$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ac0441e3-afb5-3633-b538-75ead7a2914d.roa File: ac0441e3-afb5-3633-b538-75ead7a2914d.roa (raw, json) Hash identifier: G1MsKxqSI0nSobb4ISpqL/lY3r9lgd1I6YtpCbsmg7o= Subject key identifier: 9B:FF:DD:E6:C4:B7:F9:47:14:8A:DC:EC:E0:F8:10:5F:45:D2:67:6C Certificate issuer: /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e Certificate serial: 010D0C9F4328584F89A8485AC9DC33582C671880 Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ac0441e3-afb5-3633-b538-75ead7a2914d.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 16509 IP address blocks: 64.40.129.0/24 maxlen: 24 64.40.131.0/24 maxlen: 24 64.40.132.0/24 maxlen: 24 64.40.133.0/24 maxlen: 24 64.40.136.0/24 maxlen: 24 64.40.137.0/24 maxlen: 24 64.40.139.0/24 maxlen: 24 153.57.0.0/24 maxlen: 24 153.57.1.0/24 maxlen: 24 153.57.2.0/24 maxlen: 24 153.57.3.0/24 maxlen: 24 153.57.5.0/24 maxlen: 24 2607:9240:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:48:5a:c9:dc:33:58:2c:67:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=898de0b2-7976-47db-ad2c-515a7219b387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:89:7a:1e:04:47:8a:37:af:c9:95:70:90: 96:69:b0:57:c0:b1:29:18:79:68:6d:d7:35:88:06: 95:74:dc:21:f1:09:2d:91:ea:4f:49:83:c3:1a:70: c7:34:4c:0c:6d:76:9a:73:3b:32:5d:0a:aa:28:3a: ad:ff:63:13:01:77:cc:ea:47:05:08:8d:d1:21:f5: c5:ad:29:aa:40:ac:d4:cf:0a:29:ef:67:ba:75:43: 9e:8f:f1:82:9f:d7:74:db:c5:96:a1:8f:9c:ff:12: 2e:30:5f:82:fa:81:39:9e:46:eb:2c:09:d7:ea:66: f5:70:44:d6:10:7a:c9:5b:ff:67:69:b0:39:37:5a: c0:17:ab:84:9a:66:10:53:4d:68:6d:46:ff:39:76: 78:ee:78:49:db:40:0e:f0:d9:d0:d8:59:71:d4:67: f9:11:43:a2:75:f2:7b:3b:40:f0:04:ab:b3:75:47: 5e:b5:df:3a:7a:27:32:d7:40:4a:97:07:5f:2d:6b: 73:ef:a3:54:89:29:bb:a4:c5:8a:3f:18:44:7a:f9: 27:89:22:3e:e5:c8:c1:9b:6b:28:4e:93:14:6e:70: 93:a5:51:fb:25:37:0c:3a:19:22:34:5a:8e:76:76: 20:71:b1:67:9f:87:08:3b:00:04:a9:02:b1:e9:f9: d0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FF:DD:E6:C4:B7:F9:47:14:8A:DC:EC:E0:F8:10:5F:45:D2:67:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ac0441e3-afb5-3633-b538-75ead7a2914d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl X509v3 Authority Key Identifier: keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer sbgp-ipAddrBlock: critical IPv4: 64.40.129.0/24 64.40.131.0-64.40.133.255 64.40.136.0/23 64.40.139.0/24 153.57.0.0/22 153.57.5.0/24 IPv6: 2607:9240:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:46:27:4c:7f:0b:1c:e3:a1:e1:91:0d:9c:b4:66:a3:1f:32: ed:92:92:df:db:ce:cf:9d:53:0f:a2:eb:74:8b:70:59:19:4c: f1:06:d2:a7:b9:c0:52:cc:3a:4f:1a:cf:50:e7:c7:f7:dd:86: 47:7d:6c:01:a5:61:ec:d6:17:73:fb:11:4d:c2:ad:e1:10:b0: 60:e1:8e:ac:e4:7d:a1:46:5e:21:d7:4a:5a:6f:19:d8:39:d2: 15:08:d3:df:f1:26:8a:48:e9:8b:b6:be:4a:01:8d:f1:ec:0b: 67:9d:2a:0a:de:09:c1:23:fd:d1:fe:a5:19:b6:5c:03:97:82: 34:66:eb:4b:2e:49:5c:cb:05:b5:8d:4f:18:c3:4d:a5:c0:19: c3:a7:13:f4:6c:fb:9f:d7:b9:33:72:7e:c7:ed:d5:df:e9:32: 9e:7f:03:cb:d8:0d:db:26:b1:bd:54:26:09:59:f6:01:21:95: d9:86:f4:b4:da:e9:49:5f:12:35:30:21:4c:cf:37:50:17:4b: b2:da:a5:37:24:9b:2b:c5:93:d5:b7:0f:44:79:15:42:1f:c3: df:5f:fc:13:03:b8:f8:d4:4a:80:ae:a0:6c:f6:93:4a:cd:f5: f2:d4:b9:c9:05:7c:9d:e9:b2:d5:3e:6a:2e:1e:d9:64:be:45: 0e:7c:93:3d -----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgIUAQ0Mn0MoWE+JqEhaydwzWCxnGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyMmQ3YWUtMTIyNC00M2ZiLTkwN2EtNjY5MGY3YmQ5 YTJlMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk ODk4ZGUwYjItNzk3Ni00N2RiLWFkMmMtNTE1YTcyMTliMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpGJeh4ER4o3r8mVcJCWabBXwLEpGHlobdc1 iAaVdNwh8QktkepPSYPDGnDHNEwMbXaaczsyXQqqKDqt/2MTAXfM6kcFCI3RIfXF rSmqQKzUzwop72e6dUOej/GCn9d028WWoY+c/xIuMF+C+oE5nkbrLAnX6mb1cETW EHrJW/9nabA5N1rAF6uEmmYQU01obUb/OXZ47nhJ20AO8NnQ2Flx1Gf5EUOidfJ7 O0DwBKuzdUdetd86eicy10BKlwdfLWtz76NUiSm7pMWKPxhEevkniSI+5cjBm2so TpMUbnCTpVH7JTcMOhkiNFqOdnYgcbFnn4cIOwAEqQKx6fnQYwIDAQABo4IDizCC A4cwHQYDVR0OBBYEFJv/3ebEt/lHFIrc7OD4EF9F0mdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZTIy ZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdiZDlhMmUvYWMwNDQxZTMtYWZiNS0z NjMzLWI1MzgtNzVlYWQ3YTI5MTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWUyMmQ3YWUtMTIyNC00M2ZiLTkw N2EtNjY5MGY3YmQ5YTJlLzVlMjJkN2FlLTEyMjQtNDNmYi05MDdhLTY2OTBmN2Jk OWEyZS5jcmwwHwYDVR0jBBgwFoAUYLFmHyIaYxU6c0EQcq4OzNe6NGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02Njkw ZjdiZDlhMmUuY2VyMFUGCCsGAQUFBwEHAQH/BEYwRDAyBAIAATAsAwQAQCiBMAwD BABAKIMDBAFAKIQDBAFAKIgDBABAKIsDBAKZOQADBACZOQUwDgQCAAIwCAMGACYH kkABMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIdGJ0x/CxzjoeGRDZy0ZqMfMu2Skt/bzs+dUw+i63SLcFkZ TPEG0qe5wFLMOk8az1Dnx/fdhkd9bAGlYezWF3P7EU3CreEQsGDhjqzkfaFGXiHX SlpvGdg50hUI09/xJopI6Yu2vkoBjfHsC2edKgreCcEj/dH+pRm2XAOXgjRm60su SVzLBbWNTxjDTaXAGcOnE/Rs+5/XuTNyfsft1d/pMp5/A8vYDdsmsb1UJglZ9gEh ldmG9LTa6UlfEjUwIUzPN1AXS7LapTckmyvFk9W3D0R5FUIfw99f/BMDuPjUSoCu oGz2k0rN9fLUuckFfJ3pstU+ai4e2WS+RQ58kz0= -----END CERTIFICATE-----Generated at Sun Oct 25 14:22:59 2026 by rpki-client