$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e5d3dabe-48e8-3d20-a599-3a32a7e66a51.roa File: e5d3dabe-48e8-3d20-a599-3a32a7e66a51.roa (raw, json) Hash identifier: G1VcT7/8T5rvKB/fI3aZfviFD/H/E8P1xBJZIkIXb4k= Subject key identifier: C9:87:15:96:44:FE:E3:3B:F3:6D:9F:54:13:AE:BF:08:FA:35:64:DD Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F655D6149787357803B34AEC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e5d3dabe-48e8-3d20-a599-3a32a7e66a51.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 172.255.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:61:49:78:73:57:80:3b:34:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=d18b5a63-a885-4943-aa99-44f24c49acfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:04:40:6f:ec:75:ed:52:51:c7:ad:35:c9: 47:2c:e4:c6:73:70:68:b2:f1:16:b8:65:98:88:fa: c8:6e:3a:68:66:92:1f:4e:4f:87:4c:de:40:a8:98: 1a:0b:03:21:df:0d:85:d8:b5:2c:c8:e2:06:4a:cf: 24:a6:fa:b4:11:1d:76:1a:58:a8:ed:cb:b7:c9:17: eb:68:c7:31:b1:32:77:bb:48:ba:2a:f4:ca:08:6b: 27:99:4b:83:e5:f6:08:62:42:9e:0a:88:39:8c:62: ff:d0:11:bc:6b:bd:45:5a:c6:dd:6c:48:a8:ad:8a: 3e:ea:19:89:f0:fb:a8:e1:11:1b:85:b7:a7:10:81: 44:4f:12:a7:12:81:4d:91:5b:d9:bd:01:95:25:d3: 12:4b:b7:2f:13:d9:06:a8:53:5b:d3:14:dc:57:9d: 77:a5:e5:02:61:9a:6e:5b:f6:77:ea:e5:fc:96:38: 1f:df:c9:9f:aa:57:03:cf:bc:93:14:32:32:1d:e2: 91:38:5b:46:1a:8e:c6:44:c4:46:09:d0:cd:c7:6c: 76:81:ed:19:19:81:c1:c2:5d:70:ef:9c:5d:b4:f9: 58:42:dd:ee:da:1f:58:ef:62:b9:f4:5d:f9:0c:2e: 5f:b7:c1:b8:b0:92:96:34:ee:ea:aa:7b:88:7e:e8: 63:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:87:15:96:44:FE:E3:3B:F3:6D:9F:54:13:AE:BF:08:FA:35:64:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e5d3dabe-48e8-3d20-a599-3a32a7e66a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:85:f9:a3:32:ea:e0:27:f3:74:73:0f:fd:01:6d:56:8e:d4: b7:69:a9:ad:06:b7:52:9a:8c:b1:ee:93:79:62:5c:0b:aa:16: cd:ca:6d:ce:32:f4:34:33:95:06:22:df:5c:61:62:21:48:cc: 4b:e2:48:a6:e2:2f:9a:7a:f3:d0:e5:f4:06:32:95:e7:d7:14: 16:c5:c7:31:6f:ef:ae:5e:02:50:7f:91:6a:57:9a:b8:08:35: 15:b4:72:41:4c:3d:9d:75:ea:e2:75:a9:53:3a:67:d6:8e:95: ce:24:dc:ad:05:70:bc:88:5e:24:a3:57:02:98:56:07:6f:dc: bb:e5:48:3c:10:e5:d8:c1:0e:f6:c5:a2:c2:9b:c7:3a:4a:60: 46:21:8e:0c:4e:82:a1:95:42:68:73:35:91:67:b7:2b:49:ee: e5:69:e4:43:5a:a5:f9:97:79:51:88:fa:42:c2:dd:19:e0:b4: fa:ae:48:4c:24:2e:fe:e0:4b:be:b6:81:29:40:17:28:a7:81: 87:4b:57:35:b7:ee:10:f8:e1:20:91:a9:c9:00:8a:1c:51:7d: 8f:a1:23:8b:43:49:3e:f6:ca:c9:c8:db:77:b1:9f:a8:d9:64: 6b:9b:12:fd:22:2c:dd:5c:84:a2:60:3e:b6:ba:06:20:0c:dc: 15:d8:ec:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWFJeHNXgDs0rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZDE4YjVhNjMtYTg4NS00OTQzLWFhOTktNDRmMjRjNDlhY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+MEQG/sde1SUcetNclHLOTGc3BosvEWuGWY iPrIbjpoZpIfTk+HTN5AqJgaCwMh3w2F2LUsyOIGSs8kpvq0ER12Glio7cu3yRfr aMcxsTJ3u0i6KvTKCGsnmUuD5fYIYkKeCog5jGL/0BG8a71FWsbdbEiorYo+6hmJ 8Puo4REbhbenEIFETxKnEoFNkVvZvQGVJdMSS7cvE9kGqFNb0xTcV513peUCYZpu W/Z36uX8ljgf38mfqlcDz7yTFDIyHeKROFtGGo7GRMRGCdDNx2x2ge0ZGYHBwl1w 75xdtPlYQt3u2h9Y72K59F35DC5ft8G4sJKWNO7qqnuIfuhjkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmHFZZE/uM7822fVBOuvwj6NWTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZTVkM2RhYmUtNDhlOC0z ZDIwLWE1OTktM2EzMmE3ZTY2YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrP8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaF+aMy6uAn83RzD/0BbVaO1Ldpqa0Gt1KajLHuk3liXAuqFs3Kbc4y 9DQzlQYi31xhYiFIzEviSKbiL5p689Dl9AYylefXFBbFxzFv765eAlB/kWpXmrgI NRW0ckFMPZ116uJ1qVM6Z9aOlc4k3K0FcLyIXiSjVwKYVgdv3LvlSDwQ5djBDvbF osKbxzpKYEYhjgxOgqGVQmhzNZFntytJ7uVp5ENapfmXeVGI+kLC3RngtPquSEwk Lv7gS762gSlAFyingYdLVzW37hD44SCRqckAihxRfY+hI4tDST72ysnI23exn6jZ ZGubEv0iLN1chKJgPra6BiAM3BXY7LQ= -----END CERTIFICATE-----Generated at Wed Oct 14 02:00:03 2026 by rpki-client