$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b34f3f41-6d00-388c-97db-0120d192db50.roa File: b34f3f41-6d00-388c-97db-0120d192db50.roa (raw, json) Hash identifier: 4Hox2xhkZ41X5cZmPd08PV9D1sORJMZGK1wokw66wKM= Subject key identifier: 49:8D:6E:7A:23:A9:12:6D:BA:34:A6:12:90:7F:32:70:07:43:51:16 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97FC0E13C0A04E3975AF00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b34f3f41-6d00-388c-97db-0120d192db50.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 172.241.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fc:0e:13:c0:a0:4e:39:75:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=33f6be42-4843-487b-9f05-9f905da6463a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:43:1f:68:de:c1:da:10:c8:cd:01:79:c8: 3e:a1:aa:fd:a6:d6:ea:e8:3e:58:3c:5c:df:3f:98: d9:41:78:e0:81:05:98:cf:db:ad:61:03:7d:86:c4: 69:86:67:4a:9e:52:c6:00:35:15:df:45:04:e6:e8: 07:75:4f:88:7f:d6:3e:a9:fa:51:8b:6e:b5:f8:74: eb:0a:e9:2d:24:e3:40:a5:98:3d:17:59:77:f9:e3: 1f:1b:b2:20:18:25:82:51:a0:a0:60:18:e1:b6:a0: f5:41:0a:86:25:c8:52:aa:e6:61:49:b2:93:24:29: f2:a8:a9:84:0a:fc:ca:4d:c6:36:2c:ab:b5:90:de: 8c:47:1e:80:48:78:20:59:d6:46:bb:09:01:65:ae: b4:73:22:57:08:b5:97:67:94:1f:ee:a4:c3:64:6a: 3f:d7:01:b6:51:c5:c2:05:63:9a:7c:68:18:e2:16: bd:5e:4d:46:c6:a4:f4:da:1b:60:28:ac:67:d4:1f: 57:1f:7d:dd:21:12:9d:70:61:dd:1c:1c:40:ef:ef: cc:89:06:ea:8d:2e:f8:26:20:4b:17:ba:07:dc:73: 55:e0:3c:d3:2b:8d:b2:8e:1e:ae:ff:76:0f:ac:31: 6c:a6:b7:32:5a:86:28:01:4a:50:30:e1:76:1b:e8: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8D:6E:7A:23:A9:12:6D:BA:34:A6:12:90:7F:32:70:07:43:51:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b34f3f41-6d00-388c-97db-0120d192db50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c0:b0:66:bf:14:a0:50:0d:4e:37:85:c8:7e:96:88:23:06: d2:67:47:cf:ba:29:50:d9:81:bf:69:20:47:d3:3e:ca:12:fe: 41:aa:78:b9:75:52:7d:77:fd:4d:5e:e2:50:de:26:f1:50:d2: ed:da:4f:ff:e9:44:23:20:56:64:7d:f7:13:93:cf:e1:fc:3c: 65:0e:e8:3d:3f:d7:fc:a7:75:1b:f9:89:ce:02:20:dc:51:13: 8e:5b:fa:25:c6:f4:8c:90:8a:b2:4e:5f:71:77:7a:ae:8b:1b: c3:89:62:12:02:43:83:51:19:7f:8d:b8:b6:e3:65:79:64:32: 10:af:26:89:00:86:3b:c1:41:1e:96:04:ae:56:9a:15:3f:0f: f2:39:ef:d9:e3:21:2f:b3:d8:b3:a0:3c:3d:0d:9a:2f:6c:8a: 54:90:cd:f0:07:d2:51:36:09:4d:8d:83:01:26:59:e3:54:9d: f6:87:c1:ff:9b:af:71:9c:fb:ea:b6:ad:b5:54:3f:b3:e0:2c: 31:d5:e9:e3:16:bf:45:b7:c4:c8:07:57:4a:7c:a0:ab:0b:02: d9:b5:f1:74:a1:bf:30:f2:82:be:64:a2:c0:8c:a0:ab:cc:b0: b5:d6:9f:99:20:d5:bc:dd:67:3d:4c:07:96:a5:26:71:a2:a9: b7:4a:18:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/wOE8CgTjl1rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MzNmNmJlNDItNDg0My00ODdiLTlmMDUtOWY5MDVkYTY0NjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAJDH2jewdoQyM0Becg+oar9ptbq6D5YPFzf P5jZQXjggQWYz9utYQN9hsRphmdKnlLGADUV30UE5ugHdU+If9Y+qfpRi261+HTr CuktJONApZg9F1l3+eMfG7IgGCWCUaCgYBjhtqD1QQqGJchSquZhSbKTJCnyqKmE CvzKTcY2LKu1kN6MRx6ASHggWdZGuwkBZa60cyJXCLWXZ5Qf7qTDZGo/1wG2UcXC BWOafGgY4ha9Xk1GxqT02htgKKxn1B9XH33dIRKdcGHdHBxA7+/MiQbqjS74JiBL F7oH3HNV4DzTK42yjh6u/3YPrDFsprcyWoYoAUpQMOF2G+glSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmNbnojqRJtujSmEpB/MnAHQ1EWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjM0ZjNmNDEtNmQwMC0z ODhjLTk3ZGItMDEyMGQxOTJkYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjAsGa/FKBQDU43hch+logjBtJnR8+6KVDZgb9pIEfTPsoS/kGqeLl1 Un13/U1e4lDeJvFQ0u3aT//pRCMgVmR99xOTz+H8PGUO6D0/1/yndRv5ic4CINxR E45b+iXG9IyQirJOX3F3eq6LG8OJYhICQ4NRGX+NuLbjZXlkMhCvJokAhjvBQR6W BK5WmhU/D/I579njIS+z2LOgPD0Nmi9silSQzfAH0lE2CU2NgwEmWeNUnfaHwf+b r3Gc++q2rbVUP7PgLDHV6eMWv0W3xMgHV0p8oKsLAtm18XShvzDygr5kosCMoKvM sLXWn5kg1bzdZz1MB5alJnGiqbdKGMM= -----END CERTIFICATE-----Generated at Wed Oct 14 17:12:40 2026 by rpki-client