$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8318b3f6-d868-37a2-92cc-ca65fcd48923.roa File: 8318b3f6-d868-37a2-92cc-ca65fcd48923.roa (raw, json) Hash identifier: Wc9Id57NTBaJYGYiAMxuZvcaxaXlMyAhH9F7TeaXnJc= Subject key identifier: B4:9F:22:A5:4E:E3:91:3F:24:D6:F0:CD:AA:2A:9C:C4:F5:24:E5:0D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F612D6FC67457E4313D726480 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8318b3f6-d868-37a2-92cc-ca65fcd48923.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 396362 IP address blocks: 23.81.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6f:c6:74:57:e4:31:3d:72:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=dc38ab57-e9cb-4374-a588-e6fc7d934fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:5f:fa:6f:e2:d2:9a:a3:76:80:57:98:b2: e3:43:18:d5:c0:68:78:5a:4c:03:fa:df:e3:a8:1f: 9f:3d:f5:24:08:53:53:72:43:05:4e:0d:5c:7b:2a: 29:b6:d5:a5:96:d2:c0:c6:0d:0c:d5:f8:9b:4b:d3: 0a:1b:6f:54:49:71:eb:19:45:60:fb:f0:e9:a4:b3: be:b2:2c:2e:bb:d1:d9:a9:0d:d1:66:3d:91:35:d3: 05:cd:2c:e5:6d:e0:4b:57:e4:e4:87:4e:61:83:36: 31:c4:18:19:f3:75:d6:51:86:c7:c6:72:e5:1e:e1: e1:6c:72:1b:9d:f9:55:ff:02:5d:9e:54:20:ba:ae: f3:fd:3a:67:f9:7b:96:3d:e6:87:e6:e6:0a:24:24: fa:bc:4c:fa:e9:e0:72:25:54:72:22:42:65:79:72: c6:d2:2c:17:02:e8:27:8a:76:c5:85:b5:1f:3c:e5: 2e:a7:20:aa:dd:11:06:5c:ff:6d:4e:d6:3c:35:b8: f1:3b:14:69:4f:a6:29:cc:6a:80:9b:d6:9c:83:3b: 02:70:d3:38:01:44:17:77:07:87:ad:b4:68:7e:73: 4c:d9:eb:16:d7:8b:9a:5f:79:f0:10:0b:c3:1a:cf: db:1f:2f:6d:cf:ae:f6:8b:00:f1:a4:e8:a2:35:5a: 9b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9F:22:A5:4E:E3:91:3F:24:D6:F0:CD:AA:2A:9C:C4:F5:24:E5:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8318b3f6-d868-37a2-92cc-ca65fcd48923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.81.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e6:ed:5f:a4:b6:37:51:e5:4b:cd:c2:75:6c:9e:f8:58:a5: 7f:37:72:45:a1:5c:dd:7a:7a:f4:68:b2:e5:95:71:26:9a:c8: d5:82:52:62:09:57:9e:9b:50:02:54:71:48:32:53:38:9d:8c: 76:4f:38:92:3d:41:35:13:d1:d4:a3:9a:cb:5a:88:1c:e1:16: d8:3c:c0:08:02:77:b3:f7:da:f4:59:b7:6a:c1:8d:c2:5f:88: 84:17:74:a6:b8:bd:25:78:62:e9:a7:0c:39:4b:ce:ad:16:f7: 04:ef:2f:65:35:69:be:05:63:bb:bf:c5:a9:84:83:66:fb:cf: 1d:9d:09:59:37:e0:2a:a3:e8:ca:76:f3:7c:18:8e:1a:b8:d9: 05:5f:fd:f3:40:aa:97:2d:75:e4:1b:92:dc:63:8b:29:9b:6a: 68:1a:1b:fd:2a:66:e9:d1:42:ca:3e:67:77:dd:c7:02:6c:a8: 79:14:e5:79:50:a4:ec:cb:d8:f8:d6:e7:66:b6:06:ac:8d:9f: f5:c8:fb:44:eb:c8:7d:36:dd:b0:b1:d9:6e:93:47:28:97:5b: 2a:f3:6c:dd:78:54:5c:65:35:8b:02:d0:09:a7:62:eb:ce:04: 74:25:c2:0c:cb:6c:ae:3e:d7:d0:e8:07:dc:c2:67:7f:d3:82: cc:c4:e0:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLW/GdFfkMT1yZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZGMzOGFiNTctZTljYi00Mzc0LWE1ODgtZTZmYzdkOTM0ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBdf+m/i0pqjdoBXmLLjQxjVwGh4WkwD+t/j qB+fPfUkCFNTckMFTg1ceyopttWlltLAxg0M1fibS9MKG29USXHrGUVg+/DppLO+ siwuu9HZqQ3RZj2RNdMFzSzlbeBLV+Tkh05hgzYxxBgZ83XWUYbHxnLlHuHhbHIb nflV/wJdnlQguq7z/Tpn+XuWPeaH5uYKJCT6vEz66eByJVRyIkJleXLG0iwXAugn inbFhbUfPOUupyCq3REGXP9tTtY8NbjxOxRpT6YpzGqAm9acgzsCcNM4AUQXdweH rbRofnNM2esW14uaX3nwEAvDGs/bHy9tz672iwDxpOiiNVqbvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSfIqVO45E/JNbwzaoqnMT1JOUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODMxOGIzZjYtZDg2OC0z N2EyLTkyY2MtY2E2NWZjZDQ4OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1FAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzm7V+ktjdR5UvNwnVsnvhYpX83ckWhXN16evRosuWVcSaayNWCUmIJ V56bUAJUcUgyUzidjHZPOJI9QTUT0dSjmstaiBzhFtg8wAgCd7P32vRZt2rBjcJf iIQXdKa4vSV4YumnDDlLzq0W9wTvL2U1ab4FY7u/xamEg2b7zx2dCVk34Cqj6Mp2 83wYjhq42QVf/fNAqpctdeQbktxjiymbamgaG/0qZunRQso+Z3fdxwJsqHkU5XlQ pOzL2PjW52a2BqyNn/XI+0TryH023bCx2W6TRyiXWyrzbN14VFxlNYsC0AmnYuvO BHQlwgzLbK4+19DoB9zCZ3/TgszE4O4= -----END CERTIFICATE-----Generated at Sun Oct 4 20:03:49 2026 by rpki-client