$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/9b3b48d5-ec51-32db-a74f-2ac1e3172235.roa File: 9b3b48d5-ec51-32db-a74f-2ac1e3172235.roa (raw, json) Hash identifier: zcW3Ao2p6pZiY6T+y5A3MFy7exidFoMg4q3I0uYdGkc= Subject key identifier: 42:B2:E1:8F:1A:6D:1A:CC:14:93:01:D8:F5:79:51:EF:4C:5B:CA:8C Certificate issuer: /CN=73d04562-1247-40b7-bf6a-820de7e69a7a Certificate serial: 010D0C9F4328584F77836084C91EE7EADCF7B808 Authority key identifier: 53:24:CF:5A:47:5C:D5:F0:2C:FD:07:08:D8:5B:79:4C:49:9C:E8:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/9b3b48d5-ec51-32db-a74f-2ac1e3172235.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 399016 IP address blocks: 23.168.208.0/24 maxlen: 24 64.227.208.0/22 maxlen: 22 64.227.208.0/24 maxlen: 24 64.227.209.0/24 maxlen: 24 64.227.210.0/24 maxlen: 24 64.227.211.0/24 maxlen: 24 96.9.100.0/22 maxlen: 22 96.9.100.0/24 maxlen: 24 96.9.101.0/24 maxlen: 24 96.9.102.0/24 maxlen: 24 96.9.103.0/24 maxlen: 24 192.139.176.0/21 maxlen: 21 192.139.176.0/24 maxlen: 24 192.139.177.0/24 maxlen: 24 192.139.178.0/24 maxlen: 24 192.139.179.0/24 maxlen: 24 192.139.180.0/24 maxlen: 24 192.139.181.0/24 maxlen: 24 192.139.182.0/24 maxlen: 24 192.139.183.0/24 maxlen: 24 2606:3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/73d04562-1247-40b7-bf6a-820de7e69a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/73d04562-1247-40b7-bf6a-820de7e69a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:60:84:c9:1e:e7:ea:dc:f7:b8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d04562-1247-40b7-bf6a-820de7e69a7a Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=f38c8247-599e-4beb-82ad-3633155ab068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:c3:5e:cc:9d:9a:c7:28:55:13:04:db:77: 62:7b:53:c9:cc:ea:f0:ff:38:dd:49:1c:87:61:b2: c8:14:21:74:65:67:95:92:be:c4:54:6f:8a:2f:11: b3:51:4f:7e:28:f0:04:64:bf:fa:ee:f8:31:b1:45: 67:8d:d7:7e:26:31:8f:d8:54:f6:d0:03:e8:bf:14: d8:b3:f4:a6:4c:cd:32:c3:21:c7:f9:86:5d:d9:33: c7:9e:19:2e:80:5d:ad:7c:29:82:0d:05:89:7a:d9: 95:b9:e1:06:a7:0b:50:1a:ec:1c:a6:77:9b:67:26: 90:df:dc:18:86:65:51:1b:5c:b9:6d:50:ec:98:8f: 51:ad:85:e6:21:20:45:c1:df:d5:c9:32:1d:27:d1: 8f:9e:24:28:e7:f7:f1:42:f9:11:d4:bd:0f:fe:5a: d5:8a:70:18:90:df:71:02:33:9e:fe:1d:ee:06:54: ba:d7:87:f3:a2:7d:f9:13:8b:bc:16:7a:21:7c:0f: 43:35:ae:ff:2d:7c:bb:99:a8:f5:34:4d:4a:13:7a: 30:b5:d8:39:c7:b7:9d:50:26:1a:92:8e:ba:45:c5: e8:d1:6f:b9:08:e3:c0:de:27:83:67:26:1f:40:42: 9d:22:8d:ef:bd:6d:16:ad:71:bf:de:91:3d:f0:d7: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B2:E1:8F:1A:6D:1A:CC:14:93:01:D8:F5:79:51:EF:4C:5B:CA:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/9b3b48d5-ec51-32db-a74f-2ac1e3172235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/73d04562-1247-40b7-bf6a-820de7e69a7a.crl X509v3 Authority Key Identifier: keyid:53:24:CF:5A:47:5C:D5:F0:2C:FD:07:08:D8:5B:79:4C:49:9C:E8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a.cer sbgp-ipAddrBlock: critical IPv4: 23.168.208.0/24 64.227.208.0/22 96.9.100.0/22 192.139.176.0/21 IPv6: 2606:3c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f2:5b:1f:91:a4:62:81:be:ec:91:6a:e8:6e:f8:10:5c:d3: 4e:5e:39:2f:91:34:a1:37:22:c5:a3:4a:ed:5a:95:3d:d2:32: 45:97:91:3f:38:09:6e:2b:1a:27:5d:46:ab:1b:5b:fa:cb:81: f4:be:2a:23:6b:bd:11:39:53:a8:bb:5e:54:1f:7d:44:99:77: 3e:83:8d:77:80:98:e1:35:d7:a2:4f:49:44:42:27:69:49:90: 19:c9:59:31:1b:e1:38:9e:5a:8b:12:6d:2c:49:86:ba:f0:5a: a8:99:4c:c4:46:81:82:29:93:ec:64:fb:3e:35:3c:26:46:dd: 83:71:1e:2d:34:6b:e1:78:32:43:32:9d:b9:25:36:af:6a:a4: 78:82:0f:4e:bc:8f:20:44:b6:0d:6b:73:c0:c4:5a:f4:45:c6: 8e:46:86:8c:9b:e8:1a:5c:92:38:cd:b9:1a:c9:de:39:ea:a3: a2:b5:78:2a:e6:13:e4:ea:39:ef:aa:62:ad:24:d8:d6:16:99: c5:01:70:59:6d:db:82:4f:e9:15:12:80:4d:37:6b:6a:a6:67: 3c:88:cf:21:92:0e:b2:f8:22:51:4c:92:ca:ea:ce:c6:36:9b: 9e:b1:5d:eb:8c:e5:c1:8a:1c:df:c7:d0:17:0d:51:1e:5b:33: cf:9e:a9:ae -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE93g2CEyR7n6tz3uAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNkMDQ1NjItMTI0Ny00MGI3LWJmNmEtODIwZGU3ZTY5 YTdhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjM4YzgyNDctNTk5ZS00YmViLTgyYWQtMzYzMzE1NWFiMDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCnDXsydmscoVRME23die1PJzOrw/zjdSRyH YbLIFCF0ZWeVkr7EVG+KLxGzUU9+KPAEZL/67vgxsUVnjdd+JjGP2FT20APovxTY s/SmTM0ywyHH+YZd2TPHnhkugF2tfCmCDQWJetmVueEGpwtQGuwcpnebZyaQ39wY hmVRG1y5bVDsmI9RrYXmISBFwd/VyTIdJ9GPniQo5/fxQvkR1L0P/lrVinAYkN9x AjOe/h3uBlS614fzon35E4u8FnohfA9DNa7/LXy7maj1NE1KE3owtdg5x7edUCYa ko66RcXo0W+5COPA3ieDZyYfQEKdIo3vvW0WrXG/3pE98NfnSQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFEKy4Y8abRrMFJMB2PV5Ue9MW8qMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83M2Qw NDU2Mi0xMjQ3LTQwYjctYmY2YS04MjBkZTdlNjlhN2EvOWIzYjQ4ZDUtZWM1MS0z MmRiLWE3NGYtMmFjMWUzMTcyMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzNkMDQ1NjItMTI0Ny00MGI3LWJm NmEtODIwZGU3ZTY5YTdhLzczZDA0NTYyLTEyNDctNDBiNy1iZjZhLTgyMGRlN2U2 OWE3YS5jcmwwHwYDVR0jBBgwFoAUUyTPWkdc1fAs/QcI2Ft5TEmc6HcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83M2QwNDU2Mi0xMjQ3LTQwYjctYmY2YS04MjBk ZTdlNjlhN2EuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAF6jQAwQC QOPQAwQCYAlkAwQDwIuwMA0EAgACMAcDBQAmBgPAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGbyWx+RpGKB vuyRauhu+BBc005eOS+RNKE3IsWjSu1alT3SMkWXkT84CW4rGiddRqsbW/rLgfS+ KiNrvRE5U6i7XlQffUSZdz6DjXeAmOE116JPSURCJ2lJkBnJWTEb4TieWosSbSxJ hrrwWqiZTMRGgYIpk+xk+z41PCZG3YNxHi00a+F4MkMynbklNq9qpHiCD068jyBE tg1rc8DEWvRFxo5Ghoyb6BpckjjNuRrJ3jnqo6K1eCrmE+TqOe+qYq0k2NYWmcUB cFlt24JP6RUSgE03a2qmZzyIzyGSDrL4IlFMksrqzsY2m56xXeuM5cGKHN/H0BcN UR5bM8+eqa4= -----END CERTIFICATE-----Generated at Sun Oct 25 15:48:56 2026 by rpki-client