$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8b6080be-131c-3a2e-b6c1-315bfaa117d0.roa File: 8b6080be-131c-3a2e-b6c1-315bfaa117d0.roa (raw, json) Hash identifier: g+OQ0a8wJjeSeZdex/EqNCS7e6zMa+DRLDt0gbXEN80= Subject key identifier: F8:2B:BD:AE:D2:EA:68:36:3D:CF:60:9F:AF:10:5B:B9:A7:09:1E:E8 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584F9BCDECF207F04961242C3C80 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8b6080be-131c-3a2e-b6c1-315bfaa117d0.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 395886 IP address blocks: 23.249.16.0/20 maxlen: 20 104.143.32.0/20 maxlen: 20 104.251.224.0/20 maxlen: 20 172.81.96.0/20 maxlen: 20 198.176.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:ec:f2:07:f0:49:61:24:2c:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=7e82aeb8-34ba-47a3-b4fe-d8e8c6e82d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:58:91:df:41:bb:61:33:fc:9d:18:b4:95:64: 13:0a:b1:68:21:9e:13:37:53:a9:57:c6:56:b9:1b: 6b:fb:cd:b4:c7:bd:8f:cf:71:68:83:bd:c1:8c:71: f5:fd:a7:4e:37:71:1a:b1:30:26:62:ae:8d:cd:6b: ce:7f:07:4d:84:d4:1d:7b:24:1b:0f:47:ea:e9:72: 94:12:7f:af:87:71:32:e6:e3:50:f2:2e:2a:2b:52: 6b:af:b0:4f:07:06:31:6a:c4:38:c8:6c:3a:c1:fa: 07:73:5d:44:21:0a:d5:e6:9d:b0:88:0c:4a:f0:2f: a7:aa:66:97:b6:8b:17:0b:ce:27:da:42:1b:28:80: f6:49:ca:1f:42:f9:c4:fb:f0:fe:28:35:ac:5a:1c: bb:18:97:ed:bb:fb:e9:ef:5f:a1:2b:34:25:5f:5e: e5:fd:9d:17:c0:07:52:e6:d8:22:ce:68:72:a6:d7: ad:fa:18:24:2f:95:1a:c0:cb:dd:ce:5f:f8:1f:da: df:0a:d1:0a:52:cf:5a:0e:95:62:69:e8:39:37:35: e9:4b:27:54:01:3a:13:64:5f:92:47:39:75:a0:fd: 7a:80:ee:7e:c1:4f:6d:6c:6c:54:9d:6c:52:27:e1: ec:4d:e3:e7:95:bd:57:84:ba:9f:cf:cc:6d:6a:2d: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2B:BD:AE:D2:EA:68:36:3D:CF:60:9F:AF:10:5B:B9:A7:09:1E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8b6080be-131c-3a2e-b6c1-315bfaa117d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.16.0/20 104.143.32.0/20 104.251.224.0/20 172.81.96.0/20 198.176.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9b:5d:ca:95:d5:94:5b:8d:7f:1d:4a:0c:a3:72:db:11:38: ff:01:f1:89:b6:54:60:f8:15:f9:ca:47:e3:59:44:a9:97:a7: 85:81:3e:8c:e8:3c:6a:63:55:57:d5:59:17:88:ea:fc:3d:4e: 5d:4e:b2:e0:87:ff:c4:62:a7:c2:fd:e1:9d:62:4a:d6:10:fa: 85:9c:25:3a:e3:e6:ea:37:07:e1:6c:37:9f:7c:22:5c:5f:bc: 08:c5:69:23:c8:69:06:2b:75:c1:17:b2:5e:07:4a:b6:19:45: 2d:dc:d9:54:e6:df:f9:cc:6f:50:79:d5:1c:61:9b:ae:89:1f: 7a:67:77:47:b8:2f:b6:9d:b2:07:83:ed:a2:d0:a5:05:1c:00: be:e6:9d:a5:72:a8:38:68:76:b3:62:28:40:89:e9:f9:36:f1: 26:50:89:64:3a:01:3c:dd:0e:08:e7:a0:6b:b1:8c:af:d5:08: 62:25:83:8a:c4:e2:d2:4d:33:36:40:78:19:9c:af:f3:49:80: 70:d7:7b:3c:e9:8c:9e:69:80:b7:a4:c9:5c:98:4d:74:4c:2e: e1:5f:ed:7e:ca:f1:32:06:d3:ba:4a:9c:28:48:af:23:91:06: e7:5d:24:f4:3e:93:b8:9f:6a:f9:cd:d9:af:6e:e2:6b:b2:d4: c8:66:fb:bc -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE+bzezyB/BJYSQsPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk N2U4MmFlYjgtMzRiYS00N2EzLWI0ZmUtZDhlOGM2ZTgyZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1iR30G7YTP8nRi0lWQTCrFoIZ4TN1OpV8ZW uRtr+820x72Pz3Fog73BjHH1/adON3EasTAmYq6NzWvOfwdNhNQdeyQbD0fq6XKU En+vh3Ey5uNQ8i4qK1Jrr7BPBwYxasQ4yGw6wfoHc11EIQrV5p2wiAxK8C+nqmaX tosXC84n2kIbKID2ScofQvnE+/D+KDWsWhy7GJftu/vp71+hKzQlX17l/Z0XwAdS 5tgizmhyptet+hgkL5UawMvdzl/4H9rfCtEKUs9aDpViaeg5NzXpSydUAToTZF+S Rzl1oP16gO5+wU9tbGxUnWxSJ+HsTePnlb1XhLqfz8xtai2FOwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFPgrva7S6mg2Pc9gn68QW7mnCR7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvOGI2MDgwYmUtMTMxYy0z YTJlLWI2YzEtMzE1YmZhYTExN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEF/kQAwQE aI8gAwQEaPvgAwQErFFgAwQExrAwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA+bXcqV1ZRbjX8dSgyjctsR OP8B8Ym2VGD4FfnKR+NZRKmXp4WBPozoPGpjVVfVWReI6vw9Tl1OsuCH/8Rip8L9 4Z1iStYQ+oWcJTrj5uo3B+FsN598IlxfvAjFaSPIaQYrdcEXsl4HSrYZRS3c2VTm 3/nMb1B51Rxhm66JH3pnd0e4L7adsgeD7aLQpQUcAL7mnaVyqDhodrNiKECJ6fk2 8SZQiWQ6ATzdDgjnoGuxjK/VCGIlg4rE4tJNMzZAeBmcr/NJgHDXezzpjJ5pgLek yVyYTXRMLuFf7X7K8TIG07pKnChIryORBuddJPQ+k7ifavnN2a9u4muy1Mhm+7w= -----END CERTIFICATE-----Generated at Mon Oct 26 02:26:51 2026 by rpki-client