$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8716fe0e-b99d-3e6a-8c7c-a7b2a14ff1f3.roa File: 8716fe0e-b99d-3e6a-8c7c-a7b2a14ff1f3.roa (raw, json) Hash identifier: I9zinSZ2U/8gk/2p6TxcU4rJUKp/6fq5QpiEXQEtBpQ= Subject key identifier: B9:4D:F7:4E:03:84:CC:0D:D2:9E:35:A2:38:3A:64:B0:86:F3:02:68 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B194F193991CD945B900 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8716fe0e-b99d-3e6a-8c7c-a7b2a14ff1f3.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 108.62.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b1:94:f1:93:99:1c:d9:45:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=09afb2ec-86f4-429d-84b9-d71c41f71b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3b:1a:f5:f0:48:be:44:b3:02:c4:e6:b2:db: 79:34:1c:db:96:b7:c5:12:56:2f:27:23:b1:6f:c6: a2:40:95:c1:58:d7:ba:f1:36:8d:aa:7d:46:0e:27: 2d:90:4f:21:6d:4a:a2:77:58:cc:07:6a:a6:53:21: c8:9e:b9:d1:f8:e5:2d:10:9d:e0:c2:7e:c1:ac:6b: 69:af:e3:a3:d5:f6:82:10:86:93:54:e9:98:95:ba: ae:74:b6:e5:ea:58:53:82:a7:81:29:be:c9:16:09: 53:52:de:69:3b:dd:8a:a7:d6:93:16:36:6f:c5:8c: e2:64:e5:43:93:9f:1a:5a:32:a1:c6:b6:f0:b2:ff: 38:6c:3a:7c:be:6a:7a:72:a6:60:73:25:48:db:86: d5:2d:67:57:a1:69:1a:f7:3a:9f:30:ba:94:45:6a: 06:d8:62:96:f8:2f:9f:cd:35:ca:4a:05:0c:8a:4d: 12:e9:12:20:b0:65:9d:94:be:63:c9:d4:06:48:9b: c8:8f:47:b7:0f:a3:16:37:c6:e3:13:9d:71:4c:fe: 5d:ea:d6:39:64:d0:5a:01:c4:41:4f:5f:be:2d:86: 45:56:1b:c9:ca:7d:43:19:64:8c:52:48:a9:f0:40: 5c:cc:af:99:4c:d2:d1:02:5d:b9:3f:d3:89:af:73: db:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4D:F7:4E:03:84:CC:0D:D2:9E:35:A2:38:3A:64:B0:86:F3:02:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8716fe0e-b99d-3e6a-8c7c-a7b2a14ff1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8d:40:e0:14:da:e8:21:68:5d:a4:aa:31:bd:6f:62:74:bd: 81:4c:98:fc:5e:fa:a7:36:04:a7:ef:a2:e6:59:ee:1b:ec:a9: 79:7c:3e:a5:da:5a:3a:26:3c:78:c0:ec:ec:25:3d:5a:51:af: fe:91:db:7b:bf:e5:c7:ae:a3:c4:19:37:70:44:12:15:6d:3e: a1:4c:55:49:97:5f:f9:b2:e5:d3:cf:57:27:95:ba:83:a4:84: 0d:1f:44:27:22:5d:dc:aa:3f:a6:f1:38:58:4a:f3:9e:d8:62: 63:f2:2f:e9:93:7e:5d:eb:46:21:1f:40:b4:42:7e:47:66:aa: 15:0f:8e:b3:67:e2:c4:43:53:25:d8:25:37:92:81:51:2f:68: 2c:88:99:3a:26:ac:3f:04:75:67:49:74:94:26:f6:5f:14:e2: b9:f0:cb:e0:38:84:cc:42:ba:be:78:31:44:37:e1:a1:f3:92: 46:3c:30:e3:b5:59:35:cf:ff:45:d6:81:03:e0:9e:24:d0:d3: df:df:64:47:a7:ae:30:3c:60:90:28:82:9b:52:48:22:83:01: 18:60:85:aa:63:99:51:10:de:fd:17:8b:6f:58:79:00:5b:b5: 81:11:10:a2:c9:b3:b2:56:cb:34:f1:f2:10:0f:04:fa:2e:c5: b1:5a:9c:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrGU8ZOZHNlFuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MDlhZmIyZWMtODZmNC00MjlkLTg0YjktZDcxYzQxZjcxYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDsa9fBIvkSzAsTmstt5NBzblrfFElYvJyOx b8aiQJXBWNe68TaNqn1GDictkE8hbUqid1jMB2qmUyHInrnR+OUtEJ3gwn7BrGtp r+Oj1faCEIaTVOmYlbqudLbl6lhTgqeBKb7JFglTUt5pO92Kp9aTFjZvxYziZOVD k58aWjKhxrbwsv84bDp8vmp6cqZgcyVI24bVLWdXoWka9zqfMLqURWoG2GKW+C+f zTXKSgUMik0S6RIgsGWdlL5jydQGSJvIj0e3D6MWN8bjE51xTP5d6tY5ZNBaAcRB T1++LYZFVhvJyn1DGWSMUkip8EBczK+ZTNLRAl25P9OJr3PbtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlN904DhMwN0p41ojg6ZLCG8wJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODcxNmZlMGUtYjk5ZC0z ZTZhLThjN2MtYTdiMmExNGZmMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbD7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuNQOAU2ughaF2kqjG9b2J0vYFMmPxe+qc2BKfvouZZ7hvsqXl8PqXa WjomPHjA7OwlPVpRr/6R23u/5ceuo8QZN3BEEhVtPqFMVUmXX/my5dPPVyeVuoOk hA0fRCciXdyqP6bxOFhK857YYmPyL+mTfl3rRiEfQLRCfkdmqhUPjrNn4sRDUyXY JTeSgVEvaCyImTomrD8EdWdJdJQm9l8U4rnwy+A4hMxCur54MUQ34aHzkkY8MOO1 WTXP/0XWgQPgniTQ09/fZEenrjA8YJAogptSSCKDARhghapjmVEQ3v0Xi29YeQBb tYEREKLJs7JWyzTx8hAPBPouxbFanOA= -----END CERTIFICATE-----Generated at Wed Oct 14 23:00:11 2026 by rpki-client