$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ae7bb4c3-ee43-3c30-8068-fd5b1ff776f0.roa File: ae7bb4c3-ee43-3c30-8068-fd5b1ff776f0.roa (raw, json) Hash identifier: kWzkl+QvQz5vtknGl5s2QQi75pLq5DHE3IRiz19NXik= Subject key identifier: 68:A2:A0:1F:30:7E:C1:AE:35:81:43:43:0A:02:16:24:9B:75:A3:58 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D62576EF923E653831E80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ae7bb4c3-ee43-3c30-8068-fd5b1ff776f0.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 173.234.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:62:57:6e:f9:23:e6:53:83:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=2f3d1f4a-8bb7-41ca-a2b1-53b8a08d6fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:36:fd:fa:3b:1c:76:00:30:a3:ce:cd:95:0c: fc:e4:36:09:85:0e:e9:dc:19:69:4f:b6:c7:d5:2b: 64:c7:31:86:ee:be:4a:d7:e4:4b:e8:d1:8f:ef:34: 7c:f8:ba:36:27:36:d4:31:60:bc:8c:ce:07:bb:77: 38:4f:1c:b6:93:eb:d7:fc:b3:13:7e:45:c5:9a:91: 11:67:cc:bf:62:44:89:b1:87:bf:ac:d3:f2:30:34: 54:d9:37:44:58:0b:54:e7:75:1b:a3:7c:10:97:62: 8e:66:68:9b:6b:fa:96:02:8a:97:50:15:fc:2f:86: 1d:2a:d1:73:35:34:a1:80:71:b1:b8:a2:1d:64:6f: e7:df:05:86:c1:fc:d0:e7:23:3a:2b:d0:a0:27:4b: 33:08:e5:35:35:83:d1:32:cc:d8:87:4f:5e:b2:c9: 21:2f:14:0b:a7:08:58:10:a9:74:98:9c:12:8b:d4: c3:3c:8d:5e:33:3f:08:60:d5:a7:4c:24:d2:87:6b: 58:05:24:08:f8:1e:61:a6:b1:30:93:43:67:5e:28: 55:10:62:8d:a1:7c:82:8d:1a:02:6c:ed:fa:97:39: 10:00:cd:10:40:fb:cb:2b:46:08:f9:4b:65:fb:45: 6f:8e:9a:81:b5:48:ef:c6:e7:74:88:c4:79:8e:dd: 80:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:A0:1F:30:7E:C1:AE:35:81:43:43:0A:02:16:24:9B:75:A3:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ae7bb4c3-ee43-3c30-8068-fd5b1ff776f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:45:77:f5:23:9f:70:68:25:41:1f:79:db:33:e8:28:e7:70: ee:12:67:40:f7:7f:e0:5b:32:85:5c:66:5c:86:65:89:79:f3: c5:63:24:7e:3b:cb:3e:ce:d1:45:f9:e8:6d:d4:a8:77:39:1b: d8:a4:dd:53:82:92:4c:0f:f1:e3:2d:b5:11:e7:91:c3:70:1f: 77:a3:c7:90:52:34:dc:56:2b:35:8d:17:62:db:e9:04:50:f9: 24:bb:eb:ae:d7:4e:3c:c7:fe:29:50:f4:0d:1a:5e:23:5f:43: 74:2a:bf:69:0d:62:4b:71:09:cc:0c:32:95:f6:1a:c7:15:7b: 61:27:d3:e8:b2:2d:f9:af:1c:3e:bb:91:2a:cd:00:dd:a7:cb: 05:45:a2:e5:a6:fc:db:38:69:cc:03:d2:0f:c1:01:1c:1e:37: 57:14:63:bd:1e:b3:8b:d3:06:f8:e0:f8:bc:9b:74:89:44:a5: 94:74:e7:3c:24:f7:4c:5f:8b:64:a7:5d:77:18:82:21:c3:61: 93:8c:13:d4:9b:60:68:58:1d:a1:02:00:51:b3:3a:0b:a8:86: 4d:df:48:cb:61:bf:66:f5:10:49:13:30:43:b3:7e:42:89:bc: 38:5e:66:ef:31:20:93:ea:fd:d3:46:d3:2e:d6:ed:36:47:22: 8a:82:41:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWJXbvkj5lODHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MmYzZDFmNGEtOGJiNy00MWNhLWEyYjEtNTNiOGEwOGQ2ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDb9+jscdgAwo87NlQz85DYJhQ7p3BlpT7bH 1StkxzGG7r5K1+RL6NGP7zR8+Lo2JzbUMWC8jM4Hu3c4Txy2k+vX/LMTfkXFmpER Z8y/YkSJsYe/rNPyMDRU2TdEWAtU53Ubo3wQl2KOZmiba/qWAoqXUBX8L4YdKtFz NTShgHGxuKIdZG/n3wWGwfzQ5yM6K9CgJ0szCOU1NYPRMszYh09esskhLxQLpwhY EKl0mJwSi9TDPI1eMz8IYNWnTCTSh2tYBSQI+B5hprEwk0NnXihVEGKNoXyCjRoC bO36lzkQAM0QQPvLK0YI+Utl+0VvjpqBtUjvxud0iMR5jt2ArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiioB8wfsGuNYFDQwoCFiSbdaNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYWU3YmI0YzMtZWU0My0z YzMwLTgwNjgtZmQ1YjFmZjc3NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrerwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFFd/Ujn3BoJUEfedsz6CjncO4SZ0D3f+BbMoVcZlyGZYl588VjJH47 yz7O0UX56G3UqHc5G9ik3VOCkkwP8eMttRHnkcNwH3ejx5BSNNxWKzWNF2Lb6QRQ +SS7667XTjzH/ilQ9A0aXiNfQ3Qqv2kNYktxCcwMMpX2GscVe2En0+iyLfmvHD67 kSrNAN2nywVFouWm/Ns4acwD0g/BARweN1cUY70es4vTBvjg+LybdIlEpZR05zwk 90xfi2SnXXcYgiHDYZOME9SbYGhYHaECAFGzOguohk3fSMthv2b1EEkTMEOzfkKJ vDheZu8xIJPq/dNG0y7W7TZHIoqCQS4= -----END CERTIFICATE-----Generated at Wed Oct 14 13:07:39 2026 by rpki-client