$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3fafe789-41be-3c2f-bf67-588359b0feda.roa File: 3fafe789-41be-3c2f-bf67-588359b0feda.roa (raw, json) Hash identifier: aE+VmCWilrTwHhXe0yZ5gDKv8E24up6rugJVzAflbfY= Subject key identifier: 05:65:D5:08:CE:2B:A4:33:DB:D9:F1:1D:AA:45:A2:1E:36:44:59:95 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0D33BE4624BA2971A424F8C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3fafe789-41be-3c2f-bf67-588359b0feda.roa Signing time: Thu 03 Sep 2026 11:05:13 +0000 ROA not before: Thu 03 Sep 2026 11:05:13 +0000 ROA not after: Wed 02 Dec 2026 12:05:13 +0000 asID: 28753 IP address blocks: 64.120.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:33:be:46:24:ba:29:71:a4:24:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 3 11:05:13 2026 GMT Not After : Dec 2 12:05:13 2026 GMT Subject: CN=41a1af08-b727-44de-ab40-12906baba578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:85:cf:b7:b3:08:55:71:5a:81:74:80:53: 43:ec:32:6d:4b:11:74:da:91:85:26:eb:b8:02:b6: dd:20:4a:50:46:00:54:83:49:c2:89:2d:00:3a:e6: 2d:88:bb:62:98:71:f3:fc:16:e0:db:d6:8f:44:a1: 45:b6:65:b8:42:8d:94:3e:a0:2d:c0:af:21:aa:ca: 81:af:82:69:90:85:e3:35:df:e1:9f:b6:f7:b5:e2: 55:6e:1b:6b:36:4f:81:c0:67:17:91:4e:ce:89:e3: bb:df:b0:3d:13:96:fc:f2:c7:a4:60:a8:dc:82:ef: 85:f3:4b:2a:9b:bb:b5:00:8d:85:60:96:f1:a9:5f: 6f:54:b1:1b:20:92:a4:8b:70:d9:4e:a3:5b:c3:cf: d4:77:9e:42:9c:b0:60:e6:36:c9:af:80:61:66:d6: b4:65:20:42:38:0f:3f:dc:69:9a:09:01:14:4b:38: 6d:fc:ee:e5:46:a2:8f:ec:11:94:0a:7d:95:e6:6a: 59:1e:e2:bf:5b:3a:0a:17:ed:bf:4e:6f:7c:a1:12: 89:82:cb:31:67:f6:9b:ac:6b:c9:7b:32:90:a9:4e: 78:15:04:5b:55:72:a6:35:d4:af:d2:22:40:10:65: 5b:b3:97:87:c8:13:47:3a:36:6d:ca:ec:eb:76:9b: d5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:65:D5:08:CE:2B:A4:33:DB:D9:F1:1D:AA:45:A2:1E:36:44:59:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3fafe789-41be-3c2f-bf67-588359b0feda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 64.120.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b5:44:22:ec:46:59:43:b5:08:5a:60:76:b9:28:fb:0d:c9: a5:19:82:1d:8b:a1:92:92:07:d0:a2:87:46:cf:b1:dc:63:4c: 17:f8:f1:78:34:1b:c1:7d:df:99:da:0a:bf:ed:72:a3:8e:2d: 2c:46:a6:a2:5a:16:64:dd:80:88:fe:6f:a1:29:60:d1:59:06: a6:4b:56:d8:e9:9d:15:ee:b9:19:0e:18:31:ce:ab:53:be:69: af:09:33:b8:80:24:15:7d:c2:1b:e1:b4:ce:6d:80:a2:6a:e5: 3e:82:3d:b7:53:71:e4:b4:65:cf:24:30:ac:b0:41:56:b4:54: 06:9e:0a:72:43:7b:f9:b9:09:b7:ff:25:9f:68:88:01:33:b3: f6:30:b1:d2:7f:21:af:a2:41:11:d3:00:33:ff:3e:ff:1c:13: 21:9c:6d:43:f8:de:62:56:4f:a0:85:06:3f:10:31:09:77:4f: 22:2d:26:61:bc:db:d8:04:2f:32:cf:9e:ba:4a:3b:55:a8:84: cb:b3:33:bf:c5:ec:8f:d0:fc:5f:24:f6:84:d5:09:0d:5c:00: 81:02:83:5c:a7:56:2a:73:98:74:5d:67:62:4d:49:fa:d8:4d: 5b:6b:fe:69:9e:e4:b5:86:6b:2e:46:cc:18:50:f3:96:68:e4: b3:62:fc:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NM75GJLopcaQk+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwMzExMDUxM1oXDTI2MTIwMjEyMDUxM1owLzEtMCsGA1UEAxMk NDFhMWFmMDgtYjcyNy00NGRlLWFiNDAtMTI5MDZiYWJhNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsayFz7ezCFVxWoF0gFND7DJtSxF02pGFJuu4 ArbdIEpQRgBUg0nCiS0AOuYtiLtimHHz/Bbg29aPRKFFtmW4Qo2UPqAtwK8hqsqB r4JpkIXjNd/hn7b3teJVbhtrNk+BwGcXkU7OieO737A9E5b88sekYKjcgu+F80sq m7u1AI2FYJbxqV9vVLEbIJKki3DZTqNbw8/Ud55CnLBg5jbJr4BhZta0ZSBCOA8/ 3GmaCQEUSzht/O7lRqKP7BGUCn2V5mpZHuK/WzoKF+2/Tm98oRKJgssxZ/abrGvJ ezKQqU54FQRbVXKmNdSv0iJAEGVbs5eHyBNHOjZtyuzrdpvVWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVl1QjOK6Qz29nxHapFoh42RFmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2ZhZmU3ODktNDFiZS0z YzJmLWJmNjctNTg4MzU5YjBmZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG1RCLsRllDtQhaYHa5KPsNyaUZgh2LoZKSB9Cih0bPsdxjTBf48Xg0 G8F935naCr/tcqOOLSxGpqJaFmTdgIj+b6EpYNFZBqZLVtjpnRXuuRkOGDHOq1O+ aa8JM7iAJBV9whvhtM5tgKJq5T6CPbdTceS0Zc8kMKywQVa0VAaeCnJDe/m5Cbf/ JZ9oiAEzs/YwsdJ/Ia+iQRHTADP/Pv8cEyGcbUP43mJWT6CFBj8QMQl3TyItJmG8 29gELzLPnrpKO1WohMuzM7/F7I/Q/F8k9oTVCQ1cAIECg1ynVipzmHRdZ2JNSfrY TVtr/mme5LWGay5GzBhQ85Zo5LNi/CI= -----END CERTIFICATE-----Generated at Tue Sep 22 18:49:45 2026 by rpki-client