$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/3d10842f-4ce8-380f-a571-1372eee68f8b.roa File: 3d10842f-4ce8-380f-a571-1372eee68f8b.roa (raw, json) Hash identifier: 1to7Z3AdGADkc0Ka6YeHkZwL/J/63KsSy3/1zCVEq3Y= Subject key identifier: 61:DA:8A:F8:79:48:97:B8:A9:6C:26:FD:3F:93:22:53:EE:B3:41:95 Certificate issuer: /CN=c9ebd617-8b50-4a3f-9afd-d677753a7e57 Certificate serial: 010D0C9F4328584F6B723AF5F497FF8B75A75300 Authority key identifier: FE:79:B8:04:F3:90:9C:9B:3C:99:19:80:32:A3:6A:B4:F5:C7:A2:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/3d10842f-4ce8-380f-a571-1372eee68f8b.roa Signing time: Wed 07 Oct 2026 05:17:06 +0000 ROA not before: Wed 07 Oct 2026 05:17:06 +0000 ROA not after: Sat 02 Jan 2027 00:14:26 +0000 asID: 399226 IP address blocks: 23.168.40.0/24 maxlen: 24 156.9.36.0/22 maxlen: 22 199.85.12.0/22 maxlen: 22 2602:f9c3::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/c9ebd617-8b50-4a3f-9afd-d677753a7e57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/c9ebd617-8b50-4a3f-9afd-d677753a7e57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6b:72:3a:f5:f4:97:ff:8b:75:a7:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9ebd617-8b50-4a3f-9afd-d677753a7e57 Validity Not Before: Oct 7 05:17:06 2026 GMT Not After : Jan 2 00:14:26 2027 GMT Subject: CN=fda562b3-f95e-45ec-96cf-3b522a4bc061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:a7:8d:af:52:10:b8:49:24:27:f3:b2:8a: d5:ec:3c:2a:82:cf:26:10:e0:27:2f:4e:98:b5:b5: 7c:d3:b4:6f:dc:de:ee:08:a5:eb:15:19:f5:1c:80: 1b:66:83:6d:ef:b6:49:47:bb:43:b6:8f:7f:99:fc: e7:36:ee:7b:83:42:32:f2:06:1c:04:ea:6a:0c:2c: 86:67:e7:02:88:a6:1d:fb:a0:fc:73:49:f3:28:2c: c0:b4:a2:fc:3e:0e:a4:1b:3d:f7:f4:9e:af:c1:9a: 83:b6:be:03:22:4f:37:70:62:5b:8e:c2:6d:8b:ba: 3c:28:5a:b4:6d:d8:88:01:48:bc:cb:a7:22:6b:28: 43:93:82:7a:6d:31:8d:18:6d:ff:2c:8a:85:73:b7: 78:c5:f8:03:ad:aa:57:be:66:6d:4a:7c:4a:d2:21: 6c:fd:27:38:f0:43:ff:57:24:c7:86:1f:14:09:7e: 69:1d:93:63:be:e3:ff:c2:43:5e:3c:b3:bd:c4:34: 76:53:c7:94:b7:b4:bd:1a:bc:f3:86:d8:ad:5b:85: a5:c3:fd:7e:7d:9b:4c:7e:05:22:dd:4f:8b:3d:82: 6e:0c:97:56:5e:f8:54:aa:06:d6:31:9b:4f:6f:bd: a1:a9:37:b2:a4:48:d3:20:6a:c6:26:cb:85:b6:b0: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DA:8A:F8:79:48:97:B8:A9:6C:26:FD:3F:93:22:53:EE:B3:41:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/3d10842f-4ce8-380f-a571-1372eee68f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/c9ebd617-8b50-4a3f-9afd-d677753a7e57.crl X509v3 Authority Key Identifier: keyid:FE:79:B8:04:F3:90:9C:9B:3C:99:19:80:32:A3:6A:B4:F5:C7:A2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57.cer sbgp-ipAddrBlock: critical IPv4: 23.168.40.0/24 156.9.36.0/22 199.85.12.0/22 IPv6: 2602:f9c3::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:83:4a:db:04:d7:7b:2b:d4:9c:76:70:93:9d:d9:49:d6:e1: 83:eb:aa:e8:d7:f2:7c:4f:82:e2:2f:16:e9:d0:0c:ff:6e:4f: f6:53:c4:9a:4c:ef:c3:df:ff:81:2f:8f:f1:f5:97:ba:95:b4: fa:9d:b8:b9:21:9a:f9:2e:b6:64:f4:d4:c2:4d:61:f4:10:fa: e1:de:1c:2d:27:1e:13:ec:0a:2e:3f:55:f7:81:68:59:dd:9d: 4f:bf:ed:1b:40:8b:78:20:6a:fa:4d:ac:4d:10:52:56:b4:76: 36:b8:82:a6:f5:13:af:2d:7d:9e:97:4f:a0:e4:a2:d9:90:a0: fc:dc:bc:03:3f:bc:0d:b6:cc:f4:60:b4:02:f8:9f:3d:20:68: 19:4f:f5:51:77:ec:87:80:5a:fb:ab:3c:e6:22:d1:d7:6b:b6: 96:e3:85:5e:59:55:3f:8f:31:5c:d3:86:c1:96:cf:c4:fc:2b: 1a:79:3e:6c:78:a6:37:90:76:32:83:b0:87:0a:7e:30:af:2f: c9:14:20:f1:bf:e7:30:01:f2:8a:8e:1d:b7:ff:aa:87:e1:ef: af:db:59:e6:77:30:32:3d:36:6e:b1:01:31:53:fb:8d:9d:c6: 90:94:39:06:d2:31:99:a0:c4:4a:90:40:32:e9:3d:db:e0:50: 2a:1c:6a:a7 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWE9rcjr19Jf/i3WnUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzllYmQ2MTctOGI1MC00YTNmLTlhZmQtZDY3Nzc1M2E3 ZTU3MB4XDTI2MTAwNzA1MTcwNloXDTI3MDEwMjAwMTQyNlowLzEtMCsGA1UEAxMk ZmRhNTYyYjMtZjk1ZS00NWVjLTk2Y2YtM2I1MjJhNGJjMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0POnja9SELhJJCfzsorV7Dwqgs8mEOAnL06Y tbV807Rv3N7uCKXrFRn1HIAbZoNt77ZJR7tDto9/mfznNu57g0Iy8gYcBOpqDCyG Z+cCiKYd+6D8c0nzKCzAtKL8Pg6kGz339J6vwZqDtr4DIk83cGJbjsJti7o8KFq0 bdiIAUi8y6ciayhDk4J6bTGNGG3/LIqFc7d4xfgDrapXvmZtSnxK0iFs/Sc48EP/ VyTHhh8UCX5pHZNjvuP/wkNePLO9xDR2U8eUt7S9GrzzhtitW4Wlw/1+fZtMfgUi 3U+LPYJuDJdWXvhUqgbWMZtPb72hqTeypEjTIGrGJsuFtrA+KwIDAQABo4IDcTCC A20wHQYDVR0OBBYEFGHaivh5SJe4qWwm/T+TIlPus0GVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9jOWVi ZDYxNy04YjUwLTRhM2YtOWFmZC1kNjc3NzUzYTdlNTcvM2QxMDg0MmYtNGNlOC0z ODBmLWE1NzEtMTM3MmVlZTY4ZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYzllYmQ2MTctOGI1MC00YTNmLTlh ZmQtZDY3Nzc1M2E3ZTU3L2M5ZWJkNjE3LThiNTAtNGEzZi05YWZkLWQ2Nzc3NTNh N2U1Ny5jcmwwHwYDVR0jBBgwFoAU/nm4BPOQnJs8mRmAMqNqtPXHogUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9jOWViZDYxNy04YjUwLTRhM2YtOWFmZC1kNjc3 NzUzYTdlNTcuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQAF6goAwQC nAkkAwQCx1UMMA4EAgACMAgDBgQmAvnDADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKg0rbBNd7K9ScdnCT ndlJ1uGD66ro1/J8T4LiLxbp0Az/bk/2U8SaTO/D3/+BL4/x9Ze6lbT6nbi5IZr5 LrZk9NTCTWH0EPrh3hwtJx4T7AouP1X3gWhZ3Z1Pv+0bQIt4IGr6TaxNEFJWtHY2 uIKm9ROvLX2el0+g5KLZkKD83LwDP7wNtsz0YLQC+J89IGgZT/VRd+yHgFr7qzzm ItHXa7aW44VeWVU/jzFc04bBls/E/CsaeT5seKY3kHYyg7CHCn4wry/JFCDxv+cw AfKKjh23/6qH4e+v21nmdzAyPTZusQExU/uNncaQlDkG0jGZoMRKkEAy6T3b4FAq HGqn -----END CERTIFICATE-----Generated at Wed Oct 28 18:42:09 2026 by rpki-client