$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cd99cd5a-9765-3b2d-a650-aa63b852f640.roa File: cd99cd5a-9765-3b2d-a650-aa63b852f640.roa (raw, json) Hash identifier: /nfIy2D0R8RmwQGWQuFpuGaupTcYHfLqDnyI4mpBIuA= Subject key identifier: 3B:5A:0D:78:CB:CE:30:57:8A:9A:D7:F6:87:05:6D:C8:58:97:5F:D1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF399E47A336287352FC6C80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cd99cd5a-9765-3b2d-a650-aa63b852f640.roa Signing time: Thu 06 Aug 2026 12:44:00 +0000 ROA not before: Thu 06 Aug 2026 12:44:00 +0000 ROA not after: Wed 04 Nov 2026 13:44:00 +0000 asID: 396362 IP address blocks: 173.234.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:39:9e:47:a3:36:28:73:52:fc:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 12:44:00 2026 GMT Not After : Nov 4 13:44:00 2026 GMT Subject: CN=c994551a-a7fa-4f26-be0b-b531add2c1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:fa:3f:ec:e2:da:e2:48:b6:b3:1d:ab:de: 60:d0:f2:8c:06:45:7a:b3:b8:90:08:49:bf:a2:db: 8f:e6:db:12:1e:aa:10:89:cb:af:f4:89:de:13:be: 37:91:41:42:19:27:d5:82:34:51:d0:1c:fe:7b:97: 20:49:11:73:8c:ef:97:2e:b2:fa:39:3a:d0:74:f6: 83:68:3b:84:92:cc:c9:cb:ee:57:de:60:4d:7a:ba: 5c:00:03:e3:e1:d1:09:c7:b1:75:4f:96:29:e4:93: 8f:1c:c2:59:e7:c1:4d:78:96:11:c0:2c:7f:a9:08: 84:56:d5:2a:1d:f7:4f:b1:ab:f1:0c:47:fb:bb:91: 2e:d7:22:71:2e:a5:c6:b8:d4:0f:3e:61:fa:25:fd: 43:e3:7c:9d:c1:bf:26:c2:6c:c7:fb:84:10:e8:fc: 45:fd:04:e1:05:32:42:41:b2:37:41:18:89:f8:55: 13:b9:7a:f7:dd:31:01:5e:11:7f:9b:22:da:c8:42: 83:b3:a4:84:ed:37:f2:a6:27:18:5e:1a:84:6c:38: 94:fc:37:22:52:13:16:ac:bc:fc:a2:6f:86:c9:b1: 4f:10:8d:48:4f:c4:a0:34:6f:e1:96:0c:b3:b1:53: 14:54:b3:ee:ee:f1:ca:0f:cc:41:3e:df:1f:a6:68: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5A:0D:78:CB:CE:30:57:8A:9A:D7:F6:87:05:6D:C8:58:97:5F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cd99cd5a-9765-3b2d-a650-aa63b852f640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:86:59:f0:23:3d:6e:b5:4b:cb:f8:1e:11:d0:79:6e:68:8b: 0a:8a:bc:fb:2c:88:34:25:3d:bf:bb:be:68:12:0c:41:fe:20: 4e:1c:1c:97:0d:4c:f7:b9:19:2e:8d:72:4c:05:45:98:8b:17: 69:e0:0e:72:82:5d:5d:b3:e0:52:ea:95:1d:7b:78:5d:f0:35: 20:07:2f:22:40:97:b1:9a:b2:62:17:82:56:7a:79:cd:30:2b: b6:27:a4:90:a5:d7:1a:0c:93:55:c5:35:91:83:38:e4:c8:b6: 7a:25:54:06:27:c7:96:f8:d6:5f:2c:6d:d2:32:f1:49:f8:dd: 30:a5:5e:2b:62:5d:7c:41:78:df:ae:1f:4f:8a:4b:4d:3b:89: 9e:5e:76:ea:c2:d2:6a:2c:50:58:f2:ef:aa:51:7d:24:a6:19: e3:5c:47:55:3b:ed:34:2b:78:84:91:ff:4e:23:c8:33:00:34: cb:33:54:c2:db:40:57:81:ac:a1:ab:39:f7:87:f8:c8:ce:33: a9:56:a6:c7:f1:40:60:19:c5:56:56:e5:f6:6a:bd:2a:2e:b3: 25:b8:86:d0:6e:f4:fe:a5:a1:18:49:0e:ea:65:30:3a:97:4f: f9:ad:b0:52:86:65:ec:cd:24:2e:7a:ee:2b:a0:56:97:16:11: c3:d5:88:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/OZ5HozYoc1L8bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjEyNDQwMFoXDTI2MTEwNDEzNDQwMFowLzEtMCsGA1UEAxMk Yzk5NDU1MWEtYTdmYS00ZjI2LWJlMGItYjUzMWFkZDJjMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvib6P+zi2uJItrMdq95g0PKMBkV6s7iQCEm/ otuP5tsSHqoQicuv9IneE743kUFCGSfVgjRR0Bz+e5cgSRFzjO+XLrL6OTrQdPaD aDuEkszJy+5X3mBNerpcAAPj4dEJx7F1T5Yp5JOPHMJZ58FNeJYRwCx/qQiEVtUq HfdPsavxDEf7u5Eu1yJxLqXGuNQPPmH6Jf1D43ydwb8mwmzH+4QQ6PxF/QThBTJC QbI3QRiJ+FUTuXr33TEBXhF/myLayEKDs6SE7TfypicYXhqEbDiU/DciUhMWrLz8 om+GybFPEI1IT8SgNG/hlgyzsVMUVLPu7vHKD8xBPt8fpmiNywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtaDXjLzjBXiprX9ocFbchYl1/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvY2Q5OWNkNWEtOTc2NS0z YjJkLWE2NTAtYWE2M2I4NTJmNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCreroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCGWfAjPW61S8v4HhHQeW5oiwqKvPssiDQlPb+7vmgSDEH+IE4cHJcN TPe5GS6NckwFRZiLF2ngDnKCXV2z4FLqlR17eF3wNSAHLyJAl7GasmIXglZ6ec0w K7YnpJCl1xoMk1XFNZGDOOTItnolVAYnx5b41l8sbdIy8Un43TClXitiXXxBeN+u H0+KS007iZ5edurC0mosUFjy76pRfSSmGeNcR1U77TQreISR/04jyDMANMszVMLb QFeBrKGrOfeH+MjOM6lWpsfxQGAZxVZW5fZqvSousyW4htBu9P6loRhJDuplMDqX T/mtsFKGZezNJC567iugVpcWEcPViLk= -----END CERTIFICATE-----Generated at Fri Aug 14 14:14:16 2026 by rpki-client