$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa File: 8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa (raw, json) Hash identifier: 5vemX/6TmrS0M2Rfq8S67FZ+8ib0E0EayItBAhS+RiY= Subject key identifier: A7:35:8A:7A:7D:5F:FC:3F:44:A9:66:84:26:FC:1C:A3:03:1D:68:C3 Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F4328584EA78F39CE486C93D2A2E28D80 Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 62715 IP address blocks: 64.207.222.0/23 maxlen: 24 67.222.252.0/22 maxlen: 24 68.65.192.0/21 maxlen: 24 103.8.239.0/24 maxlen: 24 162.222.40.0/21 maxlen: 24 216.9.196.0/23 maxlen: 24 216.9.198.0/24 maxlen: 24 2606:4a80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:39:ce:48:6c:93:d2:a2:e2:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=16c3e3c3-37d8-4a13-ad82-71821203bf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:bd:26:a8:b1:94:73:0e:cb:5e:d4:9d:e4: d5:f6:57:46:d7:35:ba:93:cc:69:dc:df:fa:24:c5: 3a:c0:6d:d6:a1:5d:14:1b:ce:71:91:3e:5c:4c:0e: d2:55:b4:e5:45:a5:52:8e:8d:db:a3:63:36:b7:2c: 52:fa:8c:b9:0b:0e:e6:48:96:c3:66:b0:e1:24:b2: c8:a3:e8:a3:38:da:48:ef:fc:e3:97:ea:f1:e3:b7: 03:86:78:f6:aa:d0:fd:d1:77:63:41:dd:3a:dc:c0: a5:8c:77:df:5c:b3:93:4c:34:46:57:5e:8b:11:31: d2:e4:f8:e6:23:cb:5c:5d:36:38:19:f3:40:00:ff: 41:ae:bc:5e:ac:f0:11:6e:fa:45:b0:76:99:a0:aa: 91:8e:4f:19:01:57:26:af:b2:7a:dd:33:0f:c5:9a: 38:76:b6:47:66:33:d3:b5:9e:8f:91:be:1e:57:60: e4:19:c3:27:e3:59:48:0d:46:7e:97:dc:01:b1:1c: 6a:50:6a:31:ad:f4:5d:ec:36:58:3b:96:09:59:96: b8:f4:bd:16:e8:96:90:65:1d:22:cd:3c:1a:27:31: 1f:9c:03:c8:00:c2:52:70:f3:c1:4a:c0:ec:10:3d: 84:47:e2:ad:fc:21:03:72:76:91:1f:c9:26:8a:1e: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:35:8A:7A:7D:5F:FC:3F:44:A9:66:84:26:FC:1C:A3:03:1D:68:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 64.207.222.0/23 67.222.252.0/22 68.65.192.0/21 103.8.239.0/24 162.222.40.0/21 216.9.196.0-216.9.198.255 IPv6: 2606:4a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d7:38:85:44:4e:65:f8:c0:4b:79:ce:56:71:4f:1f:58:6e: e3:64:73:73:30:b3:68:2c:7d:08:d7:bb:18:d7:ff:7d:9d:d6: 3c:f9:eb:4b:83:8e:7f:7b:ca:da:b9:ec:86:46:7d:b8:6c:5e: f9:b0:54:22:6d:a2:e1:5d:e6:94:54:ee:44:f1:32:2f:71:1f: 9a:c3:1c:18:fc:3f:79:3c:db:c5:6b:48:d5:d7:ff:ba:62:70: 5a:bf:81:1b:ee:e3:1e:fc:67:56:79:f6:58:68:d1:8e:92:77: 98:fb:f4:81:a0:cf:70:53:aa:e8:0f:82:aa:fb:37:b2:51:b7: f4:b5:24:45:f5:22:92:f5:98:c5:30:b4:e4:77:64:9c:c6:ad: 13:ee:83:f7:2a:c5:f6:ba:6a:aa:f7:40:48:a9:0d:48:1f:c2: 6f:d7:45:36:79:b1:b0:a0:39:37:1f:d0:f0:49:d2:ee:2c:61: e4:c0:f3:ba:7e:e0:c4:1b:29:82:66:9f:2f:56:7b:c7:8e:d3: 7f:77:29:62:a0:6a:05:17:0f:80:08:bc:f3:bd:40:ca:a0:6c: 2e:34:94:23:9d:6c:df:ac:b6:d7:6b:45:a1:c1:2f:d7:26:77: 96:3f:c8:50:52:ed:25:35:f9:c7:8b:1e:82:f4:ea:c5:90:4e: 1b:39:2d:1a -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWE6njznOSGyT0qLijYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTZjM2UzYzMtMzdkOC00YTEzLWFkODItNzE4MjEyMDNiZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr229JqixlHMOy17UneTV9ldG1zW6k8xp3N/6 JMU6wG3WoV0UG85xkT5cTA7SVbTlRaVSjo3bo2M2tyxS+oy5Cw7mSJbDZrDhJLLI o+ijONpI7/zjl+rx47cDhnj2qtD90XdjQd063MCljHffXLOTTDRGV16LETHS5Pjm I8tcXTY4GfNAAP9BrrxerPARbvpFsHaZoKqRjk8ZAVcmr7J63TMPxZo4drZHZjPT tZ6Pkb4eV2DkGcMn41lIDUZ+l9wBsRxqUGoxrfRd7DZYO5YJWZa49L0W6JaQZR0i zTwaJzEfnAPIAMJScPPBSsDsED2ER+Kt/CEDcnaRH8kmih7uSQIDAQABo4IDijCC A4YwHQYDVR0OBBYEFKc1inp9X/w/RKlmhCb8HKMDHWjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvODA0MmU1YTUtY2I5Yi0z ZDNkLWFjZTMtMmRlMWUyMjcyYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQBQM/eAwQC Q978AwQDREHAAwQAZwjvAwQDot4oMAwDBALYCcQDBADYCcYwDQQCAAIwBwMFACYG SoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAPdc4hUROZfjAS3nOVnFPH1hu42RzczCzaCx9CNe7GNf/fZ3W PPnrS4OOf3vK2rnshkZ9uGxe+bBUIm2i4V3mlFTuRPEyL3EfmsMcGPw/eTzbxWtI 1df/umJwWr+BG+7jHvxnVnn2WGjRjpJ3mPv0gaDPcFOq6A+Cqvs3slG39LUkRfUi kvWYxTC05HdknMatE+6D9yrF9rpqqvdASKkNSB/Cb9dFNnmxsKA5Nx/Q8EnS7ixh 5MDzun7gxBspgmafL1Z7x47Tf3cpYqBqBRcPgAi8871AyqBsLjSUI51s36y212tF ocEv1yZ3lj/IUFLtJTX5x4segvTqxZBOGzktGg== -----END CERTIFICATE-----Generated at Sat Sep 5 08:11:12 2026 by rpki-client