$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cda7a91c-6a30-3b60-ab81-5327d9ae0b6e.roa File: cda7a91c-6a30-3b60-ab81-5327d9ae0b6e.roa (raw, json) Hash identifier: Uh5vegplSo/lOhr/BZOscP03Ol6NnX9yacWSYdOwIVE= Subject key identifier: BD:5E:67:75:BA:EE:6B:10:AB:16:76:74:20:72:3B:B1:C3:2B:81:7A Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B73E86E3E1C0CAF4B400 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cda7a91c-6a30-3b60-ab81-5327d9ae0b6e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 394380 IP address blocks: 173.234.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b7:3e:86:e3:e1:c0:ca:f4:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=37a7faff-d494-4d63-b59a-6cbc1f004095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1a:49:df:00:17:13:73:20:52:e7:4d:22:03: 97:c7:d1:ba:e5:3b:bf:6b:83:d5:db:5b:f2:57:3a: ec:6b:10:e5:31:24:fd:f6:bf:0f:a1:79:84:40:a8: e5:52:6b:cf:bc:94:60:83:73:03:b8:2c:b1:9c:e3: 39:f4:33:d6:d6:e3:28:a2:da:5e:5a:4e:32:1f:6f: 6d:1e:31:83:3e:47:98:d6:ae:a3:47:3e:80:91:f3: e7:30:02:af:07:01:e0:26:50:87:3a:3c:45:f1:52: 29:2f:da:34:79:4a:3e:0a:20:90:8a:7b:e9:8b:36: 7b:21:73:15:59:66:f7:fd:72:b5:5c:d5:8f:f4:a4: 8d:db:8e:61:ea:06:52:e1:8c:ea:78:72:c7:db:93: 96:5e:d3:74:e9:8d:b8:22:6a:42:40:b8:2a:b9:5b: 61:26:2d:2f:b4:76:10:8d:62:a7:64:f7:2c:60:a7: a3:51:ad:5b:9d:60:21:a1:b3:03:6c:d0:62:3d:f0: 1b:93:f0:7e:53:99:26:2f:c5:31:28:ef:8d:cc:76: f0:63:80:35:b2:24:c3:ce:28:23:f1:47:de:09:3f: 06:9c:4a:ff:55:cd:a9:b9:49:4f:d5:af:f9:10:23: c7:94:06:45:6d:62:b3:4b:db:1e:58:1b:e7:1e:0a: 81:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5E:67:75:BA:EE:6B:10:AB:16:76:74:20:72:3B:B1:C3:2B:81:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cda7a91c-6a30-3b60-ab81-5327d9ae0b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9f:da:07:60:db:09:09:54:69:f9:42:45:5c:2f:6b:81:1f: 73:05:ed:6e:7e:d6:60:b6:c2:7a:53:a8:0b:a7:20:11:95:6f: fe:38:1c:b4:8c:a6:79:d3:4e:f3:86:8f:9a:d1:64:6c:45:8e: 75:43:49:2d:97:4b:77:60:34:0c:af:42:8f:61:e0:41:c3:cd: 44:df:c9:65:46:65:e7:89:27:e0:11:43:d0:4f:dd:a4:8c:8d: a2:0f:02:71:f2:ce:4e:a2:36:99:7f:e9:f5:05:c6:08:8d:3b: 36:f4:3b:b1:e4:7c:79:bb:6d:c5:76:72:c9:a0:bc:d1:7e:aa: 23:ff:d2:f9:98:0a:2b:d7:e5:70:20:94:45:e1:cd:61:07:ed: af:16:e1:00:a3:33:49:03:10:6a:92:ed:ce:31:ef:75:ca:12: d1:68:25:17:cf:c7:d0:df:90:4b:e6:e5:08:8a:12:c9:dc:c5: f6:df:94:4e:b1:b2:31:a4:5a:db:8f:e9:8c:44:17:3c:b6:b5: 22:25:cd:81:4c:57:c8:83:55:95:2f:3b:32:f5:85:60:b7:ba: 85:94:e1:7c:f1:3a:b8:20:8c:f1:99:a6:c6:4c:90:00:0b:f9: 61:9e:52:48:4c:21:5c:e2:d2:a3:17:59:9a:02:29:eb:b2:a5: 77:6e:1b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrc+huPhwMr0tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MzdhN2ZhZmYtZDQ5NC00ZDYzLWI1OWEtNmNiYzFmMDA0MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RpJ3wAXE3MgUudNIgOXx9G65Tu/a4PV21vy VzrsaxDlMST99r8PoXmEQKjlUmvPvJRgg3MDuCyxnOM59DPW1uMootpeWk4yH29t HjGDPkeY1q6jRz6AkfPnMAKvBwHgJlCHOjxF8VIpL9o0eUo+CiCQinvpizZ7IXMV WWb3/XK1XNWP9KSN245h6gZS4YzqeHLH25OWXtN06Y24ImpCQLgquVthJi0vtHYQ jWKnZPcsYKejUa1bnWAhobMDbNBiPfAbk/B+U5kmL8UxKO+NzHbwY4A1siTDzigj 8UfeCT8GnEr/Vc2puUlP1a/5ECPHlAZFbWKzS9seWBvnHgqBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1eZ3W67msQqxZ2dCByO7HDK4F6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvY2RhN2E5MWMtNmEzMC0z YjYwLWFiODEtNTMyN2Q5YWUwYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrep4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6f2gdg2wkJVGn5QkVcL2uBH3MF7W5+1mC2wnpTqAunIBGVb/44HLSM pnnTTvOGj5rRZGxFjnVDSS2XS3dgNAyvQo9h4EHDzUTfyWVGZeeJJ+ARQ9BP3aSM jaIPAnHyzk6iNpl/6fUFxgiNOzb0O7HkfHm7bcV2csmgvNF+qiP/0vmYCivX5XAg lEXhzWEH7a8W4QCjM0kDEGqS7c4x73XKEtFoJRfPx9DfkEvm5QiKEsncxfbflE6x sjGkWtuP6YxEFzy2tSIlzYFMV8iDVZUvOzL1hWC3uoWU4XzxOrggjPGZpsZMkAAL +WGeUkhMIVzi0qMXWZoCKeuypXduGyM= -----END CERTIFICATE-----Generated at Wed Oct 14 11:54:33 2026 by rpki-client