$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/804d6dcf-b0de-30f2-8da5-6806118aa5cb.roa File: 804d6dcf-b0de-30f2-8da5-6806118aa5cb.roa (raw, json) Hash identifier: XsGmQm/K1vm0s49UD9nj4jcSYMOcjwDTZC9FpcPw844= Subject key identifier: 91:CF:83:95:34:D7:83:F8:A5:A6:EF:E5:07:11:E3:51:82:4B:CA:C5 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF792831BCDDD5396C51FD20 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/804d6dcf-b0de-30f2-8da5-6806118aa5cb.roa Signing time: Thu 06 Aug 2026 14:52:01 +0000 ROA not before: Thu 06 Aug 2026 14:52:01 +0000 ROA not after: Wed 04 Nov 2026 15:52:01 +0000 asID: 394380 IP address blocks: 172.241.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:79:28:31:bc:dd:d5:39:6c:51:fd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:52:01 2026 GMT Not After : Nov 4 15:52:01 2026 GMT Subject: CN=f871d138-1c16-48b8-8d61-20c4fdf9e3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cc:29:24:db:43:6f:99:89:3d:9a:e4:a8:88: 14:f1:9a:e8:04:17:97:f4:e9:b7:d3:49:8e:39:75: 09:fc:22:cf:19:af:86:79:73:08:54:97:0a:53:f9: 86:21:0a:94:83:6e:90:49:b9:79:07:39:77:ac:31: 9c:29:4e:e2:47:5e:b2:a4:e6:9c:b2:32:1b:2e:34: c0:ed:5c:1f:50:e7:5c:96:f1:42:a2:00:82:17:28: aa:48:5a:de:ee:89:cb:19:32:01:da:58:1a:73:b4: e9:96:db:1d:98:ed:ed:86:bb:ea:f5:00:69:4e:c1: 4d:59:9a:18:5c:7d:a6:4e:5e:4a:93:04:de:40:9c: c8:da:a5:38:bc:f5:36:21:90:15:f3:3d:3c:6f:8e: 8c:9a:b8:9a:19:53:1d:22:22:74:9e:c6:48:35:b7: 6d:c0:5e:dd:aa:ca:20:e6:38:d1:12:7a:56:5f:39: 19:09:72:80:c6:e4:a1:b1:52:7e:bb:1a:18:1b:4c: 76:0d:3c:07:56:9c:c6:29:5a:9b:46:a8:4a:94:c4: a8:01:88:b1:8b:a5:5e:2a:5f:f5:b1:6e:32:e5:95: 4b:1a:50:e9:6d:e4:9f:06:8c:85:17:1f:71:3d:a4: f1:5c:81:3a:44:bd:c8:b4:79:de:19:0b:4e:8a:1c: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CF:83:95:34:D7:83:F8:A5:A6:EF:E5:07:11:E3:51:82:4B:CA:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/804d6dcf-b0de-30f2-8da5-6806118aa5cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9e:4c:7a:bf:a7:8d:94:68:56:4a:95:3f:fb:5b:e1:c3:2f: 0e:1f:10:14:8d:4f:5c:e3:d8:f7:96:86:15:5b:09:e7:c0:a1: ce:27:ab:5f:bd:5c:4a:55:0b:ad:db:d6:ce:03:43:da:12:39: 40:76:91:20:0d:ff:5d:ea:b1:eb:14:83:87:0d:ea:16:16:40: f4:0a:04:c1:5e:00:98:b5:71:6c:5a:c1:b8:b3:77:90:83:90: 3f:30:6b:5b:1a:00:3c:37:64:ea:9e:49:67:e9:af:02:19:da: ac:b2:24:a3:30:ef:42:d8:5e:6e:f6:b7:23:27:f5:38:c3:52: 03:b9:91:e9:64:e0:14:96:a6:59:d2:58:c6:55:bc:e9:87:e0: 01:a9:89:ad:5a:79:4e:a6:5b:26:e6:b3:ea:85:39:05:cc:58: bb:c4:6b:d9:93:d3:13:77:f4:31:aa:17:60:33:19:fa:6b:68: f1:77:22:e0:65:16:a6:fa:ec:39:01:5f:5f:80:b9:83:d4:33: a1:84:a3:b2:26:57:b9:f5:92:cb:ca:cd:68:36:2f:84:93:40: 31:23:c4:8f:3a:e7:32:35:8e:b5:91:46:5c:1b:c7:6c:ff:a0: cd:c9:73:43:4e:85:8a:23:02:e9:f1:92:ba:e9:b1:cf:01:2d: 0a:23:0b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/eSgxvN3VOWxR/SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0NTIwMVoXDTI2MTEwNDE1NTIwMVowLzEtMCsGA1UEAxMk Zjg3MWQxMzgtMWMxNi00OGI4LThkNjEtMjBjNGZkZjllM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8wpJNtDb5mJPZrkqIgU8ZroBBeX9Om300mO OXUJ/CLPGa+GeXMIVJcKU/mGIQqUg26QSbl5Bzl3rDGcKU7iR16ypOacsjIbLjTA 7VwfUOdclvFCogCCFyiqSFre7onLGTIB2lgac7TpltsdmO3thrvq9QBpTsFNWZoY XH2mTl5KkwTeQJzI2qU4vPU2IZAV8z08b46MmriaGVMdIiJ0nsZINbdtwF7dqsog 5jjREnpWXzkZCXKAxuShsVJ+uxoYG0x2DTwHVpzGKVqbRqhKlMSoAYixi6VeKl/1 sW4y5ZVLGlDpbeSfBoyFFx9xPaTxXIE6RL3ItHneGQtOihzl6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHPg5U014P4pabv5QcR41GCS8rFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODA0ZDZkY2YtYjBkZS0z MGYyLThkYTUtNjgwNjExOGFhNWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqeTHq/p42UaFZKlT/7W+HDLw4fEBSNT1zj2PeWhhVbCefAoc4nq1+9 XEpVC63b1s4DQ9oSOUB2kSAN/13qsesUg4cN6hYWQPQKBMFeAJi1cWxawbizd5CD kD8wa1saADw3ZOqeSWfprwIZ2qyyJKMw70LYXm72tyMn9TjDUgO5kelk4BSWplnS WMZVvOmH4AGpia1aeU6mWybms+qFOQXMWLvEa9mT0xN39DGqF2AzGfpraPF3IuBl Fqb67DkBX1+AuYPUM6GEo7ImV7n1ksvKzWg2L4STQDEjxI865zI1jrWRRlwbx2z/ oM3Jc0NOhYojAunxkrrpsc8BLQojC9c= -----END CERTIFICATE-----Generated at Thu Aug 27 18:19:41 2026 by rpki-client