$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b043ba99-5bb1-3568-89df-027e89886d9d.roa File: b043ba99-5bb1-3568-89df-027e89886d9d.roa (raw, json) Hash identifier: +IFq1s3pu1Cft39SfSczgjvgq+HVIcP6QXxX7k1/wSw= Subject key identifier: 0C:1F:FD:21:FE:36:27:C2:41:79:7F:18:B1:6E:97:41:78:D6:3A:91 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D6135F7947C925794B800 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b043ba99-5bb1-3568-89df-027e89886d9d.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 172.255.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:61:35:f7:94:7c:92:57:94:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=9f3f2f8f-9841-4802-823b-89954884fdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:4b:c6:97:94:5b:fd:44:d8:59:09:d6:0c: 81:df:cf:1b:8f:a8:0b:f1:73:61:96:ad:10:91:d4: f4:62:c8:23:95:24:3c:84:20:f3:be:78:a6:a9:8e: d4:7d:b4:0e:d4:80:e8:5d:d7:b5:2d:61:db:65:b7: cd:d4:37:d8:aa:8c:f2:dd:f9:a7:4e:55:cd:d0:da: c8:ee:dc:ea:03:78:d8:a8:c5:bb:9f:61:b3:98:4b: c4:72:64:36:fd:0b:59:be:54:a6:b6:ea:56:94:45: 08:1b:f5:00:c0:b7:49:d0:ca:db:d6:a3:3f:88:cb: 61:84:73:70:7f:46:61:e2:2a:77:81:7f:bd:6e:6b: c0:4e:60:a5:8c:f4:39:29:5f:0b:75:19:5f:d9:42: 3d:d4:11:87:52:e8:22:d8:3d:47:bf:3d:af:78:32: 70:14:fd:4f:2a:82:eb:1f:21:9c:81:6d:f7:81:cb: 90:16:9d:af:76:21:3e:46:44:86:02:c3:4a:2d:2f: 17:10:59:95:bb:0a:0e:c3:13:2f:91:fb:3c:10:7d: bd:9e:55:f5:61:8f:85:35:38:d5:1c:54:7d:ed:b0: fa:2d:40:3f:cd:51:a8:8b:a2:d9:08:d5:97:79:4e: 25:44:48:af:d3:5d:09:f9:d6:d3:5a:8c:30:59:05: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1F:FD:21:FE:36:27:C2:41:79:7F:18:B1:6E:97:41:78:D6:3A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b043ba99-5bb1-3568-89df-027e89886d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b2:c5:7d:c3:5e:06:f9:e3:e0:6b:57:04:03:48:3a:7c:62: 11:4b:d7:18:83:a5:25:09:bb:47:63:3f:f7:80:40:70:00:f5: 59:c2:e3:a9:df:04:40:18:fc:a4:83:de:78:e5:d9:e0:6b:fc: 03:0a:33:ed:a7:4a:05:dd:33:6a:ea:26:3a:e2:31:6e:fc:91: 88:e7:f4:fd:fb:89:44:70:c0:3e:05:82:c2:7f:e0:5b:32:52: 57:81:71:1c:6e:8c:6b:41:5d:1d:24:21:64:71:1b:6e:10:b7: 8c:5d:40:e0:23:5c:d1:6d:4e:44:9a:d6:39:a9:54:c6:72:0e: f4:a4:e7:58:03:4f:46:eb:1f:ac:72:eb:68:82:46:b4:7f:e7: b2:a8:e1:ae:aa:a5:e9:c4:05:ee:fc:aa:fe:cc:31:f3:76:61: 51:3a:65:a2:6c:9b:a1:64:8d:b6:47:57:8f:cd:68:ac:3e:fa: 6c:b0:14:0c:49:cd:99:f7:08:28:fb:56:4a:6e:2a:3f:e6:cc: fe:a4:13:61:68:a7:b8:14:29:6c:7d:17:1b:4d:c1:9b:e1:84: e3:1a:2e:60:f2:60:10:32:f9:f2:14:c5:e3:a3:0c:2f:e1:01: 6f:19:70:2b:f1:f7:4e:57:7c:0c:fb:ec:52:a2:c1:02:2f:35: 02:6e:ba:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWE195R8kleUuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OWYzZjJmOGYtOTg0MS00ODAyLTgyM2ItODk5NTQ4ODRmZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5dLxpeUW/1E2FkJ1gyB388bj6gL8XNhlq0Q kdT0YsgjlSQ8hCDzvnimqY7UfbQO1IDoXde1LWHbZbfN1DfYqozy3fmnTlXN0NrI 7tzqA3jYqMW7n2GzmEvEcmQ2/QtZvlSmtupWlEUIG/UAwLdJ0Mrb1qM/iMthhHNw f0Zh4ip3gX+9bmvATmCljPQ5KV8LdRlf2UI91BGHUugi2D1Hvz2veDJwFP1PKoLr HyGcgW33gcuQFp2vdiE+RkSGAsNKLS8XEFmVuwoOwxMvkfs8EH29nlX1YY+FNTjV HFR97bD6LUA/zVGoi6LZCNWXeU4lREiv010J+dbTWowwWQW8dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwf/SH+NifCQXl/GLFul0F41jqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjA0M2JhOTktNWJiMS0z NTY4LTg5ZGYtMDI3ZTg5ODg2ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrP+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACyxX3DXgb54+BrVwQDSDp8YhFL1xiDpSUJu0djP/eAQHAA9VnC46nf BEAY/KSD3njl2eBr/AMKM+2nSgXdM2rqJjriMW78kYjn9P37iURwwD4FgsJ/4Fsy UleBcRxujGtBXR0kIWRxG24Qt4xdQOAjXNFtTkSa1jmpVMZyDvSk51gDT0brH6xy 62iCRrR/57Ko4a6qpenEBe78qv7MMfN2YVE6ZaJsm6FkjbZHV4/NaKw++mywFAxJ zZn3CCj7VkpuKj/mzP6kE2Fop7gUKWx9FxtNwZvhhOMaLmDyYBAy+fIUxeOjDC/h AW8ZcCvx905XfAz77FKiwQIvNQJuuoc= -----END CERTIFICATE-----Generated at Wed Oct 14 20:31:58 2026 by rpki-client