$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a520bc5e-9771-3aca-b80a-d91ae52bb963.roa File: a520bc5e-9771-3aca-b80a-d91ae52bb963.roa (raw, json) Hash identifier: 97Obz+V0icOCxsg4JwDPdYcdqOD2Hm7DSjtzKyOj1T8= Subject key identifier: CF:54:FD:E5:E6:75:B2:E7:A0:31:B4:3E:FD:3E:22:8C:0E:01:04:6E Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC28D0D908037015247CC0760 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a520bc5e-9771-3aca-b80a-d91ae52bb963.roa Signing time: Fri 07 Aug 2026 17:19:32 +0000 ROA not before: Fri 07 Aug 2026 17:19:32 +0000 ROA not after: Thu 05 Nov 2026 18:19:32 +0000 asID: 395954 IP address blocks: 142.91.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:8d:0d:90:80:37:01:52:47:cc:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 7 17:19:32 2026 GMT Not After : Nov 5 18:19:32 2026 GMT Subject: CN=f2d859a3-9dc0-411c-b922-d46390fae31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:8e:b8:8a:49:07:83:28:56:c8:f2:e1:65: 00:43:7b:af:ac:75:c2:0f:ef:8a:b2:76:b2:8a:4b: 6a:3d:bd:a0:9c:bb:7a:aa:8a:c1:22:c6:e7:b5:9f: bc:03:04:fe:cb:8a:05:49:ba:2e:0b:43:51:8c:1b: 57:fc:2f:3b:e2:2b:9b:61:53:bc:e4:73:dd:14:bb: 2f:fe:79:ad:fa:c1:5d:8e:c3:5a:f5:83:a7:29:4d: 46:6f:68:c8:d0:be:02:cc:c4:a7:ec:33:ef:26:7d: b7:e8:a4:20:ea:87:42:16:e4:a2:f7:7b:2b:e4:1c: ff:d8:f2:13:9c:fa:77:a0:73:4a:99:9f:76:1d:d6: 34:d9:4e:19:2c:7b:36:06:c5:69:2f:b5:9f:b7:d4: 21:c9:6b:01:83:84:f1:fb:41:df:65:f4:ba:61:e2: 45:01:f0:22:bc:dd:39:6b:17:ff:56:9d:a2:bc:51: 76:2d:64:c3:13:2e:2a:88:c7:ca:34:94:f6:54:8f: 37:b8:fa:a0:22:3e:7f:28:bb:43:02:fb:13:bc:39: 0c:76:01:4b:1a:8f:e5:9e:6f:fa:4d:db:4e:88:c1: 12:1b:3b:5e:18:13:9c:e3:5a:43:0e:8c:75:85:aa: c0:9f:89:2e:ad:82:f1:d2:da:33:51:4a:fe:cc:13: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:54:FD:E5:E6:75:B2:E7:A0:31:B4:3E:FD:3E:22:8C:0E:01:04:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a520bc5e-9771-3aca-b80a-d91ae52bb963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.91.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f2:1f:44:0c:45:c8:00:9a:e2:04:74:8a:12:15:77:18:cf: 8f:cb:76:9a:2a:67:cf:22:f2:3a:2e:2e:eb:35:53:c7:cb:8e: 8c:02:cf:4a:de:8d:54:40:38:1e:bf:1c:57:6f:54:e2:dc:b5: 44:6f:ae:fa:9e:65:d9:0d:e8:5d:a1:7d:00:b2:11:de:87:33: 76:51:f1:3a:ab:56:13:02:81:66:f2:aa:29:f5:14:7c:5a:07: 20:8a:9c:88:71:28:3a:2d:67:44:dc:77:21:88:53:93:f8:16: ce:21:47:60:21:06:f0:6e:46:c2:a7:a0:54:f3:f7:84:0a:ec: 15:c4:41:8c:59:15:42:6e:76:3d:04:19:f6:40:d1:61:90:a8: ac:db:89:52:78:94:09:48:56:04:97:eb:82:17:08:f2:54:7f: 8e:f9:cd:82:38:a2:32:d4:15:96:64:c1:40:2a:b2:28:56:09: 39:39:2d:20:d2:cf:14:a2:45:27:6e:f3:62:a9:46:a7:f8:9e: 4b:48:ee:3e:b9:c8:a4:9a:60:cd:29:20:52:92:40:31:5e:82: e9:ae:2d:17:4d:b3:37:bc:b6:4f:86:64:5e:73:fa:26:90:a0: 9a:d4:08:89:9c:cf:47:db:f1:d3:c7:56:a4:af:8a:5d:1a:72: 60:cf:6a:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CjQ2QgDcBUkfMB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNzE3MTkzMloXDTI2MTEwNTE4MTkzMlowLzEtMCsGA1UEAxMk ZjJkODU5YTMtOWRjMC00MTFjLWI5MjItZDQ2MzkwZmFlMzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLuOuIpJB4MoVsjy4WUAQ3uvrHXCD++Ksnay iktqPb2gnLt6qorBIsbntZ+8AwT+y4oFSbouC0NRjBtX/C874iubYVO85HPdFLsv /nmt+sFdjsNa9YOnKU1Gb2jI0L4CzMSn7DPvJn236KQg6odCFuSi93sr5Bz/2PIT nPp3oHNKmZ92HdY02U4ZLHs2BsVpL7Wft9QhyWsBg4Tx+0HfZfS6YeJFAfAivN05 axf/Vp2ivFF2LWTDEy4qiMfKNJT2VI83uPqgIj5/KLtDAvsTvDkMdgFLGo/lnm/6 TdtOiMESGzteGBOc41pDDox1harAn4kurYLx0tozUUr+zBMqXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9U/eXmdbLnoDG0Pv0+IowOAQRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYTUyMGJjNWUtOTc3MS0z YWNhLWI4MGEtZDkxYWU1MmJiOTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjlvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjyH0QMRcgAmuIEdIoSFXcYz4/LdpoqZ88i8jouLus1U8fLjowCz0re jVRAOB6/HFdvVOLctURvrvqeZdkN6F2hfQCyEd6HM3ZR8TqrVhMCgWbyqin1FHxa ByCKnIhxKDotZ0TcdyGIU5P4Fs4hR2AhBvBuRsKnoFTz94QK7BXEQYxZFUJudj0E GfZA0WGQqKzbiVJ4lAlIVgSX64IXCPJUf475zYI4ojLUFZZkwUAqsihWCTk5LSDS zxSiRSdu82KpRqf4nktI7j65yKSaYM0pIFKSQDFegumuLRdNsze8tk+GZF5z+iaQ oJrUCImcz0fb8dPHVqSvil0acmDPas0= -----END CERTIFICATE-----Generated at Thu Aug 27 18:18:27 2026 by rpki-client