfAQU+F6E4tQjSr8KIBzt0mJVCq5FinEiI6EtW6kX lvHaLedQre6B3ncn48shiTIRLFxlPp6My4vB3S/An8c4848dOZsoSFGOgg0OPqBU emup3YNwCWNDi7Va56la4W+6prShqpp8CKaWgjw4YQekeZ0nggLFPRBf8feh0Bmg qktPsC6PsH1U+Q/IiCo5vUKChoN90GDH34Tj9nGSFUAvG7sTgjrqf/R0oB4m/Vzw 3EY6pfo2R+n6SmOpCbwQbtaAa3AdkRoXfNBTwAEkjdW+YeLDp8gVUq9/RPeqJQir TNSoFv3Go4ATH3VrOvAspRzQufhINng= -----END CERTIFICATE-----Generated at Thu Aug 27 17:38:46 2026 by rpki-client