$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/da7659b5-db4a-3f61-892e-9fb1cecd428d.roa File: da7659b5-db4a-3f61-892e-9fb1cecd428d.roa (raw, json) Hash identifier: 9P3sCS/tVcrMMqmGyadK7Q1AVmxjpZcHyyoAYdxe6tM= Subject key identifier: 2D:B3:78:56:D5:B4:08:E6:17:9C:3B:43:F9:5D:2E:25:36:B9:0D:E9 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC292371F5008A6CCF2F76C00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/da7659b5-db4a-3f61-892e-9fb1cecd428d.roa Signing time: Fri 07 Aug 2026 17:29:56 +0000 ROA not before: Fri 07 Aug 2026 17:29:56 +0000 ROA not after: Thu 05 Nov 2026 18:29:56 +0000 asID: 395954 IP address blocks: 147.255.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:92:37:1f:50:08:a6:cc:f2:f7:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 7 17:29:56 2026 GMT Not After : Nov 5 18:29:56 2026 GMT Subject: CN=9e537c10-b282-492f-a842-3ec939069fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:52:ec:17:85:c1:e7:8e:0e:4b:df:28:b6: 20:19:06:ef:dc:48:e8:a3:8f:c1:a3:59:da:72:85: 45:73:7f:84:08:97:bd:a4:9b:d6:83:4d:b4:a6:cd: 26:aa:bc:dc:46:88:08:c7:68:35:42:33:af:2f:d9: 0f:da:cf:c8:ae:37:43:74:ba:0a:d3:5e:a0:50:6a: e3:86:86:9f:ce:1d:82:58:4a:28:e2:bb:bd:eb:db: 71:47:00:8f:8d:d9:d5:b1:7e:6a:71:f3:20:1e:68: 1a:a9:3e:5b:7f:33:1d:6b:97:7d:b1:cf:cd:75:18: 70:b0:bc:ca:85:f8:cf:5f:88:52:20:f8:a6:da:45: 00:92:60:0e:d4:e5:16:38:d1:59:87:0f:9b:41:d0: 0c:8f:86:55:00:3b:2e:a2:8c:47:7f:34:06:cf:c8: 7f:8f:de:84:b1:59:4e:5e:bc:38:ff:ed:d6:a3:ab: 1a:da:2c:17:4a:31:10:bf:43:62:5e:41:59:48:3f: fe:9b:9f:ff:1c:3f:82:48:c3:35:87:97:67:67:e2: 2c:15:33:0b:84:2a:b0:3e:58:d2:40:8c:49:c3:d2: 36:03:cf:63:c0:4e:f7:73:8d:4d:77:00:92:ab:fe: 58:c5:23:91:30:04:c8:e9:36:7a:dc:7b:78:5e:aa: d7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B3:78:56:D5:B4:08:E6:17:9C:3B:43:F9:5D:2E:25:36:B9:0D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/da7659b5-db4a-3f61-892e-9fb1cecd428d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5c:b8:75:f9:5f:69:40:f4:9c:fd:3a:d1:43:03:a9:04:38: f8:e3:05:42:50:ad:5b:ba:e9:bb:f1:2e:19:39:39:d2:e6:0d: bf:c0:63:14:4c:57:2e:26:90:bb:87:4f:ea:48:4d:63:02:7a: 0c:94:17:52:5e:f1:cc:ee:e9:b6:ec:09:a5:87:69:3f:fc:75: eb:52:7a:9a:1e:c0:ed:06:ce:78:75:90:a6:cd:96:29:c0:4e: cf:54:7e:04:34:e9:f8:ad:19:94:70:7f:7f:89:b7:b7:4e:ec: 78:8d:e4:16:72:2c:c1:ec:6e:55:cf:30:3d:af:44:7e:15:11: 5f:23:b3:ed:62:b0:2d:23:83:fe:d1:e8:62:0b:ed:ed:bf:a0: c7:8f:70:7c:cc:05:a0:01:7e:e0:0f:eb:a2:64:47:ff:31:6d: 22:11:49:ca:6e:1c:2b:3f:11:45:ad:02:81:f8:e6:f2:fd:33: 7a:f5:0f:a0:50:a2:c5:65:76:83:24:72:45:62:e6:ee:37:1f: c4:c4:f1:b2:e4:e1:a9:7f:37:d8:74:4c:3b:9c:e8:2e:85:8b: ff:52:6f:8f:de:a3:70:6a:4e:fb:f7:44:d7:c5:7e:1d:74:89: 84:0f:8c:98:c5:bc:a1:b2:45:ff:5a:fd:e0:ad:fb:23:8f:12: 35:73:df:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CkjcfUAimzPL3bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNzE3Mjk1NloXDTI2MTEwNTE4Mjk1NlowLzEtMCsGA1UEAxMk OWU1MzdjMTAtYjI4Mi00OTJmLWE4NDItM2VjOTM5MDY5ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApphS7BeFweeODkvfKLYgGQbv3Ejoo4/Bo1na coVFc3+ECJe9pJvWg020ps0mqrzcRogIx2g1QjOvL9kP2s/IrjdDdLoK016gUGrj hoafzh2CWEoo4ru969txRwCPjdnVsX5qcfMgHmgaqT5bfzMda5d9sc/NdRhwsLzK hfjPX4hSIPim2kUAkmAO1OUWONFZhw+bQdAMj4ZVADsuooxHfzQGz8h/j96EsVlO Xrw4/+3Wo6sa2iwXSjEQv0NiXkFZSD/+m5//HD+CSMM1h5dnZ+IsFTMLhCqwPljS QIxJw9I2A89jwE73c41NdwCSq/5YxSORMATI6TZ63Ht4XqrXhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2zeFbVtAjmF5w7Q/ldLiU2uQ3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGE3NjU5YjUtZGI0YS0z ZjYxLTg5MmUtOWZiMWNlY2Q0MjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk//oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJcuHX5X2lA9Jz9OtFDA6kEOPjjBUJQrVu66bvxLhk5OdLmDb/AYxRM Vy4mkLuHT+pITWMCegyUF1Je8czu6bbsCaWHaT/8detSepoewO0Gznh1kKbNlinA Ts9UfgQ06fitGZRwf3+Jt7dO7HiN5BZyLMHsblXPMD2vRH4VEV8js+1isC0jg/7R 6GIL7e2/oMePcHzMBaABfuAP66JkR/8xbSIRScpuHCs/EUWtAoH45vL9M3r1D6BQ osVldoMkckVi5u43H8TE8bLk4al/N9h0TDuc6C6Fi/9Sb4/eo3BqTvv3RNfFfh10 iYQPjJjFvKGyRf9a/eCt+yOPEjVz33o= -----END CERTIFICATE-----Generated at Thu Aug 27 17:37:28 2026 by rpki-client