$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a9c34422-9272-36e6-b680-12eafc682e78.roa File: a9c34422-9272-36e6-b680-12eafc682e78.roa (raw, json) Hash identifier: Xj2SIHR9Y5fCAdhQZ0/GGJTb1K9ETKnh0ixv+qtdV4s= Subject key identifier: 77:FB:FB:66:F8:25:5D:37:05:06:67:EA:B3:87:3E:6D:FB:D8:BF:64 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0FB6984D9BFBFD4DDB374F30 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a9c34422-9272-36e6-b680-12eafc682e78.roa Signing time: Fri 04 Sep 2026 08:40:29 +0000 ROA not before: Fri 04 Sep 2026 08:40:29 +0000 ROA not after: Thu 03 Dec 2026 09:40:29 +0000 asID: 395954 IP address blocks: 142.91.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:b6:98:4d:9b:fb:fd:4d:db:37:4f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 08:40:29 2026 GMT Not After : Dec 3 09:40:29 2026 GMT Subject: CN=5f28536d-e75a-4aa6-8ac7-d7da71748374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ca:fe:9c:82:4d:ef:b1:7a:5d:c1:ad:35:eb: ab:4e:65:76:2d:fa:3b:5e:35:40:80:2f:e4:96:d1: 0d:4e:10:bf:84:f0:92:69:a7:09:88:00:22:a5:83: 50:fd:85:f4:de:ed:71:ad:6e:e9:1e:cf:04:a0:b7: 59:1c:eb:5e:28:71:65:18:27:a8:15:41:45:4c:48: 45:b8:f8:29:a0:35:e9:a6:53:cb:86:d8:31:43:f9: e9:42:ce:8d:51:aa:46:f5:bd:06:b0:27:43:11:0b: 03:02:3d:e9:23:58:13:f3:42:8e:31:fe:62:2f:24: bc:87:84:d4:47:9f:59:24:82:fc:f0:50:dd:4c:19: 8d:98:f7:b5:b0:ae:f4:8f:24:ed:7b:05:78:ee:95: e8:b3:67:8f:29:f6:c9:12:7d:b4:a0:5c:7d:2d:52: 59:f3:f9:fd:2f:39:62:b1:5f:02:44:fb:01:0a:f6: 06:29:2d:2c:69:76:ff:70:e5:71:50:59:c4:2a:38: 11:17:ce:78:03:4e:5a:eb:a2:0c:70:9d:33:8d:c1: f6:9e:55:24:1d:c3:bd:7d:cc:1c:6a:9e:1f:4a:5b: a3:a5:db:bd:37:eb:a2:44:25:b4:03:a3:5a:ee:bc: 85:8b:a3:c5:61:96:7d:63:05:22:cd:39:ab:36:99: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FB:FB:66:F8:25:5D:37:05:06:67:EA:B3:87:3E:6D:FB:D8:BF:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a9c34422-9272-36e6-b680-12eafc682e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.91.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7b:5a:28:55:d9:76:d2:86:36:06:1e:92:25:1f:e0:d9:34: 4a:b9:33:62:81:a6:05:d6:69:68:a6:04:32:b4:ba:4b:06:bf: cb:7b:f9:84:74:eb:f4:5d:4c:80:34:20:6b:bf:58:08:d0:1e: 4f:fb:ea:0b:70:48:00:64:df:50:1d:a3:a4:7f:65:8b:d2:d8: 77:da:c7:ea:1b:1f:33:e0:8e:99:71:2e:32:e6:73:4f:7a:44: c7:9f:2b:81:59:9a:2c:cb:15:9e:bf:59:fc:bb:2a:25:d4:39: 57:b0:11:ff:87:94:3e:f9:6a:37:63:d9:fb:69:1e:ce:66:5d: 09:08:8c:4f:c2:e8:71:67:49:8b:90:ff:a4:d9:be:15:fb:00: 34:bf:24:53:00:c2:20:57:38:70:65:01:d3:00:28:1d:9d:0c: 76:f0:ab:d5:77:1f:fd:7e:f1:5b:63:04:4b:24:6b:fc:4c:01: 59:02:79:af:96:b3:61:c4:88:89:7f:a7:bb:2b:6c:94:84:82: 72:77:b2:aa:d4:bf:e3:da:6d:f1:d2:90:46:62:cb:da:29:32: 0b:0a:6d:51:31:64:63:6b:d2:f5:bb:f5:5e:53:18:cb:6b:46: 4a:79:f5:ef:23:92:e2:6e:88:d6:73:25:28:bb:4f:e5:7a:fd: 17:11:dd:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8PtphNm/v9Tds3TzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA4NDAyOVoXDTI2MTIwMzA5NDAyOVowLzEtMCsGA1UEAxMk NWYyODUzNmQtZTc1YS00YWE2LThhYzctZDdkYTcxNzQ4Mzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMr+nIJN77F6XcGtNeurTmV2Lfo7XjVAgC/k ltENThC/hPCSaacJiAAipYNQ/YX03u1xrW7pHs8EoLdZHOteKHFlGCeoFUFFTEhF uPgpoDXpplPLhtgxQ/npQs6NUapG9b0GsCdDEQsDAj3pI1gT80KOMf5iLyS8h4TU R59ZJIL88FDdTBmNmPe1sK70jyTtewV47pXos2ePKfbJEn20oFx9LVJZ8/n9Lzli sV8CRPsBCvYGKS0saXb/cOVxUFnEKjgRF854A05a66IMcJ0zjcH2nlUkHcO9fcwc ap4fSlujpdu9N+uiRCW0A6Na7ryFi6PFYZZ9YwUizTmrNpmTAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf7+2b4JV03BQZn6rOHPm372L9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYTljMzQ0MjItOTI3Mi0z NmU2LWI2ODAtMTJlYWZjNjgyZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjluQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV7WihV2XbShjYGHpIlH+DZNEq5M2KBpgXWaWimBDK0uksGv8t7+YR0 6/RdTIA0IGu/WAjQHk/76gtwSABk31Ado6R/ZYvS2Hfax+obHzPgjplxLjLmc096 RMefK4FZmizLFZ6/Wfy7KiXUOVewEf+HlD75ajdj2ftpHs5mXQkIjE/C6HFnSYuQ /6TZvhX7ADS/JFMAwiBXOHBlAdMAKB2dDHbwq9V3H/1+8VtjBEska/xMAVkCea+W s2HEiIl/p7srbJSEgnJ3sqrUv+PabfHSkEZiy9opMgsKbVExZGNr0vW79V5TGMtr Rkp59e8jkuJuiNZzJSi7T+V6/RcR3RU= -----END CERTIFICATE-----Generated at Thu Sep 10 13:01:13 2026 by rpki-client