$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cda7a91c-6a30-3b60-ab81-5327d9ae0b6e.roa File: cda7a91c-6a30-3b60-ab81-5327d9ae0b6e.roa (raw, json) Hash identifier: vwNYjVoT5u1PZGY+hrwIXOGsmUQKpUdiKPC6JcUhtbI= Subject key identifier: 9B:C5:E8:06:04:E7:87:64:1A:A4:7A:C8:17:E1:1A:B0:5E:6B:F3:AF Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF7C4C54D34AFDC81A8A68C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cda7a91c-6a30-3b60-ab81-5327d9ae0b6e.roa Signing time: Thu 06 Aug 2026 14:58:21 +0000 ROA not before: Thu 06 Aug 2026 14:58:21 +0000 ROA not after: Wed 04 Nov 2026 15:58:21 +0000 asID: 394380 IP address blocks: 173.234.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:7c:4c:54:d3:4a:fd:c8:1a:8a:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:58:21 2026 GMT Not After : Nov 4 15:58:21 2026 GMT Subject: CN=4ed37f1d-97c2-4a3f-9f75-18f52a41ebcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:ef:ed:6f:a6:61:5c:70:40:da:d5:46:f9: 0b:6e:f2:b7:cf:5e:c2:d4:81:f6:2c:ba:02:26:84: be:7b:57:a4:ca:85:af:db:33:79:bf:9d:68:8d:97: 45:48:aa:59:b2:15:26:7d:b9:6b:34:c7:03:fb:50: 87:5a:58:8a:d1:fa:ed:5f:00:42:48:dd:bc:45:ac: cb:73:e0:07:95:55:13:e7:5a:ec:f1:24:22:8b:8d: 44:a2:3f:4a:3d:21:40:a7:ec:e2:5f:91:3e:60:27: 18:6e:89:19:81:93:65:a1:99:3d:ce:4d:47:25:c9: 2c:76:1b:fb:f7:a1:2f:87:61:e1:c3:75:fc:68:b2: e4:98:c5:60:51:41:2f:b8:2a:0c:47:db:09:d2:40: e3:ef:60:1e:9f:a9:52:57:98:23:d7:80:d5:95:49: e9:1b:ee:01:b1:01:e6:35:90:cf:fb:c9:22:f3:bd: 68:bb:18:24:8a:38:29:0e:dc:99:7c:f2:b2:4b:af: 48:b9:0b:95:15:5e:f9:8b:06:ce:57:a3:48:12:4d: 08:7d:75:4a:10:9c:a8:f6:0d:a3:35:63:cd:20:02: 02:eb:f2:81:56:a0:c9:4e:89:9d:e5:10:46:cf:22: fc:a8:af:01:c6:d1:9c:14:45:df:10:57:d4:07:e2: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C5:E8:06:04:E7:87:64:1A:A4:7A:C8:17:E1:1A:B0:5E:6B:F3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cda7a91c-6a30-3b60-ab81-5327d9ae0b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:73:51:d6:f5:4f:52:9c:cf:4a:00:8f:82:f5:00:22:f3:7d: f3:fe:57:1a:4e:af:38:e8:dd:3f:16:99:74:61:ca:f6:55:d2: e7:af:32:79:25:33:f7:d4:49:5c:48:f7:a6:b9:cc:7e:11:f9: ec:74:d8:2a:d9:46:d2:ed:ec:e2:5a:ed:eb:da:9b:a2:b3:85: 7f:84:9a:39:79:89:67:8f:37:b8:f2:86:dc:31:4b:55:9e:49: 25:92:3c:0e:2c:24:6a:8e:af:2a:9f:47:86:15:d3:19:48:0c: f4:0b:fb:f5:ce:9b:d5:fd:4b:31:ed:7a:58:26:6c:64:14:3a: 32:59:91:50:43:67:20:a8:ed:cb:a6:c1:e1:46:b5:d0:dc:e3: d6:8b:56:24:35:32:62:3a:97:5b:85:f3:8e:38:c8:ae:b3:45: 96:6a:ab:17:79:9c:02:23:4b:8a:4a:d1:26:d6:fc:fc:df:7e: 88:79:48:13:e9:53:9e:30:23:96:a9:8d:94:a2:91:18:d7:82: 94:a7:9d:47:4f:36:bc:c5:57:77:ff:1a:cb:8e:0f:a2:f6:db: 9e:b0:35:50:c0:bb:97:0c:ea:fe:24:05:be:3b:91:a3:c7:6b: b4:43:fd:ae:d5:02:4e:33:93:1c:17:02:c3:8c:72:cb:ac:88: c4:a0:c5:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/fExU00r9yBqKaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0NTgyMVoXDTI2MTEwNDE1NTgyMVowLzEtMCsGA1UEAxMk NGVkMzdmMWQtOTdjMi00YTNmLTlmNzUtMThmNTJhNDFlYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKzv7W+mYVxwQNrVRvkLbvK3z17C1IH2LLoC JoS+e1ekyoWv2zN5v51ojZdFSKpZshUmfblrNMcD+1CHWliK0frtXwBCSN28RazL c+AHlVUT51rs8SQii41Eoj9KPSFAp+ziX5E+YCcYbokZgZNloZk9zk1HJcksdhv7 96Evh2Hhw3X8aLLkmMVgUUEvuCoMR9sJ0kDj72Aen6lSV5gj14DVlUnpG+4BsQHm NZDP+8ki871ouxgkijgpDtyZfPKyS69IuQuVFV75iwbOV6NIEk0IfXVKEJyo9g2j NWPNIAIC6/KBVqDJTomd5RBGzyL8qK8BxtGcFEXfEFfUB+LQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvF6AYE54dkGqR6yBfhGrBea/OvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvY2RhN2E5MWMtNmEzMC0z YjYwLWFiODEtNTMyN2Q5YWUwYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrep4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItzUdb1T1Kcz0oAj4L1ACLzffP+VxpOrzjo3T8WmXRhyvZV0uevMnkl M/fUSVxI96a5zH4R+ex02CrZRtLt7OJa7evam6KzhX+Emjl5iWePN7jyhtwxS1We SSWSPA4sJGqOryqfR4YV0xlIDPQL+/XOm9X9SzHtelgmbGQUOjJZkVBDZyCo7cum weFGtdDc49aLViQ1MmI6l1uF8444yK6zRZZqqxd5nAIjS4pK0SbW/Pzffoh5SBPp U54wI5apjZSikRjXgpSnnUdPNrzFV3f/GsuOD6L2256wNVDAu5cM6v4kBb47kaPH a7RD/a7VAk4zkxwXAsOMcsusiMSgxSM= -----END CERTIFICATE-----Generated at Thu Aug 27 18:19:06 2026 by rpki-client