$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a0567a41-2dd4-303b-a5ec-bec4d2e62e24.roa File: a0567a41-2dd4-303b-a5ec-bec4d2e62e24.roa (raw, json) Hash identifier: f27v1HYmrF2SKVA0+X0IoIZomUVAQWyTq9mbm4xqQHI= Subject key identifier: 02:91:04:95:1E:92:EA:38:E7:7D:54:05:3B:FC:D9:8A:CA:4C:A4:9E Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97F9C1595BC579073C9080 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a0567a41-2dd4-303b-a5ec-bec4d2e62e24.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 142.234.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:f9:c1:59:5b:c5:79:07:3c:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=820a27cf-1c05-4ef6-b916-2cb7ce3daf07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:34:78:7c:ba:09:fa:55:ba:2a:24:b0:3e:1b: d6:2b:63:3b:6e:ec:ee:26:73:7d:af:ad:ff:ad:4c: 38:75:fe:71:11:a7:ad:00:df:02:2e:7c:a4:d9:af: a4:e1:81:01:03:60:d4:3c:ae:85:6c:1a:6c:c4:29: 29:04:3d:9f:4d:2f:33:58:8a:39:ab:f5:db:95:7f: 21:ee:e2:36:02:0b:13:f6:f4:83:b0:58:33:3d:79: 76:69:e1:6e:eb:76:d5:07:30:9b:60:2c:8f:ea:d7: e4:66:1e:a3:1c:04:76:0b:bb:f7:36:95:af:48:4c: 1c:59:62:4b:3a:7c:e0:02:6c:a7:b2:5a:3f:72:f9: 0f:4d:89:e9:5e:bd:98:5f:5e:01:39:09:44:af:4d: 08:c7:7f:3f:3f:0b:f8:b6:73:da:81:ea:ac:c4:ff: bb:94:40:aa:6b:1d:d8:21:79:d2:05:cf:13:eb:af: ba:53:e5:bf:c9:fa:77:95:c6:c6:6b:84:2d:7e:1d: e4:d2:7d:8d:77:9f:1b:cf:29:c7:db:35:65:34:91: cd:f8:09:e0:a8:a6:72:86:28:0c:f5:dc:58:8a:63: f8:7c:4e:a4:9d:24:3e:5b:1e:3e:b2:bb:66:ac:5b: bf:3b:34:d0:bf:3a:ba:df:67:b7:21:64:6a:26:d6: 58:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:91:04:95:1E:92:EA:38:E7:7D:54:05:3B:FC:D9:8A:CA:4C:A4:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a0567a41-2dd4-303b-a5ec-bec4d2e62e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.234.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:97:4a:c1:81:92:32:7d:35:2a:88:cc:85:2b:95:74:3a:71: cc:af:d0:f3:a1:23:ac:75:3c:ad:9b:da:9f:f5:7b:6f:87:61: 46:95:0e:44:37:d1:c2:01:7d:8d:7d:b9:be:4a:a9:61:86:c8: b6:9d:c1:8f:8e:53:dc:07:e4:79:b3:66:ed:34:eb:0e:5a:19: 99:df:06:38:f1:1b:ff:12:ef:10:5e:ee:ef:64:f5:70:71:ab: 9c:bd:4d:bd:f7:15:45:19:7e:b4:74:df:8a:90:61:61:c6:9a: 81:a0:07:78:b6:2e:74:a3:eb:ec:15:e7:99:bb:a0:23:8c:23: 66:f3:0e:6e:66:43:16:d8:35:2b:a6:93:ed:8d:10:ed:4d:2f: ab:32:f5:6a:3d:02:89:cd:a1:42:44:34:72:0c:00:11:dc:54: 71:72:15:93:74:60:9f:be:fe:7d:5d:34:8f:a6:ad:bb:bd:7e: c7:4d:5c:09:df:b5:98:2c:af:b6:04:7f:3e:5e:0e:e7:1a:6b: 10:23:91:c3:0e:f9:74:e2:ad:83:fe:0d:f9:74:45:ce:4e:9c: 1c:22:9a:de:17:32:0a:4c:b9:08:ad:40:fe:7e:f3:a2:3b:6f: 83:3b:64:7e:cc:7a:48:dd:40:45:3a:ff:7a:c2:e2:92:3c:06: aa:64:d9:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/nBWVvFeQc8kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk ODIwYTI3Y2YtMWMwNS00ZWY2LWI5MTYtMmNiN2NlM2RhZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jR4fLoJ+lW6KiSwPhvWK2M7buzuJnN9r63/ rUw4df5xEaetAN8CLnyk2a+k4YEBA2DUPK6FbBpsxCkpBD2fTS8zWIo5q/XblX8h 7uI2AgsT9vSDsFgzPXl2aeFu63bVBzCbYCyP6tfkZh6jHAR2C7v3NpWvSEwcWWJL OnzgAmynslo/cvkPTYnpXr2YX14BOQlEr00Ix38/Pwv4tnPageqsxP+7lECqax3Y IXnSBc8T66+6U+W/yfp3lcbGa4Qtfh3k0n2Nd58bzynH2zVlNJHN+AngqKZyhigM 9dxYimP4fE6knSQ+Wx4+srtmrFu/OzTQvzq632e3IWRqJtZYdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKRBJUekuo4531UBTv82YrKTKSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYTA1NjdhNDEtMmRkNC0z MDNiLWE1ZWMtYmVjNGQyZTYyZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqXSsGBkjJ9NSqIzIUrlXQ6ccyv0POhI6x1PK2b2p/1e2+HYUaVDkQ3 0cIBfY19ub5KqWGGyLadwY+OU9wH5HmzZu006w5aGZnfBjjxG/8S7xBe7u9k9XBx q5y9Tb33FUUZfrR034qQYWHGmoGgB3i2LnSj6+wV55m7oCOMI2bzDm5mQxbYNSum k+2NEO1NL6sy9Wo9AonNoUJENHIMABHcVHFyFZN0YJ++/n1dNI+mrbu9fsdNXAnf tZgsr7YEfz5eDucaaxAjkcMO+XTirYP+Dfl0Rc5OnBwimt4XMgpMuQitQP5+86I7 b4M7ZH7MekjdQEU6/3rC4pI8Bqpk2Q8= -----END CERTIFICATE-----Generated at Wed Oct 14 07:55:18 2026 by rpki-client