$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c89fc8b3-4203-3bab-8932-6123e3d5b894.roa File: c89fc8b3-4203-3bab-8932-6123e3d5b894.roa (raw, json) Hash identifier: +GGjB3gIw5nsuBZUkB+ZkslEXnWwGBQxbFbxhYZJe2w= Subject key identifier: 76:03:E7:B0:3D:65:8D:EF:31:6B:90:F4:C4:F5:82:A8:33:35:B8:4C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292BB6C9A29009F3CF96A00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c89fc8b3-4203-3bab-8932-6123e3d5b894.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 108.177.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:bb:6c:9a:29:00:9f:3c:f9:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=ccfe03df-f874-4e9f-8363-ee65dcd177aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:e5:3b:ba:e2:2e:e5:85:70:8a:e0:c6:15: a2:df:62:ae:ce:53:7a:6d:27:8e:f5:13:5b:7b:a9: b7:8c:71:c4:d5:4e:28:c2:d1:1e:08:8e:42:78:37: 94:a7:82:99:1b:3d:89:bb:7f:8c:ff:8d:5f:19:20: fc:8c:95:31:fe:f4:6e:d4:51:37:44:d4:63:5f:52: 7a:e5:68:2c:b0:15:26:87:ee:d2:4e:0a:a5:01:81: a7:4e:ff:a5:1e:c0:16:49:3a:ef:92:0f:ba:53:de: b2:ea:0c:22:27:06:b4:0e:41:33:a9:6a:cd:1d:3c: a9:85:0a:18:5e:cd:91:32:d7:43:85:8d:ca:9c:04: 9e:99:b9:40:53:4f:61:6c:a6:4f:67:6f:9d:53:77: 0e:fb:88:93:1b:ff:9e:c7:37:fa:73:ed:47:a2:5a: b8:f9:3b:63:eb:da:6a:5c:81:da:ca:2a:12:c8:a3: d3:97:f6:24:a8:3d:1a:1e:11:4f:8b:78:66:3a:91: 2f:bf:2d:53:34:e6:45:cd:88:17:a4:64:ac:0c:71: 68:6e:90:54:4b:10:37:f7:50:ae:de:d7:c1:21:78: 69:f9:3d:26:a6:22:d5:1b:57:8b:10:b2:aa:9b:17: 30:04:08:29:88:7e:40:63:ca:1c:dd:53:be:4f:6d: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:03:E7:B0:3D:65:8D:EF:31:6B:90:F4:C4:F5:82:A8:33:35:B8:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c89fc8b3-4203-3bab-8932-6123e3d5b894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.177.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:31:83:09:f4:29:bb:56:1d:38:c8:44:2e:51:57:9b:74:6a: a1:28:dd:e0:68:7a:af:75:9e:68:2c:9a:9d:b7:ac:7c:dd:f6: 07:bc:d6:a2:05:8a:c7:21:bb:62:98:f2:53:30:48:67:0a:c4: 6c:fb:19:3c:53:07:cf:fc:58:25:79:81:41:97:06:73:c5:6e: 73:76:fc:6f:64:6e:57:ca:cd:5c:d0:85:09:34:f9:fe:00:36: 2d:72:f6:1c:16:47:d2:37:ac:1c:9c:95:af:a0:34:53:bb:84: 34:63:55:ea:ce:6d:e6:02:34:d1:ca:e8:1c:aa:85:bd:b6:2e: 70:17:ea:66:c8:8d:db:89:90:5c:02:8d:01:cf:a3:84:20:9b: c1:58:d7:8e:b7:78:79:10:23:5d:5d:f8:b7:60:d5:d7:29:66: 13:7d:c3:25:d9:2b:36:32:3b:41:b1:54:16:40:b3:24:ff:9f: 5c:35:85:46:76:2c:b6:23:41:46:80:31:bf:ce:e3:12:b2:da: 6e:80:96:16:02:bf:21:bf:c3:19:48:7c:37:d0:52:66:7c:9f: 8d:8f:e8:31:86:1e:16:94:84:53:f3:4e:b6:76:bc:2f:88:12: 4e:94:3f:e1:7a:5b:ce:b9:3c:80:f4:65:bc:73:44:73:08:dc: b0:47:d4:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrtsmikAnzz5agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2NmZTAzZGYtZjg3NC00ZTlmLTgzNjMtZWU2NWRjZDE3N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoDlO7riLuWFcIrgxhWi32KuzlN6bSeO9RNb e6m3jHHE1U4owtEeCI5CeDeUp4KZGz2Ju3+M/41fGSD8jJUx/vRu1FE3RNRjX1J6 5WgssBUmh+7STgqlAYGnTv+lHsAWSTrvkg+6U96y6gwiJwa0DkEzqWrNHTyphQoY Xs2RMtdDhY3KnASemblAU09hbKZPZ2+dU3cO+4iTG/+exzf6c+1Holq4+Ttj69pq XIHayioSyKPTl/YkqD0aHhFPi3hmOpEvvy1TNOZFzYgXpGSsDHFobpBUSxA391Cu 3tfBIXhp+T0mpiLVG1eLELKqmxcwBAgpiH5AY8oc3VO+T22qfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYD57A9ZY3vMWuQ9MT1gqgzNbhMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYzg5ZmM4YjMtNDIwMy0z YmFiLTg5MzItNjEyM2UzZDViODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAxgwn0KbtWHTjIRC5RV5t0aqEo3eBoeq91nmgsmp23rHzd9ge81qIF ischu2KY8lMwSGcKxGz7GTxTB8/8WCV5gUGXBnPFbnN2/G9kblfKzVzQhQk0+f4A Ni1y9hwWR9I3rBycla+gNFO7hDRjVerObeYCNNHK6Byqhb22LnAX6mbIjduJkFwC jQHPo4Qgm8FY1463eHkQI11d+Ldg1dcpZhN9wyXZKzYyO0GxVBZAsyT/n1w1hUZ2 LLYjQUaAMb/O4xKy2m6AlhYCvyG/wxlIfDfQUmZ8n42P6DGGHhaUhFPzTrZ2vC+I Ek6UP+F6W865PID0ZbxzRHMI3LBH1HM= -----END CERTIFICATE-----Generated at Thu Oct 15 14:22:21 2026 by rpki-client