$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa File: 38917362-89be-3070-88f1-aeb91e6b0dea.roa (raw, json) Hash identifier: v3Hj4zwLYnF3ZSr+HOyGFajjFOXzMijaP11sinrpOm4= Subject key identifier: 18:93:AF:1E:BA:3D:B8:05:E0:0B:FD:A3:E2:1C:55:93:59:C5:1B:58 Certificate issuer: /CN=c6cd6cec-4cd6-4fa0-b3af-354a7bc325be Certificate serial: 010D0C9F4328584F7A4D8BA467C11D6F8B1DA260 Authority key identifier: E6:CD:57:39:66:B9:B5:6E:AB:52:58:D7:5B:71:43:D8:A7:58:DA:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 47027 IP address blocks: 69.60.64.0/20 maxlen: 24 172.97.120.0/22 maxlen: 24 184.171.192.0/20 maxlen: 24 192.243.76.0/22 maxlen: 24 199.188.172.0/22 maxlen: 24 204.235.208.0/20 maxlen: 24 206.123.28.0/23 maxlen: 24 208.84.124.0/22 maxlen: 24 216.118.128.0/19 maxlen: 24 2607:fff8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:8b:a4:67:c1:1d:6f:8b:1d:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cd6cec-4cd6-4fa0-b3af-354a7bc325be Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=402f3a0e-20f9-4553-a74c-fd9ff19791e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6d:8d:80:33:3f:1f:08:09:1d:e1:fb:b9:aa: 88:66:a7:ca:ef:dd:d5:30:2c:e8:02:70:cd:02:99: 75:d3:8a:eb:ea:67:33:65:50:60:d8:85:83:f7:ba: 74:e4:f6:e6:96:95:0d:7b:3c:ba:72:6f:40:c4:05: 3d:fc:75:f1:62:56:03:13:c2:07:7c:6c:60:10:15: 83:65:3d:ab:8d:17:e8:0a:1a:e2:15:19:84:fb:de: 4f:5f:f9:94:a9:e9:bd:bc:00:8e:b0:8e:a3:1e:c0: 02:fe:f0:17:a6:90:6e:50:af:5c:22:83:d9:9a:87: 1a:38:0b:f1:24:36:dd:c1:0c:45:f0:c0:32:d1:21: c4:47:94:08:5c:ed:c5:ab:bd:4f:0d:06:ad:08:1d: 38:a9:93:6a:96:e6:0a:5d:36:56:a2:c8:65:67:42: 67:0a:5e:d2:0e:51:27:d0:15:46:f0:d4:58:56:60: b1:3a:c4:6f:eb:0c:23:2f:44:22:2e:67:79:33:7c: e7:e0:8e:7a:42:90:db:3c:0c:29:53:ea:fa:2f:29: 7e:2c:37:c6:3e:be:99:55:48:48:2a:36:f8:f4:de: 7d:b4:3b:33:ce:6e:4a:9c:c1:85:d1:ea:5e:15:d6: 56:f3:12:41:2f:af:f1:d6:01:65:8b:6f:0b:e2:be: 63:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:93:AF:1E:BA:3D:B8:05:E0:0B:FD:A3:E2:1C:55:93:59:C5:1B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.crl X509v3 Authority Key Identifier: keyid:E6:CD:57:39:66:B9:B5:6E:AB:52:58:D7:5B:71:43:D8:A7:58:DA:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer sbgp-ipAddrBlock: critical IPv4: 69.60.64.0/20 172.97.120.0/22 184.171.192.0/20 192.243.76.0/22 199.188.172.0/22 204.235.208.0/20 206.123.28.0/23 208.84.124.0/22 216.118.128.0/19 IPv6: 2607:fff8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7f:e2:9d:fe:71:8b:c7:37:c9:a9:cc:2a:5e:23:2e:1d:b2: 51:20:11:97:69:f0:b3:be:54:a0:82:89:40:d6:3d:b3:8c:c2: bc:b8:18:f8:dc:17:6c:f3:21:fd:dc:a5:85:5d:55:52:e1:de: 4c:2d:09:40:27:de:bb:6d:9c:93:8b:25:fc:56:56:fa:1e:46: b7:7f:c4:63:80:40:1d:66:04:8d:9c:9c:ef:b2:35:b7:10:5f: a4:8e:c8:13:90:24:44:cc:e8:d9:e8:18:b8:ab:1f:2c:62:51: 48:39:12:1b:0b:83:3a:c6:64:42:14:2d:fb:57:26:3b:54:5f: bb:a3:71:34:42:9a:db:11:0e:ea:51:06:f0:b9:b5:81:eb:ea: 90:c2:fa:3f:5d:4a:74:67:f9:ed:58:ee:26:a9:39:ed:23:bf: 67:a6:9b:13:8c:a7:b7:c6:5a:d4:02:96:76:a7:14:87:24:13: b7:3e:a6:9c:83:42:25:cb:cc:b6:b4:8b:39:b2:fd:d0:23:c2: 9e:b2:32:c6:4a:b9:c8:36:2e:8f:69:7b:d4:6c:17:d2:fc:9a: c5:e4:ea:86:68:a2:e7:22:a8:04:4f:a8:e2:95:66:0a:41:72: ef:dc:2e:ce:f3:fb:78:bd:96:d4:35:b1:a8:9f:b5:4a:ce:db: c7:a7:1f:f4 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWE96TYukZ8Edb4sdomAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZjZDZjZWMtNGNkNi00ZmEwLWIzYWYtMzU0YTdiYzMy NWJlMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NDAyZjNhMGUtMjBmOS00NTUzLWE3NGMtZmQ5ZmYxOTc5MWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh22NgDM/HwgJHeH7uaqIZqfK793VMCzoAnDN Apl104rr6mczZVBg2IWD97p05PbmlpUNezy6cm9AxAU9/HXxYlYDE8IHfGxgEBWD ZT2rjRfoChriFRmE+95PX/mUqem9vACOsI6jHsAC/vAXppBuUK9cIoPZmocaOAvx JDbdwQxF8MAy0SHER5QIXO3Fq71PDQatCB04qZNqluYKXTZWoshlZ0JnCl7SDlEn 0BVG8NRYVmCxOsRv6wwjL0QiLmd5M3zn4I56QpDbPAwpU+r6Lyl+LDfGPr6ZVUhI Kjb49N59tDszzm5KnMGF0epeFdZW8xJBL6/x1gFli28L4r5jMwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFBiTrx66PbgF4Av9o+IcVZNZxRtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNmNk NmNlYy00Y2Q2LTRmYTAtYjNhZi0zNTRhN2JjMzI1YmUvMzg5MTczNjItODliZS0z MDcwLTg4ZjEtYWViOTFlNmIwZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzZjZDZjZWMtNGNkNi00ZmEwLWIz YWYtMzU0YTdiYzMyNWJlL2M2Y2Q2Y2VjLTRjZDYtNGZhMC1iM2FmLTM1NGE3YmMz MjViZS5jcmwwHwYDVR0jBBgwFoAU5s1XOWa5tW6rUljXW3FD2KdY2o0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNmNkNmNlYy00Y2Q2LTRmYTAtYjNhZi0zNTRh N2JjMzI1YmUuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQERTxAAwQC rGF4AwQEuKvAAwQCwPNMAwQCx7ysAwQEzOvQAwQBznscAwQC0FR8AwQF2HaAMA0E AgACMAcDBQAmB//4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAJ/4p3+cYvHN8mpzCpeIy4dslEgEZdp8LO+ VKCCiUDWPbOMwry4GPjcF2zzIf3cpYVdVVLh3kwtCUAn3rttnJOLJfxWVvoeRrd/ xGOAQB1mBI2cnO+yNbcQX6SOyBOQJETM6NnoGLirHyxiUUg5EhsLgzrGZEIULftX JjtUX7ujcTRCmtsRDupRBvC5tYHr6pDC+j9dSnRn+e1Y7iapOe0jv2emmxOMp7fG WtQClnanFIckE7c+ppyDQiXLzLa0izmy/dAjwp6yMsZKucg2Lo9pe9RsF9L8msXk 6oZoouciqARPqOKVZgpBcu/cLs7z+3i9ltQ1saiftUrO28enH/Q= -----END CERTIFICATE-----Generated at Sat Oct 31 12:42:34 2026 by rpki-client