$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a4567e40-7393-3aa7-b717-12a7326f5451.roa File: a4567e40-7393-3aa7-b717-12a7326f5451.roa (raw, json) Hash identifier: aTA8iLv+PGX9NX3z9D4GWX+tSkkyf4EdQ0gH5jlfRHw= Subject key identifier: 79:D7:BA:42:8D:50:96:42:DC:8F:18:A6:5E:87:9A:E0:8F:34:20:32 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292BC3E6325E9F7E4D821E0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a4567e40-7393-3aa7-b717-12a7326f5451.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 108.62.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:bc:3e:63:25:e9:f7:e4:d8:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=baeda6a8-8d39-4b1f-b8d6-351ba4fa8547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:3e:2d:7f:8a:27:40:a2:a6:75:0c:66:50: b5:79:7d:55:42:66:6a:39:63:90:a1:4e:9d:12:09: c6:f8:d1:54:d1:93:15:93:76:0f:ef:48:ec:1f:5e: 3f:3f:f5:04:88:11:0f:55:1f:40:46:15:bf:c2:8d: 72:a4:d2:8b:8b:67:93:8d:b5:7f:5f:db:62:45:f4: bf:b3:58:d7:52:0f:f5:dc:b6:29:ff:ef:a5:91:62: 5b:3c:8a:de:74:a1:21:3d:9b:52:49:0d:b3:0a:62: d6:4c:f2:77:b6:14:e9:7a:a5:ad:98:ee:db:1b:b5: 5b:81:15:68:11:30:6c:59:de:5b:3a:fe:14:3a:c5: ce:2d:9c:40:76:ce:e7:bd:30:55:69:3d:43:de:c9: cc:44:26:03:c8:11:2d:eb:04:f4:0c:69:b0:e3:fa: 30:14:c0:36:28:c0:2b:9d:13:82:e9:a8:29:4f:4a: 82:de:1f:e3:e4:5e:cb:18:73:97:88:b9:30:ce:b4: 6e:1e:a1:92:c2:d7:86:f5:f9:a3:21:af:33:4d:89: 24:6c:3f:f0:2f:10:6c:82:ef:b9:4a:e7:ac:f7:51: 77:73:4f:77:04:9b:6e:68:8c:51:66:95:ef:3e:ec: 67:50:d6:5b:22:66:cd:d2:c6:d4:8a:84:03:14:f1: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D7:BA:42:8D:50:96:42:DC:8F:18:A6:5E:87:9A:E0:8F:34:20:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a4567e40-7393-3aa7-b717-12a7326f5451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:75:61:68:6d:da:f4:a4:39:ac:b5:ce:65:1f:a7:25:c8:d9: 10:a5:46:d9:e9:4b:e5:16:e2:36:97:37:6e:c7:9b:6e:00:da: d1:6e:0b:47:f8:4f:a3:cf:af:39:85:60:36:2a:8b:d4:d9:29: d0:34:c8:7b:ce:7e:33:88:8f:ec:df:c3:39:a5:4b:bf:fe:ce: 03:1c:65:bf:12:9e:82:fe:9b:c7:1c:ad:b6:f8:c5:94:b3:60: cf:aa:31:b9:17:59:a5:7a:21:84:c6:c9:1a:57:72:6c:2f:a5: 4c:19:7f:b1:bf:f0:f4:ae:6b:9c:89:14:dc:4a:6e:17:20:45: b3:6f:d9:0f:b2:c6:d2:fb:ff:a5:d5:89:d1:1a:cf:c0:ed:1f: 98:d2:6c:ac:fb:67:79:27:1f:63:9b:36:e7:71:36:57:ba:a1: 51:47:ee:de:48:41:80:44:ac:97:af:31:d7:fe:b7:b5:47:45: cd:15:6e:97:f3:3d:69:6e:71:e1:e1:2d:aa:28:86:45:b1:70: a5:d9:4d:30:be:d2:c8:b5:a2:61:f4:be:14:42:66:42:41:e1: 24:24:04:e7:71:d0:de:8a:48:13:6d:d2:f5:ad:85:de:76:e8: 9e:3f:52:60:5b:31:6c:bd:86:d0:5c:8f:3e:de:45:cf:2a:36: 96:68:2c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrw+YyXp9+TYIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YmFlZGE2YTgtOGQzOS00YjFmLWI4ZDYtMzUxYmE0ZmE4NTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0k+LX+KJ0CipnUMZlC1eX1VQmZqOWOQoU6d EgnG+NFU0ZMVk3YP70jsH14/P/UEiBEPVR9ARhW/wo1ypNKLi2eTjbV/X9tiRfS/ s1jXUg/13LYp/++lkWJbPIredKEhPZtSSQ2zCmLWTPJ3thTpeqWtmO7bG7VbgRVo ETBsWd5bOv4UOsXOLZxAds7nvTBVaT1D3snMRCYDyBEt6wT0DGmw4/owFMA2KMAr nROC6agpT0qC3h/j5F7LGHOXiLkwzrRuHqGSwteG9fmjIa8zTYkkbD/wLxBsgu+5 Sues91F3c093BJtuaIxRZpXvPuxnUNZbImbN0sbUioQDFPHvfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnXukKNUJZC3I8Ypl6HmuCPNCAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYTQ1NjdlNDAtNzM5My0z YWE3LWI3MTctMTJhNzMyNmY1NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbD4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI11YWht2vSkOay1zmUfpyXI2RClRtnpS+UW4jaXN27Hm24A2tFuC0f4 T6PPrzmFYDYqi9TZKdA0yHvOfjOIj+zfwzmlS7/+zgMcZb8SnoL+m8ccrbb4xZSz YM+qMbkXWaV6IYTGyRpXcmwvpUwZf7G/8PSua5yJFNxKbhcgRbNv2Q+yxtL7/6XV idEaz8DtH5jSbKz7Z3knH2ObNudxNle6oVFH7t5IQYBErJevMdf+t7VHRc0Vbpfz PWluceHhLaoohkWxcKXZTTC+0si1omH0vhRCZkJB4SQkBOdx0N6KSBNt0vWthd52 6J4/UmBbMWy9htBcjz7eRc8qNpZoLGo= -----END CERTIFICATE-----Generated at Wed Oct 14 02:14:33 2026 by rpki-client