$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a0567a41-2dd4-303b-a5ec-bec4d2e62e24.roa File: a0567a41-2dd4-303b-a5ec-bec4d2e62e24.roa (raw, json) Hash identifier: s4KTbkD1sA3lp9r5X0WlhNmUoSJ16uYh9Ib5UuzRT5I= Subject key identifier: 11:84:92:59:24:0D:57:AA:B0:EB:E5:EE:F5:A1:32:A8:16:7E:1D:66 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB947447A992944550D019380 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a0567a41-2dd4-303b-a5ec-bec4d2e62e24.roa Signing time: Tue 04 Aug 2026 09:36:39 +0000 ROA not before: Tue 04 Aug 2026 09:36:39 +0000 ROA not after: Mon 02 Nov 2026 10:36:39 +0000 asID: 7203 IP address blocks: 142.234.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:47:44:7a:99:29:44:55:0d:01:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 09:36:39 2026 GMT Not After : Nov 2 10:36:39 2026 GMT Subject: CN=2a8ba24e-2c3c-4725-b637-b98f5244bdee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:72:d8:82:51:ab:6b:12:67:3d:35:ad:b3: ce:30:a5:4e:b1:ce:ff:e1:f4:9c:00:dc:7a:b0:18: ee:f7:5b:46:73:3b:ae:ae:db:16:5c:75:ee:37:e4: 9f:cb:80:07:b0:aa:77:2c:0a:1b:e5:dd:5e:34:e1: f9:8e:51:db:86:3a:d2:20:48:dd:bc:e9:a5:45:0f: a8:c5:7c:0d:20:4b:80:d3:33:76:2b:ee:37:c6:52: 89:3f:0a:aa:64:e1:c0:37:c1:ab:d7:20:69:75:e3: 64:5b:2e:82:89:4d:4d:20:4f:92:d2:0a:d7:b0:31: 97:08:f2:d5:54:6f:b6:2c:02:39:3e:19:08:36:d2: 09:9d:c0:69:dd:a6:06:66:75:27:e5:23:eb:6d:1f: 1b:3f:18:9a:70:b1:95:5b:e6:02:9e:07:73:27:cc: b1:89:d4:6e:07:b8:0e:3b:f8:9d:97:15:81:bf:4b: 78:b2:0c:0b:e1:a8:f0:19:d7:fc:6d:12:44:c2:4c: 0a:fc:d5:c8:21:38:41:08:fc:7e:49:10:88:6f:f0: e3:af:b7:7b:d2:3b:22:62:29:7e:9c:0a:c1:77:85: e5:5d:9e:24:5e:8f:ed:42:87:88:b9:4a:63:1c:1b: 59:5e:9e:b9:0f:6e:1f:12:ce:b0:be:c1:80:a5:df: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:84:92:59:24:0D:57:AA:B0:EB:E5:EE:F5:A1:32:A8:16:7E:1D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a0567a41-2dd4-303b-a5ec-bec4d2e62e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.234.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c9:4f:4c:e4:d1:ec:ef:2f:5e:15:94:8a:fb:dc:98:5e:d9: 85:c0:af:e2:88:98:74:93:39:28:25:57:18:9e:47:f5:19:e0: 74:d9:ee:61:b3:04:27:4a:5b:4d:3d:dd:65:68:63:40:37:06: 41:1f:02:c7:07:02:76:66:c2:2d:a0:a7:c8:7b:47:3a:3e:00: c9:f1:7b:72:a6:ac:9f:4a:fb:23:1e:58:f2:c8:b8:ca:cf:68: f5:d9:28:42:6a:11:fd:11:8c:76:36:73:86:d9:a8:21:7d:c3: 0b:da:48:94:9f:59:be:81:2b:12:a1:b8:51:9a:92:5c:13:0b: 4a:60:e5:a5:02:14:bf:09:66:66:f6:32:a7:17:9f:d4:70:aa: 7b:b4:cf:2b:bb:66:79:e2:68:33:7e:1e:0a:88:90:ff:42:3d: 4c:1f:95:46:0c:28:52:d4:e2:57:9f:1e:10:8f:39:4e:de:3b: c0:04:d8:1c:9f:10:57:d1:e6:58:e3:4d:52:03:02:de:27:f8: 13:18:c1:b7:41:80:23:b0:07:b4:e6:2f:a2:9c:e8:16:56:56: a1:b9:88:78:9e:e2:df:09:af:41:60:ec:ff:4e:98:ba:74:59: 0e:e2:c3:5f:ff:7b:a6:ad:c5:f6:4d:ee:50:34:58:24:30:df: 2b:e6:22:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65R0R6mSlEVQ0Bk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDA5MzYzOVoXDTI2MTEwMjEwMzYzOVowLzEtMCsGA1UEAxMk MmE4YmEyNGUtMmMzYy00NzI1LWI2MzctYjk4ZjUyNDRiZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2dy2IJRq2sSZz01rbPOMKVOsc7/4fScANx6 sBju91tGczuurtsWXHXuN+Sfy4AHsKp3LAob5d1eNOH5jlHbhjrSIEjdvOmlRQ+o xXwNIEuA0zN2K+43xlKJPwqqZOHAN8Gr1yBpdeNkWy6CiU1NIE+S0grXsDGXCPLV VG+2LAI5PhkINtIJncBp3aYGZnUn5SPrbR8bPxiacLGVW+YCngdzJ8yxidRuB7gO O/idlxWBv0t4sgwL4ajwGdf8bRJEwkwK/NXIIThBCPx+SRCIb/Djr7d70jsiYil+ nArBd4XlXZ4kXo/tQoeIuUpjHBtZXp65D24fEs6wvsGApd8e4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGEklkkDVeqsOvl7vWhMqgWfh1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYTA1NjdhNDEtMmRkNC0z MDNiLWE1ZWMtYmVjNGQyZTYyZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfJT0zk0ezvL14VlIr73Jhe2YXAr+KImHSTOSglVxieR/UZ4HTZ7mGz BCdKW0093WVoY0A3BkEfAscHAnZmwi2gp8h7Rzo+AMnxe3KmrJ9K+yMeWPLIuMrP aPXZKEJqEf0RjHY2c4bZqCF9wwvaSJSfWb6BKxKhuFGaklwTC0pg5aUCFL8JZmb2 MqcXn9Rwqnu0zyu7ZnniaDN+HgqIkP9CPUwflUYMKFLU4lefHhCPOU7eO8AE2Byf EFfR5ljjTVIDAt4n+BMYwbdBgCOwB7TmL6Kc6BZWVqG5iHie4t8Jr0Fg7P9OmLp0 WQ7iw1//e6atxfZN7lA0WCQw3yvmIoU= -----END CERTIFICATE-----Generated at Thu Aug 27 19:52:06 2026 by rpki-client