$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b1fa4158-5544-3c8f-a36b-73a8a29e2804.roa File: b1fa4158-5544-3c8f-a36b-73a8a29e2804.roa (raw, json) Hash identifier: oNCstUc/UBZBIzIvUV8ml6M1nSOFTiX4ZNDoO38VcyY= Subject key identifier: B8:25:05:6D:CC:D8:D1:07:68:1A:26:AE:F5:78:6C:7D:3D:5E:62:6C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0F9A2F6A717D92807C556CC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b1fa4158-5544-3c8f-a36b-73a8a29e2804.roa Signing time: Fri 04 Sep 2026 07:43:14 +0000 ROA not before: Fri 04 Sep 2026 07:43:14 +0000 ROA not after: Thu 03 Dec 2026 08:43:14 +0000 asID: 27411 IP address blocks: 174.34.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:9a:2f:6a:71:7d:92:80:7c:55:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 07:43:14 2026 GMT Not After : Dec 3 08:43:14 2026 GMT Subject: CN=f52835ca-091f-47aa-852d-3a48961bfb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:05:98:03:9b:d6:c3:66:5a:ce:df:d2:c5:f8: 72:30:bd:db:fd:1a:d9:77:9a:c6:49:90:2e:82:be: 23:10:01:85:df:a5:4f:30:05:86:7a:42:f2:64:a1: eb:59:8f:58:aa:e6:27:8c:8b:2e:12:9d:8d:23:13: d1:d3:03:63:51:0c:33:0b:0e:21:11:fb:29:06:2f: 49:b5:f0:e7:5a:83:84:5d:14:69:9d:b7:e7:7a:61: 92:2d:49:10:54:b3:6a:91:a8:3b:63:3f:bf:df:e9: 1d:90:2a:10:10:08:f6:c8:bf:9b:d3:09:88:ab:e2: 90:e5:e5:3e:c2:82:48:19:ef:99:bc:72:ab:af:71: 02:e2:aa:bd:a0:a9:c0:ce:e4:cc:c0:71:82:c8:24: 4f:00:f7:34:3d:7d:ab:2b:d7:8a:36:fa:3c:99:36: f2:12:f7:24:3e:b0:47:b1:f2:56:22:cb:45:d2:f3: 04:0d:fd:39:28:c3:93:b1:69:b3:c3:14:3f:cf:81: 76:01:59:22:eb:95:c4:04:59:d7:4e:f9:bd:54:df: 63:cb:3b:5a:71:16:59:b5:9d:26:33:23:9c:46:ff: 6b:e0:92:e9:55:5f:51:46:da:35:ef:b3:c2:0a:e1: 34:dd:e8:68:63:9d:2f:37:c0:64:36:9f:04:ac:9e: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:25:05:6D:CC:D8:D1:07:68:1A:26:AE:F5:78:6C:7D:3D:5E:62:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b1fa4158-5544-3c8f-a36b-73a8a29e2804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 174.34.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8d:ac:50:89:8f:20:12:43:1c:5b:6f:2f:0d:c3:81:90:56: 5a:81:17:9e:89:47:b2:eb:1f:88:6e:e6:88:5d:6e:ce:7c:55: 76:24:bb:8f:df:82:31:a9:44:9f:f0:53:fb:d2:7e:4d:de:ca: 94:92:b1:15:0d:51:ff:b2:c7:bd:20:6e:92:fa:34:6e:3e:69: 06:51:f3:ca:eb:41:d8:b7:c9:c7:7a:68:78:66:66:69:3d:56: 1c:24:dc:4e:91:02:f5:84:c1:5b:36:08:96:cc:b9:56:9e:23: 6b:55:dd:b5:d5:23:c9:5c:b0:81:81:6d:ae:eb:1d:4b:96:0d: 2d:b8:bd:1a:e8:75:54:4d:c6:31:2c:d7:d4:89:2c:88:f6:f0: f4:c9:50:66:4a:73:e5:10:34:b0:eb:46:14:94:21:e0:57:c8: d0:c8:9b:f5:98:34:ab:d4:87:d1:e4:29:a2:3c:5c:86:ee:99: 0f:33:33:03:f6:39:56:9a:a4:9a:16:7b:2e:c9:91:0d:23:fb: ee:cb:bf:77:e7:ac:b2:9d:d1:21:69:ed:87:46:c4:91:9d:07: 9b:10:8a:c2:62:58:74:a5:6e:ee:da:62:8c:76:6a:1c:5a:98: 95:fe:04:e1:99:d5:07:5d:43:0e:2b:3a:2e:75:da:3e:ef:3a: 4f:be:23:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Pmi9qcX2SgHxVbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA3NDMxNFoXDTI2MTIwMzA4NDMxNFowLzEtMCsGA1UEAxMk ZjUyODM1Y2EtMDkxZi00N2FhLTg1MmQtM2E0ODk2MWJmYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgWYA5vWw2Zazt/SxfhyML3b/RrZd5rGSZAu gr4jEAGF36VPMAWGekLyZKHrWY9YquYnjIsuEp2NIxPR0wNjUQwzCw4hEfspBi9J tfDnWoOEXRRpnbfnemGSLUkQVLNqkag7Yz+/3+kdkCoQEAj2yL+b0wmIq+KQ5eU+ woJIGe+ZvHKrr3EC4qq9oKnAzuTMwHGCyCRPAPc0PX2rK9eKNvo8mTbyEvckPrBH sfJWIstF0vMEDf05KMOTsWmzwxQ/z4F2AVki65XEBFnXTvm9VN9jyztacRZZtZ0m MyOcRv9r4JLpVV9RRto177PCCuE03ehoY50vN8BkNp8ErJ7KgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLglBW3M2NEHaBomrvV4bH09XmJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjFmYTQxNTgtNTU0NC0z YzhmLWEzNmItNzNhOGEyOWUyODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqNrFCJjyASQxxbby8Nw4GQVlqBF56JR7LrH4hu5ohdbs58VXYku4/f gjGpRJ/wU/vSfk3eypSSsRUNUf+yx70gbpL6NG4+aQZR88rrQdi3ycd6aHhmZmk9 Vhwk3E6RAvWEwVs2CJbMuVaeI2tV3bXVI8lcsIGBba7rHUuWDS24vRrodVRNxjEs 19SJLIj28PTJUGZKc+UQNLDrRhSUIeBXyNDIm/WYNKvUh9HkKaI8XIbumQ8zMwP2 OVaapJoWey7JkQ0j++7Lv3fnrLKd0SFp7YdGxJGdB5sQisJiWHSlbu7aYox2ahxa mJX+BOGZ1QddQw4rOi512j7vOk++Izk= -----END CERTIFICATE-----Generated at Sun Sep 20 20:28:37 2026 by rpki-client