$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85/8a249ea1-e9d8-3709-b24a-0c1469c0e06a.roa File: 8a249ea1-e9d8-3709-b24a-0c1469c0e06a.roa (raw, json) Hash identifier: cZ5BOHR4L+o/Uk2TJ1p1K7GlvVp9MEiKjRVeYw45zlI= Subject key identifier: 33:2D:CF:42:02:70:66:A1:44:CB:78:2A:F2:66:5A:07:00:A7:92:04 Certificate issuer: /CN=d2ef481a-1f0d-4a55-938d-f008c7790d85 Certificate serial: 010D0C9F4328584F544495F5DCC4D5405C2A0200 Authority key identifier: CD:C1:AD:3C:4E:0C:60:04:21:BD:31:6E:82:E6:DA:B1:37:9B:FE:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85/8a249ea1-e9d8-3709-b24a-0c1469c0e06a.roa Signing time: Mon 28 Sep 2026 22:01:33 +0000 ROA not before: Mon 28 Sep 2026 22:01:33 +0000 ROA not after: Sun 27 Dec 2026 23:01:33 +0000 asID: 397540 IP address blocks: 23.154.160.0/24 maxlen: 24 131.143.220.0/23 maxlen: 24 209.127.204.0/24 maxlen: 24 2604:17c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85/d2ef481a-1f0d-4a55-938d-f008c7790d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85/d2ef481a-1f0d-4a55-938d-f008c7790d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:44:95:f5:dc:c4:d5:40:5c:2a:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ef481a-1f0d-4a55-938d-f008c7790d85 Validity Not Before: Sep 28 22:01:33 2026 GMT Not After : Dec 27 23:01:33 2026 GMT Subject: CN=f0969c10-9b18-44ea-ba32-89bda9439dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:c1:8e:b0:eb:8f:44:5e:a7:90:8f:2f:17: 98:5f:72:ca:1e:b3:57:80:56:d4:47:e3:99:33:0a: 2f:23:2b:94:39:c5:ab:c8:50:dd:0a:e6:dd:dc:9d: 8d:3e:55:cf:01:42:bd:6a:06:fe:48:0c:63:d4:3b: 7f:e2:34:13:e6:10:18:40:c9:3a:b3:19:c1:a7:21: f5:7b:88:7d:74:62:29:a3:70:13:29:da:f0:37:4b: 89:c1:df:a4:77:26:12:5b:cb:db:f9:aa:da:b4:eb: f2:90:87:e3:f7:22:b0:05:f9:78:58:fc:d3:a9:10: 33:42:29:b3:b1:27:fd:f9:7a:9d:ad:fe:0c:94:c8: d6:c0:a0:25:fa:49:4f:9b:47:25:be:9a:10:92:22: 69:00:6c:40:ee:c4:b0:71:8f:1c:cd:b4:fd:50:ca: 67:0f:dd:14:b4:0d:3d:a9:3c:53:fc:1d:fc:5c:7a: db:ac:06:ed:83:b9:38:d6:66:35:0a:8e:37:71:28: 77:8f:c0:c2:2e:09:12:b7:2a:2d:32:58:63:16:3a: 16:92:28:5e:68:f5:af:34:48:e4:f8:e0:f5:ca:14: 1a:4a:03:f6:c8:44:93:9e:cf:25:f9:71:36:12:7d: 1c:f4:68:29:77:78:b2:07:1a:75:ba:3c:94:38:9b: b1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:CF:42:02:70:66:A1:44:CB:78:2A:F2:66:5A:07:00:A7:92:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85/8a249ea1-e9d8-3709-b24a-0c1469c0e06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85/d2ef481a-1f0d-4a55-938d-f008c7790d85.crl X509v3 Authority Key Identifier: keyid:CD:C1:AD:3C:4E:0C:60:04:21:BD:31:6E:82:E6:DA:B1:37:9B:FE:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85.cer sbgp-ipAddrBlock: critical IPv4: 23.154.160.0/24 131.143.220.0/23 209.127.204.0/24 IPv6: 2604:17c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3e:ee:f2:dc:2f:30:3b:04:70:07:f1:d2:bf:c5:15:cc:bb: d2:a6:64:e5:68:63:3a:5e:a7:ba:5f:a5:e5:31:a7:40:73:61: 32:79:62:16:ea:f5:3a:c0:5c:e8:b9:44:30:e8:89:5e:7d:1d: a1:fa:5d:23:f5:df:b8:1a:b9:55:38:f5:c1:d2:1b:d8:53:ca: ef:c0:34:cf:86:b7:16:cf:84:bd:62:06:31:d5:96:06:d6:83: 2c:f8:22:eb:f3:21:57:81:dd:98:e0:27:ec:f3:d7:25:34:09: c4:0b:1a:17:ed:6b:21:fb:9b:bb:68:92:54:0b:97:14:93:22: 91:ce:8b:aa:a3:30:da:ab:9d:df:40:f9:35:47:b3:7a:d7:fd: 93:9c:0a:9e:d3:55:22:eb:d9:c0:f0:13:d4:e8:ac:33:88:37: f7:d5:31:58:a5:17:5e:50:b1:d6:ed:db:26:06:e3:88:3f:26: ed:dc:09:f2:e1:f6:79:cd:26:df:11:6e:7c:ec:d9:68:71:15: 63:9a:3e:c2:3b:63:33:fd:4d:5c:69:8f:63:f3:c8:29:2e:34: ea:6a:7a:c2:2e:0a:7e:6b:08:ca:0a:04:ea:dd:59:2b:52:a5: 14:ea:b7:83:c4:de:ef:db:01:96:ee:ad:b6:ba:49:95:bc:c1: 2b:c7:80:a4 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE9URJX13MTVQFwqAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJlZjQ4MWEtMWYwZC00YTU1LTkzOGQtZjAwOGM3Nzkw ZDg1MB4XDTI2MDkyODIyMDEzM1oXDTI2MTIyNzIzMDEzM1owLzEtMCsGA1UEAxMk ZjA5NjljMTAtOWIxOC00NGVhLWJhMzItODliZGE5NDM5ZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJbBjrDrj0Rep5CPLxeYX3LKHrNXgFbUR+OZ MwovIyuUOcWryFDdCubd3J2NPlXPAUK9agb+SAxj1Dt/4jQT5hAYQMk6sxnBpyH1 e4h9dGIpo3ATKdrwN0uJwd+kdyYSW8vb+aratOvykIfj9yKwBfl4WPzTqRAzQimz sSf9+Xqdrf4MlMjWwKAl+klPm0clvpoQkiJpAGxA7sSwcY8czbT9UMpnD90UtA09 qTxT/B38XHrbrAbtg7k41mY1Co43cSh3j8DCLgkStyotMlhjFjoWkiheaPWvNEjk +OD1yhQaSgP2yESTns8l+XE2En0c9Ggpd3iyBxp1ujyUOJuxHQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFDMtz0ICcGahRMt4KvJmWgcAp5IEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kMmVm NDgxYS0xZjBkLTRhNTUtOTM4ZC1mMDA4Yzc3OTBkODUvOGEyNDllYTEtZTlkOC0z NzA5LWIyNGEtMGMxNDY5YzBlMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDJlZjQ4MWEtMWYwZC00YTU1LTkz OGQtZjAwOGM3NzkwZDg1L2QyZWY0ODFhLTFmMGQtNGE1NS05MzhkLWYwMDhjNzc5 MGQ4NS5jcmwwHwYDVR0jBBgwFoAUzcGtPE4MYAQhvTFugubasTeb/lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kMmVmNDgxYS0xZjBkLTRhNTUtOTM4ZC1mMDA4 Yzc3OTBkODUuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF5qgAwQB g4/cAwQA0X/MMA0EAgACMAcDBQAmBBfAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJg+7vLcLzA7BHAH8dK/ xRXMu9KmZOVoYzpep7pfpeUxp0BzYTJ5Yhbq9TrAXOi5RDDoiV59HaH6XSP137ga uVU49cHSG9hTyu/ANM+GtxbPhL1iBjHVlgbWgyz4IuvzIVeB3ZjgJ+zz1yU0CcQL GhftayH7m7toklQLlxSTIpHOi6qjMNqrnd9A+TVHs3rX/ZOcCp7TVSLr2cDwE9To rDOIN/fVMVilF15Qsdbt2yYG44g/Ju3cCfLh9nnNJt8Rbnzs2WhxFWOaPsI7YzP9 TVxpj2PzyCkuNOpqesIuCn5rCMoKBOrdWStSpRTqt4PE3u/bAZburba6SZW8wSvH gKQ= -----END CERTIFICATE-----Generated at Sat Oct 24 18:51:51 2026 by rpki-client