$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/89cfabe9-7bff-38f1-bc6a-31b0d07b2e82.roa File: 89cfabe9-7bff-38f1-bc6a-31b0d07b2e82.roa (raw, json) Hash identifier: lso/wvzINOQS6z2RMMGp2Iaae9y4TtzjneuCWmPIYNk= Subject key identifier: CC:F0:A9:44:36:E9:8E:FE:A2:C9:F2:A1:AD:2C:93:D6:43:45:1F:AC Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6DBD6AE1E69D1A2CE9513080 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/89cfabe9-7bff-38f1-bc6a-31b0d07b2e82.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 395954 IP address blocks: 64.120.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:6a:e1:e6:9d:1a:2c:e9:51:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=8bc10f90-4005-4984-866c-84022c9f88ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:36:62:6d:3a:c8:19:0d:d8:2a:4d:ae:a1:2e: 38:5d:83:51:19:79:1b:95:aa:c2:3c:14:0d:fb:b4: 10:8c:99:d8:9d:07:34:3a:57:bd:cc:61:e3:dc:a2: 28:0a:60:f6:29:7d:2c:69:32:2e:c3:0e:20:c2:c1: 14:6c:48:a2:4e:5d:55:ea:bb:dd:71:af:d7:56:7c: 7a:e6:3b:99:f0:72:ae:a2:16:bf:eb:28:0c:76:65: a3:f1:6e:95:d5:5f:bb:66:bf:5a:08:c4:98:e1:a0: a8:6e:29:ae:d6:a8:c1:48:5b:bb:4c:28:90:e4:a9: f8:10:ba:b7:ee:80:93:22:e2:95:dc:d4:a9:97:85: ce:fe:16:92:e6:ab:85:05:0a:94:f1:4a:9c:3f:80: bc:a5:24:14:5f:4f:ee:f0:c1:c6:f9:4e:2c:96:be: 6f:96:f0:b8:87:8f:e3:7f:ba:30:fc:db:8d:d8:af: bc:48:99:08:e0:05:7b:00:88:a8:9f:31:eb:27:e2: 86:41:fd:69:13:52:18:9d:95:76:47:b4:14:d3:6b: c3:db:29:d2:2d:1b:12:cc:fd:18:09:8a:1d:f2:c6: 03:22:de:a8:b2:99:b9:8e:85:7d:db:09:62:b0:ad: af:64:7c:83:26:c1:f4:58:00:18:7d:af:96:9b:35: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F0:A9:44:36:E9:8E:FE:A2:C9:F2:A1:AD:2C:93:D6:43:45:1F:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/89cfabe9-7bff-38f1-bc6a-31b0d07b2e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 64.120.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:91:b9:a6:37:2e:0c:e7:cd:0d:be:90:67:11:8a:e0:82:3d: 99:33:f6:af:10:bb:1d:db:4c:da:05:93:b6:ff:c0:eb:f3:13: 9a:12:b6:10:30:0d:c3:05:be:f0:89:69:97:c7:c1:92:a4:ee: f9:fc:43:de:c1:90:b4:20:34:dc:4c:4c:d7:6b:f5:50:ed:13: fa:b7:90:c0:26:32:0e:07:fb:52:a8:b7:a5:90:d1:bb:81:00: 1f:17:5e:1a:da:2c:fb:9f:1a:91:2e:ee:dc:f4:64:db:a7:10: 50:e1:4c:aa:86:93:e2:a1:e4:f2:5f:bc:9c:c4:2c:cb:d4:88: f4:7e:87:62:70:31:63:07:0e:9e:a8:a8:ef:f0:85:4d:4c:6b: 6f:f6:80:22:74:01:57:df:c1:4d:36:d4:6f:60:8e:2e:31:2c: c4:43:18:3b:27:8e:c4:c9:ff:40:a1:5d:57:28:cc:a3:b7:c4: 86:f0:a6:1e:f7:1e:f0:be:7c:4a:cc:19:42:fd:aa:cf:a1:4b: 7e:8b:8f:72:f6:5a:73:8d:c8:98:72:94:04:9f:fc:88:d6:5e: df:38:4b:52:4e:ed:ea:58:af:f3:1d:94:6f:a3:d9:9d:18:42: cb:c8:ca:7d:bc:fe:63:75:79:a4:ed:10:09:8a:dc:9a:f3:0b: d2:35:29:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tvWrh5p0aLOlRMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk OGJjMTBmOTAtNDAwNS00OTg0LTg2NmMtODQwMjJjOWY4OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzZibTrIGQ3YKk2uoS44XYNRGXkblarCPBQN +7QQjJnYnQc0Ole9zGHj3KIoCmD2KX0saTIuww4gwsEUbEiiTl1V6rvdca/XVnx6 5juZ8HKuoha/6ygMdmWj8W6V1V+7Zr9aCMSY4aCobimu1qjBSFu7TCiQ5Kn4ELq3 7oCTIuKV3NSpl4XO/haS5quFBQqU8UqcP4C8pSQUX0/u8MHG+U4slr5vlvC4h4/j f7ow/NuN2K+8SJkI4AV7AIionzHrJ+KGQf1pE1IYnZV2R7QU02vD2ynSLRsSzP0Y CYod8sYDIt6ospm5joV92wlisK2vZHyDJsH0WAAYfa+WmzUcgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzwqUQ26Y7+osnyoa0sk9ZDRR+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODljZmFiZTktN2JmZi0z OGYxLWJjNmEtMzFiMGQwN2IyZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeRuaY3LgznzQ2+kGcRiuCCPZkz9q8Qux3bTNoFk7b/wOvzE5oSthAw DcMFvvCJaZfHwZKk7vn8Q97BkLQgNNxMTNdr9VDtE/q3kMAmMg4H+1Kot6WQ0buB AB8XXhraLPufGpEu7tz0ZNunEFDhTKqGk+Kh5PJfvJzELMvUiPR+h2JwMWMHDp6o qO/whU1Ma2/2gCJ0AVffwU021G9gji4xLMRDGDsnjsTJ/0ChXVcozKO3xIbwph73 HvC+fErMGUL9qs+hS36Lj3L2WnONyJhylASf/IjWXt84S1JO7epYr/MdlG+j2Z0Y QsvIyn28/mN1eaTtEAmK3JrzC9I1KY4= -----END CERTIFICATE-----Generated at Wed Oct 14 11:54:41 2026 by rpki-client