$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e5d3dabe-48e8-3d20-a599-3a32a7e66a51.roa File: e5d3dabe-48e8-3d20-a599-3a32a7e66a51.roa (raw, json) Hash identifier: 9SpTRYqwKr1+UK0BFvGcRRcQG9K45nmS+w5FcHqePVg= Subject key identifier: 81:37:8A:55:0E:28:2B:4A:35:BC:1F:42:FB:81:A7:26:0D:B7:2E:38 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC23AE0407FD319F810B04680 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e5d3dabe-48e8-3d20-a599-3a32a7e66a51.roa Signing time: Fri 07 Aug 2026 14:33:58 +0000 ROA not before: Fri 07 Aug 2026 14:33:58 +0000 ROA not after: Thu 05 Nov 2026 15:33:58 +0000 asID: 395954 IP address blocks: 172.255.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:3a:e0:40:7f:d3:19:f8:10:b0:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 7 14:33:58 2026 GMT Not After : Nov 5 15:33:58 2026 GMT Subject: CN=1c5e577b-3b29-4946-9041-4bb04df4d9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8c:ef:4c:8d:fc:93:f3:69:d9:1c:f5:36:0b: 13:62:86:8b:a6:47:6a:4c:4d:cb:5d:5a:9a:58:a8: f6:cf:9a:fa:eb:38:67:12:26:1e:62:02:7a:13:d0: 88:99:67:3b:22:9d:66:d1:67:bf:3e:46:0f:51:19: e2:18:a1:7c:61:db:a5:91:53:7c:82:bd:5b:94:6a: dd:cd:f4:28:cf:cf:8b:bc:9d:05:3d:bd:a6:1f:74: 5a:75:80:af:2d:05:a4:78:d7:53:2b:d5:35:df:43: 14:77:fc:df:9d:f7:30:f2:cc:c4:80:c2:a8:bc:6b: 95:d7:b3:c1:81:e9:20:59:13:2c:d5:5e:3b:f7:db: 9c:5a:8c:a6:62:b6:fd:36:b9:a9:00:5b:f1:16:59: da:3c:3b:f5:9c:72:04:af:18:e3:e1:b8:8f:85:7e: 72:c4:32:a0:fc:2e:fb:b9:b3:0a:b0:3e:78:68:37: a5:f3:29:fe:55:f5:1a:8c:c2:9b:6c:82:f0:b5:c3: c8:fa:e9:da:d1:aa:71:2d:be:e0:99:80:3a:ef:6f: 04:f0:b7:38:2a:b3:30:11:9b:8e:bb:07:ee:14:b5: fb:2f:3c:2d:0d:56:24:60:a4:82:e0:0d:18:47:6e: 91:26:29:4e:ce:b5:9b:3f:fb:39:4b:8b:fe:6d:08: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:37:8A:55:0E:28:2B:4A:35:BC:1F:42:FB:81:A7:26:0D:B7:2E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e5d3dabe-48e8-3d20-a599-3a32a7e66a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a1:e9:c9:63:4c:e5:f1:7c:09:9e:6e:ef:84:84:57:33:cf: 44:62:c7:4d:3d:fb:91:41:e2:c8:71:d9:31:06:52:54:c8:da: bd:23:27:80:f7:f9:33:e5:50:3c:76:ed:4d:2d:af:43:4c:b0: 7a:7d:e5:5e:8f:4b:a2:39:a3:e4:9f:b2:0c:d4:77:8b:63:fd: 37:d3:77:5a:80:ba:66:7e:c2:4e:af:ea:28:43:74:7a:f7:bc: c8:a0:fe:ac:f1:64:90:79:99:52:c8:20:f8:f5:f4:44:fe:f5: 75:17:41:a2:85:9a:1a:f0:16:f0:43:58:6b:ed:cd:d2:7c:87: 44:15:d3:8b:d9:b9:a5:5d:aa:49:4c:06:7a:bd:59:4f:4a:2b: 81:c0:86:cf:1a:c1:00:e5:51:14:b4:db:aa:fb:e6:14:55:6b: 20:3d:e0:12:59:20:23:d4:59:56:20:d5:75:53:26:f1:73:ec: 23:9a:db:18:48:59:0d:74:6d:5f:e4:b1:b2:1d:ac:9c:c1:40: 07:75:17:3f:3b:72:77:82:78:16:46:ce:97:f4:bd:84:53:51: 7c:42:74:a7:a2:eb:da:43:ff:37:89:99:f0:5e:e2:73:5b:8c: 2f:74:2c:25:e4:b1:23:9a:9b:46:90:e3:3f:be:db:51:96:1f: a1:3d:4a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7COuBAf9MZ+BCwRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNzE0MzM1OFoXDTI2MTEwNTE1MzM1OFowLzEtMCsGA1UEAxMk MWM1ZTU3N2ItM2IyOS00OTQ2LTkwNDEtNGJiMDRkZjRkOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYzvTI38k/Np2Rz1NgsTYoaLpkdqTE3LXVqa WKj2z5r66zhnEiYeYgJ6E9CImWc7Ip1m0We/PkYPURniGKF8YdulkVN8gr1blGrd zfQoz8+LvJ0FPb2mH3RadYCvLQWkeNdTK9U130MUd/zfnfcw8szEgMKovGuV17PB gekgWRMs1V4799ucWoymYrb9NrmpAFvxFlnaPDv1nHIErxjj4biPhX5yxDKg/C77 ubMKsD54aDel8yn+VfUajMKbbILwtcPI+una0apxLb7gmYA6728E8Lc4KrMwEZuO uwfuFLX7LzwtDVYkYKSC4A0YR26RJilOzrWbP/s5S4v+bQhIiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIE3ilUOKCtKNbwfQvuBpyYNty44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZTVkM2RhYmUtNDhlOC0z ZDIwLWE1OTktM2EzMmE3ZTY2YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrP8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEah6cljTOXxfAmebu+EhFczz0Rix009+5FB4shx2TEGUlTI2r0jJ4D3 +TPlUDx27U0tr0NMsHp95V6PS6I5o+SfsgzUd4tj/TfTd1qAumZ+wk6v6ihDdHr3 vMig/qzxZJB5mVLIIPj19ET+9XUXQaKFmhrwFvBDWGvtzdJ8h0QV04vZuaVdqklM Bnq9WU9KK4HAhs8awQDlURS026r75hRVayA94BJZICPUWVYg1XVTJvFz7COa2xhI WQ10bV/ksbIdrJzBQAd1Fz87cneCeBZGzpf0vYRTUXxCdKei69pD/zeJmfBe4nNb jC90LCXksSOam0aQ4z++21GWH6E9Sj8= -----END CERTIFICATE-----Generated at Thu Aug 27 18:19:10 2026 by rpki-client