$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9b60e116-adcb-355c-a23a-a60cf47f17d2.roa File: 9b60e116-adcb-355c-a23a-a60cf47f17d2.roa (raw, json) Hash identifier: ffCsuJ+pxtsUNZR+uvXqRpwuRvgM+UoQb4qjq+Xm7M8= Subject key identifier: BD:AD:A4:F5:C5:AF:9C:8E:77:41:16:26:8B:59:91:B1:C8:9B:6E:94 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5E62DCA9E1C8645B403023A0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9b60e116-adcb-355c-a23a-a60cf47f17d2.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 27411 IP address blocks: 23.82.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:dc:a9:e1:c8:64:5b:40:30:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=f0389b68-6f25-45d6-8854-a420d5e25cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:db:37:8a:d5:ec:64:fb:e5:3c:21:09:81: f0:5a:5c:4c:f4:12:45:34:7d:f8:f1:84:e3:81:9d: be:cf:c9:30:ac:97:a6:3e:1b:43:61:53:93:7e:52: 5d:aa:d0:bc:1c:1a:93:7d:79:72:c7:5b:26:b7:b1: 57:29:f1:13:71:c5:eb:3b:cb:a9:59:64:12:60:e2: 3c:b4:e5:99:6a:b3:6c:af:0b:24:2c:97:08:9c:36: 5b:35:d1:30:30:ae:42:41:c8:86:42:0e:4b:74:21: 81:51:c0:ca:ca:fe:58:6f:56:ab:1b:8d:27:86:b2: 29:a5:c9:48:3f:20:82:58:93:78:6f:1b:c3:6c:b2: dc:17:4e:de:c7:a6:89:78:db:8f:34:ac:dd:2e:e6: 6b:3a:84:ef:21:6f:95:90:3f:79:66:5d:9f:b8:ed: d5:bf:f8:1e:f3:b5:cb:7c:8b:ef:2b:85:be:73:64: da:47:ce:44:bf:a1:82:5c:19:53:85:4e:9d:ad:55: 80:de:35:75:72:5a:83:5b:05:0e:a9:41:b9:6a:be: 7d:b7:b1:7c:4b:5d:94:3a:9d:f3:52:66:6a:ea:62: e1:a3:82:69:31:9e:99:9f:a9:6e:3d:b7:36:4f:9f: 7e:63:27:d3:ab:87:72:53:b7:4a:ab:8c:96:1a:11: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AD:A4:F5:C5:AF:9C:8E:77:41:16:26:8B:59:91:B1:C8:9B:6E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9b60e116-adcb-355c-a23a-a60cf47f17d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.82.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:e4:d3:62:15:0a:cb:83:84:05:11:c1:e6:4d:c8:f9:03:db: 8d:53:ad:5a:3c:bd:63:c9:3e:b9:eb:f3:11:52:5f:ea:bd:19: 76:d1:3b:81:eb:5e:93:41:16:f0:40:9f:5a:35:71:8c:4e:32: 49:ab:a5:f8:22:ee:53:2c:4a:47:a6:ee:11:88:e0:a2:11:c0: 96:29:6a:78:da:d5:51:3f:a2:9e:ac:1a:48:8e:9f:ee:c6:1e: 4b:1e:7a:d6:e0:87:4f:28:04:f7:41:7c:23:10:0e:d6:18:d9: c3:6e:d4:72:87:19:66:e5:80:d3:6d:c4:2e:d8:f1:4e:db:3d: 63:19:81:f8:14:e3:8a:66:a3:c3:2c:4f:69:0b:46:2b:76:9a: d4:6a:d0:de:46:52:10:d4:23:3c:7e:e3:8b:29:2a:c3:7c:48: 49:c6:1d:02:06:c2:72:5f:67:e6:03:5e:00:3f:a1:84:71:50: 5a:56:87:12:89:60:39:7d:db:16:fd:6a:9d:de:3f:29:f6:16: 0b:64:25:e6:52:96:75:67:05:0f:8c:fa:9e:e3:03:64:48:01: 4e:10:51:dc:bb:b8:d6:2e:19:96:f2:db:89:ce:88:a7:c5:96: 86:ef:ac:87:6e:a6:5e:00:7a:79:3b:db:9e:49:7a:bf:73:06: 74:e5:83:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtyp4chkW0AwI6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjAzODliNjgtNmYyNS00NWQ2LTg4NTQtYTQyMGQ1ZTI1Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTTbN4rV7GT75TwhCYHwWlxM9BJFNH348YTj gZ2+z8kwrJemPhtDYVOTflJdqtC8HBqTfXlyx1smt7FXKfETccXrO8upWWQSYOI8 tOWZarNsrwskLJcInDZbNdEwMK5CQciGQg5LdCGBUcDKyv5Yb1arG40nhrIppclI PyCCWJN4bxvDbLLcF07ex6aJeNuPNKzdLuZrOoTvIW+VkD95Zl2fuO3Vv/ge87XL fIvvK4W+c2TaR85Ev6GCXBlThU6drVWA3jV1clqDWwUOqUG5ar59t7F8S12UOp3z UmZq6mLho4JpMZ6Zn6luPbc2T59+YyfTq4dyU7dKq4yWGhFAWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2tpPXFr5yOd0EWJotZkbHIm26UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOWI2MGUxMTYtYWRjYi0z NTVjLWEyM2EtYTYwY2Y0N2YxN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1JoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTk02IVCsuDhAURweZNyPkD241TrVo8vWPJPrnr8xFSX+q9GXbRO4Hr XpNBFvBAn1o1cYxOMkmrpfgi7lMsSkem7hGI4KIRwJYpanja1VE/op6sGkiOn+7G Hkseetbgh08oBPdBfCMQDtYY2cNu1HKHGWblgNNtxC7Y8U7bPWMZgfgU44pmo8Ms T2kLRit2mtRq0N5GUhDUIzx+44spKsN8SEnGHQIGwnJfZ+YDXgA/oYRxUFpWhxKJ YDl92xb9ap3ePyn2FgtkJeZSlnVnBQ+M+p7jA2RIAU4QUdy7uNYuGZby24nOiKfF lobvrIdupl4Aenk7255Jer9zBnTlg0E= -----END CERTIFICATE-----Generated at Wed Oct 14 07:52:27 2026 by rpki-client