$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a43cbb9b-2bf6-3183-80d3-8ad98cf51790.roa File: a43cbb9b-2bf6-3183-80d3-8ad98cf51790.roa (raw, json) Hash identifier: hPuXvYu7d2c6yP6tKMMqw2v0NmEhO7zlZbS8WxuoHsw= Subject key identifier: BB:2B:FA:91:78:D1:A0:FE:F1:F6:10:C0:B9:AE:24:A2:03:DC:0A:F6 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F612D70F242D4CCB28AE0E200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a43cbb9b-2bf6-3183-80d3-8ad98cf51790.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 396362 IP address blocks: 142.234.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:70:f2:42:d4:cc:b2:8a:e0:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=c55254ea-3854-416e-9ec0-2a20256bcf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:12:0b:33:50:a2:03:7c:05:d6:43:6f:6b:f3: dc:ae:f2:ad:a7:da:54:7b:21:0f:59:a4:bd:f4:40: fe:17:17:27:74:5a:ce:0e:d7:ce:88:7a:8d:bd:9c: 8d:00:df:77:56:f9:52:22:89:39:d6:96:45:83:df: aa:65:cf:02:a8:42:5e:0d:8b:ba:cf:09:07:05:58: 70:2e:ea:ef:b7:77:83:c4:c1:be:a5:6b:2c:f3:de: 01:bd:86:c2:c1:5d:48:96:11:7d:01:b0:4c:1d:ea: b9:89:cf:37:0d:35:ef:b1:22:4d:3a:ee:27:13:06: 51:28:56:66:6a:15:bd:01:1e:b8:27:5a:8c:f7:04: 55:2d:59:8a:c2:1c:aa:a8:3d:61:52:06:e0:6a:f4: 2d:bd:93:bc:23:ff:1c:7a:72:03:dc:5e:f6:8f:4c: 1b:cf:65:20:9a:3f:f5:53:60:5e:3e:d7:d8:d2:94: 9e:eb:5f:28:5e:be:4e:da:c3:68:4b:78:25:7a:59: a1:c2:c7:cf:90:4a:0f:11:6a:09:87:38:31:d7:fd: d2:65:e4:ba:9b:61:f3:a0:b8:dd:f9:0d:9e:96:e8: a2:56:49:bc:c5:2b:53:52:66:eb:aa:b7:f9:4e:0b: b9:2e:04:29:b2:6a:3e:1e:db:6c:af:85:51:29:90: 00:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2B:FA:91:78:D1:A0:FE:F1:F6:10:C0:B9:AE:24:A2:03:DC:0A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a43cbb9b-2bf6-3183-80d3-8ad98cf51790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.234.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:94:bb:df:95:54:45:53:71:13:b0:6e:5b:02:49:6f:a9:a6: 1e:01:83:fe:e8:87:4d:f4:c2:20:5f:92:72:1f:34:1d:82:a4: 96:bd:a2:39:02:63:e4:ef:b2:4e:1b:df:0f:bd:8a:43:fe:7b: ab:fe:bd:4c:e4:87:fc:70:1a:bf:81:1d:08:10:9f:45:87:d4: 92:47:ea:f7:37:13:71:20:cf:22:47:17:3c:11:62:c9:50:2b: b3:48:98:0e:e1:3b:fa:75:c1:1e:df:bf:76:2a:7d:54:3b:39: 97:dd:02:22:e0:ac:8c:dd:e6:f8:fd:2c:20:5b:16:a7:79:a0: 9a:84:32:ad:e5:84:ea:ef:f8:f6:21:90:0b:60:82:83:b7:28: 5f:71:3a:c2:fa:a7:d4:1a:9c:44:e5:c8:38:a9:da:ba:94:3a: d0:7a:8e:7a:ad:f7:f9:d0:25:c8:55:5e:1b:35:25:f9:c4:ed: 2b:8f:08:fc:09:d2:c0:8b:6f:1a:35:a9:0f:16:61:27:b0:9a: 41:d6:4f:a9:37:9c:7f:4b:19:fa:3d:6a:44:34:cb:ec:65:62: 91:ea:0d:2a:b7:e1:04:a6:66:42:50:fa:48:e1:8b:c9:d0:24: 8d:90:ea:5c:05:c7:cd:76:f5:7e:10:ed:c0:a4:2c:ad:ab:fc: 74:e5:8e:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLXDyQtTMsorg4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk YzU1MjU0ZWEtMzg1NC00MTZlLTllYzAtMmEyMDI1NmJjZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRILM1CiA3wF1kNva/PcrvKtp9pUeyEPWaS9 9ED+FxcndFrODtfOiHqNvZyNAN93VvlSIok51pZFg9+qZc8CqEJeDYu6zwkHBVhw Lurvt3eDxMG+pWss894BvYbCwV1IlhF9AbBMHeq5ic83DTXvsSJNOu4nEwZRKFZm ahW9AR64J1qM9wRVLVmKwhyqqD1hUgbgavQtvZO8I/8cenID3F72j0wbz2Ugmj/1 U2BePtfY0pSe618oXr5O2sNoS3glelmhwsfPkEoPEWoJhzgx1/3SZeS6m2HzoLjd +Q2eluiiVkm8xStTUmbrqrf5Tgu5LgQpsmo+Httsr4VRKZAA/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsr+pF40aD+8fYQwLmuJKID3Ar2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYTQzY2JiOWItMmJmNi0z MTgzLTgwZDMtOGFkOThjZjUxNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjurMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+Uu9+VVEVTcROwblsCSW+pph4Bg/7oh030wiBfknIfNB2CpJa9ojkC Y+Tvsk4b3w+9ikP+e6v+vUzkh/xwGr+BHQgQn0WH1JJH6vc3E3EgzyJHFzwRYslQ K7NImA7hO/p1wR7fv3YqfVQ7OZfdAiLgrIzd5vj9LCBbFqd5oJqEMq3lhOrv+PYh kAtggoO3KF9xOsL6p9QanETlyDip2rqUOtB6jnqt9/nQJchVXhs1JfnE7SuPCPwJ 0sCLbxo1qQ8WYSewmkHWT6k3nH9LGfo9akQ0y+xlYpHqDSq34QSmZkJQ+kjhi8nQ JI2Q6lwFx8129X4Q7cCkLK2r/HTljsI= -----END CERTIFICATE-----Generated at Sat Oct 3 22:58:06 2026 by rpki-client