$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b/0a6dd0c3-e5a9-3ed0-8f70-5ead64048f43.roa File: 0a6dd0c3-e5a9-3ed0-8f70-5ead64048f43.roa (raw, json) Hash identifier: CC3i0EUPtA72oOtNZk16v7lwqFXsDL+8tNNb0qYmKj0= Subject key identifier: 0C:40:B0:4A:44:AC:D9:D5:4F:DF:30:FD:3E:A8:03:E0:3D:2D:38:7F Certificate issuer: /CN=8ea6cffd-9dde-440f-9975-5f4e2e8e159b Certificate serial: 010D0C9F4328584F85DFB54416889B33B4483080 Authority key identifier: 39:27:0C:2A:99:4E:96:C0:6B:A6:D8:5C:52:3E:5A:90:AE:CD:C6:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b/0a6dd0c3-e5a9-3ed0-8f70-5ead64048f43.roa Signing time: Fri 16 Oct 2026 16:28:42 +0000 ROA not before: Fri 16 Oct 2026 16:28:42 +0000 ROA not after: Thu 14 Jan 2027 16:35:41 +0000 asID: 395040 IP address blocks: 23.226.119.0/24 maxlen: 24 64.111.56.0/24 maxlen: 24 64.111.63.0/24 maxlen: 24 65.255.140.0/24 maxlen: 24 67.221.196.0/23 maxlen: 24 67.221.198.0/24 maxlen: 24 69.27.212.0/24 maxlen: 24 207.174.227.0/24 maxlen: 24 207.174.236.0/23 maxlen: 24 207.211.232.0/21 maxlen: 24 209.152.148.0/24 maxlen: 24 216.146.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b/8ea6cffd-9dde-440f-9975-5f4e2e8e159b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b/8ea6cffd-9dde-440f-9975-5f4e2e8e159b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:df:b5:44:16:88:9b:33:b4:48:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea6cffd-9dde-440f-9975-5f4e2e8e159b Validity Not Before: Oct 16 16:28:42 2026 GMT Not After : Jan 14 16:35:41 2027 GMT Subject: CN=ea481fce-0fc7-441b-9b00-2035810b2340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:8b:e1:e8:de:9f:5b:50:d7:f3:66:98:0c: d2:06:a9:2b:6b:c5:98:db:3c:58:49:57:d4:a4:1d: c2:d7:f9:b8:4b:d5:2c:5a:97:db:b2:ee:63:09:75: 79:dc:d9:4c:04:1d:a6:d0:04:15:ea:f7:08:6b:71: f5:54:b8:e6:f6:be:cd:74:cd:1d:5e:14:b4:22:49: e5:8f:cb:5e:61:54:10:d5:2f:24:65:a4:08:66:ef: 04:88:03:9c:76:7b:79:14:71:32:0b:83:37:0c:f8: 44:5c:9b:8b:c7:9b:9b:b5:90:6d:32:2e:6b:f1:3c: 41:3f:24:62:ea:75:14:80:9c:9f:cf:03:56:68:91: 90:e8:2d:64:95:2e:83:f5:8a:34:b6:50:b9:22:7d: c4:de:35:72:d5:a0:ee:3d:46:48:92:ad:7a:cc:d3: 40:cf:bd:25:93:ed:71:ee:d5:e1:65:d1:cb:6d:6a: 59:7f:f4:3b:78:c3:bb:6d:34:f4:39:f8:f7:26:43: 94:fe:6f:50:1f:66:d6:5c:e3:8e:14:7e:d6:09:87: 18:4e:ab:1f:27:49:41:f5:d1:89:3c:5f:56:b3:e9: 78:0f:b8:56:9d:b7:53:85:74:86:79:21:c4:bc:dd: 96:bf:8f:6c:c9:9e:a5:1a:f9:ea:c0:62:a9:a2:09: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:40:B0:4A:44:AC:D9:D5:4F:DF:30:FD:3E:A8:03:E0:3D:2D:38:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b/0a6dd0c3-e5a9-3ed0-8f70-5ead64048f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b/8ea6cffd-9dde-440f-9975-5f4e2e8e159b.crl X509v3 Authority Key Identifier: keyid:39:27:0C:2A:99:4E:96:C0:6B:A6:D8:5C:52:3E:5A:90:AE:CD:C6:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b.cer sbgp-ipAddrBlock: critical IPv4: 23.226.119.0/24 64.111.56.0/24 64.111.63.0/24 65.255.140.0/24 67.221.196.0-67.221.198.255 69.27.212.0/24 207.174.227.0/24 207.174.236.0/23 207.211.232.0/21 209.152.148.0/24 216.146.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:aa:ab:4b:ec:eb:6a:de:34:65:10:48:25:13:22:82:f9:b5: 9d:2d:13:fb:50:2d:e0:d9:f9:0d:c9:96:a3:d6:e1:f7:64:72: 0d:75:7e:08:58:9e:d5:8b:ea:e3:b7:7c:8d:f8:28:84:b1:0e: 2f:13:cd:7a:9c:a3:ea:ef:cb:5a:2f:1c:a0:01:83:23:56:b1: 51:e3:3b:94:ff:f7:ac:8b:e2:57:28:ed:2d:2c:f1:ce:f3:96: 2f:25:48:3e:aa:90:ce:8f:aa:60:97:ef:5b:4b:2e:ba:b9:e5: d3:e8:3c:c4:cc:cd:fa:d0:e2:6d:5e:ce:68:00:0e:c5:d2:51: 39:3f:c2:94:43:97:00:5a:c3:48:68:7e:83:3e:13:0c:40:e9: 86:d7:c8:d4:8f:fe:f0:e3:3d:cd:80:90:90:5a:fe:99:a4:62: 2b:21:18:81:11:a5:ef:f5:3c:4c:fb:14:ef:5e:fb:fd:1f:db: 5a:d0:43:ff:1c:29:30:80:cb:bb:64:c0:bd:e0:8c:a3:f6:cd: cc:f1:73:e4:e3:16:79:36:54:5b:e4:96:47:5d:0a:67:19:71: 2d:db:84:9e:1c:59:09:fe:33:80:be:af:fd:19:e9:0b:14:97: 01:01:9f:89:18:90:e4:64:c6:19:68:5d:60:84:b0:cb:b9:83: bd:65:61:2f -----BEGIN CERTIFICATE----- MIIGhzCCBW+gAwIBAgIUAQ0Mn0MoWE+F37VEFoibM7RIMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhNmNmZmQtOWRkZS00NDBmLTk5NzUtNWY0ZTJlOGUx NTliMB4XDTI2MTAxNjE2Mjg0MloXDTI3MDExNDE2MzU0MVowLzEtMCsGA1UEAxMk ZWE0ODFmY2UtMGZjNy00NDFiLTliMDAtMjAzNTgxMGIyMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooyL4ejen1tQ1/NmmAzSBqkra8WY2zxYSVfU pB3C1/m4S9UsWpfbsu5jCXV53NlMBB2m0AQV6vcIa3H1VLjm9r7NdM0dXhS0Iknl j8teYVQQ1S8kZaQIZu8EiAOcdnt5FHEyC4M3DPhEXJuLx5ubtZBtMi5r8TxBPyRi 6nUUgJyfzwNWaJGQ6C1klS6D9Yo0tlC5In3E3jVy1aDuPUZIkq16zNNAz70lk+1x 7tXhZdHLbWpZf/Q7eMO7bTT0Ofj3JkOU/m9QH2bWXOOOFH7WCYcYTqsfJ0lB9dGJ PF9Ws+l4D7hWnbdThXSGeSHEvN2Wv49syZ6lGvnqwGKpogkRlQIDAQABo4IDmTCC A5UwHQYDVR0OBBYEFAxAsEpErNnVT98w/T6oA+A9LTh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84ZWE2 Y2ZmZC05ZGRlLTQ0MGYtOTk3NS01ZjRlMmU4ZTE1OWIvMGE2ZGQwYzMtZTVhOS0z ZWQwLThmNzAtNWVhZDY0MDQ4ZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOGVhNmNmZmQtOWRkZS00NDBmLTk5 NzUtNWY0ZTJlOGUxNTliLzhlYTZjZmZkLTlkZGUtNDQwZi05OTc1LTVmNGUyZThl MTU5Yi5jcmwwHwYDVR0jBBgwFoAUOScMKplOlsBrpthcUj5akK7NxkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS84ZWE2Y2ZmZC05ZGRlLTQ0MGYtOTk3NS01ZjRl MmU4ZTE1OWIuY2VyMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAF+J3AwQA QG84AwQAQG8/AwQAQf+MMAwDBAJD3cQDBABD3cYDBABFG9QDBADPruMDBAHPruwD BAPP0+gDBADRmJQDBAPYkvAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfqqrS+zrat40ZRBIJRMigvm1nS0T +1At4Nn5DcmWo9bh92RyDXV+CFie1Yvq47d8jfgohLEOLxPNepyj6u/LWi8coAGD I1axUeM7lP/3rIviVyjtLSzxzvOWLyVIPqqQzo+qYJfvW0suurnl0+g8xMzN+tDi bV7OaAAOxdJROT/ClEOXAFrDSGh+gz4TDEDphtfI1I/+8OM9zYCQkFr+maRiKyEY gRGl7/U8TPsU7177/R/bWtBD/xwpMIDLu2TAveCMo/bNzPFz5OMWeTZUW+SWR10K ZxlxLduEnhxZCf4zgL6v/RnpCxSXAQGfiRiQ5GTGGWhdYISwy7mDvWVhLw== -----END CERTIFICATE-----Generated at Wed Nov 4 17:05:58 2026 by rpki-client