$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/699285de-3f8e-3fd2-bda2-1597ef841a49.roa File: 699285de-3f8e-3fd2-bda2-1597ef841a49.roa (raw, json) Hash identifier: UA6uvvhn5N6IAhFUe3pJTVq1yoVYMmLdE+QD6a20Muc= Subject key identifier: B9:94:E8:FF:52:E4:FC:69:E1:4A:98:65:56:3E:00:99:96:1B:37:95 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584FB240F8B8559B50BC0357D780 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/699285de-3f8e-3fd2-bda2-1597ef841a49.roa Signing time: Sun 01 Nov 2026 14:00:13 +0000 ROA not before: Sun 01 Nov 2026 14:00:13 +0000 ROA not after: Sat 30 Jan 2027 14:00:13 +0000 asID: 395954 IP address blocks: 173.234.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:40:f8:b8:55:9b:50:bc:03:57:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Nov 1 14:00:13 2026 GMT Not After : Jan 30 14:00:13 2027 GMT Subject: CN=c4deccb5-e664-4e33-a192-9143fd6a9cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:92:c0:d2:f4:ca:5e:66:96:37:68:d6:f0: 01:ee:0b:a5:3e:e5:65:e8:6a:55:78:60:73:3d:1f: b5:a4:97:75:9e:bc:c9:f8:68:4f:bb:76:b4:a2:ed: 07:fb:c5:d1:d4:60:59:f9:a7:49:ba:0b:4c:ce:ed: 3c:a5:b0:4f:ca:fa:b3:1c:4f:d5:31:5c:06:4d:54: 42:0f:85:05:5b:3a:42:10:52:12:40:20:bc:26:f2: 7e:b2:a1:a2:72:7d:7b:6c:0b:0b:46:f3:8a:fc:8f: ad:8a:f4:7d:0c:eb:4e:e4:7f:0a:df:34:dd:36:d7: 82:42:86:e4:41:ba:92:17:69:1f:64:8e:7e:dd:55: f7:3d:12:60:3f:60:3c:06:39:1b:c7:21:84:45:8f: 19:8e:44:46:0d:4f:67:77:45:4b:06:36:cc:9d:0f: 41:9a:ad:b3:bd:df:51:1b:f3:31:2f:24:f9:2e:fa: 31:2b:0a:7e:c1:d9:2c:a5:09:a1:76:b3:9d:dc:e2: 5b:43:6f:a6:9c:f7:ee:7c:0a:6f:5c:0a:10:56:7e: 27:05:19:e0:64:4a:0a:37:35:d6:33:75:dd:64:ea: 52:a7:a7:91:cd:4c:b5:cf:78:9f:a9:92:1d:17:b6: 1b:fe:0c:1c:f1:f5:62:89:20:28:37:f7:c2:21:01: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:94:E8:FF:52:E4:FC:69:E1:4A:98:65:56:3E:00:99:96:1B:37:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/699285de-3f8e-3fd2-bda2-1597ef841a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.234.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:fb:17:db:0d:7e:e5:96:21:0c:ae:aa:9b:5a:ca:dd:60:30: 7b:10:44:07:2f:ab:b9:e9:cd:f6:fc:b9:fc:19:fd:29:40:31: b7:32:c4:f7:f9:e4:fc:2d:d0:0c:55:e1:f3:4f:bc:fe:4c:d8: 4e:f5:4d:11:de:76:9d:4b:eb:d2:31:b9:15:1a:a6:25:13:4a: 5a:e9:64:09:f0:da:f1:ef:c7:b3:35:43:ab:cf:75:5b:58:fe: 84:3d:27:56:eb:df:44:c0:34:59:bf:29:05:37:c9:ba:bb:17: ff:7b:fc:fe:cb:c7:bd:96:87:4d:64:2f:bd:a4:0f:d0:d1:8e: de:fc:22:8e:da:e8:9b:18:db:ee:b5:c0:7d:2c:4d:3a:bf:ad: 08:4a:36:0d:cb:41:19:34:a0:1f:d7:01:69:da:d6:a9:d5:e9: 56:33:d2:f4:fe:c1:f2:7d:c8:9c:c3:14:29:b5:c7:d6:cc:0e: a1:f5:47:34:18:95:da:16:32:f5:0c:9a:94:10:99:0e:18:15: 4b:c8:aa:9e:75:bb:79:93:4d:64:b7:0c:c3:7d:8e:df:b7:65: 9a:e5:b0:f9:3b:e0:f4:3c:f9:bb:1a:65:d3:b7:b3:aa:00:29: d6:e5:a1:da:97:9b:79:77:e1:5e:8a:43:3e:54:d1:92:4a:31: 5a:9c:03:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+yQPi4VZtQvANX14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTEwMTE0MDAxM1oXDTI3MDEzMDE0MDAxM1owLzEtMCsGA1UEAxMk YzRkZWNjYjUtZTY2NC00ZTMzLWExOTItOTE0M2ZkNmE5Y2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ+SwNL0yl5mljdo1vAB7gulPuVl6GpVeGBz PR+1pJd1nrzJ+GhPu3a0ou0H+8XR1GBZ+adJugtMzu08pbBPyvqzHE/VMVwGTVRC D4UFWzpCEFISQCC8JvJ+sqGicn17bAsLRvOK/I+tivR9DOtO5H8K3zTdNteCQobk QbqSF2kfZI5+3VX3PRJgP2A8BjkbxyGERY8ZjkRGDU9nd0VLBjbMnQ9Bmq2zvd9R G/MxLyT5LvoxKwp+wdkspQmhdrOd3OJbQ2+mnPfufApvXAoQVn4nBRngZEoKNzXW M3XdZOpSp6eRzUy1z3ifqZIdF7Yb/gwc8fViiSAoN/fCIQF5twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmU6P9S5Pxp4UqYZVY+AJmWGzeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjk5Mjg1ZGUtM2Y4ZS0z ZmQyLWJkYTItMTU5N2VmODQxYTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrepkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJz7F9sNfuWWIQyuqptayt1gMHsQRAcvq7npzfb8ufwZ/SlAMbcyxPf5 5Pwt0AxV4fNPvP5M2E71TRHedp1L69IxuRUapiUTSlrpZAnw2vHvx7M1Q6vPdVtY /oQ9J1br30TANFm/KQU3ybq7F/97/P7Lx72Wh01kL72kD9DRjt78Io7a6JsY2+61 wH0sTTq/rQhKNg3LQRk0oB/XAWna1qnV6VYz0vT+wfJ9yJzDFCm1x9bMDqH1RzQY ldoWMvUMmpQQmQ4YFUvIqp51u3mTTWS3DMN9jt+3ZZrlsPk74PQ8+bsaZdO3s6oA KdblodqXm3l34V6KQz5U0ZJKMVqcA/Q= -----END CERTIFICATE-----Generated at Thu Nov 5 14:56:59 2026 by rpki-client