$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d076c1c7-a3b8-33c8-a459-41e23bb9d082.roa File: d076c1c7-a3b8-33c8-a459-41e23bb9d082.roa (raw, json) Hash identifier: C2DqQYbmXJIv9jQvEplw/dtk60ZyibbsdP5kQs1j5yo= Subject key identifier: 33:69:7E:1F:85:72:48:CD:7A:26:D5:DE:27:06:71:3B:21:E9:08:35 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D6535743BC1BEC05AEDC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d076c1c7-a3b8-33c8-a459-41e23bb9d082.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 147.255.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:65:35:74:3b:c1:be:c0:5a:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=f669049f-5d6e-4409-a40b-e1e0f680b60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:00:d5:94:14:67:65:1c:eb:e9:73:da:2d: 0f:c9:e8:45:82:09:0b:5b:13:f6:cd:62:27:71:24: ea:d6:b6:2b:7d:28:19:44:e7:9d:96:84:9b:9f:53: a6:62:5d:dd:5e:f4:76:28:58:18:9e:6e:fb:69:33: e0:5d:80:45:ef:5b:7c:b4:73:cb:8a:3e:8d:49:13: 71:dd:0b:9d:a8:31:bc:5e:f5:d6:fb:f0:9f:d9:5c: cd:7b:c4:8d:56:bc:76:fe:96:e7:24:22:91:3f:ce: 0d:1e:b4:7b:4c:7a:fa:c4:c6:05:95:3f:70:4d:70: 4e:ad:de:45:6c:57:83:1b:77:96:8f:f8:2f:ba:22: 20:b7:d3:61:69:81:7a:81:cb:06:35:a9:c8:f0:99: cf:a0:70:4c:04:cc:1a:79:d9:97:e3:c5:0f:df:9a: 6a:48:ac:06:57:35:01:4f:87:88:f7:2f:7e:28:d8: af:b4:8b:53:fb:02:7a:b6:c2:51:94:a0:cc:f8:a8: fe:27:6d:af:88:41:20:fa:bd:8f:c4:24:64:e4:c6: de:ba:35:e4:11:86:09:5c:9a:fe:d3:27:f3:6a:bd: c0:75:2c:73:36:0c:9b:ec:ea:90:a4:0a:a7:91:52: 2e:6a:c6:e8:2a:e7:1b:c3:7d:84:a7:ee:1d:02:ca: 92:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:69:7E:1F:85:72:48:CD:7A:26:D5:DE:27:06:71:3B:21:E9:08:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d076c1c7-a3b8-33c8-a459-41e23bb9d082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1e:b3:cc:4a:1c:27:97:4a:34:d2:f0:14:2b:80:72:91:65: a2:74:03:d8:95:a9:2a:56:81:f4:dc:d5:3f:ad:e8:bd:ca:e3: a3:8b:2f:e7:be:e2:4c:0d:c5:3c:37:1f:35:81:d7:87:03:b6: ef:62:e6:f7:2e:c2:cc:c7:d4:a6:0f:d9:db:f2:97:62:3c:3a: ae:e6:e9:05:99:41:87:00:2a:f0:46:b2:6d:ff:3c:c6:64:c2: 53:5b:4a:67:9e:b7:1b:c9:49:b2:8e:c7:c9:85:09:ca:80:84: ce:be:8d:0b:e8:4b:e2:f7:f7:80:2c:de:ac:ce:e8:5b:8f:ab: 6c:18:a7:4c:f9:a5:4f:ce:11:ed:7c:29:05:a1:9e:83:fb:31: d0:69:a4:d1:44:8b:e2:c5:cc:b4:0c:d2:d9:30:aa:08:e0:fb: 45:55:2e:26:79:4e:98:82:0d:f5:de:fe:c2:b3:30:ba:9d:c5: 87:01:89:a6:99:48:0d:77:d0:ec:5c:8b:f4:aa:4b:dc:24:7f: 46:ff:b8:73:76:6e:8d:fc:81:81:2b:e9:e0:f8:02:5b:e7:22: 40:3a:8c:d6:cb:87:d4:5f:14:fc:bd:e8:a0:6b:4f:6d:60:67: 0a:3d:fc:f2:14:82:19:69:9b:64:8d:cd:88:c6:16:37:75:b3: 56:be:2b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWU1dDvBvsBa7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZjY2OTA0OWYtNWQ2ZS00NDA5LWE0MGItZTFlMGY2ODBiNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0cA1ZQUZ2Uc6+lz2i0PyehFggkLWxP2zWIn cSTq1rYrfSgZROedloSbn1OmYl3dXvR2KFgYnm77aTPgXYBF71t8tHPLij6NSRNx 3QudqDG8XvXW+/Cf2VzNe8SNVrx2/pbnJCKRP84NHrR7THr6xMYFlT9wTXBOrd5F bFeDG3eWj/gvuiIgt9NhaYF6gcsGNanI8JnPoHBMBMwaedmX48UP35pqSKwGVzUB T4eI9y9+KNivtItT+wJ6tsJRlKDM+Kj+J22viEEg+r2PxCRk5MbeujXkEYYJXJr+ 0yfzar3AdSxzNgyb7OqQpAqnkVIuasboKucbw32Ep+4dAsqSaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNpfh+FckjNeibV3icGcTsh6Qg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDA3NmMxYzctYTNiOC0z M2M4LWE0NTktNDFlMjNiYjlkMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk/9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMes8xKHCeXSjTS8BQrgHKRZaJ0A9iVqSpWgfTc1T+t6L3K46OLL+e+ 4kwNxTw3HzWB14cDtu9i5vcuwszH1KYP2dvyl2I8Oq7m6QWZQYcAKvBGsm3/PMZk wlNbSmeetxvJSbKOx8mFCcqAhM6+jQvoS+L394As3qzO6FuPq2wYp0z5pU/OEe18 KQWhnoP7MdBppNFEi+LFzLQM0tkwqgjg+0VVLiZ5TpiCDfXe/sKzMLqdxYcBiaaZ SA130Oxci/SqS9wkf0b/uHN2bo38gYEr6eD4AlvnIkA6jNbLh9RfFPy96KBrT21g Zwo9/PIUghlpm2SNzYjGFjd1s1a+K1s= -----END CERTIFICATE-----Generated at Wed Oct 14 18:48:42 2026 by rpki-client