$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa File: c289adc8-f56d-36ed-9305-ee284f075f34.roa (raw, json) Hash identifier: 0oBYjfZX5gvSrxkziGYvO/86B4y9r2qYSml2YFvDN6E= Subject key identifier: 64:6C:0E:A1:2E:D2:F9:D7:17:29:57:0E:7C:E5:6A:8B:E2:0F:0D:78 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584ED0020B9E62D721E25F9D6C20 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 3527 IP address blocks: 128.231.0.0/16 maxlen: 25 137.187.0.0/16 maxlen: 25 156.40.0.0/18 maxlen: 25 156.40.64.0/20 maxlen: 25 156.40.80.0/21 maxlen: 25 156.40.88.0/22 maxlen: 25 156.40.92.0/24 maxlen: 25 156.40.96.0/19 maxlen: 25 156.40.128.0/18 maxlen: 25 156.40.192.0/22 maxlen: 25 156.40.196.0/24 maxlen: 25 156.40.198.0/23 maxlen: 25 156.40.200.0/21 maxlen: 25 156.40.208.0/20 maxlen: 25 156.40.224.0/19 maxlen: 25 165.112.0.0/16 maxlen: 25 192.231.145.0/24 maxlen: 29 192.231.146.0/23 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:02:0b:9e:62:d7:21:e2:5f:9d:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=49dd6f41-881b-4bfc-90de-cccf43bb5cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:59:d1:8d:7a:fc:40:b6:28:a3:71:6c:1f:b5: 0e:d0:be:8d:4f:e0:b3:ac:66:87:63:62:c5:20:b7: 2c:1d:ac:ab:85:ee:e7:9c:f1:43:0d:b1:d1:b2:a4: b4:2f:62:32:97:12:2e:dc:84:72:36:4b:21:02:64: d4:5a:98:7c:33:dd:57:30:d9:5d:19:ee:ea:55:65: d5:aa:4c:69:65:61:50:f1:56:da:8b:5d:82:2f:a2: 5e:65:5b:c4:41:9c:17:a8:6a:5b:19:26:fa:9a:64: 6e:9a:35:8e:dd:3a:e9:b7:5d:f8:93:63:41:3b:a8: bd:79:2c:10:ab:c8:08:a1:bb:4e:71:ff:9b:23:e3: 80:34:49:41:47:38:4c:24:91:54:db:ae:5c:be:a0: ee:58:da:0b:37:0c:59:d3:c6:ff:0c:fa:73:fb:95: 85:c0:78:dc:ab:1a:d1:7e:59:a4:93:b6:1f:6e:f9: 53:52:4a:42:61:ec:6c:25:89:8c:b3:7c:6d:31:ae: fa:cf:d2:42:bf:ea:2e:de:b7:e1:84:6b:01:4e:2c: 51:b7:22:db:73:87:45:b1:e7:3f:3c:f8:43:a3:99: 5d:48:03:3c:c5:06:30:35:b7:ac:7d:4f:92:d6:98: d7:8d:a3:7e:64:d2:ff:1c:94:c8:8d:11:53:db:ae: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6C:0E:A1:2E:D2:F9:D7:17:29:57:0E:7C:E5:6A:8B:E2:0F:0D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 128.231.0.0/16 137.187.0.0/16 156.40.0.0-156.40.92.255 156.40.96.0-156.40.196.255 156.40.198.0-156.40.255.255 165.112.0.0/16 192.231.145.0-192.231.147.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:1e:23:17:49:21:4f:7a:ae:f8:e2:fd:04:7e:6f:ba:6f:1f: 38:e5:2a:fa:f6:b2:70:01:cb:98:a5:84:e2:0f:0e:4e:65:60: 2c:df:d3:26:da:d1:41:c8:49:30:ca:14:11:57:2c:81:5d:dd: 63:b1:3a:02:42:04:6c:9c:95:3f:e6:8c:a3:26:d1:14:5a:aa: 1e:01:a6:86:a8:fb:e0:b6:b8:44:f9:d3:f9:85:a9:3c:18:fe: cd:68:86:ec:29:37:7a:82:c6:59:c2:57:13:aa:35:01:34:6a: 17:73:22:8f:82:80:ec:17:58:be:ea:83:8e:78:86:93:98:61: 97:e4:dc:e3:ff:16:5c:81:6c:fc:66:43:83:b2:7e:2d:9d:27: 20:8b:19:fe:b7:d3:31:94:83:fb:9f:cc:2e:86:e2:8f:27:56: 01:5f:dc:55:8f:0b:24:76:e3:e3:85:22:ea:62:64:37:ca:42: eb:83:81:be:55:2b:a2:87:60:86:1c:96:bb:d9:5f:1b:39:da: d2:3d:e6:75:90:04:42:5c:ba:8e:e7:77:35:1f:00:06:1d:68: 45:07:c8:82:50:86:ed:6a:2e:ba:fb:19:c2:fd:40:04:f5:92: 98:d0:c3:e8:2f:9e:1d:b4:1a:e9:51:2e:64:06:48:68:d7:0c: 04:2d:86:45 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWE7QAgueYtch4l+dbCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NDlkZDZmNDEtODgxYi00YmZjLTkwZGUtY2NjZjQzYmI1Y2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVnRjXr8QLYoo3FsH7UO0L6NT+CzrGaHY2LF ILcsHayrhe7nnPFDDbHRsqS0L2IylxIu3IRyNkshAmTUWph8M91XMNldGe7qVWXV qkxpZWFQ8Vbai12CL6JeZVvEQZwXqGpbGSb6mmRumjWO3Trpt134k2NBO6i9eSwQ q8gIobtOcf+bI+OANElBRzhMJJFU265cvqDuWNoLNwxZ08b/DPpz+5WFwHjcqxrR flmkk7YfbvlTUkpCYexsJYmMs3xtMa76z9JCv+ou3rfhhGsBTixRtyLbc4dFsec/ PPhDo5ldSAM8xQYwNbesfU+S1pjXjaN+ZNL/HJTIjRFT266W+QIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFGRsDqEu0vnXFylXDnzlaoviDw14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYzI4OWFkYzgtZjU2ZC0z NmVkLTkzMDUtZWUyODRmMDc1ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTBLBAIAATBFAwMAgOcDAwCJ uzALAwMDnCgDBACcKFwwDAMEBZwoYAMEAJwoxDALAwQBnCjGAwMAnCgDAwClcDAM AwQAwOeRAwQCwOeQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAF8eIxdJIU96rvji/QR+b7pvHzjlKvr2snAB y5ilhOIPDk5lYCzf0yba0UHISTDKFBFXLIFd3WOxOgJCBGyclT/mjKMm0RRaqh4B poao++C2uET50/mFqTwY/s1ohuwpN3qCxlnCVxOqNQE0ahdzIo+CgOwXWL7qg454 hpOYYZfk3OP/FlyBbPxmQ4Oyfi2dJyCLGf630zGUg/ufzC6G4o8nVgFf3FWPCyR2 4+OFIupiZDfKQuuDgb5VK6KHYIYclrvZXxs52tI95nWQBEJcuo7ndzUfAAYdaEUH yIJQhu1qLrr7GcL9QAT1kpjQw+gvnh20GulRLmQGSGjXDAQthkU= -----END CERTIFICATE-----Generated at Sat Sep 5 18:40:36 2026 by rpki-client