$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bd7f0f27-cb5c-3c51-9b20-b9b5a933bcb8.roa File: bd7f0f27-cb5c-3c51-9b20-b9b5a933bcb8.roa (raw, json) Hash identifier: i3fG6mux+2YxdzqBz0AqL3FElcrvBeC6Bufkld69EK0= Subject key identifier: A2:D9:1F:AB:B4:E4:C2:90:CC:E5:19:B6:43:F7:27:F8:D0:5F:65:58 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D6248CCF527FE9F0DD040 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bd7f0f27-cb5c-3c51-9b20-b9b5a933bcb8.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 173.234.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:62:48:cc:f5:27:fe:9f:0d:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=beb6e9cc-ade2-4a1d-b41e-bd0de73797fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:42:54:75:fc:1f:1b:aa:25:35:76:1b:69: 35:b3:44:38:b9:c0:3e:22:08:32:e8:2b:0c:ca:13: e4:8b:1d:2b:d2:bc:24:6a:e8:ce:98:af:66:1e:8e: c0:aa:fd:60:2c:b1:bb:ed:2d:8d:80:84:e4:ad:dc: 5f:ae:e0:c8:85:e4:4e:6c:02:9f:57:30:84:5c:e2: a3:85:ac:f8:40:41:28:42:d2:6e:13:70:35:a5:6f: 22:4d:2e:c1:43:94:09:a5:d3:00:2f:47:4c:7f:26: 3b:8b:8c:a1:f8:9a:31:f0:20:ea:4f:92:84:84:98: f4:89:63:e0:18:14:3d:40:67:3b:60:45:c5:52:be: 65:39:23:88:de:16:af:d4:40:db:3a:d1:5c:f0:c5: 15:13:02:3a:95:91:5a:5d:8f:28:1f:4d:af:8b:9d: 1a:0f:59:84:d4:fd:0e:a1:8c:07:6b:9a:2e:9f:5f: 16:e1:63:4d:f1:bd:a9:6b:60:fe:f4:23:8e:f4:d5: 27:ee:93:78:f1:a6:ab:96:94:30:11:1c:59:cc:ab: bb:92:2f:4e:21:a8:f7:cf:04:79:cb:90:2a:41:0f: 8a:f6:08:6d:4a:6a:bd:24:1c:48:16:9e:d8:eb:95: 4e:a2:6d:a0:e8:fa:4a:a0:be:22:5c:26:3c:fb:79: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D9:1F:AB:B4:E4:C2:90:CC:E5:19:B6:43:F7:27:F8:D0:5F:65:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bd7f0f27-cb5c-3c51-9b20-b9b5a933bcb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:73:82:38:fb:de:33:c9:40:fd:11:13:e4:f0:41:5b:c8:a8: 00:20:ba:9d:82:15:db:e7:1f:4b:68:ef:38:f3:19:2a:38:53: 84:a3:53:6d:8b:b0:06:ec:ea:3c:d5:32:f0:51:b5:c4:c7:eb: 68:5f:39:c1:af:7c:f7:f7:da:8e:59:5b:2b:a4:ae:ee:d7:74: 1e:d5:3d:c1:f6:de:6b:24:40:0f:b2:4c:70:2c:de:95:d8:63: e1:a1:db:ee:56:e7:9d:81:f7:79:29:52:79:90:1d:f3:6b:3f: fe:19:47:76:26:7c:e2:a9:53:1d:14:e2:e9:a8:22:19:97:24: 25:83:4c:39:1a:b0:7d:ce:56:1e:59:bf:e9:a9:9b:c4:54:ef: fc:2c:b0:ca:6e:31:e1:77:7f:0c:fe:d1:64:9a:39:98:37:08: d5:e6:9f:8f:69:f9:ca:d2:ca:ef:b4:61:a0:2f:f7:a2:b8:d6: a9:58:e0:1a:a1:12:b6:d1:6d:45:59:95:69:ac:e8:7c:7b:ae: 7c:89:78:98:0d:cc:d2:27:1d:1b:19:93:84:00:bb:43:09:41: 22:7f:9c:22:0b:4b:c0:4a:2e:d0:37:6e:7a:a0:02:20:9a:a4: 03:a6:8a:41:5d:62:38:7d:a9:f9:d7:23:07:83:6e:c4:9b:1d: e2:7c:2a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWJIzPUn/p8N0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YmViNmU5Y2MtYWRlMi00YTFkLWI0MWUtYmQwZGU3Mzc5N2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjNCVHX8HxuqJTV2G2k1s0Q4ucA+Iggy6CsM yhPkix0r0rwkaujOmK9mHo7Aqv1gLLG77S2NgITkrdxfruDIheRObAKfVzCEXOKj haz4QEEoQtJuE3A1pW8iTS7BQ5QJpdMAL0dMfyY7i4yh+Jox8CDqT5KEhJj0iWPg GBQ9QGc7YEXFUr5lOSOI3hav1EDbOtFc8MUVEwI6lZFaXY8oH02vi50aD1mE1P0O oYwHa5oun18W4WNN8b2pa2D+9COO9NUn7pN48aarlpQwERxZzKu7ki9OIaj3zwR5 y5AqQQ+K9ghtSmq9JBxIFp7Y65VOom2g6PpKoL4iXCY8+3lOdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLZH6u05MKQzOUZtkP3J/jQX2VYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmQ3ZjBmMjctY2I1Yy0z YzUxLTliMjAtYjliNWE5MzNiY2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrercMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFzgjj73jPJQP0RE+TwQVvIqAAgup2CFdvnH0to7zjzGSo4U4SjU22L sAbs6jzVMvBRtcTH62hfOcGvfPf32o5ZWyukru7XdB7VPcH23mskQA+yTHAs3pXY Y+Gh2+5W552B93kpUnmQHfNrP/4ZR3YmfOKpUx0U4umoIhmXJCWDTDkasH3OVh5Z v+mpm8RU7/wssMpuMeF3fwz+0WSaOZg3CNXmn49p+crSyu+0YaAv96K41qlY4Bqh ErbRbUVZlWms6Hx7rnyJeJgNzNInHRsZk4QAu0MJQSJ/nCILS8BKLtA3bnqgAiCa pAOmikFdYjh9qfnXIweDbsSbHeJ8Kks= -----END CERTIFICATE-----Generated at Thu Oct 15 02:08:05 2026 by rpki-client