$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa File: afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa (raw, json) Hash identifier: onAaodIQN8aC9zmZeqCq4svQXtq0b6bqp9gI0t3chUs= Subject key identifier: F3:6A:3E:EA:84:71:65:B8:6E:A4:CD:3B:4D:06:7B:B9:BC:A4:0C:B7 Certificate issuer: /CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Certificate serial: 010D0C9F4328584F89A86AFD60F790538F2A3EC0 Authority key identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 30110 IP address blocks: 198.59.140.0/22 maxlen: 24 2605:ce00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:6a:fd:60:f7:90:53:8f:2a:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=3e22e00c-7ed6-4016-8364-2e9c519166b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:db:ad:a4:a6:8b:79:4d:f1:7a:f9:aa:63: 6e:f2:11:35:3c:50:fa:02:af:24:c1:46:2a:09:30: bd:6c:75:e9:4c:b4:39:19:f3:5c:26:b9:95:98:38: 03:44:2a:9a:24:b5:a6:32:83:c1:9b:55:16:bd:3a: 83:6f:e5:27:b1:89:ab:ef:3d:72:b9:5b:9e:91:a4: 06:8a:d2:0d:88:2a:ed:64:38:89:a5:82:fc:9b:31: c2:cd:dc:72:a4:71:54:d2:e8:be:95:7b:35:5d:c6: 93:10:1e:ee:45:58:fc:0a:54:f9:18:8a:24:d4:cc: 4b:09:4d:13:b7:0a:c7:79:da:17:00:90:68:09:e8: 0f:7b:c3:32:79:b9:d6:9e:bb:be:ec:38:33:15:c4: de:29:8a:c5:4e:ff:f8:90:0d:37:3b:a5:b1:e8:ce: d5:22:aa:82:ed:a3:a6:47:61:4d:44:ca:8a:6c:29: 4f:e6:71:74:bd:0d:38:a7:65:b2:77:5a:cf:1e:fc: c8:a3:2e:4f:1a:f7:c2:10:ea:a8:4f:0c:5e:b3:f5: 1e:33:5b:ec:c8:bb:8e:c8:27:11:ed:72:be:f9:41: 5c:45:15:d3:69:e2:ee:f3:27:c1:7c:1a:bf:63:9f: 2c:1a:bc:91:95:fe:46:19:8f:6f:d2:5f:d0:fb:1c: b2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6A:3E:EA:84:71:65:B8:6E:A4:CD:3B:4D:06:7B:B9:BC:A4:0C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl X509v3 Authority Key Identifier: keyid:43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer sbgp-ipAddrBlock: critical IPv4: 198.59.140.0/22 IPv6: 2605:ce00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:f3:68:62:d9:7c:cd:cf:7e:83:e0:81:2b:0a:53:ef:66:b1: f8:b5:ed:be:e4:90:96:88:87:2e:c2:b1:c5:95:3b:7c:74:f8: bf:2b:1f:9d:90:05:46:38:50:92:b2:98:3d:2b:12:e5:c9:ab: 1a:35:78:19:f0:f7:04:87:dc:5e:87:40:01:85:cd:f3:f9:a6: 51:5a:5d:f3:cf:c1:ed:72:81:3b:16:e3:6b:8b:33:84:2e:c3: 56:89:33:51:ea:23:ea:80:b3:4e:90:4d:b5:97:82:19:51:a7: da:47:60:36:9b:2a:c3:45:d4:eb:fe:9b:58:94:35:a5:e5:e9: 06:5c:b8:96:d0:0f:72:62:3b:ce:e2:ca:55:38:0e:1b:09:fd: 7a:f9:0b:79:9e:29:7a:10:01:6a:ce:dc:47:a3:e3:82:4d:47: 9c:5f:8d:69:e6:d7:cc:47:84:4d:1a:77:ca:20:95:48:fa:b1: 4a:2b:eb:dc:6c:2c:99:bc:17:a7:6e:71:56:92:a1:c2:aa:72: 69:d7:dd:c1:5a:99:66:90:51:1d:eb:da:63:bc:e9:4e:d8:b4: 83:39:5c:f9:79:eb:ab:b0:a6:f4:a8:18:da:87:10:18:cc:58: bc:3a:34:01:22:41:d8:2a:fc:28:c2:9b:3b:69:4e:1e:73:1b: f8:86:ca:d9 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE+JqGr9YPeQU48qPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM0YmNmYzgtZTZlNy00NTAwLWI5ODUtNWNiODU5Zjg4 ZmVjMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk M2UyMmUwMGMtN2VkNi00MDE2LTgzNjQtMmU5YzUxOTE2NmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CrbraSmi3lN8Xr5qmNu8hE1PFD6Aq8kwUYq CTC9bHXpTLQ5GfNcJrmVmDgDRCqaJLWmMoPBm1UWvTqDb+UnsYmr7z1yuVuekaQG itINiCrtZDiJpYL8mzHCzdxypHFU0ui+lXs1XcaTEB7uRVj8ClT5GIok1MxLCU0T twrHedoXAJBoCegPe8MyebnWnru+7DgzFcTeKYrFTv/4kA03O6Wx6M7VIqqC7aOm R2FNRMqKbClP5nF0vQ04p2Wyd1rPHvzIoy5PGvfCEOqoTwxes/UeM1vsyLuOyCcR 7XK++UFcRRXTaeLu8yfBfBq/Y58sGryRlf5GGY9v0l/Q+xyywwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFPNqPuqEcWW4bqTNO00Ge7m8pAy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRi Y2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlmODhmZWMvYWZlNjZmOTUtYmU0YS0z NmY5LWI0MWEtZDhhMmZkNWRiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM0YmNmYzgtZTZlNy00NTAwLWI5 ODUtNWNiODU5Zjg4ZmVjLzBjNGJjZmM4LWU2ZTctNDUwMC1iOTg1LTVjYjg1OWY4 OGZlYy5jcmwwHwYDVR0jBBgwFoAUQ4ArWOknD9c2EmD/DAY9OJTkCZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4 NTlmODhmZWMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCxjuMMA0E AgACMAcDBQAmBc4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBALvzaGLZfM3PfoPggSsKU+9msfi17b7kkJaI hy7CscWVO3x0+L8rH52QBUY4UJKymD0rEuXJqxo1eBnw9wSH3F6HQAGFzfP5plFa XfPPwe1ygTsW42uLM4Quw1aJM1HqI+qAs06QTbWXghlRp9pHYDabKsNF1Ov+m1iU NaXl6QZcuJbQD3JiO87iylU4DhsJ/Xr5C3meKXoQAWrO3Eej44JNR5xfjWnm18xH hE0ad8oglUj6sUor69xsLJm8F6ducVaSocKqcmnX3cFamWaQUR3r2mO86U7YtIM5 XPl566uwpvSoGNqHEBjMWLw6NAEiQdgq/CjCmztpTh5zG/iGytk= -----END CERTIFICATE-----Generated at Sun Oct 25 18:02:55 2026 by rpki-client