$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6177e0d-84f5-3489-aec3-bad67a2f3829.roa File: d6177e0d-84f5-3489-aec3-bad67a2f3829.roa (raw, json) Hash identifier: HBlSeqTrFisYzakOATIYv92gxqK0VwOPGsxnyTzw1Do= Subject key identifier: 8B:8E:A8:21:CE:8F:3D:B9:A4:A7:77:BA:52:D0:B2:15:DB:BA:26:25 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5CFD525B86C0B16AEB628F00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6177e0d-84f5-3489-aec3-bad67a2f3829.roa Signing time: Fri 02 Oct 2026 01:00:12 +0000 ROA not before: Fri 02 Oct 2026 01:00:12 +0000 ROA not after: Thu 31 Dec 2026 02:00:12 +0000 asID: 7203 IP address blocks: 23.108.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:fd:52:5b:86:c0:b1:6a:eb:62:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 01:00:12 2026 GMT Not After : Dec 31 02:00:12 2026 GMT Subject: CN=1fa57b5f-2041-4914-a655-9fbaab1e00fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9d:f3:8c:63:0e:50:e8:9f:fb:e0:e0:07:1f: ae:71:80:90:ba:49:8b:21:45:28:fd:f3:ca:2d:62: d3:7a:7c:6a:61:2a:a4:fc:a8:af:37:88:7c:f3:fa: e2:25:37:cd:68:80:8d:6b:94:f6:d9:9b:8d:5b:d7: 8c:fe:ee:7c:85:ed:96:18:30:28:22:a5:ab:99:0f: d7:ce:f7:ef:77:89:40:82:69:f2:44:b5:2d:9f:a7: c1:ac:12:12:5e:ef:85:47:fa:db:3b:3b:89:93:57: 11:c7:11:4a:72:a1:1e:cc:cc:51:90:8a:93:19:a4: e0:d2:f5:75:05:72:1b:3f:11:af:20:f7:56:6b:e1: 8d:d1:d8:15:4d:d4:14:d0:90:b4:c7:61:a1:29:8e: 38:be:d6:25:52:c5:cf:ca:dd:32:10:3f:2f:68:34: 4d:2c:18:98:9f:7b:01:df:aa:93:59:9a:df:35:7b: 3b:9f:fb:6b:95:0b:c7:a2:b9:49:28:7c:40:e4:29: 70:53:d3:ed:78:3d:7e:2d:17:59:46:4b:28:13:5a: a3:c8:35:a3:26:89:4d:0c:3a:72:da:53:1d:54:31: 9c:38:4d:01:d1:a7:6f:7b:81:94:ab:1d:d2:64:11: c4:1f:49:b4:8e:33:a7:b0:da:57:f3:1e:59:73:d7: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8E:A8:21:CE:8F:3D:B9:A4:A7:77:BA:52:D0:B2:15:DB:BA:26:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6177e0d-84f5-3489-aec3-bad67a2f3829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.108.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:24:0a:4c:8b:fc:95:ab:98:eb:e1:a8:bc:f5:d7:cb:7e:ce: ce:09:3d:7c:83:60:2b:3c:02:53:b3:be:ea:e3:ae:fa:40:b8: f8:64:af:8c:cb:2a:1d:e6:22:01:a0:a0:95:39:6f:88:d9:db: e4:9a:bb:1a:eb:d2:0c:40:3c:60:f3:c8:c9:84:f9:39:40:da: 4a:50:dc:06:9d:1a:81:f9:08:2e:66:53:c0:3f:b8:f5:ac:37: 79:30:1f:4a:d7:62:be:12:6c:8b:43:d4:75:19:cb:28:80:59: 7d:24:f7:46:f3:5d:11:1f:0a:2b:30:fc:26:8d:66:4d:86:1e: 31:9c:56:29:4d:01:3f:eb:f6:07:65:47:4e:13:4e:02:8a:2d: e4:6e:2d:23:1f:2e:c8:47:c3:40:a7:0b:65:2b:93:c4:18:7d: 02:67:ba:a4:71:ea:f5:05:e2:d3:9c:01:77:5c:83:d5:e1:e8: 25:49:63:bf:06:63:3c:87:0c:f1:ea:e9:47:ec:7e:f7:6d:65: 13:3c:d6:d1:a1:c0:aa:75:87:0d:bf:6d:f9:d0:23:42:50:5e: 5b:c4:bb:46:9e:3a:bf:72:59:8c:4b:6f:59:d2:46:e0:e0:e4: 03:d5:b6:62:53:68:e3:3f:14:d2:9e:e2:89:4f:11:4c:36:ad: 59:3c:43:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/VJbhsCxautijwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk MWZhNTdiNWYtMjA0MS00OTE0LWE2NTUtOWZiYWFiMWUwMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Z3zjGMOUOif++DgBx+ucYCQukmLIUUo/fPK LWLTenxqYSqk/KivN4h88/riJTfNaICNa5T22ZuNW9eM/u58he2WGDAoIqWrmQ/X zvfvd4lAgmnyRLUtn6fBrBISXu+FR/rbOzuJk1cRxxFKcqEezMxRkIqTGaTg0vV1 BXIbPxGvIPdWa+GN0dgVTdQU0JC0x2GhKY44vtYlUsXPyt0yED8vaDRNLBiYn3sB 36qTWZrfNXs7n/trlQvHorlJKHxA5ClwU9PteD1+LRdZRksoE1qjyDWjJolNDDpy 2lMdVDGcOE0B0adve4GUqx3SZBHEH0m0jjOnsNpX8x5Zc9c2GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuOqCHOjz25pKd3ulLQshXbuiYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDYxNzdlMGQtODRmNS0z NDg5LWFlYzMtYmFkNjdhMmYzODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF2y4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgkCkyL/JWrmOvhqLz118t+zs4JPXyDYCs8AlOzvurjrvpAuPhkr4zL Kh3mIgGgoJU5b4jZ2+Sauxrr0gxAPGDzyMmE+TlA2kpQ3AadGoH5CC5mU8A/uPWs N3kwH0rXYr4SbItD1HUZyyiAWX0k90bzXREfCisw/CaNZk2GHjGcVilNAT/r9gdl R04TTgKKLeRuLSMfLshHw0CnC2Urk8QYfQJnuqRx6vUF4tOcAXdcg9Xh6CVJY78G YzyHDPHq6UfsfvdtZRM81tGhwKp1hw2/bfnQI0JQXlvEu0aeOr9yWYxLb1nSRuDg 5APVtmJTaOM/FNKe4olPEUw2rVk8Qwc= -----END CERTIFICATE-----Generated at Wed Oct 14 21:21:39 2026 by rpki-client