$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa File: 66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa (raw, json) Hash identifier: kawDAluMIqP+EZjpVYpoXPjFeu4ys0oPfkW+kKFMimc= Subject key identifier: 92:0D:6D:40:A6:E4:62:44:F9:36:D5:8A:74:21:49:4A:0D:0A:13:05 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584F5A3302E93D1920DF61B98200 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 140227 IP address blocks: 23.249.16.0/20 maxlen: 20 104.143.32.0/20 maxlen: 24 104.251.224.0/20 maxlen: 20 172.81.96.0/20 maxlen: 20 172.81.96.0/22 maxlen: 24 172.81.100.0/23 maxlen: 24 198.176.48.0/20 maxlen: 20 198.176.59.0/24 maxlen: 24 198.176.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:02:e9:3d:19:20:df:61:b9:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=1d5b9e0c-2436-4991-ad20-d9f45c84cfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:04:51:59:ec:b6:72:97:d3:8e:32:6a:9f: 75:13:6a:80:74:1a:32:ea:dd:46:21:76:e8:51:e7: 8d:75:82:17:c5:b6:1c:79:65:59:a7:0c:c9:46:d2: f8:65:2a:ad:b5:94:09:8b:23:21:4b:9e:c4:07:e3: f9:e9:62:c1:bd:51:93:94:f9:e6:d2:ca:9c:54:9e: b8:6e:e0:02:ab:05:d5:8a:3a:54:45:1a:fd:0d:c2: 1b:90:e2:23:d9:26:fe:ab:06:37:3d:31:83:3f:c6: 36:dd:72:79:4c:ff:47:fc:f8:82:7b:a0:69:28:2a: 97:3f:13:74:42:a3:a5:d5:da:85:13:df:92:39:b1: d2:ba:49:82:12:6c:f8:0a:e5:83:b3:55:44:3e:d4: 14:d7:70:12:bf:eb:6e:0c:ee:02:fc:ae:da:af:b2: f3:03:5f:fa:d8:a7:ca:74:04:c0:52:8c:20:b7:a6: 20:af:f9:b2:ee:f5:0b:c1:05:a7:63:b0:22:20:52: 68:3e:e4:dd:94:81:41:1c:03:74:16:b7:a0:a4:6e: 86:e5:82:b1:e7:bd:52:f2:8b:6c:e2:12:ed:a3:24: 2b:97:11:c6:7d:e7:90:e4:9b:39:0b:04:32:d7:4b: 5a:35:53:50:d8:67:15:63:32:86:d5:2b:02:93:2b: f9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0D:6D:40:A6:E4:62:44:F9:36:D5:8A:74:21:49:4A:0D:0A:13:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.16.0/20 104.143.32.0/20 104.251.224.0/20 172.81.96.0/20 198.176.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:df:63:2b:16:1c:b6:14:a9:6c:68:07:59:17:c0:0e:b7:da: 31:74:88:e1:96:ef:33:35:36:e2:f6:fd:ac:48:4d:44:f0:56: 2f:7c:30:ce:ec:cd:31:af:b6:1a:eb:42:a7:0b:81:87:ae:c3: 20:1d:0d:10:8b:d1:1c:c4:5f:f0:7c:33:b6:39:08:4d:1d:6d: 83:37:d5:f6:de:35:92:e3:92:c1:82:c5:14:b8:f3:39:04:ea: bf:24:06:07:f6:e3:f9:41:a4:1b:36:61:3c:45:04:04:7a:d3: 9c:c7:1b:69:fb:05:d0:a0:e4:71:77:2b:ea:d5:da:b6:1e:e7: d3:f2:dc:bf:0c:2d:de:4a:fe:e6:07:4f:c9:47:b6:82:9c:fa: ff:cc:b0:d2:57:a0:8b:3b:6f:3a:6c:9b:ad:18:d2:66:7d:11: aa:8a:c2:95:c2:28:a2:ba:d6:e6:fa:92:40:c1:ae:cf:ef:97: 8e:ca:19:c8:6b:9a:d8:35:42:4c:08:06:cc:9c:82:5e:ae:e6: d4:ae:df:ff:8f:bb:ff:6d:69:bd:01:64:b5:35:d7:14:27:f2: 84:33:ea:d0:f3:2a:1a:f0:d3:97:e8:79:b9:03:25:40:91:fa: de:df:9d:e2:79:c5:56:31:ad:0c:f9:11:e3:67:67:db:ee:69: 13:05:e2:08 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE9aMwLpPRkg32G5ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MWQ1YjllMGMtMjQzNi00OTkxLWFkMjAtZDlmNDVjODRjZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjQEUVnstnKX044yap91E2qAdBoy6t1GIXbo UeeNdYIXxbYceWVZpwzJRtL4ZSqttZQJiyMhS57EB+P56WLBvVGTlPnm0sqcVJ64 buACqwXVijpURRr9DcIbkOIj2Sb+qwY3PTGDP8Y23XJ5TP9H/PiCe6BpKCqXPxN0 QqOl1dqFE9+SObHSukmCEmz4CuWDs1VEPtQU13ASv+tuDO4C/K7ar7LzA1/62KfK dATAUowgt6Ygr/my7vULwQWnY7AiIFJoPuTdlIFBHAN0FregpG6G5YKx571S8ots 4hLtoyQrlxHGfeeQ5Js5CwQy10taNVNQ2GcVYzKG1SsCkyv5XwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFJINbUCm5GJE+TbVinQhSUoNChMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNjZhYjBiZTMtY2UxYS0z YjRmLWFjN2ItNjkyMWNjYTliOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEF/kQAwQE aI8gAwQEaPvgAwQErFFgAwQExrAwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABbfYysWHLYUqWxoB1kXwA63 2jF0iOGW7zM1NuL2/axITUTwVi98MM7szTGvthrrQqcLgYeuwyAdDRCL0RzEX/B8 M7Y5CE0dbYM31fbeNZLjksGCxRS48zkE6r8kBgf24/lBpBs2YTxFBAR605zHG2n7 BdCg5HF3K+rV2rYe59Py3L8MLd5K/uYHT8lHtoKc+v/MsNJXoIs7bzpsm60Y0mZ9 EaqKwpXCKKK61ub6kkDBrs/vl47KGchrmtg1QkwIBsycgl6u5tSu3/+Pu/9tab0B ZLU11xQn8oQz6tDzKhrw05foebkDJUCR+t7fneJ5xVYxrQz5EeNnZ9vuaRMF4gg= -----END CERTIFICATE-----Generated at Sun Oct 25 03:09:56 2026 by rpki-client