$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9f23aa01-ac6d-3369-85fc-8853ef780d66.roa File: 9f23aa01-ac6d-3369-85fc-8853ef780d66.roa (raw, json) Hash identifier: uMTMlQ1jREjDCWp3c/GO5viFCBKiqTH9qmtcAokslIg= Subject key identifier: 5F:55:71:44:1F:19:91:8B:EA:11:DF:39:D5:E7:C0:99:EA:F2:8E:6F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF7B3C888C4806564861B2C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9f23aa01-ac6d-3369-85fc-8853ef780d66.roa Signing time: Thu 06 Aug 2026 14:56:13 +0000 ROA not before: Thu 06 Aug 2026 14:56:13 +0000 ROA not after: Wed 04 Nov 2026 15:56:13 +0000 asID: 394380 IP address blocks: 172.241.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:7b:3c:88:8c:48:06:56:48:61:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:56:13 2026 GMT Not After : Nov 4 15:56:13 2026 GMT Subject: CN=bc247204-ae76-4c8e-ba93-4c4a560b383e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7d:43:ea:e0:3d:e6:7f:96:e7:ae:70:7e:46: 98:e4:10:3b:ab:6b:c7:4d:d8:77:e0:0e:13:56:fd: 9f:6e:d0:02:e9:51:a9:5d:c3:70:25:da:8e:aa:f1: b1:fc:3e:2f:53:44:c0:0e:56:3b:66:e6:01:89:f3: 32:17:3f:78:b9:53:a0:95:56:0b:92:8c:5a:c5:97: 47:f3:63:b0:25:f1:28:fe:ee:2b:89:91:36:be:7e: 0c:68:b0:ad:14:39:8f:c9:04:97:2d:27:74:66:e5: ca:4e:31:85:1a:69:65:c5:70:bc:26:1b:ea:81:f2: 3b:f4:18:26:c6:cf:d0:e1:b2:ef:4a:a0:b6:3e:71: 99:95:30:13:57:e7:ee:86:ac:ea:ae:d3:06:d1:84: ee:be:15:29:ed:90:df:6d:9f:c8:d2:d7:35:69:cb: c9:51:79:5f:72:0e:58:0e:22:22:bf:5f:c7:9a:cb: 11:32:a6:2a:fd:c7:b6:47:1a:f5:15:ae:7b:05:0e: e6:8e:7c:40:b3:16:b6:88:a3:de:15:c1:7d:67:e3: 24:b5:5c:4a:f8:43:14:fd:3a:28:0d:89:4e:a3:c8: fa:44:a6:c8:4b:07:e8:34:45:42:a9:7c:81:c4:8c: 3c:88:09:16:79:9d:8d:d6:01:20:7c:72:0b:8b:3d: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:55:71:44:1F:19:91:8B:EA:11:DF:39:D5:E7:C0:99:EA:F2:8E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9f23aa01-ac6d-3369-85fc-8853ef780d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:3e:c7:0d:10:93:e0:92:5d:6b:0e:b5:aa:5f:6a:a0:13:e7: 29:ea:51:ef:5e:fe:1b:1d:91:7b:44:93:af:34:e8:87:40:0a: ff:75:40:0d:33:0e:32:11:84:81:b8:d2:4d:f6:f8:53:8c:06: 81:39:44:3a:fc:3c:17:28:f5:23:f7:89:ac:6f:6f:f3:21:61: d8:71:b6:7b:41:2b:fb:33:d8:ad:15:ad:5f:2a:ea:c6:c2:b3: f8:0d:d7:ca:a0:cc:46:82:c7:bc:af:3d:de:49:0e:4c:f1:c7: a3:e6:49:41:f2:ed:e8:e9:29:5e:b7:f1:a8:c1:ee:90:70:ed: 88:71:f0:89:5a:04:15:86:e9:a8:02:30:eb:13:5d:8c:a6:2d: 59:c2:a2:36:ee:2f:fa:81:04:04:fe:8d:06:17:66:8e:e6:cf: 7a:6d:7c:af:4b:2d:e9:df:13:4d:06:56:52:af:79:ff:d6:06: 7c:f5:89:96:9c:4c:52:6e:1b:41:17:ac:89:90:c2:b5:b4:55: 1a:ae:03:69:81:f4:57:2f:c5:84:ee:5d:c1:0f:d1:38:06:a7: c5:1c:e1:e3:00:13:0f:58:c1:4e:c7:f2:04:81:b2:f6:c9:f7: e2:bb:df:31:6b:58:84:4f:fd:56:c2:e4:e0:b5:d3:e1:91:33: 1f:84:19:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/ezyIjEgGVkhhssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0NTYxM1oXDTI2MTEwNDE1NTYxM1owLzEtMCsGA1UEAxMk YmMyNDcyMDQtYWU3Ni00YzhlLWJhOTMtNGM0YTU2MGIzODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH1D6uA95n+W565wfkaY5BA7q2vHTdh34A4T Vv2fbtAC6VGpXcNwJdqOqvGx/D4vU0TADlY7ZuYBifMyFz94uVOglVYLkoxaxZdH 82OwJfEo/u4riZE2vn4MaLCtFDmPyQSXLSd0ZuXKTjGFGmllxXC8JhvqgfI79Bgm xs/Q4bLvSqC2PnGZlTATV+fuhqzqrtMG0YTuvhUp7ZDfbZ/I0tc1acvJUXlfcg5Y DiIiv1/HmssRMqYq/ce2Rxr1Fa57BQ7mjnxAsxa2iKPeFcF9Z+MktVxK+EMU/Too DYlOo8j6RKbISwfoNEVCqXyBxIw8iAkWeZ2N1gEgfHILiz322QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9VcUQfGZGL6hHfOdXnwJnq8o5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOWYyM2FhMDEtYWM2ZC0z MzY5LTg1ZmMtODg1M2VmNzgwZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrPEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALw+xw0Qk+CSXWsOtapfaqAT5ynqUe9e/hsdkXtEk6806IdACv91QA0z DjIRhIG40k32+FOMBoE5RDr8PBco9SP3iaxvb/MhYdhxtntBK/sz2K0VrV8q6sbC s/gN18qgzEaCx7yvPd5JDkzxx6PmSUHy7ejpKV638ajB7pBw7Yhx8IlaBBWG6agC MOsTXYymLVnCojbuL/qBBAT+jQYXZo7mz3ptfK9LLenfE00GVlKvef/WBnz1iZac TFJuG0EXrImQwrW0VRquA2mB9FcvxYTuXcEP0TgGp8Uc4eMAEw9YwU7H8gSBsvbJ 9+K73zFrWIRP/VbC5OC10+GRMx+EGVU= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:13 2026 by rpki-client