$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/88e9107f-6ec0-331b-bf71-23e295020571.roa File: 88e9107f-6ec0-331b-bf71-23e295020571.roa (raw, json) Hash identifier: aLBCjBJ2sv4WEknRTNw9UB3Y5qGffkk2rScEBzIlBZQ= Subject key identifier: ED:2F:66:81:B3:D0:76:F2:46:FE:04:17:38:4F:A0:C6:28:5C:D8:89 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97FBF14DC40FE785C9ECDC Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/88e9107f-6ec0-331b-bf71-23e295020571.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 172.241.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fb:f1:4d:c4:0f:e7:85:c9:ec:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=1bcff33f-7cf4-4e79-a94c-0cdad34c189a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:81:b6:99:35:41:00:b2:89:5a:e3:aa:93:c6: 69:be:74:b4:49:a0:b5:4a:16:6c:8d:c8:b0:30:78: 28:7d:ef:ba:26:48:a9:37:75:f0:4a:09:aa:08:c4: 14:33:a7:65:f4:29:89:24:6f:4a:b0:3b:f4:f9:c0: 44:c5:cf:fa:17:e8:e1:a3:f7:4a:91:cb:27:af:fb: 36:04:4e:e1:07:e0:b8:cd:9e:03:d2:e7:cb:ca:09: 07:aa:47:b7:bf:5f:c3:13:66:a5:5a:9d:dd:53:2e: 27:c0:da:9e:10:c7:cb:e6:93:fa:ed:82:5d:42:be: e0:41:90:da:eb:50:2e:58:c8:1f:bf:bb:98:2a:c8: f8:a0:f3:07:e0:65:be:40:9b:b6:69:61:76:32:6c: b2:90:4f:57:d0:ee:53:96:5a:2e:0a:e3:2d:f7:fe: 6b:2d:65:47:ee:3a:c8:e3:1f:e4:4c:e7:40:b8:17: 89:1b:e9:81:25:9b:38:93:a2:5a:47:57:8f:83:c8: 1b:41:e3:83:f4:4f:fe:38:f9:5e:b5:49:9a:95:df: c7:04:e7:e4:43:3a:9a:1d:af:8f:bc:ec:4b:71:1b: ce:36:70:9c:29:8f:35:89:a3:e6:2c:08:0e:82:ff: ea:97:cf:0d:65:d7:3f:a8:45:33:5f:40:c9:e9:9e: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2F:66:81:B3:D0:76:F2:46:FE:04:17:38:4F:A0:C6:28:5C:D8:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/88e9107f-6ec0-331b-bf71-23e295020571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:96:a1:86:58:58:91:de:da:f7:36:e6:35:2a:6e:2b:84:45: 9e:02:ac:1f:21:30:ab:d2:7a:f1:72:05:b7:b1:e7:f0:18:a4: ab:be:f4:cc:4f:6b:63:60:fb:1e:7f:ac:e8:6e:e3:9f:7b:83: 10:17:ad:62:54:08:76:95:97:d5:89:a2:0e:8b:10:81:43:f7: 25:f1:63:77:16:23:3d:22:a6:27:6e:de:b2:ec:dd:9e:c5:83: 4e:75:0b:85:b9:f1:d7:dd:18:9a:a2:5f:25:0f:d5:93:c8:e6: f8:d8:84:02:f0:17:dc:9a:0f:fc:b7:d1:c8:0a:12:04:38:68: 24:df:61:98:ff:65:a6:86:e1:d9:59:31:95:ee:c0:c1:1f:e1: 5f:9a:d7:76:c4:cc:7b:13:67:b1:84:85:4f:26:15:82:65:57: 12:bc:57:65:fd:f3:54:e2:d1:b7:49:6c:36:9e:1b:34:81:43: a6:3d:46:4e:69:84:87:6d:5f:6e:62:41:d8:72:e2:63:96:d7: b6:a0:e3:fa:5d:8f:83:bf:21:33:b0:3b:ca:e5:8e:50:c5:05: bf:32:40:5a:5f:93:4c:a6:24:6a:8c:a8:af:96:0d:17:61:03: 4f:3d:f2:30:90:b3:ab:75:8a:0c:87:b3:57:52:1a:e0:49:f6: 2d:af:1a:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/vxTcQP54XJ7NwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MWJjZmYzM2YtN2NmNC00ZTc5LWE5NGMtMGNkYWQzNGMxODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4G2mTVBALKJWuOqk8ZpvnS0SaC1ShZsjciw MHgofe+6JkipN3XwSgmqCMQUM6dl9CmJJG9KsDv0+cBExc/6F+jho/dKkcsnr/s2 BE7hB+C4zZ4D0ufLygkHqke3v1/DE2alWp3dUy4nwNqeEMfL5pP67YJdQr7gQZDa 61AuWMgfv7uYKsj4oPMH4GW+QJu2aWF2MmyykE9X0O5TllouCuMt9/5rLWVH7jrI 4x/kTOdAuBeJG+mBJZs4k6JaR1ePg8gbQeOD9E/+OPletUmald/HBOfkQzqaHa+P vOxLcRvONnCcKY81iaPmLAgOgv/ql88NZdc/qEUzX0DJ6Z65nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0vZoGz0HbyRv4EFzhPoMYoXNiJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODhlOTEwN2YtNmVjMC0z MzFiLWJmNzEtMjNlMjk1MDIwNTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrPFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuWoYZYWJHe2vc25jUqbiuERZ4CrB8hMKvSevFyBbex5/AYpKu+9MxP a2Ng+x5/rOhu4597gxAXrWJUCHaVl9WJog6LEIFD9yXxY3cWIz0ipidu3rLs3Z7F g051C4W58dfdGJqiXyUP1ZPI5vjYhALwF9yaD/y30cgKEgQ4aCTfYZj/ZaaG4dlZ MZXuwMEf4V+a13bEzHsTZ7GEhU8mFYJlVxK8V2X981Ti0bdJbDaeGzSBQ6Y9Rk5p hIdtX25iQdhy4mOW17ag4/pdj4O/ITOwO8rljlDFBb8yQFpfk0ymJGqMqK+WDRdh A0898jCQs6t1igyHs1dSGuBJ9i2vGkM= -----END CERTIFICATE-----Generated at Wed Oct 14 09:08:00 2026 by rpki-client