$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/91e924aa-e3c9-391f-81d3-d747980f6b6d.roa File: 91e924aa-e3c9-391f-81d3-d747980f6b6d.roa (raw, json) Hash identifier: qF8GMN2AEi+zmpObzjSmNjRgVj2Beycat31kEnmG5QA= Subject key identifier: 4F:ED:83:1B:D0:1D:0A:07:49:91:CD:AE:82:DC:0B:C4:9B:C4:13:C3 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97FC8CE6C226486AA02DC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/91e924aa-e3c9-391f-81d3-d747980f6b6d.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 393886 IP address blocks: 23.82.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fc:8c:e6:c2:26:48:6a:a0:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=bd27f0c8-8b40-4103-ba58-bbebd59adf37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:35:2a:7d:6f:44:1d:91:22:f0:13:84:0b: 2d:d8:09:a1:9f:b2:fb:12:75:d8:59:60:eb:96:b4: fb:33:8a:1c:bf:90:ad:ac:e1:7a:08:fc:54:d5:2e: f6:a9:c7:a8:71:70:66:62:2d:a4:7f:6c:3c:64:0b: 10:2b:99:f7:bf:df:40:62:3e:cd:d6:8d:b8:4a:99: eb:b8:32:06:88:0e:e1:33:90:0e:98:65:3b:c2:51: 9e:36:74:60:3f:8c:8f:98:50:d5:b8:b2:34:36:e4: 84:bb:6f:d9:91:1c:42:cd:35:c8:4a:40:46:37:81: 99:77:86:b5:e5:e5:4d:bb:c3:57:d1:8d:e7:65:8b: b4:5f:4b:f2:03:2d:6e:23:4d:59:5b:d4:ba:97:9f: f1:c9:d7:d0:b0:73:13:3b:17:bd:83:ab:30:3c:c2: 3d:00:0d:d7:30:8e:c6:b4:89:b4:fb:f2:a7:24:a2: 88:47:5e:68:20:c1:f0:b9:90:d7:d7:f1:fd:03:2c: 34:a2:2f:06:4c:da:d4:e5:5e:3f:8c:c3:09:f1:6e: 41:07:2b:19:dd:f8:03:e7:92:7a:5e:d3:2c:33:ee: b6:da:3f:ee:a8:7f:e5:3b:a6:2c:b3:56:20:5d:c8: 78:34:64:e7:f5:6d:1b:2e:7c:97:32:44:c4:ab:80: 2b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:ED:83:1B:D0:1D:0A:07:49:91:CD:AE:82:DC:0B:C4:9B:C4:13:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/91e924aa-e3c9-391f-81d3-d747980f6b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.82.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5d:8a:82:c8:4d:92:e9:57:6d:af:32:f5:04:04:be:d0:53: 0a:a1:65:1c:7f:89:ce:4e:68:2e:b5:94:23:c9:41:66:f5:8a: cb:26:68:fb:84:e4:e5:f8:f6:c5:12:67:04:31:31:9e:48:c6: 9e:3e:d7:7e:da:5d:88:ed:ef:ef:73:8f:8c:97:74:2f:96:22: 17:92:f4:e7:e8:34:f0:99:be:cb:3e:1d:9e:64:00:18:6a:58: 79:fe:76:50:1e:a1:ca:56:e2:05:01:b2:e8:c8:9e:ae:9f:db: 20:21:fd:94:52:19:f6:ae:96:ca:0e:5d:d9:ee:ad:e2:34:de: 3f:6a:6a:60:b5:5d:6f:2b:89:64:9f:25:54:72:33:5d:61:0b: fc:22:4c:eb:d9:e7:36:2f:a0:8c:b8:af:c7:b3:a1:96:50:3a: 42:c1:9d:55:1d:bb:71:fb:14:ee:a4:54:01:8f:e6:0f:8e:7d: cc:10:ab:0c:23:16:d8:4c:90:0c:2a:c1:bd:ad:6b:f0:df:9f: 93:f4:91:30:5f:e8:a6:1c:a5:f8:76:c0:a7:68:aa:53:3c:b9: dd:14:1c:3a:83:1c:57:36:73:19:d4:0c:1c:ed:aa:6e:58:5f: 82:29:e9:7d:cf:9a:14:b8:10:ed:4d:9b:19:4e:35:28:ed:13: 76:fd:85:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/yM5sImSGqgLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk YmQyN2YwYzgtOGI0MC00MTAzLWJhNTgtYmJlYmQ1OWFkZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jE1Kn1vRB2RIvAThAst2Amhn7L7EnXYWWDr lrT7M4ocv5CtrOF6CPxU1S72qceocXBmYi2kf2w8ZAsQK5n3v99AYj7N1o24Spnr uDIGiA7hM5AOmGU7wlGeNnRgP4yPmFDVuLI0NuSEu2/ZkRxCzTXISkBGN4GZd4a1 5eVNu8NX0Y3nZYu0X0vyAy1uI01ZW9S6l5/xydfQsHMTOxe9g6swPMI9AA3XMI7G tIm0+/KnJKKIR15oIMHwuZDX1/H9Ayw0oi8GTNrU5V4/jMMJ8W5BBysZ3fgD55J6 XtMsM+622j/uqH/lO6Yss1YgXch4NGTn9W0bLnyXMkTEq4ArHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/tgxvQHQoHSZHNroLcC8SbxBPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTFlOTI0YWEtZTNjOS0z OTFmLTgxZDMtZDc0Nzk4MGY2YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1KIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVdioLITZLpV22vMvUEBL7QUwqhZRx/ic5OaC61lCPJQWb1issmaPuE 5OX49sUSZwQxMZ5Ixp4+137aXYjt7+9zj4yXdC+WIheS9OfoNPCZvss+HZ5kABhq WHn+dlAeocpW4gUBsujInq6f2yAh/ZRSGfaulsoOXdnureI03j9qamC1XW8riWSf JVRyM11hC/wiTOvZ5zYvoIy4r8ezoZZQOkLBnVUdu3H7FO6kVAGP5g+OfcwQqwwj FthMkAwqwb2ta/Dfn5P0kTBf6KYcpfh2wKdoqlM8ud0UHDqDHFc2cxnUDBztqm5Y X4Ip6X3PmhS4EO1NmxlONSjtE3b9hVo= -----END CERTIFICATE-----Generated at Tue Oct 13 21:32:42 2026 by rpki-client