$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/5ed32b06-6517-3f0f-87e2-0cd0e6338bf3.roa File: 5ed32b06-6517-3f0f-87e2-0cd0e6338bf3.roa (raw, json) Hash identifier: 0k8J0CHPe+QKjRavWiwnPPe9KgqrgMwYeSHKVvFA7yU= Subject key identifier: 1C:03:4D:EA:7B:0C:2E:84:BB:35:40:C6:BE:CB:1B:8D:6B:0C:F9:62 Certificate issuer: /CN=cbad4f77-6011-4cb2-a417-af400d03bc68 Certificate serial: 010D0C9F4328584FB9048E975DD33F1CF0FBE800 Authority key identifier: CA:9A:3D:9B:53:1F:23:66:01:97:79:51:68:3C:7F:E5:AF:C7:7D:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/5ed32b06-6517-3f0f-87e2-0cd0e6338bf3.roa Signing time: Wed 04 Nov 2026 00:09:11 +0000 ROA not before: Wed 04 Nov 2026 00:09:11 +0000 ROA not after: Tue 22 Dec 2026 17:28:55 +0000 asID: 399282 IP address blocks: 162.210.20.0/22 maxlen: 24 192.200.24.0/21 maxlen: 24 209.147.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/cbad4f77-6011-4cb2-a417-af400d03bc68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/cbad4f77-6011-4cb2-a417-af400d03bc68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:04:8e:97:5d:d3:3f:1c:f0:fb:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbad4f77-6011-4cb2-a417-af400d03bc68 Validity Not Before: Nov 4 00:09:11 2026 GMT Not After : Dec 22 17:28:55 2026 GMT Subject: CN=b06f5c15-b491-44cd-a80c-96ef6f9c0b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:0c:28:bd:84:d0:b8:f3:fd:f3:e5:ef:92: 30:08:04:78:45:55:0e:d0:9e:47:8f:b0:73:18:fd: cd:f8:76:80:9f:27:df:55:9f:ad:b6:3d:3a:07:8a: 9a:5c:ab:cb:98:b1:70:9b:8d:ec:41:09:ec:47:d7: 11:44:bb:52:ce:6c:df:e9:d6:4c:2b:b9:f3:27:0d: 71:07:5b:f8:c1:45:cc:86:6d:44:70:4b:65:39:2f: c5:21:de:1e:54:79:a6:b8:2e:19:e1:fa:d2:b1:87: 4d:47:17:2c:6d:47:8a:97:72:96:7c:81:bb:19:d3: 79:dd:d0:c6:73:d2:ad:69:ff:2e:c1:73:17:7d:89: 3e:18:79:e4:30:24:7a:2c:65:38:54:67:a3:de:50: a0:1d:c8:d5:33:f8:3b:f4:06:e9:18:e5:fe:dc:d9: 86:64:85:5c:20:29:47:ef:f6:79:74:5b:5a:39:65: 97:f5:e7:8e:f4:d6:dd:81:16:e6:9d:66:3b:2f:3f: 55:77:b9:b2:d4:b3:b0:7e:f5:e7:80:24:38:65:5f: 5c:17:e9:44:93:3a:9b:88:c0:35:90:88:df:c4:c8: 6a:8a:5a:fa:53:2c:a3:2a:f3:92:33:14:d7:c1:cb: dc:d8:38:24:39:db:50:36:82:cb:09:6a:15:96:dc: 41:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:03:4D:EA:7B:0C:2E:84:BB:35:40:C6:BE:CB:1B:8D:6B:0C:F9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/5ed32b06-6517-3f0f-87e2-0cd0e6338bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/cbad4f77-6011-4cb2-a417-af400d03bc68.crl X509v3 Authority Key Identifier: keyid:CA:9A:3D:9B:53:1F:23:66:01:97:79:51:68:3C:7F:E5:AF:C7:7D:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68.cer sbgp-ipAddrBlock: critical IPv4: 162.210.20.0/22 192.200.24.0/21 209.147.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:01:9b:d6:9d:29:00:bc:f7:1e:1c:52:74:93:14:ed:a5:0b: ad:f9:16:0a:a0:38:b3:4c:3d:4b:d6:67:7b:c8:30:bb:5a:3e: 81:c6:ea:76:60:ac:86:fd:1a:fc:4c:4c:e1:90:f5:17:94:78: 03:c1:8f:ac:4f:3e:bb:67:9f:26:20:f0:0e:80:35:ca:82:62: 28:e5:04:3d:67:b0:d8:eb:7a:13:a3:a2:b1:8e:38:88:02:7b: d0:e6:cb:0c:9b:67:98:de:69:05:e9:49:ce:a8:8f:63:8c:a2: 85:be:b6:de:aa:3a:a3:b9:77:41:54:5b:79:d3:5a:12:d3:1e: 2c:e3:84:61:fe:af:1b:81:d7:3c:fb:22:c4:87:96:d6:ba:51: f2:bb:f6:18:9b:0a:e5:cf:9c:08:0f:b6:ca:9c:61:9a:a9:ed: da:5d:a7:8f:72:e7:3b:75:45:92:9f:0c:2a:1c:04:ec:f0:cb: 28:67:72:7e:c8:0d:10:60:72:5e:48:00:ac:f4:ba:0a:ca:2b: 0c:2f:1a:8a:22:61:75:17:78:41:9a:18:1f:67:19:a1:dd:79: 62:db:31:3c:2f:8b:37:41:58:51:fb:c5:56:83:22:26:4b:73: 90:2f:29:50:d0:b2:92:8d:b2:3a:1e:33:5a:34:30:9d:42:a3: 41:e1:77:e9 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE+5BI6XXdM/HPD76AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JhZDRmNzctNjAxMS00Y2IyLWE0MTctYWY0MDBkMDNi YzY4MB4XDTI2MTEwNDAwMDkxMVoXDTI2MTIyMjE3Mjg1NVowLzEtMCsGA1UEAxMk YjA2ZjVjMTUtYjQ5MS00NGNkLWE4MGMtOTZlZjZmOWMwYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTUMKL2E0Ljz/fPl75IwCAR4RVUO0J5Hj7Bz GP3N+HaAnyffVZ+ttj06B4qaXKvLmLFwm43sQQnsR9cRRLtSzmzf6dZMK7nzJw1x B1v4wUXMhm1EcEtlOS/FId4eVHmmuC4Z4frSsYdNRxcsbUeKl3KWfIG7GdN53dDG c9Ktaf8uwXMXfYk+GHnkMCR6LGU4VGej3lCgHcjVM/g79AbpGOX+3NmGZIVcIClH 7/Z5dFtaOWWX9eeO9NbdgRbmnWY7Lz9Vd7my1LOwfvXngCQ4ZV9cF+lEkzqbiMA1 kIjfxMhqilr6UyyjKvOSMxTXwcvc2DgkOdtQNoLLCWoVltxBLQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBwDTep7DC6EuzVAxr7LG41rDPliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9jYmFk NGY3Ny02MDExLTRjYjItYTQxNy1hZjQwMGQwM2JjNjgvNWVkMzJiMDYtNjUxNy0z ZjBmLTg3ZTItMGNkMGU2MzM4YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvY2JhZDRmNzctNjAxMS00Y2IyLWE0 MTctYWY0MDBkMDNiYzY4L2NiYWQ0Zjc3LTYwMTEtNGNiMi1hNDE3LWFmNDAwZDAz YmM2OC5jcmwwHwYDVR0jBBgwFoAUypo9m1MfI2YBl3lRaDx/5a/HfZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9jYmFkNGY3Ny02MDExLTRjYjItYTQxNy1hZjQw MGQwM2JjNjguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCotIUAwQD wMgYAwQD0ZNoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC0Bm9adKQC89x4cUnSTFO2lC635FgqgOLNMPUvW Z3vIMLtaPoHG6nZgrIb9GvxMTOGQ9ReUeAPBj6xPPrtnnyYg8A6ANcqCYijlBD1n sNjrehOjorGOOIgCe9DmywybZ5jeaQXpSc6oj2OMooW+tt6qOqO5d0FUW3nTWhLT HizjhGH+rxuB1zz7IsSHlta6UfK79hibCuXPnAgPtsqcYZqp7dpdp49y5zt1RZKf DCocBOzwyyhncn7IDRBgcl5IAKz0ugrKKwwvGooiYXUXeEGaGB9nGaHdeWLbMTwv izdBWFH7xVaDIiZLc5AvKVDQspKNsjoeM1o0MJ1Co0Hhd+k= -----END CERTIFICATE-----Generated at Wed Nov 4 02:39:26 2026 by rpki-client