$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0b305f6-1317-30b9-bbe2-7ed766e92e9e.roa File: d0b305f6-1317-30b9-bbe2-7ed766e92e9e.roa (raw, json) Hash identifier: 7d1T+DGxNaQMycjKszC7PQamygZL0gPqFq1UsvBefTc= Subject key identifier: 33:32:27:29:A0:BF:24:81:19:E2:E7:F4:BE:D5:0E:2C:74:72:18:F2 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB9C21335BD1CE3CC7D2C97A0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0b305f6-1317-30b9-bbe2-7ed766e92e9e.roa Signing time: Tue 04 Aug 2026 13:44:06 +0000 ROA not before: Tue 04 Aug 2026 13:44:06 +0000 ROA not after: Mon 02 Nov 2026 14:44:06 +0000 asID: 7203 IP address blocks: 23.108.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:c2:13:35:bd:1c:e3:cc:7d:2c:97:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 13:44:06 2026 GMT Not After : Nov 2 14:44:06 2026 GMT Subject: CN=5a64d3b7-6aab-43c7-9974-c8f6f837f5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:2a:ae:9f:d5:c7:fa:14:80:bd:f0:27:63: d7:22:df:50:7e:80:2c:e3:bf:10:77:fd:ac:0e:05: ca:81:90:e2:7f:ee:68:4e:15:57:00:29:3b:b1:19: 09:04:07:10:da:f2:fe:5b:9b:ae:5b:f8:a3:de:bf: 38:d2:0c:06:b5:22:c4:95:86:c4:ab:8e:75:d0:d4: c0:32:04:6b:c2:d5:a7:8b:9e:d2:df:87:ab:de:cc: e6:c6:a8:19:97:08:a5:41:a7:c1:cd:aa:8d:b5:c5: 63:51:a3:a1:23:7c:be:86:52:ae:3e:f1:e0:3f:c9: 05:fa:37:d8:e0:fc:0e:5c:40:65:b8:b3:f1:dd:fe: cb:1c:58:5c:f4:db:92:4b:b5:6f:e2:89:3d:fb:f8: e8:9a:ef:eb:cd:97:49:80:46:cf:06:34:1f:4c:cb: c4:ee:28:49:0a:1b:a0:4c:9b:1f:57:64:6e:25:10: 5a:08:e2:df:e0:a3:05:70:ca:6d:5c:20:5a:70:0b: cc:3f:49:60:fd:7e:d1:22:b6:bd:30:b8:53:17:cb: 88:76:d4:98:f0:4a:b7:e7:6c:f2:6b:1e:a9:98:ea: 35:c5:47:f0:95:76:11:94:3e:44:f2:df:c4:c1:c2: 3b:c5:95:a4:de:88:07:e3:83:d7:30:aa:fd:5c:1f: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:32:27:29:A0:BF:24:81:19:E2:E7:F4:BE:D5:0E:2C:74:72:18:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0b305f6-1317-30b9-bbe2-7ed766e92e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.108.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:62:4c:50:db:5a:30:95:c5:6c:61:9b:dd:df:b8:02:99:ed: c9:98:58:3b:f6:7a:89:f3:20:8a:c9:92:77:6b:86:14:c0:dc: a5:0b:60:dd:3e:c7:33:f4:c1:40:2f:2e:c7:35:45:ef:7d:c8: ae:88:aa:6b:47:9f:ca:4c:72:7f:a3:c1:f0:bc:5a:f0:da:b8: c5:9b:5b:e8:87:cd:5f:04:ef:72:b9:49:db:65:ab:c1:f2:5e: 67:9b:16:cd:a8:e8:5b:ed:39:dc:fa:66:b7:e5:8f:10:a6:82: d1:2e:6a:10:15:45:c1:e6:c2:f9:b6:90:b8:be:0f:a9:d2:68: 51:26:7c:34:31:83:d5:1c:e3:e2:2b:6e:bd:d9:ad:b3:e1:8f: 02:76:03:21:73:53:70:65:06:2b:f7:88:1e:8a:7c:77:2e:69: 5a:b7:89:6b:63:8a:05:20:95:a5:ed:a3:29:d3:50:49:ae:87: b0:71:a5:f1:18:d5:a5:a3:a0:26:ae:1a:4e:76:fb:56:2d:fb: a2:ab:30:02:7a:d7:27:20:bb:19:d6:03:84:dc:32:af:15:6d: a3:ca:a6:0e:0c:78:1a:05:31:ae:7d:4c:ce:37:81:2b:a8:06: 04:30:de:89:48:07:96:c8:7e:e0:5c:d8:57:7e:2e:04:4d:7f: 5e:cd:53:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65whM1vRzjzH0sl6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDEzNDQwNloXDTI2MTEwMjE0NDQwNlowLzEtMCsGA1UEAxMk NWE2NGQzYjctNmFhYi00M2M3LTk5NzQtYzhmNmY4MzdmNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/8qrp/Vx/oUgL3wJ2PXIt9QfoAs478Qd/2s DgXKgZDif+5oThVXACk7sRkJBAcQ2vL+W5uuW/ij3r840gwGtSLElYbEq4510NTA MgRrwtWni57S34er3szmxqgZlwilQafBzaqNtcVjUaOhI3y+hlKuPvHgP8kF+jfY 4PwOXEBluLPx3f7LHFhc9NuSS7Vv4ok9+/jomu/rzZdJgEbPBjQfTMvE7ihJChug TJsfV2RuJRBaCOLf4KMFcMptXCBacAvMP0lg/X7RIra9MLhTF8uIdtSY8Eq352zy ax6pmOo1xUfwlXYRlD5E8t/EwcI7xZWk3ogH44PXMKr9XB/VAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMyJymgvySBGeLn9L7VDix0chjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDBiMzA1ZjYtMTMxNy0z MGI5LWJiZTItN2VkNzY2ZTkyZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF2x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1iTFDbWjCVxWxhm93fuAKZ7cmYWDv2eonzIIrJkndrhhTA3KULYN0+ xzP0wUAvLsc1Re99yK6IqmtHn8pMcn+jwfC8WvDauMWbW+iHzV8E73K5Sdtlq8Hy XmebFs2o6FvtOdz6ZrfljxCmgtEuahAVRcHmwvm2kLi+D6nSaFEmfDQxg9Uc4+Ir br3ZrbPhjwJ2AyFzU3BlBiv3iB6KfHcuaVq3iWtjigUglaXtoynTUEmuh7BxpfEY 1aWjoCauGk52+1Yt+6KrMAJ61ycguxnWA4TcMq8VbaPKpg4MeBoFMa59TM43gSuo BgQw3olIB5bIfuBc2Fd+LgRNf17NU8k= -----END CERTIFICATE-----Generated at Thu Aug 27 17:38:25 2026 by rpki-client