$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1a35a961-fca4-3383-9127-589a897f374d.roa File: 1a35a961-fca4-3383-9127-589a897f374d.roa (raw, json) Hash identifier: TUiFiwQ3ovuGDaDyFvxk8vFo5hz49hHiUlLDcyl+36I= Subject key identifier: F2:84:CD:7B:4D:A8:8A:E3:97:BE:D0:B7:A5:B0:64:06:81:7A:DF:FC Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B58427EE9531C63CEC80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1a35a961-fca4-3383-9127-589a897f374d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 23.82.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b5:84:27:ee:95:31:c6:3c:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b738ed1d-9530-403a-9d78-88d55463703c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:e4:96:f9:e6:a8:5a:fe:c7:70:96:aa:9f: 9a:7d:aa:a3:fb:1f:32:39:78:2e:03:32:66:1f:11: 8b:c8:bb:28:d7:49:92:65:4f:45:f4:4d:d9:b5:c5: 7f:81:4a:1f:aa:1b:79:e2:96:f7:13:9b:48:3f:83: a5:0f:c7:81:08:a4:a0:da:ec:eb:96:22:1c:d5:cd: ff:46:4f:ec:81:6f:c0:6c:0c:33:10:64:61:66:a0: 67:9e:03:ad:f0:d5:07:91:bc:5c:f9:0e:1c:86:5f: db:46:e2:ab:23:69:34:2a:6a:25:a0:49:1f:e2:d2: 6c:85:3c:1a:70:38:2f:3f:76:e7:79:71:31:76:a6: cd:7f:30:16:aa:c1:af:23:dc:a8:18:e4:92:94:fc: b9:8d:28:6d:5f:f3:69:9e:75:e9:50:41:02:75:7a: df:66:29:4f:67:3a:8d:a6:a4:f9:15:43:a3:4e:f9: 62:46:70:0b:48:42:dc:01:c6:be:13:1d:7d:5e:af: 09:c2:6f:3c:4f:83:53:f7:34:55:c6:48:b5:79:fa: f5:56:a0:40:d4:fa:38:7a:58:92:51:11:18:30:37: ed:a0:d5:73:13:33:0f:2e:b3:fc:07:b8:5f:d0:1d: cf:ab:f7:ad:11:78:29:13:d2:c9:09:30:af:23:31: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:84:CD:7B:4D:A8:8A:E3:97:BE:D0:B7:A5:B0:64:06:81:7A:DF:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1a35a961-fca4-3383-9127-589a897f374d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.82.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:3c:50:7a:88:46:d9:88:40:bc:2f:db:a7:e1:ba:62:db:8d: 30:ee:ad:76:d9:06:a8:5c:d9:2c:00:95:ae:84:4b:94:5c:79: f2:4f:33:58:d0:60:fa:47:38:d5:ac:b9:af:ef:f5:54:0c:19: 01:7b:be:08:f4:04:17:0a:1d:f2:87:67:24:da:a0:51:37:9a: a8:d1:a4:bb:1b:62:cd:0e:ba:50:f1:b5:71:e5:67:99:3a:6c: d1:3c:68:ac:f9:ce:0b:e7:d8:18:e1:66:68:c1:e5:f3:63:29: 44:5c:ac:4b:03:36:5c:a1:03:26:1f:83:17:25:d2:d5:03:8e: 17:82:ed:5c:02:e2:eb:9f:92:8c:86:3d:5b:b9:a1:64:91:55: 68:73:b3:3e:86:c0:cc:ed:c2:bc:67:39:13:9d:e8:76:38:41: de:79:f2:75:0a:59:8c:18:10:7b:7b:a8:42:77:39:bb:d7:94: b6:0c:eb:c2:67:a2:ea:af:02:c0:1b:ef:1d:75:09:68:0a:f1: df:12:0e:b5:07:94:d5:89:ff:a7:3c:e9:06:ab:7f:f2:05:62: 6e:18:1e:02:c1:0a:4e:64:e0:57:5f:a4:5a:97:66:48:20:1b: 43:41:9d:95:b9:94:5a:9c:8b:15:16:69:33:92:15:76:8e:8b: e6:97:e9:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrWEJ+6VMcY87IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjczOGVkMWQtOTUzMC00MDNhLTlkNzgtODhkNTU0NjM3MDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnHklvnmqFr+x3CWqp+afaqj+x8yOXguAzJm HxGLyLso10mSZU9F9E3ZtcV/gUofqht54pb3E5tIP4OlD8eBCKSg2uzrliIc1c3/ Rk/sgW/AbAwzEGRhZqBnngOt8NUHkbxc+Q4chl/bRuKrI2k0KmoloEkf4tJshTwa cDgvP3bneXExdqbNfzAWqsGvI9yoGOSSlPy5jShtX/NpnnXpUEECdXrfZilPZzqN pqT5FUOjTvliRnALSELcAca+Ex19Xq8Jwm88T4NT9zRVxki1efr1VqBA1Po4eliS UREYMDftoNVzEzMPLrP8B7hf0B3Pq/etEXgpE9LJCTCvIzHq6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKEzXtNqIrjl77Qt6WwZAaBet/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMWEzNWE5NjEtZmNhNC0z MzgzLTkxMjctNTg5YTg5N2YzNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1LYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI8UHqIRtmIQLwv26fhumLbjTDurXbZBqhc2SwAla6ES5RcefJPM1jQ YPpHONWsua/v9VQMGQF7vgj0BBcKHfKHZyTaoFE3mqjRpLsbYs0OulDxtXHlZ5k6 bNE8aKz5zgvn2BjhZmjB5fNjKURcrEsDNlyhAyYfgxcl0tUDjheC7VwC4uufkoyG PVu5oWSRVWhzsz6GwMztwrxnOROd6HY4Qd558nUKWYwYEHt7qEJ3ObvXlLYM68Jn ouqvAsAb7x11CWgK8d8SDrUHlNWJ/6c86Qarf/IFYm4YHgLBCk5k4FdfpFqXZkgg G0NBnZW5lFqcixUWaTOSFXaOi+aX6RE= -----END CERTIFICATE-----Generated at Tue Oct 6 12:30:40 2026 by rpki-client