$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ce89d3fb-8732-3aa7-8207-d3fe42c3877e.roa File: ce89d3fb-8732-3aa7-8207-d3fe42c3877e.roa (raw, json) Hash identifier: dcx5kDJSApiW603LhhYqiJKb3Z4rD4MK37bZ9SGSKL4= Subject key identifier: 31:E4:E4:5A:13:27:34:A3:BD:21:6F:98:42:91:4D:65:A2:79:A5:0F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97FBFFF38E2C07271DCAA0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ce89d3fb-8732-3aa7-8207-d3fe42c3877e.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 172.241.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fb:ff:f3:8e:2c:07:27:1d:ca:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=05624e72-5bf3-4721-bf05-87791b7c719d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:19:6e:4b:5d:35:12:d2:15:46:a5:75:64: da:02:a8:21:e9:b4:26:6f:75:c3:7e:0f:f4:2c:a0: e2:ba:44:cb:e4:09:b2:d2:24:36:f2:94:95:b5:21: ee:81:28:77:4f:3c:35:fa:3f:7d:ea:b9:48:d2:fd: 8e:de:d5:c9:b8:f3:ab:d0:c7:06:27:96:e6:03:e4: ca:f8:90:8e:2f:80:9b:15:d0:c6:1d:1b:23:aa:3b: ee:ec:ff:18:9e:a8:05:f1:cf:49:c5:04:38:81:88: 0d:64:52:c3:41:22:c2:9c:a9:ae:b2:92:30:12:30: 72:4f:2a:e3:65:55:62:e3:09:00:45:51:8c:20:59: ce:2c:20:57:0e:83:78:5b:4b:5c:1d:e6:62:c6:ec: 50:6f:5f:d9:34:d4:14:9d:f1:ff:31:4e:a5:14:42: 4e:95:00:64:86:5e:2a:7c:bc:9e:af:9c:1d:9b:f2: dc:6f:98:94:ff:53:d7:02:28:84:b1:16:6c:62:c0: 36:09:95:36:3a:ee:ab:c9:55:0c:c7:00:f3:07:f5: 5a:00:91:18:00:3d:d5:3b:75:73:87:43:45:bb:90: b6:23:32:ee:ea:10:e4:47:44:64:e8:3a:21:91:bc: 28:f5:1a:cc:4e:3c:f8:54:e8:f0:d4:e9:fe:3c:a6: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E4:E4:5A:13:27:34:A3:BD:21:6F:98:42:91:4D:65:A2:79:A5:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ce89d3fb-8732-3aa7-8207-d3fe42c3877e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:16:a3:46:e0:fd:d2:ed:83:15:2a:01:e1:bb:0a:92:71:47: c6:2e:8b:5e:06:69:a5:ef:44:f1:d2:83:66:3b:ca:94:d1:b4: c5:63:28:ab:e3:84:67:2a:6c:44:35:21:0d:ad:3c:13:c8:b7: c1:94:f3:98:91:13:9e:5e:e9:db:f2:4a:3b:3b:36:41:74:47: 91:44:8e:8e:1f:b8:02:cd:3b:5b:10:50:b6:66:a7:02:11:7a: 51:70:0e:65:92:57:8b:01:5d:d9:a1:e6:68:2f:e3:37:aa:a8: bd:dc:3f:7c:3c:eb:d2:5f:96:2d:e5:ce:5b:49:88:5e:ed:c7: f4:5d:68:84:7e:68:f0:ab:0a:ad:32:51:35:0a:6a:1a:eb:18: e4:f2:96:01:99:40:a3:50:e9:e9:f4:0f:2b:7d:b1:bd:9a:ac: 27:f6:29:09:11:78:8a:e3:cb:1f:7f:03:c0:21:df:d6:10:47: af:98:f5:da:21:56:bd:67:eb:f3:96:d9:84:1e:e7:81:87:47: 37:59:5a:82:df:67:79:45:56:fc:1a:cb:a7:7b:5f:e3:57:b9: 85:1a:82:bd:31:21:a2:33:45:5b:8b:ec:4a:f9:5e:75:c1:9c: 69:2e:47:37:85:ad:58:ac:0b:e8:ac:95:f6:71:18:58:93:ce: fb:47:5e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/v/844sBycdyqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MDU2MjRlNzItNWJmMy00NzIxLWJmMDUtODc3OTFiN2M3MTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+UZbktdNRLSFUaldWTaAqgh6bQmb3XDfg/0 LKDiukTL5Amy0iQ28pSVtSHugSh3Tzw1+j996rlI0v2O3tXJuPOr0McGJ5bmA+TK +JCOL4CbFdDGHRsjqjvu7P8YnqgF8c9JxQQ4gYgNZFLDQSLCnKmuspIwEjByTyrj ZVVi4wkARVGMIFnOLCBXDoN4W0tcHeZixuxQb1/ZNNQUnfH/MU6lFEJOlQBkhl4q fLyer5wdm/Lcb5iU/1PXAiiEsRZsYsA2CZU2Ou6ryVUMxwDzB/VaAJEYAD3VO3Vz h0NFu5C2IzLu6hDkR0Rk6Dohkbwo9RrMTjz4VOjw1On+PKajgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHk5FoTJzSjvSFvmEKRTWWieaUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvY2U4OWQzZmItODczMi0z YWE3LTgyMDctZDNmZTQyYzM4NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkWo0bg/dLtgxUqAeG7CpJxR8Yui14GaaXvRPHSg2Y7ypTRtMVjKKvj hGcqbEQ1IQ2tPBPIt8GU85iRE55e6dvySjs7NkF0R5FEjo4fuALNO1sQULZmpwIR elFwDmWSV4sBXdmh5mgv4zeqqL3cP3w869Jfli3lzltJiF7tx/RdaIR+aPCrCq0y UTUKahrrGOTylgGZQKNQ6en0Dyt9sb2arCf2KQkReIrjyx9/A8Ah39YQR6+Y9doh Vr1n6/OW2YQe54GHRzdZWoLfZ3lFVvway6d7X+NXuYUagr0xIaIzRVuL7Er5XnXB nGkuRzeFrVisC+islfZxGFiTzvtHXgE= -----END CERTIFICATE-----Generated at Wed Oct 14 18:48:32 2026 by rpki-client