$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a7d74291-2ae5-34ec-930e-87636ac971e2.roa File: a7d74291-2ae5-34ec-930e-87636ac971e2.roa (raw, json) Hash identifier: g5Q6yp/dCm8QtPCxXq6tVrexz+j7dUbNwFuZv0VhBGk= Subject key identifier: 34:49:90:DB:B2:29:95:82:66:95:A4:AE:D9:8E:34:49:F1:F2:11:95 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B60530CAD08CB0761200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a7d74291-2ae5-34ec-930e-87636ac971e2.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 64.120.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b6:05:30:ca:d0:8c:b0:76:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=eb31f76f-8705-41c7-8368-17da00f87d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ee:7b:fc:c7:df:1c:15:7e:fc:55:1d:86:1e: 79:ad:3a:31:8c:15:e4:20:ba:30:ae:82:89:e9:35: 51:e6:cd:13:b0:e2:90:60:bb:58:a1:91:9e:2e:1f: d5:9e:54:29:ee:30:4f:a6:5d:ea:0f:2f:b1:2a:9d: b5:c2:14:c3:b5:0b:8d:95:5b:b1:bf:5a:9a:09:0e: c2:9d:09:9a:ad:a1:b9:70:e3:ab:09:d9:0f:f7:ee: 8d:65:23:da:13:a5:65:0e:80:0d:1a:e9:e8:a7:e0: 3f:ba:3a:ab:bd:2a:4d:54:8c:9b:ac:2d:3f:3f:f6: 5f:09:50:25:ca:e1:69:90:c7:67:cb:2b:c8:76:ff: 65:1e:6d:71:df:70:ed:1d:5c:9c:c8:80:08:73:1b: 90:fa:df:96:79:10:5e:15:3b:45:41:04:3a:58:98: e1:3c:bd:10:2c:10:d5:31:77:9e:df:0f:14:86:85: d5:d7:e9:26:6b:03:ff:6d:7b:ac:55:e7:6c:8d:81: 66:f0:93:97:10:38:eb:2e:5e:61:94:37:5c:69:6d: 0b:af:f8:a8:2a:1b:9e:08:1d:d8:3f:e5:c9:4d:95: 14:6a:6a:45:0f:15:af:97:42:ab:8e:96:ee:c2:0f: 6c:7b:e5:69:02:cc:78:80:14:e5:9b:af:76:40:2c: 19:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:49:90:DB:B2:29:95:82:66:95:A4:AE:D9:8E:34:49:F1:F2:11:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a7d74291-2ae5-34ec-930e-87636ac971e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 64.120.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:04:dc:cb:9a:83:87:f3:a5:03:c2:21:1d:d2:eb:29:04:58: 86:07:9c:9d:d8:32:a2:2c:23:10:e3:c0:84:22:3d:a6:98:ef: ce:69:43:5c:ab:c7:49:7c:87:82:f3:df:58:c6:62:88:b4:93: ce:ab:91:ea:11:f2:56:77:b4:d9:06:aa:32:de:73:6c:9c:57: dc:83:c2:09:a1:34:d7:80:48:6b:7b:c0:74:f5:ce:ce:01:07: bf:23:19:39:de:5f:23:d0:f2:f6:83:b2:ac:71:0e:e3:61:ae: ae:42:b5:55:7d:73:b3:df:de:b1:e4:d1:1f:a2:a6:60:c7:d5: 80:53:32:83:91:2f:a5:11:f1:01:f2:da:1a:23:ce:98:f1:af: b0:86:a4:ad:c5:ea:e3:55:4a:8f:45:8e:8f:1c:e0:be:c2:a7: 4c:fc:b0:b5:d2:1a:ea:70:7a:c4:d2:95:26:32:f5:e7:9e:fc: de:fa:28:f1:6d:05:32:a4:78:6c:a6:48:01:1c:59:8a:68:16: e9:0c:26:80:4d:50:81:3c:60:eb:80:d6:81:83:43:a6:ac:7d: 0f:df:d3:9e:52:bd:7d:dc:8d:aa:69:f3:9e:ab:9a:2a:25:3a: 34:25:a4:96:58:04:e0:81:2d:26:fc:a1:b2:c7:bc:7c:2d:ff: ed:82:00:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrYFMMrQjLB2EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWIzMWY3NmYtODcwNS00MWM3LTgzNjgtMTdkYTAwZjg3ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku57/MffHBV+/FUdhh55rToxjBXkILowroKJ 6TVR5s0TsOKQYLtYoZGeLh/VnlQp7jBPpl3qDy+xKp21whTDtQuNlVuxv1qaCQ7C nQmaraG5cOOrCdkP9+6NZSPaE6VlDoANGunop+A/ujqrvSpNVIybrC0/P/ZfCVAl yuFpkMdnyyvIdv9lHm1x33DtHVycyIAIcxuQ+t+WeRBeFTtFQQQ6WJjhPL0QLBDV MXee3w8UhoXV1+kmawP/bXusVedsjYFm8JOXEDjrLl5hlDdcaW0Lr/ioKhueCB3Y P+XJTZUUampFDxWvl0Krjpbuwg9se+VpAsx4gBTlm692QCwZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRJkNuyKZWCZpWkrtmONEnx8hGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYTdkNzQyOTEtMmFlNS0z NGVjLTkzMGUtODc2MzZhYzk3MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwE3Muag4fzpQPCIR3S6ykEWIYHnJ3YMqIsIxDjwIQiPaaY785pQ1yr x0l8h4Lz31jGYoi0k86rkeoR8lZ3tNkGqjLec2ycV9yDwgmhNNeASGt7wHT1zs4B B78jGTneXyPQ8vaDsqxxDuNhrq5CtVV9c7Pf3rHk0R+ipmDH1YBTMoORL6UR8QHy 2hojzpjxr7CGpK3F6uNVSo9Fjo8c4L7Cp0z8sLXSGupwesTSlSYy9eee/N76KPFt BTKkeGymSAEcWYpoFukMJoBNUIE8YOuA1oGDQ6asfQ/f055SvX3cjapp856rmiol OjQlpJZYBOCBLSb8obLHvHwt/+2CACg= -----END CERTIFICATE-----Generated at Wed Oct 14 23:15:30 2026 by rpki-client