$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8a85b8b1-7098-326a-a003-b1a5bb516d00.roa File: 8a85b8b1-7098-326a-a003-b1a5bb516d00.roa (raw, json) Hash identifier: /HJbZnXtJyjNQ0dy+jVqlh5/NfhTbc04JOPx4Jf+4jw= Subject key identifier: 4A:07:ED:67:95:6A:E2:ED:61:8E:AD:09:26:E9:D6:06:2B:7C:24:B7 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5E62DC86A790A2534FC19280 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8a85b8b1-7098-326a-a003-b1a5bb516d00.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 27411 IP address blocks: 23.19.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:dc:86:a7:90:a2:53:4f:c1:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=036e26c1-d6f9-4510-9a14-cecfb0b30aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:35:9b:4e:f9:ad:b3:e4:ea:24:73:3b:0d: e8:44:69:4f:62:13:0c:e3:c6:5e:58:2e:d4:94:93: 0f:6d:1a:60:f5:dc:d7:75:a6:64:6d:7b:d4:10:5f: 25:07:0f:5f:be:ee:f7:cd:8c:a9:8d:c5:50:15:7e: 04:a8:2d:f3:a7:fe:1e:97:53:40:bd:fa:d6:90:55: e5:64:b0:ae:ed:5e:35:6b:b8:b6:f7:be:1e:4c:d3: b8:ca:c1:f2:42:be:3d:db:3b:e3:c6:95:9d:27:70: 32:99:73:10:dc:b1:82:5f:82:66:40:8a:56:5c:4c: 29:38:98:da:a3:e0:e2:ce:49:fb:0e:65:43:a2:c5: 27:fa:3a:37:b5:e4:d1:8e:a0:96:17:ac:2e:11:42: 4a:48:0f:77:27:05:64:4a:28:a3:c4:fb:e3:89:fe: f8:f6:42:2e:7c:d4:6d:bd:e3:05:30:78:d2:74:94: 5e:4d:8a:b8:0b:7d:a1:b8:d1:ac:4e:8f:9d:8e:ae: 31:b3:95:aa:33:ae:e2:f8:2b:01:a1:f2:34:33:5b: 1c:84:67:ee:f4:7d:49:4b:a7:fb:59:c5:b1:a6:92: e5:5e:85:98:42:af:50:24:2d:69:c4:7a:35:76:bc: 6b:c2:9e:2d:9d:5e:82:8e:60:90:dc:dc:82:96:d3: f6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:07:ED:67:95:6A:E2:ED:61:8E:AD:09:26:E9:D6:06:2B:7C:24:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8a85b8b1-7098-326a-a003-b1a5bb516d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ef:96:01:06:2d:80:e5:48:e3:3f:25:7f:75:ad:a0:ed:7d: 46:6e:90:ef:ec:3d:7f:f0:2d:19:d4:24:23:85:08:b1:18:1b: 6a:fc:a6:8a:06:84:81:20:0c:44:76:56:80:17:31:16:e9:61: 2f:13:5e:56:ad:ad:6a:42:78:dd:d0:2c:11:8e:3c:8d:f0:00: 81:f4:43:63:1a:22:44:45:01:77:11:e7:ff:1a:6d:94:66:cf: 13:cf:02:d3:cd:fd:e7:40:1d:bb:28:7d:62:8d:89:81:a8:13: 8b:f5:45:14:14:a6:7e:35:69:f3:05:ec:ee:cd:ee:ad:12:52: 5c:53:f1:8b:1f:b6:d1:5d:bf:06:97:21:8a:aa:fa:20:26:30: 2c:34:35:6c:8a:ae:e8:67:a8:1d:56:9e:86:75:18:c3:b5:7d: c2:27:c0:92:a9:c5:db:b7:d2:d7:50:a7:c1:ec:5d:7f:50:05: be:67:6c:ed:80:61:0c:47:05:c6:21:0c:d4:31:8c:07:1e:7c: 43:e6:ac:50:87:e2:a8:e8:5a:62:4a:8a:51:71:f1:fd:36:78: 35:31:6f:7b:72:46:3a:1c:07:46:25:41:bb:8e:05:4b:bd:72: 6d:80:82:30:d3:07:fb:b6:7a:85:2a:14:20:b4:01:44:7a:5e: b3:53:d3:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtyGp5CiU0/BkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MDM2ZTI2YzEtZDZmOS00NTEwLTlhMTQtY2VjZmIwYjMwYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoww1m075rbPk6iRzOw3oRGlPYhMM48ZeWC7U lJMPbRpg9dzXdaZkbXvUEF8lBw9fvu73zYypjcVQFX4EqC3zp/4el1NAvfrWkFXl ZLCu7V41a7i2974eTNO4ysHyQr492zvjxpWdJ3AymXMQ3LGCX4JmQIpWXEwpOJja o+Dizkn7DmVDosUn+jo3teTRjqCWF6wuEUJKSA93JwVkSiijxPvjif749kIufNRt veMFMHjSdJReTYq4C32huNGsTo+djq4xs5WqM67i+CsBofI0M1schGfu9H1JS6f7 WcWxppLlXoWYQq9QJC1pxHo1drxrwp4tnV6CjmCQ3NyCltP29wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoH7WeVauLtYY6tCSbp1gYrfCS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOGE4NWI4YjEtNzA5OC0z MjZhLWEwMDMtYjFhNWJiNTE2ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7vlgEGLYDlSOM/JX91raDtfUZukO/sPX/wLRnUJCOFCLEYG2r8pooG hIEgDER2VoAXMRbpYS8TXlatrWpCeN3QLBGOPI3wAIH0Q2MaIkRFAXcR5/8abZRm zxPPAtPN/edAHbsofWKNiYGoE4v1RRQUpn41afMF7O7N7q0SUlxT8YsfttFdvwaX IYqq+iAmMCw0NWyKruhnqB1WnoZ1GMO1fcInwJKpxdu30tdQp8HsXX9QBb5nbO2A YQxHBcYhDNQxjAcefEPmrFCH4qjoWmJKilFx8f02eDUxb3tyRjocB0YlQbuOBUu9 cm2AgjDTB/u2eoUqFCC0AUR6XrNT08Q= -----END CERTIFICATE-----Generated at Tue Oct 13 12:58:30 2026 by rpki-client