$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f581bafe-e509-3f05-a76e-824352a6420a.roa File: f581bafe-e509-3f05-a76e-824352a6420a.roa (raw, json) Hash identifier: Rv4ychbTDCE90YCP4lg+BpxceM54NyCPWpzhuPhxxAE= Subject key identifier: CA:C6:5B:D2:F7:08:8B:08:91:2A:FC:AA:39:CD:49:62:79:6B:BC:F1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF7B0DB1D6912481FF495F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f581bafe-e509-3f05-a76e-824352a6420a.roa Signing time: Thu 06 Aug 2026 14:55:51 +0000 ROA not before: Thu 06 Aug 2026 14:55:51 +0000 ROA not after: Wed 04 Nov 2026 15:55:51 +0000 asID: 394380 IP address blocks: 172.241.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:7b:0d:b1:d6:91:24:81:ff:49:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:55:51 2026 GMT Not After : Nov 4 15:55:51 2026 GMT Subject: CN=e24765b6-6d59-4d7e-8d73-858a2652834c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:2a:ae:67:c3:af:e6:bc:27:24:72:88:e9: 58:4e:63:d5:fe:fc:12:52:b2:7a:4a:ba:32:c1:84: 17:9e:2a:a6:b7:30:ed:58:79:2e:b1:59:66:09:c3: 44:cd:02:82:3c:3b:6e:b2:21:45:2f:df:fa:1f:2b: 70:e2:4c:ac:6c:aa:1a:41:eb:6f:e4:80:b8:7b:c6: 05:2b:b6:75:2b:ec:5f:c2:eb:0f:ea:c6:a7:d9:7e: 13:e1:ff:cb:7f:3d:12:1c:00:04:78:bc:10:5f:ff: ac:73:36:eb:9f:aa:5f:90:4b:f8:fa:26:0d:78:16: e4:0b:cb:97:d8:eb:85:d8:a5:63:3f:a7:db:86:36: eb:a8:b3:fd:93:0e:79:3a:e7:80:37:dd:cb:c5:9a: 65:71:d4:fa:e7:6c:dd:45:34:b3:9e:cb:d3:ed:4d: 10:99:60:d5:63:bf:a7:80:4f:9b:eb:e8:41:70:34: 5c:f8:f7:a7:75:61:66:78:91:6d:99:54:02:a2:22: 08:e5:8c:04:be:e2:40:88:f1:b1:99:a5:b5:79:cb: dd:c7:03:9a:58:53:7b:2f:08:5a:02:95:8c:e1:9a: 32:99:9c:7b:1e:c4:67:c7:9c:54:d1:61:6b:a2:6f: 4a:7b:ca:02:f8:e8:dd:71:9f:17:ec:25:97:18:77: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C6:5B:D2:F7:08:8B:08:91:2A:FC:AA:39:CD:49:62:79:6B:BC:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f581bafe-e509-3f05-a76e-824352a6420a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.241.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:94:75:cb:8c:7d:3e:33:0b:2c:78:f8:4a:2f:00:80:11:d0: 50:7a:e0:9e:4b:81:22:7f:a2:4b:0f:e1:69:9a:d7:bc:7e:1a: e0:6a:e4:24:2f:09:1c:0e:2b:db:6f:0c:f6:23:27:5c:e8:eb: 52:84:f9:22:53:51:7f:2c:a7:4c:88:6d:1d:0c:cd:d7:b9:b5: 8a:5b:1b:3a:96:68:49:7a:1f:5f:8d:93:21:bc:51:38:99:68: 76:78:75:bf:a1:cb:34:01:05:a4:c0:eb:38:09:58:8e:8f:12: f6:d4:6b:67:3e:86:ea:69:8f:ab:b5:c3:82:41:a8:9c:61:b5: c2:be:75:7d:d8:cb:16:2a:e6:a9:ba:96:85:12:f0:42:5c:ab: a2:8c:ba:05:a5:72:5a:5f:6b:27:b1:cd:95:a0:92:57:93:9f: 99:79:21:06:5d:04:21:f8:fc:0b:14:23:ae:1a:ab:f3:5a:37: 4e:34:3b:10:10:9f:57:e8:bf:fc:de:ad:4c:20:4e:57:0f:66: 51:4f:fb:1c:2f:1e:07:54:19:eb:06:1a:99:b2:38:5d:60:6a: 98:92:87:5a:f9:cf:d4:09:cb:2b:2e:28:1e:c5:92:a2:ab:c1: a2:e2:6c:fd:42:e2:e1:25:9b:db:bf:e5:74:8f:59:54:d4:32: 95:7d:ab:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/ew2x1pEkgf9JX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0NTU1MVoXDTI2MTEwNDE1NTU1MVowLzEtMCsGA1UEAxMk ZTI0NzY1YjYtNmQ1OS00ZDdlLThkNzMtODU4YTI2NTI4MzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstkqrmfDr+a8JyRyiOlYTmPV/vwSUrJ6Sroy wYQXniqmtzDtWHkusVlmCcNEzQKCPDtusiFFL9/6Hytw4kysbKoaQetv5IC4e8YF K7Z1K+xfwusP6san2X4T4f/Lfz0SHAAEeLwQX/+sczbrn6pfkEv4+iYNeBbkC8uX 2OuF2KVjP6fbhjbrqLP9kw55OueAN93LxZplcdT652zdRTSznsvT7U0QmWDVY7+n gE+b6+hBcDRc+PendWFmeJFtmVQCoiII5YwEvuJAiPGxmaW1ecvdxwOaWFN7Lwha ApWM4ZoymZx7HsRnx5xU0WFrom9Ke8oC+OjdcZ8X7CWXGHcweQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrGW9L3CIsIkSr8qjnNSWJ5a7zxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZjU4MWJhZmUtZTUwOS0z ZjA1LWE3NmUtODI0MzUyYTY0MjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrPEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmUdcuMfT4zCyx4+EovAIAR0FB64J5LgSJ/oksP4Wma17x+GuBq5CQv CRwOK9tvDPYjJ1zo61KE+SJTUX8sp0yIbR0Mzde5tYpbGzqWaEl6H1+NkyG8UTiZ aHZ4db+hyzQBBaTA6zgJWI6PEvbUa2c+huppj6u1w4JBqJxhtcK+dX3YyxYq5qm6 loUS8EJcq6KMugWlclpfayexzZWgkleTn5l5IQZdBCH4/AsUI64aq/NaN040OxAQ n1fov/zerUwgTlcPZlFP+xwvHgdUGesGGpmyOF1gapiSh1r5z9QJyysuKB7FkqKr waLibP1C4uElm9u/5XSPWVTUMpV9q0M= -----END CERTIFICATE-----Generated at Thu Aug 27 18:19:14 2026 by rpki-client