$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c5eb7492-9781-38ed-8b52-1ea116d9c702.roa File: c5eb7492-9781-38ed-8b52-1ea116d9c702.roa (raw, json) Hash identifier: Y2vbTFUbRXsKtD9WblYABTEPfnjThGSerSVQSzu6yQE= Subject key identifier: 79:87:F9:5D:AD:9D:1C:3D:CF:84:26:45:7D:3C:CA:CB:7B:6B:F8:10 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB98166D0564C9945E1A14160 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c5eb7492-9781-38ed-8b52-1ea116d9c702.roa Signing time: Tue 04 Aug 2026 11:33:47 +0000 ROA not before: Tue 04 Aug 2026 11:33:47 +0000 ROA not after: Mon 02 Nov 2026 12:33:47 +0000 asID: 7203 IP address blocks: 147.255.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:81:66:d0:56:4c:99:45:e1:a1:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 11:33:47 2026 GMT Not After : Nov 2 12:33:47 2026 GMT Subject: CN=db58bb5e-94cd-48ef-9a74-85f7c61dad25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:31:34:d5:ce:40:34:ee:47:ab:f4:ef:26:7e: 4d:b0:85:a8:37:53:b5:86:f5:b4:4d:15:65:6e:dd: d3:24:ed:d3:5b:b4:fc:23:aa:c5:3a:33:0d:bf:7c: 05:69:d8:d3:16:c3:92:49:a0:ca:da:6f:36:c4:fd: 9f:15:a9:90:cd:3e:da:f0:09:57:69:d5:87:f1:1b: 1b:bb:3f:b9:d2:33:d1:69:eb:2d:2d:15:6b:13:48: 1f:0c:2b:47:99:c1:31:76:46:75:b6:ac:0e:d4:8b: dd:e6:76:05:ee:10:38:b4:ab:e2:ad:5e:24:2f:ad: 36:68:38:19:88:7a:0a:38:de:14:53:6e:3c:cf:d9: 3c:94:de:f4:08:f3:57:7b:26:e8:a9:ea:89:9e:93: 19:0d:47:ea:69:71:43:09:fd:68:c0:64:0b:71:78: 34:f2:7f:4a:4b:a3:05:c1:44:ea:f3:97:a8:51:21: a1:a7:1e:f5:24:2a:8a:96:93:0f:80:31:e8:81:3b: c9:4c:5b:f3:a6:d1:ff:a8:12:7f:c7:d1:3d:b1:82: c4:1d:69:ef:34:ad:ef:d7:1f:43:7a:24:8a:67:d1: 4c:9c:9c:9f:f9:e5:74:68:bd:50:ca:98:e3:b9:e2: 46:48:3b:d6:aa:40:b5:57:a1:3d:5f:af:5e:14:e0: 1c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:87:F9:5D:AD:9D:1C:3D:CF:84:26:45:7D:3C:CA:CB:7B:6B:F8:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c5eb7492-9781-38ed-8b52-1ea116d9c702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0c:90:90:b5:c1:45:39:b8:0f:67:76:04:f7:ce:84:88:06: 6c:79:ab:05:ed:34:c2:38:1f:dd:2a:4b:ad:d5:a5:74:ec:1c: 7b:82:da:90:1d:0a:c2:20:72:c3:00:b3:e7:90:04:8b:79:64: 44:62:98:ff:bf:bd:11:85:9e:a7:94:89:d1:6e:55:3c:e3:f4: 90:3d:69:96:7f:6b:58:8a:c0:93:ca:ef:b2:6f:32:30:c9:c1: a9:ef:12:4b:aa:f9:4d:48:7f:45:a2:ad:52:c7:a3:17:73:de: ff:6a:54:26:ce:cf:1d:84:15:5e:97:65:4e:8f:bc:8d:47:a1: 5d:88:3d:b8:8a:95:11:08:f0:7d:ed:25:51:16:4d:b1:ba:17: 39:b2:18:bf:01:65:60:bd:82:ac:af:8a:f8:8e:13:8b:39:be: fa:a3:0e:23:be:fb:56:8b:58:44:ce:8a:26:f8:bc:e5:3d:58: 50:e2:5b:84:c7:6f:83:73:35:6b:12:c5:39:8a:d3:db:a4:2b: 30:a3:bf:51:36:70:9a:30:89:17:64:16:42:38:cc:67:f1:cb: 3e:80:6f:5d:ee:af:5b:f2:34:46:fd:b5:1d:b8:40:6e:a5:1f: 43:84:65:c2:79:99:6f:6c:ae:f7:d5:37:3c:1d:21:fc:ee:22: 01:4c:7c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65gWbQVkyZReGhQWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDExMzM0N1oXDTI2MTEwMjEyMzM0N1owLzEtMCsGA1UEAxMk ZGI1OGJiNWUtOTRjZC00OGVmLTlhNzQtODVmN2M2MWRhZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jE01c5ANO5Hq/TvJn5NsIWoN1O1hvW0TRVl bt3TJO3TW7T8I6rFOjMNv3wFadjTFsOSSaDK2m82xP2fFamQzT7a8AlXadWH8Rsb uz+50jPRaestLRVrE0gfDCtHmcExdkZ1tqwO1Ivd5nYF7hA4tKvirV4kL602aDgZ iHoKON4UU248z9k8lN70CPNXeyboqeqJnpMZDUfqaXFDCf1owGQLcXg08n9KS6MF wUTq85eoUSGhpx71JCqKlpMPgDHogTvJTFvzptH/qBJ/x9E9sYLEHWnvNK3v1x9D eiSKZ9FMnJyf+eV0aL1QypjjueJGSDvWqkC1V6E9X69eFOAclQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmH+V2tnRw9z4QmRX08yst7a/gQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYzVlYjc0OTItOTc4MS0z OGVkLThiNTItMWVhMTE2ZDljNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk/94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4MkJC1wUU5uA9ndgT3zoSIBmx5qwXtNMI4H90qS63VpXTsHHuC2pAd CsIgcsMAs+eQBIt5ZERimP+/vRGFnqeUidFuVTzj9JA9aZZ/a1iKwJPK77JvMjDJ wanvEkuq+U1If0WirVLHoxdz3v9qVCbOzx2EFV6XZU6PvI1HoV2IPbiKlREI8H3t JVEWTbG6FzmyGL8BZWC9gqyviviOE4s5vvqjDiO++1aLWETOiib4vOU9WFDiW4TH b4NzNWsSxTmK09ukKzCjv1E2cJowiRdkFkI4zGfxyz6Ab13ur1vyNEb9tR24QG6l H0OEZcJ5mW9srvfVNzwdIfzuIgFMfNM= -----END CERTIFICATE-----Generated at Thu Aug 27 17:38:38 2026 by rpki-client