$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b33af288-27b7-3e8d-966c-85c3a2272524.roa File: b33af288-27b7-3e8d-966c-85c3a2272524.roa (raw, json) Hash identifier: SYIB6QCrrFyW1Jxg/d7NkQo+QNcO7XkyfIBK8LdqZRw= Subject key identifier: F6:67:45:2A:72:48:34:9E:6E:BF:EC:61:9F:C6:CF:5E:3B:17:01:B3 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0FB61029671D6CA0572FA7C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b33af288-27b7-3e8d-966c-85c3a2272524.roa Signing time: Fri 04 Sep 2026 08:39:25 +0000 ROA not before: Fri 04 Sep 2026 08:39:25 +0000 ROA not after: Thu 03 Dec 2026 09:39:25 +0000 asID: 395954 IP address blocks: 142.91.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:b6:10:29:67:1d:6c:a0:57:2f:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 08:39:25 2026 GMT Not After : Dec 3 09:39:25 2026 GMT Subject: CN=176c6b5c-598e-4586-b984-82b16e096073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:85:38:b4:2f:25:21:ad:4d:cf:f3:c9:92: e9:6b:59:22:a1:62:f7:03:1f:1d:0b:bd:7c:69:09: e8:72:f9:eb:2a:45:9a:f0:1a:3f:d1:99:4d:11:de: 3e:5b:9f:ff:2f:25:a8:5e:75:56:c7:92:11:a5:a6: 8f:6c:db:73:ba:e6:57:4e:e8:71:35:44:39:8a:37: 97:0c:02:64:19:ce:29:e3:2c:1d:5f:c5:9a:9f:ae: ab:db:55:c4:c9:6b:2f:5e:54:6c:fc:7a:ee:fd:aa: 33:fa:32:bc:1b:68:69:be:d4:35:63:64:9b:a1:b3: da:fe:4a:bb:6c:51:38:53:81:e2:e1:c5:07:11:9e: 4f:6d:98:20:9b:2b:d9:11:23:79:dd:23:c1:7e:5d: 74:17:f8:50:b5:ab:96:04:80:ae:1a:9b:ba:49:fb: 7d:c3:19:7c:b1:c0:45:80:1a:97:26:94:89:33:d5: 82:3b:4c:27:4b:c5:27:0d:cb:97:46:fb:73:e0:76: 96:d7:42:e7:27:53:69:b2:4e:5b:c9:53:b8:bc:ce: 98:8f:0d:4b:31:64:89:15:85:1e:b1:e5:88:be:ce: 5f:76:fe:03:c3:9a:3d:90:cf:c9:25:29:51:a2:41: 63:fd:68:93:8d:e5:32:cb:a9:f2:d8:65:49:8d:68: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:67:45:2A:72:48:34:9E:6E:BF:EC:61:9F:C6:CF:5E:3B:17:01:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b33af288-27b7-3e8d-966c-85c3a2272524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 142.91.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a5:d1:fb:8f:0c:86:74:b8:45:8a:31:09:a3:0e:ed:c4:de: e6:e4:3b:73:35:c7:2b:b7:9d:8d:5e:6a:8c:ff:89:03:0f:b8: 8c:ad:8c:2c:49:85:91:9e:e9:25:8a:56:59:9b:1f:e3:5b:12: d3:b5:8a:18:0f:69:36:8f:86:d2:70:3e:b9:2b:ce:80:4f:9c: c8:c9:8a:e3:f8:c7:42:0a:a9:e8:2d:e9:04:3e:99:6d:89:9b: ae:8f:2f:02:eb:95:43:e9:39:09:58:7c:82:15:c8:2b:d8:cc: e0:e8:25:cf:61:31:c2:0e:64:fb:b6:d2:8c:f7:74:98:dc:1f: eb:9b:91:db:60:ad:de:14:bc:24:0d:5c:67:56:a3:1f:2d:43: b4:6f:df:d8:fd:70:72:25:2c:e3:e9:b8:01:2d:b3:a8:9e:3f: a6:7a:64:04:83:2c:18:a0:11:49:6b:ea:03:a9:c9:8d:09:a1: 64:2f:9d:87:42:5f:c8:a1:7c:1c:ed:1c:7d:8f:00:52:1b:6d: 01:c3:50:2e:1d:5a:71:82:3f:cf:96:6f:6c:5e:21:84:39:21: c9:ee:94:3b:7a:55:e7:9c:2e:2e:9a:cf:ba:ad:2d:6a:26:b8: 16:19:3f:e5:50:84:e7:02:ca:d4:4a:a3:39:92:bd:ef:1e:aa: b2:35:36:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8PthApZx1soFcvp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA4MzkyNVoXDTI2MTIwMzA5MzkyNVowLzEtMCsGA1UEAxMk MTc2YzZiNWMtNTk4ZS00NTg2LWI5ODQtODJiMTZlMDk2MDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt72FOLQvJSGtTc/zyZLpa1kioWL3Ax8dC718 aQnocvnrKkWa8Bo/0ZlNEd4+W5//LyWoXnVWx5IRpaaPbNtzuuZXTuhxNUQ5ijeX DAJkGc4p4ywdX8Wan66r21XEyWsvXlRs/Hru/aoz+jK8G2hpvtQ1Y2SbobPa/kq7 bFE4U4Hi4cUHEZ5PbZggmyvZESN53SPBfl10F/hQtauWBICuGpu6Sft9wxl8scBF gBqXJpSJM9WCO0wnS8UnDcuXRvtz4HaW10LnJ1Npsk5byVO4vM6Yjw1LMWSJFYUe seWIvs5fdv4Dw5o9kM/JJSlRokFj/WiTjeUyy6ny2GVJjWjXPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZnRSpySDSebr/sYZ/Gz147FwGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjMzYWYyODgtMjdiNy0z ZThkLTk2NmMtODVjM2EyMjcyNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjlsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKl0fuPDIZ0uEWKMQmjDu3E3ubkO3M1xyu3nY1eaoz/iQMPuIytjCxJ hZGe6SWKVlmbH+NbEtO1ihgPaTaPhtJwPrkrzoBPnMjJiuP4x0IKqegt6QQ+mW2J m66PLwLrlUPpOQlYfIIVyCvYzODoJc9hMcIOZPu20oz3dJjcH+ubkdtgrd4UvCQN XGdWox8tQ7Rv39j9cHIlLOPpuAEts6ieP6Z6ZASDLBigEUlr6gOpyY0JoWQvnYdC X8ihfBztHH2PAFIbbQHDUC4dWnGCP8+Wb2xeIYQ5IcnulDt6VeecLi6az7qtLWom uBYZP+VQhOcCytRKozmSve8eqrI1Nq8= -----END CERTIFICATE-----Generated at Thu Sep 10 13:01:13 2026 by rpki-client