$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/85ddc123-f7e7-32e5-866f-ac87b2d67ca9.roa File: 85ddc123-f7e7-32e5-866f-ac87b2d67ca9.roa (raw, json) Hash identifier: HK4Bi4ffvWPRxDE91hwDZQ5Z/RP+x2rvYDdsBsvZaLM= Subject key identifier: 98:B1:BF:E8:70:C9:B8:29:51:E6:03:6C:A9:6F:F9:ED:AE:4A:34:58 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0F9A7F01DD815F0D4C859C80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/85ddc123-f7e7-32e5-866f-ac87b2d67ca9.roa Signing time: Fri 04 Sep 2026 07:43:52 +0000 ROA not before: Fri 04 Sep 2026 07:43:52 +0000 ROA not after: Thu 03 Dec 2026 08:43:52 +0000 asID: 27411 IP address blocks: 174.34.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:9a:7f:01:dd:81:5f:0d:4c:85:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 07:43:52 2026 GMT Not After : Dec 3 08:43:52 2026 GMT Subject: CN=3e395e58-5698-401c-9e12-d49295e8fc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:6e:b1:78:c1:f1:99:7d:bf:db:19:99:ec: 56:30:33:a6:5e:34:5b:5c:c5:9a:10:ef:11:96:46: 2e:16:bf:57:b0:00:29:cc:7b:fa:98:5f:12:83:44: b6:b0:cc:7b:ec:9b:ec:fd:ff:bb:4e:61:16:b4:4f: b2:2e:9c:69:ce:70:59:a7:19:b2:f4:bd:0e:e9:73: d4:07:17:6e:03:28:ca:7d:51:89:91:81:9b:ad:88: 4c:33:33:d7:92:ee:b3:73:36:84:07:08:05:f4:f0: ea:b3:02:c5:81:7e:14:c1:df:9d:a3:de:36:d1:08: 47:19:0b:e3:09:13:d1:e7:c9:04:50:e6:9f:cf:26: e7:fc:97:05:c1:ea:07:ea:ee:15:c1:84:56:df:77: 89:78:34:12:fc:72:18:45:93:c6:62:59:c8:ef:af: 0b:36:e5:63:dd:5b:cb:84:60:b2:9d:d5:78:51:21: 79:b2:81:49:c5:6e:5d:bb:4e:e4:cf:cc:0a:22:e6: 39:18:2b:24:4e:06:f4:8d:57:8f:62:48:93:63:0d: e7:8e:0a:c7:b0:e6:e2:b4:02:0f:ed:72:10:fb:1c: bd:d0:c4:cb:06:49:a7:bf:fb:c7:0b:a2:1f:b0:69: 68:ef:22:90:8b:a2:2b:06:ce:95:5f:cc:cc:08:7d: 78:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B1:BF:E8:70:C9:B8:29:51:E6:03:6C:A9:6F:F9:ED:AE:4A:34:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/85ddc123-f7e7-32e5-866f-ac87b2d67ca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 174.34.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a6:bc:4f:88:cd:aa:6d:d1:d5:a2:59:5f:3b:b6:38:c7:c7: b4:a8:02:0c:3e:f7:5a:f2:81:8f:d4:3a:d6:69:3b:3a:a7:cc: e7:e6:fb:95:80:f5:66:4b:87:dc:51:90:bf:e2:39:a2:30:e6: 7e:97:9b:cb:15:17:e9:73:d4:8e:de:8f:e6:cd:7e:60:ff:87: 77:c9:1e:9e:0b:84:4f:49:c8:9d:11:2c:1f:43:2f:04:af:20: ac:04:47:a8:7a:cc:53:40:9b:75:71:c8:b4:26:bd:7f:d3:cd: 4c:5d:4a:22:ad:7c:f9:f5:42:80:9d:03:1c:06:e5:70:15:19: a0:b3:bf:32:b5:cb:6c:88:59:6a:c4:d8:32:5f:5f:aa:0b:d3: b6:0f:b9:8b:86:28:13:59:6b:f5:8e:cf:9e:73:cc:4f:6c:63: ea:44:52:31:81:02:3f:dc:bf:93:61:cb:75:9d:38:1e:64:c9: f3:3e:8f:06:79:50:d5:f2:8e:41:b9:1d:da:6f:d8:e9:9d:ee: 93:c6:30:76:8c:32:46:8f:17:a0:0e:8a:48:1a:8d:e2:7c:1c: 84:ab:8a:af:6f:c5:98:f7:13:60:ce:5d:52:79:d7:76:a0:83: e8:ad:0a:b8:52:fc:27:b8:6f:02:94:bc:04:a6:b6:d4:f7:d5: 55:ca:0c:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Pmn8B3YFfDUyFnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA3NDM1MloXDTI2MTIwMzA4NDM1MlowLzEtMCsGA1UEAxMk M2UzOTVlNTgtNTY5OC00MDFjLTllMTItZDQ5Mjk1ZThmYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7tusXjB8Zl9v9sZmexWMDOmXjRbXMWaEO8R lkYuFr9XsAApzHv6mF8Sg0S2sMx77Jvs/f+7TmEWtE+yLpxpznBZpxmy9L0O6XPU BxduAyjKfVGJkYGbrYhMMzPXku6zczaEBwgF9PDqswLFgX4Uwd+do9420QhHGQvj CRPR58kEUOafzybn/JcFweoH6u4VwYRW33eJeDQS/HIYRZPGYlnI768LNuVj3VvL hGCyndV4USF5soFJxW5du07kz8wKIuY5GCskTgb0jVePYkiTYw3njgrHsObitAIP 7XIQ+xy90MTLBkmnv/vHC6IfsGlo7yKQi6IrBs6VX8zMCH14gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJixv+hwybgpUeYDbKlv+e2uSjRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODVkZGMxMjMtZjdlNy0z MmU1LTg2NmYtYWM4N2IyZDY3Y2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGumvE+Izapt0dWiWV87tjjHx7SoAgw+91rygY/UOtZpOzqnzOfm+5WA 9WZLh9xRkL/iOaIw5n6Xm8sVF+lz1I7ej+bNfmD/h3fJHp4LhE9JyJ0RLB9DLwSv IKwER6h6zFNAm3VxyLQmvX/TzUxdSiKtfPn1QoCdAxwG5XAVGaCzvzK1y2yIWWrE 2DJfX6oL07YPuYuGKBNZa/WOz55zzE9sY+pEUjGBAj/cv5Nhy3WdOB5kyfM+jwZ5 UNXyjkG5Hdpv2Omd7pPGMHaMMkaPF6AOikgajeJ8HISriq9vxZj3E2DOXVJ513ag g+itCrhS/Ce4bwKUvASmttT31VXKDM0= -----END CERTIFICATE-----Generated at Mon Sep 21 11:48:56 2026 by rpki-client