$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f933342e-d52f-38e3-8003-b8f8ea3f2eed.roa File: f933342e-d52f-38e3-8003-b8f8ea3f2eed.roa (raw, json) Hash identifier: CZ2tz/p4WH1DDxaTLjOGLmdkXPOl11sAzK/pL0F98Ig= Subject key identifier: 38:3E:AC:88:0C:55:3C:D5:09:29:C2:44:8D:73:FC:F4:0A:F5:84:96 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC03E9ED63ABD0B36A460BCC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f933342e-d52f-38e3-8003-b8f8ea3f2eed.roa Signing time: Thu 06 Aug 2026 21:29:53 +0000 ROA not before: Thu 06 Aug 2026 21:29:53 +0000 ROA not after: Wed 04 Nov 2026 22:29:53 +0000 asID: 395954 IP address blocks: 108.177.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:3e:9e:d6:3a:bd:0b:36:a4:60:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 21:29:53 2026 GMT Not After : Nov 4 22:29:53 2026 GMT Subject: CN=e8905c56-6e0e-444f-a754-812a84a1d36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:43:a1:e9:c8:bd:76:45:56:d7:79:c4:45: 8f:6c:68:fb:e4:26:9d:74:26:cf:76:95:df:63:5f: 1b:56:8c:80:da:41:f3:fa:f3:0d:6d:c4:a4:c8:3f: 9e:ba:ff:42:84:36:9d:16:74:1f:93:4f:d9:7f:73: 0f:b5:84:d9:b4:5c:a8:f2:79:31:61:79:57:ff:4b: e0:6e:dd:cb:68:05:c6:6d:67:72:6e:42:bf:c5:91: 56:f2:0b:05:7e:de:c6:4a:c9:db:5b:ea:d1:80:48: ad:86:a1:23:c4:92:85:2d:92:39:21:23:ce:e2:4b: 0a:8b:57:f5:83:c5:1d:d8:23:82:b9:a3:c2:d5:4e: a6:75:51:6c:ed:90:0b:fc:36:1e:ac:9d:b2:f9:60: 13:52:c9:f9:cb:81:ec:09:24:a8:86:d7:fe:46:93: a7:6b:1d:28:73:fd:42:5f:d8:a0:8f:9b:6e:76:b3: c6:72:19:84:f8:73:6c:0a:b5:76:bf:15:3c:75:78: ff:76:f4:20:44:42:97:4c:92:5d:7b:64:58:36:97: 9c:23:84:be:64:da:fc:cd:cd:a0:1f:24:ec:aa:ad: af:bf:32:9e:27:20:dd:6f:b5:4f:83:ad:40:4d:67: 02:fd:36:eb:aa:ab:b5:de:a8:15:f7:87:36:c0:44: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3E:AC:88:0C:55:3C:D5:09:29:C2:44:8D:73:FC:F4:0A:F5:84:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f933342e-d52f-38e3-8003-b8f8ea3f2eed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.177.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:98:36:41:d8:96:ef:00:62:d8:34:99:38:bd:dc:31:0d:2a: e1:c7:9c:e6:b6:8c:1b:1f:ba:28:36:31:3b:2d:77:02:47:07: 9a:dd:17:b0:db:5b:6c:ca:42:11:80:92:97:f3:cc:3e:31:28: 0f:6e:98:ce:85:ca:16:4e:da:5d:e2:91:81:c3:e2:93:f8:f8: e4:e0:ac:5c:eb:3e:eb:85:59:0f:3a:1a:25:8f:f6:da:e6:8f: f8:97:71:9f:88:fe:fe:88:95:df:5e:52:f6:00:2f:66:2c:85: d9:9f:73:e0:15:70:c5:32:c5:7d:4a:63:0d:9a:d5:0d:39:90: 1b:fd:31:fa:7b:7f:ac:7f:26:12:e0:f3:7b:8f:07:0e:ff:63: e6:b4:81:1e:d7:ff:78:e8:0b:17:82:76:b6:2b:5e:c4:b5:99: 1f:b4:98:67:75:e7:79:47:b7:c4:af:6c:0b:70:a7:6e:d1:48: 15:c4:aa:22:71:47:6f:0c:cc:16:08:f9:01:44:42:ce:65:66: 34:9f:fa:e9:f9:cb:bb:05:61:81:38:7b:41:78:f5:e8:64:dc: 37:23:86:86:ae:73:fa:aa:47:1a:88:2c:6f:97:64:04:f4:9d: a9:46:34:11:a0:e7:08:d5:66:45:ea:4d:31:ec:07:e3:47:ac: 54:42:19:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7APp7WOr0LNqRgvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjIxMjk1M1oXDTI2MTEwNDIyMjk1M1owLzEtMCsGA1UEAxMk ZTg5MDVjNTYtNmUwZS00NDRmLWE3NTQtODEyYTg0YTFkMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4tDoenIvXZFVtd5xEWPbGj75CaddCbPdpXf Y18bVoyA2kHz+vMNbcSkyD+euv9ChDadFnQfk0/Zf3MPtYTZtFyo8nkxYXlX/0vg bt3LaAXGbWdybkK/xZFW8gsFft7GSsnbW+rRgEithqEjxJKFLZI5ISPO4ksKi1f1 g8Ud2COCuaPC1U6mdVFs7ZAL/DYerJ2y+WATUsn5y4HsCSSohtf+RpOnax0oc/1C X9igj5tudrPGchmE+HNsCrV2vxU8dXj/dvQgREKXTJJde2RYNpecI4S+ZNr8zc2g HyTsqq2vvzKeJyDdb7VPg61ATWcC/Tbrqqu13qgV94c2wEQYdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg+rIgMVTzVCSnCRI1z/PQK9YSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZjkzMzM0MmUtZDUyZi0z OGUzLTgwMDMtYjhmOGVhM2YyZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaYNkHYlu8AYtg0mTi93DENKuHHnOa2jBsfuig2MTstdwJHB5rdF7Db W2zKQhGAkpfzzD4xKA9umM6FyhZO2l3ikYHD4pP4+OTgrFzrPuuFWQ86GiWP9trm j/iXcZ+I/v6Ild9eUvYAL2Yshdmfc+AVcMUyxX1KYw2a1Q05kBv9Mfp7f6x/JhLg 83uPBw7/Y+a0gR7X/3joCxeCdrYrXsS1mR+0mGd153lHt8SvbAtwp27RSBXEqiJx R28MzBYI+QFEQs5lZjSf+un5y7sFYYE4e0F49ehk3Dcjhoauc/qqRxqILG+XZAT0 nalGNBGg5wjVZkXqTTHsB+NHrFRCGZE= -----END CERTIFICATE-----Generated at Thu Aug 27 17:37:50 2026 by rpki-client