$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d3ec02bd-3eab-370b-8a8d-41e4cd326195.roa File: d3ec02bd-3eab-370b-8a8d-41e4cd326195.roa (raw, json) Hash identifier: 7yAsTdaMbNUllOc1imufX7EPfWWObThsddu1Kmwxxcs= Subject key identifier: A0:0E:40:DA:05:C8:60:26:DB:11:F0:71:8E:DA:10:8B:74:50:4C:C7 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF5FEEAB543628AA926C0880 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d3ec02bd-3eab-370b-8a8d-41e4cd326195.roa Signing time: Thu 06 Aug 2026 14:01:12 +0000 ROA not before: Thu 06 Aug 2026 14:01:12 +0000 ROA not after: Wed 04 Nov 2026 15:01:12 +0000 asID: 396190 IP address blocks: 108.177.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:5f:ee:ab:54:36:28:aa:92:6c:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:01:12 2026 GMT Not After : Nov 4 15:01:12 2026 GMT Subject: CN=39fd5a03-b13e-442d-a3dc-789955c7a4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:86:b7:b7:4c:41:a2:5f:67:fe:87:e5:be: 97:ff:73:52:e2:bb:18:d8:e4:71:2e:f9:54:ca:0f: dc:9a:00:7f:1b:20:7b:bd:bf:89:32:76:99:38:e3: 54:9d:79:ec:e3:db:c0:48:74:5b:b3:e4:bb:29:7a: 92:a2:e0:b7:44:8e:3f:85:59:3c:c5:6c:8f:8a:5e: fe:1c:b9:6f:fc:14:39:9d:5a:66:b2:c8:64:8d:1a: 4e:94:4f:97:43:64:b5:cc:48:78:84:4f:2d:25:b1: ff:69:2c:71:42:26:9f:59:7c:10:c1:50:93:d3:3c: e1:6f:aa:4f:2e:fe:b9:ba:c0:e4:2c:5d:ae:08:c7: 19:10:a1:d4:30:f5:74:bb:11:5f:78:4a:ab:c6:ed: 55:3b:76:f3:54:04:8e:80:8e:9d:73:26:64:da:5f: c2:99:ea:2a:a4:b5:2c:33:83:1d:c9:b7:c6:6e:bf: 31:90:87:84:94:82:1e:0f:d4:60:a4:4c:1d:04:e1: 05:35:32:f6:de:cb:66:a7:0b:46:12:12:8c:4f:4c: dc:45:f2:1d:f3:a1:d5:e8:65:3d:78:a6:17:f6:ca: 8b:b0:e0:b2:95:e1:d6:36:14:f3:d6:b2:e7:88:cb: a6:5c:85:6f:5a:76:5e:0e:92:f8:06:99:5c:f4:1f: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0E:40:DA:05:C8:60:26:DB:11:F0:71:8E:DA:10:8B:74:50:4C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d3ec02bd-3eab-370b-8a8d-41e4cd326195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.177.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4c:d0:bc:dd:78:0a:78:ed:f4:4c:99:77:5f:66:39:47:01: 5c:5d:22:d1:b4:ac:3e:39:48:15:27:ec:86:ff:2e:15:e7:aa: 08:a6:be:cb:7d:a0:14:83:27:45:88:1d:f1:aa:47:b1:e9:67: 79:e9:7d:e3:fb:9b:54:80:e6:61:68:3b:96:34:05:8d:ab:81: 0c:e4:8f:b7:6c:90:0a:59:25:5f:93:c1:10:df:ed:fc:da:4a: d1:bb:14:34:b3:82:3b:aa:98:a4:9f:1e:61:fd:ef:bf:09:e3: 8e:03:4e:69:5b:a2:f5:7d:32:96:ab:e3:31:8e:60:ae:ad:f7: bc:61:a5:76:e2:45:0f:52:b8:c8:86:69:78:30:57:26:70:e5: 71:12:90:ac:23:50:fa:b7:cc:4d:28:17:a5:e8:f0:25:e8:f1: ab:60:cd:c9:6c:c6:71:8a:39:60:57:bc:e0:ae:06:25:91:b6: ea:0c:4d:f0:15:25:ae:c9:bb:7d:e6:f5:0e:65:2d:16:18:88: 2a:e2:02:e1:f8:0e:12:c4:03:ca:f8:d4:16:ab:da:71:fa:66: 75:e2:00:50:8e:86:d4:3f:14:64:ae:d0:3a:56:5d:ed:1b:66: 65:17:9b:e7:e2:c5:08:c6:f8:5a:59:30:72:c4:ec:f6:81:12: 61:60:c3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/X+6rVDYoqpJsCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0MDExMloXDTI2MTEwNDE1MDExMlowLzEtMCsGA1UEAxMk MzlmZDVhMDMtYjEzZS00NDJkLWEzZGMtNzg5OTU1YzdhNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8WGt7dMQaJfZ/6H5b6X/3NS4rsY2ORxLvlU yg/cmgB/GyB7vb+JMnaZOONUnXns49vASHRbs+S7KXqSouC3RI4/hVk8xWyPil7+ HLlv/BQ5nVpmsshkjRpOlE+XQ2S1zEh4hE8tJbH/aSxxQiafWXwQwVCT0zzhb6pP Lv65usDkLF2uCMcZEKHUMPV0uxFfeEqrxu1VO3bzVASOgI6dcyZk2l/CmeoqpLUs M4MdybfGbr8xkIeElIIeD9RgpEwdBOEFNTL23stmpwtGEhKMT0zcRfId86HV6GU9 eKYX9sqLsOCyleHWNhTz1rLniMumXIVvWnZeDpL4Bplc9B9PbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAOQNoFyGAm2xHwcY7aEIt0UEzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDNlYzAyYmQtM2VhYi0z NzBiLThhOGQtNDFlNGNkMzI2MTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtM0LzdeAp47fRMmXdfZjlHAVxdItG0rD45SBUn7Ib/LhXnqgimvst9 oBSDJ0WIHfGqR7HpZ3npfeP7m1SA5mFoO5Y0BY2rgQzkj7dskApZJV+TwRDf7fza StG7FDSzgjuqmKSfHmH9778J444DTmlbovV9Mpar4zGOYK6t97xhpXbiRQ9SuMiG aXgwVyZw5XESkKwjUPq3zE0oF6Xo8CXo8atgzclsxnGKOWBXvOCuBiWRtuoMTfAV Ja7Ju33m9Q5lLRYYiCriAuH4DhLEA8r41Bar2nH6ZnXiAFCOhtQ/FGSu0DpWXe0b ZmUXm+fixQjG+FpZMHLE7PaBEmFgw3E= -----END CERTIFICATE-----Generated at Thu Aug 27 19:04:13 2026 by rpki-client