$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d47762e4-68b7-357f-b5fa-bb1ae79abcac.roa File: d47762e4-68b7-357f-b5fa-bb1ae79abcac.roa (raw, json) Hash identifier: efpaQU4qcrV8K8R8NCrB/yiNxx2U8/mdCJkHTWHI+jk= Subject key identifier: EA:11:37:59:96:05:31:FC:46:BC:9D:38:90:62:9D:F7:72:A2:1D:BE Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5E62DCD99EAB4C4BDCC66E00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d47762e4-68b7-357f-b5fa-bb1ae79abcac.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 27411 IP address blocks: 64.120.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:dc:d9:9e:ab:4c:4b:dc:c6:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=0fa2424e-5b91-4222-a444-ee02c6b3aa5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1b:3d:fa:1c:3e:fb:9c:8c:9b:3e:cf:9c:6b: f3:6c:af:3d:3f:28:f0:4f:85:e2:71:6a:1f:43:aa: 8e:70:41:1f:25:87:00:35:55:bb:49:c8:b1:72:0f: 65:c2:83:77:aa:20:58:89:d8:99:b2:ce:14:78:f8: ad:8d:c6:f4:91:eb:0c:93:9b:c4:1e:c0:f0:49:cb: 7d:de:eb:10:0d:0d:95:ce:1d:43:60:9d:8f:f4:52: 30:fb:97:ef:81:95:b1:f4:47:47:c3:61:50:d4:25: 31:6e:9b:59:5c:f7:3c:50:a1:60:ba:56:a4:38:19: b8:1e:9e:e0:0d:40:3b:d0:ae:31:df:53:e2:2d:8a: cc:34:8b:e4:c2:e2:70:62:70:cc:7c:66:cd:9e:05: e6:2b:5b:74:64:e2:f2:50:36:9a:15:73:eb:09:fb: b8:5b:6e:76:c2:6a:41:19:c7:61:36:a2:cb:fd:ec: ec:08:5e:18:da:db:be:ff:36:2b:e9:0b:e7:d3:30: b9:8f:35:b1:ae:36:7d:50:fb:6c:0d:71:47:f0:b6: 80:d5:72:86:c6:fd:79:35:83:05:98:be:09:30:b6: 1c:1d:52:66:86:7d:9b:62:a4:a3:6c:49:bb:a9:d7: a2:c1:61:8c:29:0e:cd:32:ce:9b:00:d1:ca:d4:5c: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:11:37:59:96:05:31:FC:46:BC:9D:38:90:62:9D:F7:72:A2:1D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d47762e4-68b7-357f-b5fa-bb1ae79abcac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 64.120.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b6:a2:1a:d7:1a:27:a5:f4:1b:76:3d:5d:13:af:80:66:d4: 7e:14:96:1e:1c:92:de:6f:3e:ea:12:d1:90:0d:2d:9a:3f:3b: 9e:ac:25:d8:16:ce:63:75:57:08:1c:02:e5:74:47:d6:cd:ef: 9c:6c:1b:41:96:38:fb:13:1e:61:ba:53:03:94:89:48:3c:78: b1:80:fa:e4:bd:ca:af:74:8c:8f:46:49:59:31:e3:51:a2:2d: e1:0f:89:6c:95:6c:80:00:5f:52:ee:8a:73:71:9c:71:6e:2a: d1:8e:1d:4a:49:1d:73:53:70:29:e4:86:15:ca:b8:43:8e:55: ac:a3:a7:0f:c0:6b:37:54:88:ee:04:f9:e4:a6:cf:dc:c8:2f: 2f:23:4f:2c:f7:75:87:ef:c3:77:7f:a4:86:13:7a:48:94:ea: e0:b5:ae:ad:23:5e:48:48:f0:a1:f9:c4:09:a4:f7:e0:03:3d: 77:ed:33:ed:16:bf:74:13:6d:2c:2f:73:f5:9b:95:f0:78:0b: f3:02:b9:c1:83:fe:bc:c2:50:9a:7e:9c:cb:36:ca:6e:58:7e: 60:b5:51:b0:6e:ec:60:ce:26:8c:5d:56:aa:ce:f4:22:10:f5: 44:29:6e:62:b8:f4:b0:f1:b7:51:1f:10:b8:1d:b2:b9:48:eb: 08:e9:ea:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtzZnqtMS9zGbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MGZhMjQyNGUtNWI5MS00MjIyLWE0NDQtZWUwMmM2YjNhYTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBs9+hw++5yMmz7PnGvzbK89PyjwT4XicWof Q6qOcEEfJYcANVW7Scixcg9lwoN3qiBYidiZss4UePitjcb0kesMk5vEHsDwSct9 3usQDQ2Vzh1DYJ2P9FIw+5fvgZWx9EdHw2FQ1CUxbptZXPc8UKFgulakOBm4Hp7g DUA70K4x31PiLYrMNIvkwuJwYnDMfGbNngXmK1t0ZOLyUDaaFXPrCfu4W252wmpB GcdhNqLL/ezsCF4Y2tu+/zYr6Qvn0zC5jzWxrjZ9UPtsDXFH8LaA1XKGxv15NYMF mL4JMLYcHVJmhn2bYqSjbEm7qdeiwWGMKQ7NMs6bANHK1Fzi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoRN1mWBTH8RrydOJBinfdyoh2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDQ3NzYyZTQtNjhiNy0z NTdmLWI1ZmEtYmIxYWU3OWFiY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe2ohrXGiel9Bt2PV0Tr4Bm1H4Ulh4ckt5vPuoS0ZANLZo/O56sJdgW zmN1VwgcAuV0R9bN75xsG0GWOPsTHmG6UwOUiUg8eLGA+uS9yq90jI9GSVkx41Gi LeEPiWyVbIAAX1LuinNxnHFuKtGOHUpJHXNTcCnkhhXKuEOOVayjpw/AazdUiO4E +eSmz9zILy8jTyz3dYfvw3d/pIYTekiU6uC1rq0jXkhI8KH5xAmk9+ADPXftM+0W v3QTbSwvc/WblfB4C/MCucGD/rzCUJp+nMs2ym5YfmC1UbBu7GDOJoxdVqrO9CIQ 9UQpbmK49LDxt1EfELgdsrlI6wjp6hw= -----END CERTIFICATE-----Generated at Wed Oct 14 01:58:46 2026 by rpki-client