$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/804d6dcf-b0de-30f2-8da5-6806118aa5cb.roa File: 804d6dcf-b0de-30f2-8da5-6806118aa5cb.roa (raw, json) Hash identifier: WVDn4m3oKwG8lUgp+uYpjlkE2uWOHgdaseTN1Yi+irM= Subject key identifier: 6E:F8:CA:1B:E7:23:59:76:81:F1:38:3D:A5:74:ED:10:5F:C9:78:8D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B674D2E5FD18487015E0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/804d6dcf-b0de-30f2-8da5-6806118aa5cb.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 394380 IP address blocks: 172.241.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b6:74:d2:e5:fd:18:48:70:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=35bf2e94-2808-4fcb-a3f0-fb0c34ad4c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:34:34:69:69:1d:ec:59:f8:e5:63:a0:a5: 91:41:2b:40:02:1b:15:80:37:3a:d5:fb:ed:6a:67: d1:ec:cf:71:c9:14:40:cf:00:ca:02:b2:ac:8b:67: 2f:98:96:dd:cc:eb:64:94:8b:25:6c:14:9d:8e:ef: 11:17:3b:5f:11:45:61:b7:f2:59:fa:05:11:f5:50: 8c:ec:3f:f0:e2:92:24:a6:31:b7:e1:d4:1f:05:01: bd:da:1a:f5:db:be:35:6d:25:ad:aa:14:bc:9e:61: ee:2c:1f:a0:ae:ae:17:8c:8e:b5:d8:13:8e:a4:aa: f4:b4:07:21:5a:65:09:13:40:2f:69:e4:51:a5:1d: 8e:7c:a5:53:af:0e:7a:bc:f8:fb:b2:50:a1:6c:d9: 01:14:3c:11:23:a0:d8:7e:7b:69:82:2a:85:f9:93: 82:c4:c4:41:9a:3d:bf:54:eb:07:e4:fa:01:f9:94: 44:3f:02:6a:33:13:41:11:49:b6:e3:a7:ff:75:e2: 0f:22:85:b1:59:5e:14:e5:32:33:6e:58:34:8c:34: 6d:89:8a:5a:6f:df:fb:8a:34:32:e9:ac:67:5a:4d: 9b:5a:0f:cc:e9:5b:87:7d:24:f3:47:ab:c4:4d:f6: 4f:f2:ec:b6:22:2f:a2:b0:62:a9:54:a4:cc:cc:e9: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F8:CA:1B:E7:23:59:76:81:F1:38:3D:A5:74:ED:10:5F:C9:78:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/804d6dcf-b0de-30f2-8da5-6806118aa5cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:4e:0e:cf:11:1d:84:89:35:cf:b2:a9:40:4e:0d:37:50:6b: 4b:3e:b8:35:ea:7b:22:cb:14:89:20:6a:88:86:f0:89:e2:63: 9d:df:17:1e:22:4a:97:d8:d2:27:0f:9d:b8:5d:d5:17:56:ee: 86:ef:95:de:70:5f:f3:05:d5:d3:ec:37:25:36:f6:05:bc:a6: 83:19:f0:49:63:c1:8a:59:8d:e7:10:06:2b:a8:73:2e:0b:6e: ef:ce:67:10:d3:40:2c:82:5b:c0:80:8b:f5:b0:5e:0b:f0:2f: cd:9d:49:e0:53:ab:b3:74:a9:5d:b9:94:47:fb:39:e4:b0:4a: a6:f9:b4:1a:34:66:a7:ab:24:f0:33:ba:d1:41:ec:12:a1:2a: eb:a2:ad:8c:7a:cd:2a:8c:96:09:bd:40:06:90:2b:cc:29:69: 10:fa:63:68:85:97:08:c3:13:c2:af:ab:7e:83:84:58:96:c5: c1:24:38:f0:33:97:09:ed:41:fc:76:e5:59:3a:6d:09:2c:12: 46:9c:9c:f8:64:ee:0e:dd:fc:1f:3b:d5:c9:d6:bf:04:37:a9: e0:c5:75:f1:8e:65:7f:e0:d4:9d:b6:16:4b:c0:19:4c:32:e1: d2:69:b2:46:ef:c1:bd:55:bc:7d:a7:8e:b8:89:53:d2:68:b5: 1e:b5:f1:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrZ00uX9GEhwFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MzViZjJlOTQtMjgwOC00ZmNiLWEzZjAtZmIwYzM0YWQ0YzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsE0NGlpHexZ+OVjoKWRQStAAhsVgDc61fvt amfR7M9xyRRAzwDKArKsi2cvmJbdzOtklIslbBSdju8RFztfEUVht/JZ+gUR9VCM 7D/w4pIkpjG34dQfBQG92hr12741bSWtqhS8nmHuLB+grq4XjI612BOOpKr0tAch WmUJE0AvaeRRpR2OfKVTrw56vPj7slChbNkBFDwRI6DYfntpgiqF+ZOCxMRBmj2/ VOsH5PoB+ZREPwJqMxNBEUm246f/deIPIoWxWV4U5TIzblg0jDRtiYpab9/7ijQy 6axnWk2bWg/M6VuHfSTzR6vETfZP8uy2Ii+isGKpVKTMzOnBpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG74yhvnI1l2gfE4PaV07RBfyXiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODA0ZDZkY2YtYjBkZS0z MGYyLThkYTUtNjgwNjExOGFhNWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVODs8RHYSJNc+yqUBODTdQa0s+uDXqeyLLFIkgaoiG8IniY53fFx4i SpfY0icPnbhd1RdW7obvld5wX/MF1dPsNyU29gW8poMZ8EljwYpZjecQBiuocy4L bu/OZxDTQCyCW8CAi/WwXgvwL82dSeBTq7N0qV25lEf7OeSwSqb5tBo0ZqerJPAz utFB7BKhKuuirYx6zSqMlgm9QAaQK8wpaRD6Y2iFlwjDE8Kvq36DhFiWxcEkOPAz lwntQfx25Vk6bQksEkacnPhk7g7d/B871cnWvwQ3qeDFdfGOZX/g1J22FkvAGUwy 4dJpskbvwb1VvH2njriJU9JotR618fM= -----END CERTIFICATE-----Generated at Wed Oct 14 17:48:36 2026 by rpki-client