$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b65e8532-1454-35d8-89a5-81a09f758dca.roa File: b65e8532-1454-35d8-89a5-81a09f758dca.roa (raw, json) Hash identifier: CPOXLdr6gSbmK1RwnP8Si1OVcRNGKvU8TbO7E87HSzo= Subject key identifier: F7:12:12:27:8A:35:07:3A:9B:E1:65:77:39:00:F5:BC:ED:22:B3:B1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0FA3ED845CF5921873183000 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b65e8532-1454-35d8-89a5-81a09f758dca.roa Signing time: Fri 04 Sep 2026 08:02:52 +0000 ROA not before: Fri 04 Sep 2026 08:02:52 +0000 ROA not after: Thu 03 Dec 2026 09:02:52 +0000 asID: 30633 IP address blocks: 172.241.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:a3:ed:84:5c:f5:92:18:73:18:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 08:02:52 2026 GMT Not After : Dec 3 09:02:52 2026 GMT Subject: CN=562a7cbb-77af-41de-b13d-fa7d3857b9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:18:18:e4:de:52:84:83:2f:b0:08:0b:89:d9: 5a:89:9d:f8:46:ef:d5:dd:71:31:39:c1:17:a1:73: bb:c0:23:83:ba:8f:e9:f8:93:7c:a3:bb:fb:14:4a: 91:5a:d5:0d:1f:95:fe:ee:7f:78:26:74:ae:50:84: 77:16:da:2a:53:3e:9b:e8:9a:e9:d7:18:7a:2e:02: 50:e1:85:d6:92:52:a3:09:1d:cf:35:20:20:9a:60: 8c:e3:3d:f9:ab:93:04:50:2e:45:0e:b5:25:95:95: 24:96:47:b6:e5:2a:54:a4:14:61:07:5d:4b:e3:4f: 1d:ed:ae:a2:e6:1c:31:81:f8:a0:1b:18:6f:09:08: c5:81:9c:23:73:e5:ab:e9:11:4b:5c:5e:64:5f:67: a8:99:77:2d:e5:fd:e8:5e:18:bf:93:34:71:c6:9b: 34:e5:84:6f:41:f5:d6:8a:18:5c:16:bb:c1:0a:02: 88:d6:6a:7d:c0:ed:85:22:55:e2:b4:1c:8d:33:90: a2:c2:50:3b:e0:4b:9e:70:c0:6a:ea:64:c8:c7:9f: d2:7f:6f:02:b6:f3:1e:73:ea:cc:93:47:b7:5f:df: d6:02:10:26:a1:12:23:9c:ca:b9:5c:d7:a3:16:c5: 20:3e:b1:a2:7a:50:eb:ef:f5:75:bb:d0:7b:10:61: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:12:12:27:8A:35:07:3A:9B:E1:65:77:39:00:F5:BC:ED:22:B3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b65e8532-1454-35d8-89a5-81a09f758dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fa:51:52:6d:b2:f3:be:e7:e5:99:0b:de:15:06:a1:33:54: b6:e9:df:4d:2f:d9:af:fa:07:83:a2:27:b5:a3:7a:7f:ac:da: bf:0c:26:1d:92:75:21:53:3d:fa:75:b2:3f:6f:34:18:f4:0f: 8b:ed:46:68:eb:a2:2a:8a:45:91:e5:c9:11:2c:20:a4:14:44: 40:6b:87:cc:61:50:99:c7:55:5e:38:31:c5:de:52:f5:2d:6e: b7:d3:ee:15:1c:98:1f:1e:ed:a6:dc:09:f9:ee:d4:2f:cc:db: a0:92:f7:c5:84:d1:7a:aa:1e:45:9e:e8:ff:0f:0a:a4:ce:95: 4f:e0:1e:24:c9:64:34:ea:09:7b:27:a6:35:1a:79:5c:b8:62: 53:8d:a1:9a:34:7c:ba:9b:bb:32:31:0d:d9:d1:2f:37:42:09: 81:3d:15:37:d6:d4:75:25:b6:38:e6:d4:2b:e6:d8:27:f7:4e: 3f:68:55:bf:18:04:55:e4:28:cd:99:5a:61:e5:f3:48:2b:c3: d9:39:b5:59:38:23:3e:17:28:f8:03:34:b2:29:9c:51:29:33: 6e:24:81:87:ff:d1:7a:95:f1:bc:e2:9b:5a:bc:73:4b:8f:d0: 9e:09:8c:e0:3c:68:0e:c5:2e:29:a0:fa:bb:ff:93:60:de:a9: 22:db:1c:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Po+2EXPWSGHMYMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA4MDI1MloXDTI2MTIwMzA5MDI1MlowLzEtMCsGA1UEAxMk NTYyYTdjYmItNzdhZi00MWRlLWIxM2QtZmE3ZDM4NTdiOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhgY5N5ShIMvsAgLidlaiZ34Ru/V3XExOcEX oXO7wCODuo/p+JN8o7v7FEqRWtUNH5X+7n94JnSuUIR3FtoqUz6b6Jrp1xh6LgJQ 4YXWklKjCR3PNSAgmmCM4z35q5MEUC5FDrUllZUklke25SpUpBRhB11L408d7a6i 5hwxgfigGxhvCQjFgZwjc+Wr6RFLXF5kX2eomXct5f3oXhi/kzRxxps05YRvQfXW ihhcFrvBCgKI1mp9wO2FIlXitByNM5CiwlA74EuecMBq6mTIx5/Sf28CtvMec+rM k0e3X9/WAhAmoRIjnMq5XNejFsUgPrGielDr7/V1u9B7EGEm+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcSEieKNQc6m+FldzkA9bztIrOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjY1ZTg1MzItMTQ1NC0z NWQ4LTg5YTUtODFhMDlmNzU4ZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrPHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX6UVJtsvO+5+WZC94VBqEzVLbp300v2a/6B4OiJ7Wjen+s2r8MJh2S dSFTPfp1sj9vNBj0D4vtRmjroiqKRZHlyREsIKQUREBrh8xhUJnHVV44McXeUvUt brfT7hUcmB8e7abcCfnu1C/M26CS98WE0XqqHkWe6P8PCqTOlU/gHiTJZDTqCXsn pjUaeVy4YlONoZo0fLqbuzIxDdnRLzdCCYE9FTfW1HUltjjm1Cvm2Cf3Tj9oVb8Y BFXkKM2ZWmHl80grw9k5tVk4Iz4XKPgDNLIpnFEpM24kgYf/0XqV8bzim1q8c0uP 0J4JjOA8aA7FLimg+rv/k2DeqSLbHHU= -----END CERTIFICATE-----Generated at Fri Sep 4 22:18:01 2026 by rpki-client