$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/542456b7-8690-3783-afbc-887363db5881.roa File: 542456b7-8690-3783-afbc-887363db5881.roa (raw, json) Hash identifier: HZgY3Wm+5j79M5GdV6iJDil+PvmqOv1TDW0k9lV3eHQ= Subject key identifier: 1F:7D:AE:F3:EC:A6:E2:98:02:68:DD:91:18:8A:90:44:7E:67:02:AC Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6DBD6A68F99A001082159649 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/542456b7-8690-3783-afbc-887363db5881.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 395954 IP address blocks: 23.82.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:6a:68:f9:9a:00:10:82:15:96:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=04b101aa-d369-4605-87d3-fe326c34f6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:29:45:31:00:57:76:cb:71:cc:78:7d:c5:dc: 84:d5:56:c7:5e:14:66:74:67:10:f0:af:6c:60:9e: 26:c7:2d:f8:30:1b:2a:cf:81:d7:2d:03:f6:96:3c: b3:a3:b1:40:d0:61:93:d5:3d:d8:85:dd:97:8c:95: ac:0f:b4:27:20:0f:4e:d0:3a:d3:6e:7d:49:d9:f1: 4b:d0:d7:33:b3:ac:51:10:59:a6:58:a6:40:d9:00: 14:81:c8:68:95:84:fd:8c:50:d1:29:f5:be:e1:85: 56:37:0b:07:05:04:62:0b:e0:2b:b3:15:7e:43:aa: ae:c9:3a:ba:df:80:74:0f:cc:a4:29:39:37:65:fc: fc:a6:a4:01:17:07:4f:52:c0:b5:b7:89:04:b1:b2: 6a:46:59:19:4a:db:29:c9:b0:77:85:cf:ca:3b:5d: f3:71:b3:f5:9e:c7:98:6c:4f:55:50:63:d3:fb:99: a8:0b:46:d4:73:77:ee:f4:81:9e:e7:89:6d:78:ef: 94:62:6d:81:e1:9b:41:d4:5d:1c:bb:49:e8:2d:31: a5:20:ba:3c:fc:be:6e:35:83:20:5c:52:4d:26:ca: 14:a0:11:7c:9b:e0:39:c0:71:48:16:3b:19:23:cf: 6f:be:84:6b:71:1b:88:1c:9a:37:fb:01:dc:20:1f: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7D:AE:F3:EC:A6:E2:98:02:68:DD:91:18:8A:90:44:7E:67:02:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/542456b7-8690-3783-afbc-887363db5881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.82.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:30:2b:b2:85:3b:08:33:02:0c:d6:ce:11:ec:c4:cb:a9:19: f1:aa:76:6b:3f:a7:0d:20:b1:94:d7:77:9e:ca:91:3a:45:c7: b2:3b:a6:a5:3c:bb:f2:22:4f:1e:ae:67:e3:84:87:a0:82:49: b4:6b:03:cd:82:6a:e7:c5:6c:7b:90:29:62:5b:30:64:4d:0a: 6e:44:5b:62:82:50:94:59:26:de:89:49:e2:06:8c:de:cf:5b: ef:af:35:b9:0b:b1:87:07:75:b4:80:92:3f:f4:bf:8e:43:a4: 77:28:30:cf:bd:3c:23:fe:50:c8:ce:ca:a7:9e:b9:95:1f:d7: b0:78:35:86:9f:3b:ff:8e:64:9d:0a:1b:98:c5:00:4a:34:db: dc:4c:6c:4e:fa:c9:50:6c:e2:f1:59:ba:d6:00:95:f6:95:a7: e7:5c:39:97:cd:5f:9e:f6:15:76:04:a3:a9:b0:0f:58:19:5e: 4d:f5:85:38:41:db:b0:e9:35:ae:3c:2d:2d:75:8a:b7:f4:5a: b0:b8:e9:ff:88:d8:33:49:0f:10:30:6a:ef:8d:b8:a3:b4:8d: 03:e3:35:b3:1d:41:32:35:4f:db:3d:2d:06:ef:e9:8d:50:b3: be:e2:9d:f1:8e:cb:fc:8b:5f:1d:d1:4c:c8:da:6d:2c:e0:cf: e8:99:79:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tvWpo+ZoAEIIVlkkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MDRiMTAxYWEtZDM2OS00NjA1LTg3ZDMtZmUzMjZjMzRmNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiClFMQBXdstxzHh9xdyE1VbHXhRmdGcQ8K9s YJ4mxy34MBsqz4HXLQP2ljyzo7FA0GGT1T3Yhd2XjJWsD7QnIA9O0DrTbn1J2fFL 0Nczs6xREFmmWKZA2QAUgcholYT9jFDRKfW+4YVWNwsHBQRiC+ArsxV+Q6quyTq6 34B0D8ykKTk3Zfz8pqQBFwdPUsC1t4kEsbJqRlkZStspybB3hc/KO13zcbP1nseY bE9VUGPT+5moC0bUc3fu9IGe54lteO+UYm2B4ZtB1F0cu0noLTGlILo8/L5uNYMg XFJNJsoUoBF8m+A5wHFIFjsZI89vvoRrcRuIHJo3+wHcIB+1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB99rvPspuKYAmjdkRiKkER+ZwKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNTQyNDU2YjctODY5MC0z NzgzLWFmYmMtODg3MzYzZGI1ODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1L4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHowK7KFOwgzAgzWzhHsxMupGfGqdms/pw0gsZTXd57KkTpFx7I7pqU8 u/IiTx6uZ+OEh6CCSbRrA82CaufFbHuQKWJbMGRNCm5EW2KCUJRZJt6JSeIGjN7P W++vNbkLsYcHdbSAkj/0v45DpHcoMM+9PCP+UMjOyqeeuZUf17B4NYafO/+OZJ0K G5jFAEo029xMbE76yVBs4vFZutYAlfaVp+dcOZfNX572FXYEo6mwD1gZXk31hThB 27DpNa48LS11irf0WrC46f+I2DNJDxAwau+NuKO0jQPjNbMdQTI1T9s9LQbv6Y1Q s77infGOy/yLXx3RTMjabSzgz+iZeSk= -----END CERTIFICATE-----Generated at Sun Oct 11 08:47:37 2026 by rpki-client