$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/8ef476d3-edc2-3506-81f5-1587e7fa2787.roa File: 8ef476d3-edc2-3506-81f5-1587e7fa2787.roa (raw, json) Hash identifier: n1qNifoDVz2Rl9saisBo7gS7Jsqp43MjXGz4GYbxACY= Subject key identifier: B8:3C:6F:04:F5:A6:C3:27:52:F7:33:25:84:20:71:1B:75:C6:52:AF Certificate issuer: /CN=3f5f9855-5e8e-495a-9caa-dee2f22bdbc6 Certificate serial: 010D0C9F4328584F86DDA661BACAF96CBDF12620 Authority key identifier: CE:04:33:09:CA:13:55:30:CB:8E:7E:93:C8:41:FC:57:75:8F:AE:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/8ef476d3-edc2-3506-81f5-1587e7fa2787.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 13974 IP address blocks: 23.176.200.0/24 maxlen: 24 131.143.180.0/22 maxlen: 24 179.253.224.0/19 maxlen: 24 179.255.96.0/19 maxlen: 24 179.255.128.0/19 maxlen: 24 191.222.208.0/20 maxlen: 24 191.223.208.0/20 maxlen: 24 2602:f91a::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:a6:61:ba:ca:f9:6c:bd:f1:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5f9855-5e8e-495a-9caa-dee2f22bdbc6 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=1cff3335-a28e-4f7d-9843-d3d5ea3cd79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:7d:de:18:e0:8e:60:56:f7:0e:65:59:ba: 56:51:53:4d:7e:93:46:2f:e5:fe:72:bb:ec:dc:c9: 17:75:9d:71:7c:5e:c0:02:e5:74:12:c6:51:b7:2f: 6e:7d:9f:4a:a8:a6:6a:3c:68:44:52:24:2f:21:bb: ab:83:a5:4e:ef:13:fb:b5:f4:b7:81:e2:d5:92:2f: bd:05:24:e6:a7:48:e0:85:e4:dd:58:79:4b:ca:7e: f6:1f:0f:d7:83:43:58:b4:bc:45:85:36:8b:17:db: 3a:c8:cd:8c:af:9f:dd:5f:42:28:60:1a:97:ed:61: b0:59:e5:96:c9:b2:52:fc:51:73:7e:c6:e6:60:f2: 3a:56:c8:01:1e:37:55:b9:60:61:bc:7c:a7:3b:da: 8e:b0:16:b7:69:25:b6:2c:3e:ec:04:89:d6:e5:9c: b5:70:91:e4:0b:cc:ed:ef:c4:ae:63:48:ab:6a:61: e1:b0:c4:ff:1b:40:71:71:1d:49:46:94:c8:a7:6c: 85:ef:51:f3:f3:14:46:5a:7f:1b:1b:07:cb:ab:06: fa:77:4b:a6:d0:4e:6d:62:ae:2a:88:23:ea:2f:1a: 12:d1:3a:95:ee:5d:af:3c:a3:96:6b:ad:a9:e9:28: 72:ab:d3:98:f8:90:6b:c3:2b:ba:4e:fe:b8:d6:33: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3C:6F:04:F5:A6:C3:27:52:F7:33:25:84:20:71:1B:75:C6:52:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/8ef476d3-edc2-3506-81f5-1587e7fa2787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.crl X509v3 Authority Key Identifier: keyid:CE:04:33:09:CA:13:55:30:CB:8E:7E:93:C8:41:FC:57:75:8F:AE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer sbgp-ipAddrBlock: critical IPv4: 23.176.200.0/24 131.143.180.0/22 179.253.224.0/19 179.255.96.0-179.255.159.255 191.222.208.0/20 191.223.208.0/20 IPv6: 2602:f91a::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3b:60:5c:69:02:34:d8:62:95:f1:cb:e0:f5:69:05:af:55: 70:d5:a8:84:0b:0b:56:81:15:49:d6:36:07:41:00:12:fe:df: d9:1a:09:9b:4c:b4:45:dd:e8:f4:1e:09:80:62:74:33:ab:4f: 80:e4:d7:e2:a4:bd:29:f7:01:8a:f5:65:8f:c7:20:92:3c:d4: 20:51:ca:77:06:63:88:e8:10:88:7c:1e:f8:7f:83:72:5d:90: 8d:92:67:0a:b2:4b:e1:d9:09:ce:34:06:9f:1c:8f:55:71:4f: 26:f2:29:38:c9:77:00:73:fe:ed:0b:a5:c7:d2:18:de:05:db: 9b:d2:fb:e0:61:0d:bc:c7:25:f4:bc:71:84:64:b4:7e:6b:8a: a7:fe:a1:0f:56:59:6c:eb:6a:bb:1a:7f:9f:c3:4b:4e:d5:86: 9f:f8:b2:4d:12:e0:cb:20:89:8a:ff:23:03:06:9d:5e:5b:c4: 22:55:2b:70:66:9f:94:c0:e2:54:6b:24:bb:41:42:62:2c:91: ea:98:0c:aa:d0:bf:c1:47:fa:67:aa:91:f4:f9:d6:ef:3d:34: 39:c2:79:f6:82:9d:b0:e4:be:cf:cd:1a:b1:f7:7a:97:0c:44: 8b:f4:7e:e3:6e:cf:2f:5f:63:80:e5:b7:e5:8a:e5:13:92:26: ee:30:6a:e0 -----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgIUAQ0Mn0MoWE+G3aZhusr5bL3xJiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y1Zjk4NTUtNWU4ZS00OTVhLTljYWEtZGVlMmYyMmJk YmM2MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk MWNmZjMzMzUtYTI4ZS00ZjdkLTk4NDMtZDNkNWVhM2NkNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJp93hjgjmBW9w5lWbpWUVNNfpNGL+X+crvs 3MkXdZ1xfF7AAuV0EsZRty9ufZ9KqKZqPGhEUiQvIburg6VO7xP7tfS3geLVki+9 BSTmp0jgheTdWHlLyn72Hw/Xg0NYtLxFhTaLF9s6yM2Mr5/dX0IoYBqX7WGwWeWW ybJS/FFzfsbmYPI6VsgBHjdVuWBhvHynO9qOsBa3aSW2LD7sBInW5Zy1cJHkC8zt 78SuY0iramHhsMT/G0BxcR1JRpTIp2yF71Hz8xRGWn8bGwfLqwb6d0um0E5tYq4q iCPqLxoS0TqV7l2vPKOWa62p6Shyq9OY+JBrwyu6Tv641jMmWwIDAQABo4IDizCC A4cwHQYDVR0OBBYEFLg8bwT1psMnUvczJYQgcRt1xlKvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZjVm OTg1NS01ZThlLTQ5NWEtOWNhYS1kZWUyZjIyYmRiYzYvOGVmNDc2ZDMtZWRjMi0z NTA2LTgxZjUtMTU4N2U3ZmEyNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Y1Zjk4NTUtNWU4ZS00OTVhLTlj YWEtZGVlMmYyMmJkYmM2LzNmNWY5ODU1LTVlOGUtNDk1YS05Y2FhLWRlZTJmMjJi ZGJjNi5jcmwwHwYDVR0jBBgwFoAUzgQzCcoTVTDLjn6TyEH8V3WPrgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zZjVmOTg1NS01ZThlLTQ5NWEtOWNhYS1kZWUy ZjIyYmRiYzYuY2VyMFUGCCsGAQUFBwEHAQH/BEYwRDAyBAIAATAsAwQAF7DIAwQC g4+0AwQFs/3gMAwDBAWz/2ADBAWz/4ADBAS/3tADBAS/39AwDgQCAAIwCAMGACYC +RoAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFQ7YFxpAjTYYpXxy+D1aQWvVXDVqIQLC1aBFUnWNgdBABL+ 39kaCZtMtEXd6PQeCYBidDOrT4Dk1+KkvSn3AYr1ZY/HIJI81CBRyncGY4joEIh8 Hvh/g3JdkI2SZwqyS+HZCc40Bp8cj1VxTybyKTjJdwBz/u0LpcfSGN4F25vS++Bh DbzHJfS8cYRktH5riqf+oQ9WWWzrarsaf5/DS07Vhp/4sk0S4MsgiYr/IwMGnV5b xCJVK3Bmn5TA4lRrJLtBQmIskeqYDKrQv8FH+meqkfT51u89NDnCefaCnbDkvs/N GrH3epcMRIv0fuNuzy9fY4Dlt+WK5ROSJu4wauA= -----END CERTIFICATE-----Generated at Wed Oct 21 21:05:30 2026 by rpki-client