$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9628f312-4148-3526-8089-46a60331da68.roa File: 9628f312-4148-3526-8089-46a60331da68.roa (raw, json) Hash identifier: uJu+CeXoZu+HAv6uSqDrWYgtutec55F6B/5PMXZk5r8= Subject key identifier: 44:F4:3F:B3:53:C4:96:14:63:1A:29:9A:50:7E:1C:E1:32:65:C3:93 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5CFD4FF4C3B4FAAC9042F7E0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9628f312-4148-3526-8089-46a60331da68.roa Signing time: Fri 02 Oct 2026 01:00:12 +0000 ROA not before: Fri 02 Oct 2026 01:00:12 +0000 ROA not after: Thu 31 Dec 2026 02:00:12 +0000 asID: 7203 IP address blocks: 172.241.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:fd:4f:f4:c3:b4:fa:ac:90:42:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 01:00:12 2026 GMT Not After : Dec 31 02:00:12 2026 GMT Subject: CN=05590e6a-e1be-4b9f-8771-4371c62ffb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:dd:79:39:72:fc:67:d2:d1:30:9f:ab:10: ec:80:4c:63:62:94:4a:ac:a8:dd:d4:4a:7f:3a:41: 1d:0d:17:01:5d:3d:86:f5:45:8e:ed:d1:2d:35:49: 5b:f6:95:20:c3:a4:ff:2a:f2:a6:d6:e9:d9:ec:c9: 70:fe:b9:04:ac:d5:19:ee:9f:05:00:95:a3:57:e8: 13:1a:4d:d4:62:7a:4a:2d:7c:79:ef:b6:70:2d:83: 25:b6:56:3f:b9:19:0b:28:9a:2e:43:44:4d:52:ac: 73:db:2c:b5:15:82:27:7c:52:83:2c:ad:16:0c:13: a4:7b:b5:88:45:f0:97:c4:d3:53:59:1e:da:48:29: 3a:67:2c:ed:84:39:f8:22:2d:a0:b7:73:9c:0c:03: 90:9d:47:3b:f7:f5:84:bc:d5:65:b5:98:a7:a7:3a: ed:d5:ef:86:b8:3d:f6:18:0b:83:d3:14:0b:25:ce: 82:a7:66:d6:7e:c0:cc:45:3d:18:f4:e6:f4:fc:be: f4:1c:98:8f:88:c8:b0:30:8b:4a:42:3a:ef:d7:bc: 85:d2:8b:cc:d5:05:a9:9b:fc:9b:91:f9:90:cc:d0: 33:e7:a4:80:d8:37:30:af:7e:55:6b:f8:51:0b:4c: aa:c4:a3:98:35:e8:c3:d4:6c:65:eb:c7:e6:2d:d1: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F4:3F:B3:53:C4:96:14:63:1A:29:9A:50:7E:1C:E1:32:65:C3:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9628f312-4148-3526-8089-46a60331da68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6f:e4:32:0c:2d:79:1e:b5:af:b7:9f:7a:57:7d:d9:bd:fd: e1:b5:b2:57:49:5b:eb:1a:e1:12:e9:1a:7c:52:e5:b9:d1:46: fc:f3:12:b8:a1:f6:78:a1:77:de:7a:f1:b8:9d:a3:14:81:4f: d8:b3:22:c0:dc:65:6c:49:92:60:8a:43:1d:a9:0b:c4:9d:f0: f1:76:6f:57:aa:b9:8c:82:9a:43:63:bd:90:49:4f:12:20:65: f9:c8:b4:6c:d8:b7:09:39:46:bd:7f:8d:83:46:16:7d:11:2e: c5:50:6b:9a:f6:5c:9b:d9:86:b6:5c:c9:5c:ff:55:2c:cc:bc: b0:96:b4:12:16:09:1b:b7:d5:ff:77:4e:e0:0f:1d:53:95:14: ec:69:c3:78:da:ef:e2:ab:5d:42:92:17:b7:5e:19:44:18:ee: 44:3e:83:62:5e:ee:8b:a5:eb:41:5e:3d:26:0c:76:d2:f8:a0: 4f:52:6a:f4:67:db:4d:2b:7d:c0:33:60:dd:db:3b:b9:1e:6d: d0:b4:1f:25:46:c0:04:c1:2f:bc:38:44:ec:f4:28:a9:a3:8a: 52:51:63:c5:f5:3e:24:08:14:26:38:94:31:d5:21:94:fc:b6: 41:56:83:9e:65:73:9c:87:0c:35:da:a0:4e:4c:40:ae:bc:60: 6f:c6:2c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/U/0w7T6rJBC9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk MDU1OTBlNmEtZTFiZS00YjlmLTg3NzEtNDM3MWM2MmZmYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yvdeTly/GfS0TCfqxDsgExjYpRKrKjd1Ep/ OkEdDRcBXT2G9UWO7dEtNUlb9pUgw6T/KvKm1unZ7Mlw/rkErNUZ7p8FAJWjV+gT Gk3UYnpKLXx577ZwLYMltlY/uRkLKJouQ0RNUqxz2yy1FYInfFKDLK0WDBOke7WI RfCXxNNTWR7aSCk6ZyzthDn4Ii2gt3OcDAOQnUc79/WEvNVltZinpzrt1e+GuD32 GAuD0xQLJc6Cp2bWfsDMRT0Y9Ob0/L70HJiPiMiwMItKQjrv17yF0ovM1QWpm/yb kfmQzNAz56SA2Dcwr35Va/hRC0yqxKOYNejD1Gxl68fmLdFaCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET0P7NTxJYUYxopmlB+HOEyZcOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTYyOGYzMTItNDE0OC0z NTI2LTgwODktNDZhNjAzMzFkYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtv5DIMLXketa+3n3pXfdm9/eG1sldJW+sa4RLpGnxS5bnRRvzzErih 9nihd9568bidoxSBT9izIsDcZWxJkmCKQx2pC8Sd8PF2b1equYyCmkNjvZBJTxIg ZfnItGzYtwk5Rr1/jYNGFn0RLsVQa5r2XJvZhrZcyVz/VSzMvLCWtBIWCRu31f93 TuAPHVOVFOxpw3ja7+KrXUKSF7deGUQY7kQ+g2Je7oul60FePSYMdtL4oE9SavRn 200rfcAzYN3bO7kebdC0HyVGwATBL7w4ROz0KKmjilJRY8X1PiQIFCY4lDHVIZT8 tkFWg55lc5yHDDXaoE5MQK68YG/GLDg= -----END CERTIFICATE-----Generated at Wed Oct 14 18:50:53 2026 by rpki-client