$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a4567e40-7393-3aa7-b717-12a7326f5451.roa File: a4567e40-7393-3aa7-b717-12a7326f5451.roa (raw, json) Hash identifier: hmgMJRNuad2jmuY3lLZHP0TSYU5GcmgWRILOPJwRw3g= Subject key identifier: 9D:16:E9:B5:52:F1:17:8A:6E:FC:26:4A:83:FD:50:B7:5C:C6:C6:0F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC04926564A6B3212A2CC8BC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a4567e40-7393-3aa7-b717-12a7326f5451.roa Signing time: Thu 06 Aug 2026 21:51:06 +0000 ROA not before: Thu 06 Aug 2026 21:51:06 +0000 ROA not after: Wed 04 Nov 2026 22:51:06 +0000 asID: 395954 IP address blocks: 108.62.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:49:26:56:4a:6b:32:12:a2:cc:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 21:51:06 2026 GMT Not After : Nov 4 22:51:06 2026 GMT Subject: CN=f92d9c77-41a9-4f89-b29b-6e04da188904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:4b:da:46:7a:95:06:31:de:10:f6:61:a5: 94:a7:41:eb:cb:47:4d:e7:f8:4f:72:a1:7c:d2:6b: 2a:ab:cc:7c:c2:ed:3a:d6:47:ac:f5:f7:3a:c3:ae: 40:53:78:43:03:c4:0b:72:33:c7:fa:bf:5b:80:4c: fa:b8:7e:da:3a:4a:0e:86:6f:1e:32:10:67:3f:9a: 7a:bf:79:6c:7b:c5:6a:38:2a:c0:ad:fc:6f:37:7a: b2:05:dd:b8:de:58:92:08:eb:f7:75:79:c5:0e:d9: b6:c3:26:ed:63:8d:0b:50:52:e1:97:b7:60:e5:18: 42:13:dd:e4:7f:25:38:4a:5b:b7:95:eb:60:ba:15: e9:ee:9c:37:26:67:14:3d:45:d4:f8:de:12:65:94: 3e:ab:87:79:99:9d:26:68:5e:d0:94:77:2e:b9:af: 6d:4f:e3:11:77:24:24:24:80:c5:e8:0e:c9:fd:b4: 4f:95:14:2d:5a:a7:48:14:49:dd:9a:35:5d:eb:1b: 2b:38:98:d2:ce:a6:1b:a8:bc:d0:12:5e:96:ba:bb: 2d:00:47:1a:1e:97:39:a6:0f:b2:f8:62:26:7f:e4: 59:f4:fb:8e:64:ea:81:8c:49:66:b2:2f:10:04:cc: 6b:43:64:17:6c:50:a0:32:62:ba:84:53:16:11:e9: 96:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:16:E9:B5:52:F1:17:8A:6E:FC:26:4A:83:FD:50:B7:5C:C6:C6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a4567e40-7393-3aa7-b717-12a7326f5451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e6:8c:fe:ef:08:6a:5c:82:92:0a:73:af:c5:40:93:07:b5: 2c:2b:0a:aa:6f:2d:d0:81:2f:95:55:0c:35:d7:60:c4:eb:de: 9f:a4:5a:2a:38:9a:a1:ff:96:ec:13:dc:d3:47:e3:53:ae:04: 69:e3:5a:ed:33:82:07:46:28:0a:b4:6b:40:2c:05:6c:0d:76: dd:24:99:02:d8:cb:24:bc:72:15:6a:e4:07:e2:c1:48:32:3b: c8:32:8f:ee:2d:29:ae:d4:a2:c9:5e:3b:46:01:c0:be:a4:0a: 2f:3b:26:00:cf:75:04:5c:75:96:f2:fc:9a:a3:89:1a:a0:5b: 44:c8:13:fb:ca:f5:b3:92:e1:bc:56:36:88:72:c2:6d:f2:d8: 2e:11:89:f3:91:d5:8f:0f:ab:e0:99:63:94:db:9b:46:84:b6: 91:1b:fa:98:77:7d:44:93:e6:60:7a:49:97:1b:9d:57:98:e5: 87:e5:1a:94:a1:bc:ad:38:ea:67:b9:b9:43:a2:ce:20:51:ca: a9:f2:d9:09:9f:c3:83:65:39:21:b9:d7:a2:b2:04:9b:08:a2: 76:3e:d9:52:cb:d5:9c:46:45:da:61:42:22:5c:65:d8:a1:06: 81:a8:8b:ea:09:b2:dd:a0:98:93:0c:06:c5:82:d4:3a:c1:2b: e6:0d:df:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ASSZWSmsyEqLMi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjIxNTEwNloXDTI2MTEwNDIyNTEwNlowLzEtMCsGA1UEAxMk ZjkyZDljNzctNDFhOS00Zjg5LWIyOWItNmUwNGRhMTg4OTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7VL2kZ6lQYx3hD2YaWUp0Hry0dN5/hPcqF8 0msqq8x8wu061kes9fc6w65AU3hDA8QLcjPH+r9bgEz6uH7aOkoOhm8eMhBnP5p6 v3lse8VqOCrArfxvN3qyBd243liSCOv3dXnFDtm2wybtY40LUFLhl7dg5RhCE93k fyU4Slu3letguhXp7pw3JmcUPUXU+N4SZZQ+q4d5mZ0maF7QlHcuua9tT+MRdyQk JIDF6A7J/bRPlRQtWqdIFEndmjVd6xsrOJjSzqYbqLzQEl6WurstAEcaHpc5pg+y +GImf+RZ9PuOZOqBjElmsi8QBMxrQ2QXbFCgMmK6hFMWEemWIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0W6bVS8ReKbvwmSoP9ULdcxsYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYTQ1NjdlNDAtNzM5My0z YWE3LWI3MTctMTJhNzMyNmY1NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbD4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTmjP7vCGpcgpIKc6/FQJMHtSwrCqpvLdCBL5VVDDXXYMTr3p+kWio4 mqH/luwT3NNH41OuBGnjWu0zggdGKAq0a0AsBWwNdt0kmQLYyyS8chVq5AfiwUgy O8gyj+4tKa7UosleO0YBwL6kCi87JgDPdQRcdZby/JqjiRqgW0TIE/vK9bOS4bxW Nohywm3y2C4RifOR1Y8Pq+CZY5Tbm0aEtpEb+ph3fUST5mB6SZcbnVeY5YflGpSh vK046me5uUOiziBRyqny2Qmfw4NlOSG516KyBJsIonY+2VLL1ZxGRdphQiJcZdih BoGoi+oJst2gmJMMBsWC1DrBK+YN37U= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:15 2026 by rpki-client