$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e4b2873b-7584-3efc-bdba-50361ce111ba.roa File: e4b2873b-7584-3efc-bdba-50361ce111ba.roa (raw, json) Hash identifier: 9EDC59VyZT5H9im2yEavblglrX/aPb2wXdX31ElP6ew= Subject key identifier: 48:84:18:CD:C6:CC:1A:23:51:81:5C:48:79:5B:85:6E:A1:4B:94:DF Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5E62DBB9B8E4ADB417948548 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e4b2873b-7584-3efc-bdba-50361ce111ba.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 27411 IP address blocks: 108.62.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:db:b9:b8:e4:ad:b4:17:94:85:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=c016e94a-df7b-4150-8cfc-c5980bb5304a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:09:14:24:1a:13:46:7c:3a:78:24:4a:13:44: a5:b8:6f:22:e6:5d:84:f7:61:f6:53:66:e3:b6:5f: 49:25:02:06:dd:85:77:15:01:76:99:62:2f:d7:1c: f8:8c:61:b5:32:6f:50:ff:3f:3a:52:09:18:26:04: d2:7a:10:d2:00:33:fd:8d:30:4a:36:e2:38:66:51: ba:47:b1:5b:fb:52:f0:73:04:97:f4:5e:99:58:23: c8:da:e7:c0:ed:64:53:78:e1:27:14:2b:c2:e0:57: 0c:8d:dc:9d:ef:9a:e5:26:eb:1b:b5:ce:41:f3:90: 87:21:e8:c4:b3:9d:97:4a:29:85:43:93:0d:1f:af: 2b:7c:9f:78:32:12:61:c7:d5:8f:c3:90:10:9b:5c: 13:76:0a:00:ec:86:d5:d3:2d:ba:a1:bf:a3:46:b1: 5f:41:e9:53:ba:04:c7:1a:42:ab:a2:d1:d1:54:33: 16:d1:8e:53:76:ea:1c:ea:68:9d:11:ae:a8:43:39: cc:09:6b:27:f1:68:32:e7:fb:48:b0:b5:da:c8:6a: a0:99:0a:5e:92:f3:b2:06:2c:69:10:56:5b:78:cb: 16:44:18:31:da:8c:f0:22:53:48:dc:bb:34:8a:ee: ee:8b:44:f9:7e:ce:a0:09:e7:67:f5:2a:16:41:32: 4e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:84:18:CD:C6:CC:1A:23:51:81:5C:48:79:5B:85:6E:A1:4B:94:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e4b2873b-7584-3efc-bdba-50361ce111ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e2:66:64:30:b4:a5:b8:37:ed:4c:99:72:8c:1a:fe:cf:b8: f5:07:20:df:92:8b:33:50:d1:d8:38:5b:d5:ce:97:ab:10:06: e9:08:11:c1:c1:48:f7:03:57:6c:75:89:b3:d3:2e:39:e5:ad: b0:07:82:49:e3:72:8e:25:74:7c:2c:de:42:6d:df:1d:09:4c: 20:ca:7e:23:de:83:cf:40:da:f9:d5:5d:c3:76:f0:e1:c3:70: 11:13:54:ab:20:fb:b2:25:7a:fa:bc:73:84:93:fd:df:0e:77: af:07:96:f0:ef:d6:a5:d9:ce:48:ae:cf:60:ab:ad:9f:61:3b: b9:9f:c9:e3:29:89:b7:31:81:9e:1c:b0:03:16:98:88:5e:08: 5f:34:e2:38:3f:05:e8:36:a1:a7:58:5d:4a:94:1c:bc:15:8c: 56:d7:6c:07:75:23:a4:d8:4e:b2:1c:30:9c:3b:c4:e2:59:6a: 6d:3a:8c:99:02:f0:3d:ce:3b:1a:f2:2b:7b:7f:e5:00:7a:25: 7d:60:57:7a:56:2b:42:d0:78:5e:6a:b6:28:71:26:df:c5:cf: 80:bc:9a:62:1f:97:3d:4f:52:10:17:3d:8a:89:a9:a4:37:29: e9:19:ef:d3:c2:6a:e7:8a:58:c3:88:9b:9a:8d:8f:86:e2:d3: 39:f6:85:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtu5uOSttBeUhUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YzAxNmU5NGEtZGY3Yi00MTUwLThjZmMtYzU5ODBiYjUzMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQkUJBoTRnw6eCRKE0SluG8i5l2E92H2U2bj tl9JJQIG3YV3FQF2mWIv1xz4jGG1Mm9Q/z86UgkYJgTSehDSADP9jTBKNuI4ZlG6 R7Fb+1LwcwSX9F6ZWCPI2ufA7WRTeOEnFCvC4FcMjdyd75rlJusbtc5B85CHIejE s52XSimFQ5MNH68rfJ94MhJhx9WPw5AQm1wTdgoA7IbV0y26ob+jRrFfQelTugTH GkKrotHRVDMW0Y5Tduoc6midEa6oQznMCWsn8Wgy5/tIsLXayGqgmQpekvOyBixp EFZbeMsWRBgx2ozwIlNI3Ls0iu7ui0T5fs6gCedn9SoWQTJO6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiEGM3GzBojUYFcSHlbhW6hS5TfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZTRiMjg3M2ItNzU4NC0z ZWZjLWJkYmEtNTAzNjFjZTExMWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbD4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGziZmQwtKW4N+1MmXKMGv7PuPUHIN+SizNQ0dg4W9XOl6sQBukIEcHB SPcDV2x1ibPTLjnlrbAHgknjco4ldHws3kJt3x0JTCDKfiPeg89A2vnVXcN28OHD cBETVKsg+7Ilevq8c4ST/d8Od68HlvDv1qXZzkiuz2CrrZ9hO7mfyeMpibcxgZ4c sAMWmIheCF804jg/Beg2oadYXUqUHLwVjFbXbAd1I6TYTrIcMJw7xOJZam06jJkC 8D3OOxryK3t/5QB6JX1gV3pWK0LQeF5qtihxJt/Fz4C8mmIflz1PUhAXPYqJqaQ3 KekZ79PCaueKWMOIm5qNj4bi0zn2hWg= -----END CERTIFICATE-----Generated at Tue Oct 13 16:01:59 2026 by rpki-client