$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/85aeaafe-30fb-39f7-87b7-23b44afc54a3.roa File: 85aeaafe-30fb-39f7-87b7-23b44afc54a3.roa (raw, json) Hash identifier: WlN4lQ3XSv/TCgE0zvnEnd7C4Nx7U724u8NY4ug1uEc= Subject key identifier: BD:CE:AA:F8:F8:EA:4E:E6:57:15:1E:E5:E9:8E:01:BD:22:F1:F7:5E Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5E62DCFC4C199303495B4740 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/85aeaafe-30fb-39f7-87b7-23b44afc54a3.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 27411 IP address blocks: 64.120.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:dc:fc:4c:19:93:03:49:5b:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=e8b5b9bb-52f0-4e2a-a216-aff5306aef45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:23:73:d0:57:ca:fc:09:db:e5:c2:77:af: 00:bb:42:9e:9d:e1:99:3e:42:5b:c1:6e:a5:89:15: 0a:29:c9:a8:5a:44:22:87:c7:a8:f6:76:20:77:ea: f6:ef:dc:35:a0:74:4d:5e:18:9f:35:50:c9:1f:f1: d8:a7:7d:73:5d:4f:e6:21:48:fe:35:bf:4f:1a:6d: af:49:31:cd:fc:b7:32:98:b1:38:2e:06:ad:9e:d2: 2d:0d:0e:44:4f:c7:ef:4a:c3:12:b0:7b:53:95:3b: 52:29:ac:84:56:03:b9:a3:b7:70:6d:cb:d3:fd:07: d0:f4:a3:c9:ef:39:bf:a1:34:03:08:f7:12:14:54: 10:90:81:93:ee:30:3f:92:a4:4f:b6:ae:6b:01:6f: cf:14:8b:cd:52:32:5f:de:30:e2:99:27:17:5f:df: e6:ed:fb:27:0b:f8:9c:4d:28:b5:2f:95:dc:7f:eb: 55:47:8f:03:1b:1b:3a:b4:0e:55:9f:1b:b6:22:52: 51:db:1d:97:96:92:9f:b9:89:bd:db:30:87:cd:f8: 86:02:20:30:e2:89:0f:b9:eb:ea:fa:97:94:e4:cd: 34:9a:5f:dd:57:ad:ff:3a:b3:b6:9c:a2:dc:56:e7: f1:02:ab:08:c1:f3:47:8e:0c:9b:f2:fd:c8:58:0e: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CE:AA:F8:F8:EA:4E:E6:57:15:1E:E5:E9:8E:01:BD:22:F1:F7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/85aeaafe-30fb-39f7-87b7-23b44afc54a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 64.120.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6b:7c:a4:33:0b:57:b6:9c:18:1b:e7:93:53:2e:61:b0:e6: d3:15:df:41:5b:45:4d:0d:9d:bb:5d:40:7d:cc:67:1c:79:4d: 16:2d:e0:75:5a:3b:d7:5a:2c:8d:89:e1:96:8f:a5:15:5f:53: 5f:7c:68:f8:65:bd:1f:28:9b:36:6f:10:33:0a:cc:6c:c4:0b: 0b:6a:32:f6:56:8b:8f:e5:4a:e7:7a:ee:ff:6b:81:e6:86:16: ed:19:e6:6e:2e:fc:29:d0:a0:71:25:00:ff:8a:98:4a:bc:e1: 72:3a:f8:f8:2e:86:81:ff:a6:0d:38:3c:60:7c:52:f7:88:0a: 22:af:41:f0:ad:bf:82:4c:79:b1:00:41:5a:5d:dd:af:1e:f2: 09:c7:c7:3b:09:ff:e2:d9:74:d6:51:e6:d1:32:c3:8d:c9:77: 14:a8:23:e1:ca:b7:95:c6:02:01:ed:56:c3:14:36:1b:be:8d: aa:e8:95:e7:60:77:2d:c5:06:c4:04:7c:75:46:0e:a5:e8:d5: 6a:7e:df:a6:b0:e5:1c:0f:60:65:05:2a:2f:20:d4:fd:30:09: 55:f6:fd:b1:26:f9:c3:5f:58:2f:c7:12:4e:03:a2:61:b2:c9: a2:dc:49:ce:45:0c:0c:24:76:67:7b:c1:f1:12:b0:1b:4e:04: f0:d3:f6:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtz8TBmTA0lbR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZThiNWI5YmItNTJmMC00ZTJhLWEyMTYtYWZmNTMwNmFlZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFwjc9BXyvwJ2+XCd68Au0KeneGZPkJbwW6l iRUKKcmoWkQih8eo9nYgd+r279w1oHRNXhifNVDJH/HYp31zXU/mIUj+Nb9PGm2v STHN/LcymLE4LgatntItDQ5ET8fvSsMSsHtTlTtSKayEVgO5o7dwbcvT/QfQ9KPJ 7zm/oTQDCPcSFFQQkIGT7jA/kqRPtq5rAW/PFIvNUjJf3jDimScXX9/m7fsnC/ic TSi1L5Xcf+tVR48DGxs6tA5Vnxu2IlJR2x2XlpKfuYm92zCHzfiGAiAw4okPuevq +peU5M00ml/dV63/OrO2nKLcVufxAqsIwfNHjgyb8v3IWA7qcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3Oqvj46k7mVxUe5emOAb0i8fdeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODVhZWFhZmUtMzBmYi0z OWY3LTg3YjctMjNiNDRhZmM1NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQHggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVrfKQzC1e2nBgb55NTLmGw5tMV30FbRU0NnbtdQH3MZxx5TRYt4HVa O9daLI2J4ZaPpRVfU198aPhlvR8omzZvEDMKzGzECwtqMvZWi4/lSud67v9rgeaG Fu0Z5m4u/CnQoHElAP+KmEq84XI6+PguhoH/pg04PGB8UveICiKvQfCtv4JMebEA QVpd3a8e8gnHxzsJ/+LZdNZR5tEyw43JdxSoI+HKt5XGAgHtVsMUNhu+jaroledg dy3FBsQEfHVGDqXo1Wp+36aw5RwPYGUFKi8g1P0wCVX2/bEm+cNfWC/HEk4DomGy yaLcSc5FDAwkdmd7wfESsBtOBPDT9iU= -----END CERTIFICATE-----Generated at Wed Oct 14 15:11:58 2026 by rpki-client