$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/da7659b5-db4a-3f61-892e-9fb1cecd428d.roa File: da7659b5-db4a-3f61-892e-9fb1cecd428d.roa (raw, json) Hash identifier: TuIAeT88ZNocNxu4tdmmmHjPFBzu3nlWFMZBYq+JUao= Subject key identifier: 43:B3:CA:55:BC:9E:2F:F0:AF:63:A6:3E:BB:81:E3:2A:DF:8E:C9:06 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D64FE2AA0A73911154200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/da7659b5-db4a-3f61-892e-9fb1cecd428d.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 147.255.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:64:fe:2a:a0:a7:39:11:15:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=f8cf2ff7-3c80-4eeb-b240-d851f99736e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:06:1f:14:21:a1:70:5a:e9:92:47:99:2f:35: 0e:e5:54:e8:b0:2e:09:bd:93:d1:7f:93:40:44:25: b6:cc:79:b8:31:2d:03:14:83:82:a3:dd:33:46:b1: bd:58:37:45:21:5a:0d:f5:e9:57:fc:07:16:50:ac: 14:0b:b5:82:64:14:60:86:14:b7:7e:d3:a3:59:78: 75:ab:4b:52:c1:39:e4:38:74:29:5d:73:a5:5d:53: 82:70:3c:e5:13:f7:43:29:f9:66:3c:8a:41:c6:5c: 80:5d:4f:63:0b:c4:56:67:77:63:b7:9e:be:df:90: 45:e4:0f:d2:80:82:82:28:d9:1f:39:07:4b:d0:6f: 77:92:bc:84:c3:6f:ea:dc:0f:9e:dc:92:7c:9c:02: a0:36:46:f6:30:9d:8c:89:e2:00:cf:f0:a8:23:bd: 52:54:24:2b:2f:59:c5:8c:18:2f:99:f5:40:e9:80: 59:2f:5b:5a:98:2d:a3:9b:97:0e:0b:cf:16:28:09: 34:23:7f:8a:b8:70:91:80:bc:05:be:2e:b2:cb:c6: dc:f4:18:fe:7a:29:c9:47:7d:6b:76:d4:1c:ea:8b: 07:42:7e:b2:22:51:e3:cc:57:9d:a7:0c:75:2e:78: ee:2e:3d:a0:57:24:a7:4e:13:c3:83:74:bc:12:60: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B3:CA:55:BC:9E:2F:F0:AF:63:A6:3E:BB:81:E3:2A:DF:8E:C9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/da7659b5-db4a-3f61-892e-9fb1cecd428d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0f:d6:bd:ba:d5:48:a7:06:f2:da:e9:8f:5f:d3:2b:cd:bb: e7:82:82:a4:b0:81:a4:c8:eb:fb:ce:f3:5f:bb:f0:84:96:3c: 78:90:c0:34:b1:88:3e:e7:17:ce:1d:23:0b:c2:2a:75:0f:b4: 46:51:48:3d:be:73:9e:90:c3:89:24:d5:6d:da:d7:38:6e:e5: 68:b7:ca:92:24:99:40:a2:48:18:2b:df:f0:61:a4:ac:97:5f: 6b:83:22:77:0a:a3:45:2e:16:85:7b:5c:ce:28:01:05:7e:99: 13:78:5c:ba:91:f8:8c:c6:01:92:ae:e8:21:89:f3:01:fd:64: 61:f2:25:54:2d:8e:2a:8e:17:b7:c1:a5:ca:02:4d:f1:ab:50: f6:c8:33:0b:b2:55:0a:bd:de:e3:43:85:83:3c:6b:fd:3b:55: d2:72:1b:0f:4f:9c:7e:1d:3e:4b:a2:f2:35:a4:64:2b:60:c4: 67:8c:6f:76:56:21:e0:ac:bf:f9:31:8c:d4:25:5d:e1:6a:e7: bb:1a:40:c3:63:04:d2:ae:c9:16:51:42:8f:ef:08:df:fb:8f: 99:8e:87:69:e6:04:e2:9e:f2:a3:b7:56:ce:50:15:21:36:37: 7d:06:15:d1:c8:67:0a:35:b7:9d:c8:8a:68:44:26:33:36:65: ea:a2:8d:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWT+KqCnOREVQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZjhjZjJmZjctM2M4MC00ZWViLWIyNDAtZDg1MWY5OTczNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gYfFCGhcFrpkkeZLzUO5VTosC4JvZPRf5NA RCW2zHm4MS0DFIOCo90zRrG9WDdFIVoN9elX/AcWUKwUC7WCZBRghhS3ftOjWXh1 q0tSwTnkOHQpXXOlXVOCcDzlE/dDKflmPIpBxlyAXU9jC8RWZ3djt56+35BF5A/S gIKCKNkfOQdL0G93kryEw2/q3A+e3JJ8nAKgNkb2MJ2MieIAz/CoI71SVCQrL1nF jBgvmfVA6YBZL1tamC2jm5cOC88WKAk0I3+KuHCRgLwFvi6yy8bc9Bj+einJR31r dtQc6osHQn6yIlHjzFedpwx1LnjuLj2gVySnThPDg3S8EmCwNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOzylW8ni/wr2OmPruB4yrfjskGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGE3NjU5YjUtZGI0YS0z ZjYxLTg5MmUtOWZiMWNlY2Q0MjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk//oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwP1r261UinBvLa6Y9f0yvNu+eCgqSwgaTI6/vO81+78ISWPHiQwDSx iD7nF84dIwvCKnUPtEZRSD2+c56Qw4kk1W3a1zhu5Wi3ypIkmUCiSBgr3/BhpKyX X2uDIncKo0UuFoV7XM4oAQV+mRN4XLqR+IzGAZKu6CGJ8wH9ZGHyJVQtjiqOF7fB pcoCTfGrUPbIMwuyVQq93uNDhYM8a/07VdJyGw9PnH4dPkui8jWkZCtgxGeMb3ZW IeCsv/kxjNQlXeFq57saQMNjBNKuyRZRQo/vCN/7j5mOh2nmBOKe8qO3Vs5QFSE2 N30GFdHIZwo1t53IimhEJjM2ZeqijV4= -----END CERTIFICATE-----Generated at Wed Oct 14 01:59:45 2026 by rpki-client