$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/76e6f981-8acb-3edf-9911-580b46c90f56.roa File: 76e6f981-8acb-3edf-9911-580b46c90f56.roa (raw, json) Hash identifier: 0No99fjkbenvE7oRfPHqvNvHoDB18EZ1aDB4KLb35KE= Subject key identifier: 68:F6:55:C1:4A:5B:82:82:C7:55:8E:5B:D9:34:48:6E:04:C7:9A:91 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF64F871B3B8242166576D20 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/76e6f981-8acb-3edf-9911-580b46c90f56.roa Signing time: Thu 06 Aug 2026 14:11:21 +0000 ROA not before: Thu 06 Aug 2026 14:11:21 +0000 ROA not after: Wed 04 Nov 2026 15:11:21 +0000 asID: 396190 IP address blocks: 142.234.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:64:f8:71:b3:b8:24:21:66:57:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:11:21 2026 GMT Not After : Nov 4 15:11:21 2026 GMT Subject: CN=21a425e2-1907-4fb6-8d5f-bf5f2998d1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:1b:20:bf:64:ac:b9:75:3d:3f:28:aa:46: 8d:99:dd:1c:8b:1f:b5:ad:b3:5a:2c:c8:8d:13:84: ae:44:a3:f3:58:10:be:8c:1b:44:e9:70:24:dc:85: e5:c6:77:03:66:ea:7c:42:ab:e5:66:18:cf:0a:06: 45:64:8d:80:cd:10:49:0a:3f:5f:3f:85:ab:c4:cd: ef:a6:ef:75:a8:c0:94:0a:c4:65:1a:58:e4:61:dc: 28:30:b7:0a:88:c4:36:3e:2f:2d:7f:e3:f2:d8:bd: 92:c8:93:ca:fd:3c:86:c2:df:4a:76:3e:6d:fb:9d: 0b:b7:63:d8:b6:a1:27:84:9d:3c:87:14:65:ad:31: 63:0d:09:72:ec:33:c0:f6:ef:5d:06:f9:c8:5e:83: 3c:09:36:04:59:dd:cf:19:c3:f6:bb:7e:b5:c5:0f: 04:cb:e9:78:db:8e:47:75:61:6e:c0:7f:0e:0f:72: 78:61:31:0a:32:3f:e0:04:63:33:12:0c:ca:b7:9a: d5:e3:09:75:67:3c:17:50:40:15:46:42:99:ad:fd: db:f3:87:b8:b3:c9:77:a9:a1:72:77:02:05:da:74: 2f:40:01:42:3b:76:9a:cc:74:3d:1d:15:e7:95:00: 9a:0e:1a:94:b5:cb:3f:87:2e:30:2a:74:1a:ea:95: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F6:55:C1:4A:5B:82:82:C7:55:8E:5B:D9:34:48:6E:04:C7:9A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/76e6f981-8acb-3edf-9911-580b46c90f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.234.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fe:44:ce:05:8a:06:38:24:e9:06:f8:95:b1:9a:78:a2:55: f4:32:25:6a:30:79:43:15:9a:0e:04:7b:5e:88:0f:b1:67:95: c3:9d:1d:02:1e:ed:58:8e:bb:e1:d7:57:56:de:3c:c1:1a:29: 06:df:3d:3f:80:3c:5d:57:a1:53:90:fb:4e:e3:98:d2:f8:b8: bc:c7:58:51:8f:4b:3a:47:b0:cc:e0:89:ff:8b:6f:cc:dc:36: 08:f8:f1:f7:42:83:3e:d9:b5:11:bd:22:f1:27:b6:ea:40:22: c8:98:64:9a:57:fc:ac:a4:23:c3:d2:1a:85:5e:30:12:4c:a1: 4c:b6:9d:b6:2b:62:a3:23:43:ca:c6:d9:bf:11:f8:41:2b:ed: 10:59:bc:d2:b0:4f:24:ba:32:6b:df:25:fc:44:40:f4:e3:52: 3c:ad:e0:75:df:34:d5:46:1f:fc:00:32:17:bb:7e:59:90:4d: 5b:ab:e9:02:fc:ec:e7:d6:51:e5:92:8a:29:56:36:e8:e5:62: de:73:77:bd:c1:30:03:4f:08:15:c3:37:44:3d:54:98:d2:db: 64:d5:1d:51:b8:03:77:33:13:7f:26:a2:d0:8e:ab:6f:5d:37: 4b:0f:65:45:7d:5f:30:f3:59:8c:06:a1:24:30:c9:b7:c2:45: ca:35:19:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/ZPhxs7gkIWZXbSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0MTEyMVoXDTI2MTEwNDE1MTEyMVowLzEtMCsGA1UEAxMk MjFhNDI1ZTItMTkwNy00ZmI2LThkNWYtYmY1ZjI5OThkMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqobIL9krLl1PT8oqkaNmd0cix+1rbNaLMiN E4SuRKPzWBC+jBtE6XAk3IXlxncDZup8QqvlZhjPCgZFZI2AzRBJCj9fP4WrxM3v pu91qMCUCsRlGljkYdwoMLcKiMQ2Pi8tf+Py2L2SyJPK/TyGwt9Kdj5t+50Lt2PY tqEnhJ08hxRlrTFjDQly7DPA9u9dBvnIXoM8CTYEWd3PGcP2u361xQ8Ey+l4245H dWFuwH8OD3J4YTEKMj/gBGMzEgzKt5rV4wl1ZzwXUEAVRkKZrf3b84e4s8l3qaFy dwIF2nQvQAFCO3aazHQ9HRXnlQCaDhqUtcs/hy4wKnQa6pX0nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj2VcFKW4KCx1WOW9k0SG4Ex5qRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNzZlNmY5ODEtOGFjYi0z ZWRmLTk5MTEtNTgwYjQ2YzkwZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuq8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7+RM4FigY4JOkG+JWxmniiVfQyJWoweUMVmg4Ee16ID7FnlcOdHQIe 7ViOu+HXV1bePMEaKQbfPT+APF1XoVOQ+07jmNL4uLzHWFGPSzpHsMzgif+Lb8zc Ngj48fdCgz7ZtRG9IvEntupAIsiYZJpX/KykI8PSGoVeMBJMoUy2nbYrYqMjQ8rG 2b8R+EEr7RBZvNKwTyS6MmvfJfxEQPTjUjyt4HXfNNVGH/wAMhe7flmQTVur6QL8 7OfWUeWSiilWNujlYt5zd73BMANPCBXDN0Q9VJjS22TVHVG4A3czE38motCOq29d N0sPZUV9XzDzWYwGoSQwybfCRco1Gbk= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:17 2026 by rpki-client