$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0b305f6-1317-30b9-bbe2-7ed766e92e9e.roa File: d0b305f6-1317-30b9-bbe2-7ed766e92e9e.roa (raw, json) Hash identifier: AP1bUvV0a2X/NVJSY+V2fwOuwTRTsgEibbiXPn1qXp8= Subject key identifier: E4:BF:BC:93:E3:E8:3B:7C:AB:7E:6D:95:3E:6E:31:F9:4F:FA:D1:AE Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5CFD521D347A36F29CACE180 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0b305f6-1317-30b9-bbe2-7ed766e92e9e.roa Signing time: Fri 02 Oct 2026 01:00:12 +0000 ROA not before: Fri 02 Oct 2026 01:00:12 +0000 ROA not after: Thu 31 Dec 2026 02:00:12 +0000 asID: 7203 IP address blocks: 23.108.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:fd:52:1d:34:7a:36:f2:9c:ac:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 01:00:12 2026 GMT Not After : Dec 31 02:00:12 2026 GMT Subject: CN=3295d9e0-3acd-4ac8-b3a0-94d6f67c90e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:79:da:eb:89:f6:cd:d1:e7:17:f8:43:54: 22:ab:a4:82:b7:9f:cd:84:3e:fd:35:98:de:cd:3f: 09:fc:98:7c:8d:82:72:d8:0e:98:1d:5a:9f:1e:5d: 4a:f3:50:3a:bb:7b:98:9c:31:36:98:d8:15:bc:59: 1a:3e:32:7e:7a:23:5d:bb:d6:29:01:49:c7:e8:01: 00:00:38:da:0e:7b:bb:c5:15:ee:3d:cb:8f:2f:1f: de:94:8c:f6:b2:7e:5d:f2:d6:61:f5:5d:fb:38:a1: 53:48:bb:e0:b4:3c:01:49:24:1e:31:82:1c:47:04: 16:7c:b4:37:82:45:4d:4d:4d:46:be:ba:82:d9:4a: b5:c7:68:57:82:9f:8a:43:5f:c5:5a:d9:f8:61:60: 4d:ea:03:84:3d:71:7a:bc:41:e6:6b:a5:f3:14:bf: ff:ce:ed:e3:d8:19:30:54:5d:3b:9c:63:6c:bc:d9: df:ee:bf:15:3d:5a:30:c4:63:dc:a9:52:95:e1:66: c6:4b:12:bb:ab:9a:1e:56:35:8c:2d:6d:db:59:2d: 48:d0:c3:a2:5b:65:53:44:75:74:99:5f:92:1c:64: 7e:f8:62:79:fa:18:ef:4f:eb:db:bf:0e:f2:56:e7: d2:88:13:13:95:c3:6e:81:2e:1b:87:2f:f2:3c:0f: d3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BF:BC:93:E3:E8:3B:7C:AB:7E:6D:95:3E:6E:31:F9:4F:FA:D1:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0b305f6-1317-30b9-bbe2-7ed766e92e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.108.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:60:e2:5d:48:29:13:7f:85:e0:58:a1:83:d6:76:1d:76:12: 3d:48:21:6e:9b:5f:a9:95:6b:4a:66:7b:86:0f:c5:1b:3b:b0: 04:79:0d:35:c9:75:28:ef:74:53:22:ab:fb:88:0e:b9:03:78: e4:e6:88:32:51:63:c6:f4:cd:76:a5:cd:03:58:6a:35:f5:9b: 7a:5d:9b:f9:cd:29:50:e3:a7:ff:67:87:52:c4:dd:6f:78:e7: b7:5a:c2:83:3f:91:d3:a0:7f:50:99:8f:3b:ce:39:c0:12:58: 2c:36:4f:db:e4:79:55:1c:f6:09:73:f9:fc:44:f4:c5:0f:37: 87:24:08:f5:ba:ba:54:04:91:c0:61:e6:07:78:9d:87:4c:d3: e7:55:c1:9e:2c:fa:11:66:71:43:a7:d2:fa:16:38:b6:d8:47: 50:ad:b7:3e:37:88:0e:e5:6a:26:bb:8a:f0:07:cc:a8:eb:47: b3:9a:59:6c:fc:db:e5:30:5f:64:b3:b2:c5:dd:72:21:34:85: b1:ba:d4:89:b7:4f:f9:42:95:82:2c:c7:9e:d5:4e:97:f4:52: 7c:7f:f9:ae:c2:54:8f:81:be:dc:54:b7:41:f1:4d:9d:c9:cd: 3c:40:13:3e:b5:16:ea:18:10:b3:c5:8c:13:98:67:d1:fc:85: e2:a0:1e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/VIdNHo28pys4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk MzI5NWQ5ZTAtM2FjZC00YWM4LWIzYTAtOTRkNmY2N2M5MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptR52uuJ9s3R5xf4Q1Qiq6SCt5/NhD79NZje zT8J/Jh8jYJy2A6YHVqfHl1K81A6u3uYnDE2mNgVvFkaPjJ+eiNdu9YpAUnH6AEA ADjaDnu7xRXuPcuPLx/elIz2sn5d8tZh9V37OKFTSLvgtDwBSSQeMYIcRwQWfLQ3 gkVNTU1GvrqC2Uq1x2hXgp+KQ1/FWtn4YWBN6gOEPXF6vEHma6XzFL//zu3j2Bkw VF07nGNsvNnf7r8VPVowxGPcqVKV4WbGSxK7q5oeVjWMLW3bWS1I0MOiW2VTRHV0 mV+SHGR++GJ5+hjvT+vbvw7yVufSiBMTlcNugS4bhy/yPA/TgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOS/vJPj6Dt8q35tlT5uMflP+tGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDBiMzA1ZjYtMTMxNy0z MGI5LWJiZTItN2VkNzY2ZTkyZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF2x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhg4l1IKRN/heBYoYPWdh12Ej1IIW6bX6mVa0pme4YPxRs7sAR5DTXJ dSjvdFMiq/uIDrkDeOTmiDJRY8b0zXalzQNYajX1m3pdm/nNKVDjp/9nh1LE3W94 57dawoM/kdOgf1CZjzvOOcASWCw2T9vkeVUc9glz+fxE9MUPN4ckCPW6ulQEkcBh 5gd4nYdM0+dVwZ4s+hFmcUOn0voWOLbYR1Cttz43iA7laia7ivAHzKjrR7OaWWz8 2+UwX2SzssXdciE0hbG61Im3T/lClYIsx57VTpf0Unx/+a7CVI+BvtxUt0HxTZ3J zTxAEz61FuoYELPFjBOYZ9H8heKgHnc= -----END CERTIFICATE-----Generated at Wed Oct 14 23:00:37 2026 by rpki-client