$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa File: 0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa (raw, json) Hash identifier: +V2L9xGRfKW+cUYX302duXMrO2cxCKqoCwjI7HZsR6E= Subject key identifier: 01:D1:F0:C4:2B:B5:19:65:72:F2:D7:DA:3F:08:A7:B9:10:E7:DF:BE Certificate issuer: /CN=20defc99-73f1-4ccf-93ff-ac08b7301a18 Certificate serial: 010D0C9F4328584F8F3DBBC9FE85EEA1484B8900 Authority key identifier: 19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 29757 IP address blocks: 23.168.193.0/24 maxlen: 24 104.153.44.0/24 maxlen: 24 104.153.45.0/24 maxlen: 24 104.153.46.0/24 maxlen: 24 104.153.47.0/24 maxlen: 24 162.217.144.0/24 maxlen: 24 162.217.145.0/24 maxlen: 24 162.217.146.0/24 maxlen: 24 162.217.147.0/24 maxlen: 24 192.231.255.0/24 maxlen: 24 199.231.92.0/24 maxlen: 24 199.231.93.0/24 maxlen: 24 199.231.94.0/24 maxlen: 24 199.231.95.0/24 maxlen: 24 208.72.20.0/22 maxlen: 22 208.93.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:bb:c9:fe:85:ee:a1:48:4b:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20defc99-73f1-4ccf-93ff-ac08b7301a18 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=9997d2a7-2863-49c5-a40f-2b7c652af214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:f4:91:64:93:51:82:48:1c:53:5f:ab:e3: 4c:ad:df:bc:32:b6:86:11:2b:bc:29:3e:98:3a:26: b2:16:42:bb:a1:97:97:7c:28:6a:24:ba:2a:02:d8: 67:a9:67:54:d7:24:44:1b:ec:2a:67:cd:e8:7d:8d: 28:c5:50:71:ea:05:58:e3:22:6d:88:91:5a:8f:a2: 63:4a:dc:fd:9b:66:f4:ea:1d:dc:c6:fe:1c:a0:7f: 63:da:6f:fe:94:a8:f8:dd:61:12:34:4c:03:fe:6f: 61:5f:16:47:94:19:7e:f9:6c:bb:d0:02:b8:b3:68: 9a:2f:86:e8:da:90:61:3b:2a:91:fa:d3:ab:16:7e: 6e:eb:27:6a:59:1e:70:a1:9b:33:da:2a:40:52:5c: 53:9e:ed:d7:73:31:50:c8:ad:fe:9d:0d:81:78:e9: 2b:0d:19:0a:22:01:72:ac:7e:99:4d:a9:91:e3:0d: ac:a3:f8:e0:c9:8c:57:36:42:d4:02:1e:72:9a:f5: dc:08:1a:31:82:ed:57:5d:cc:87:37:87:ae:1c:68: 17:2b:1b:6e:37:01:9c:6d:f1:23:78:3f:9c:ad:a4: 5a:32:4e:aa:b4:ab:f5:7b:03:70:32:17:36:28:6a: 2a:7a:8a:25:99:0f:ef:3a:b6:d6:f3:df:32:0e:9b: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D1:F0:C4:2B:B5:19:65:72:F2:D7:DA:3F:08:A7:B9:10:E7:DF:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl X509v3 Authority Key Identifier: keyid:19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer sbgp-ipAddrBlock: critical IPv4: 23.168.193.0/24 104.153.44.0/22 162.217.144.0/22 192.231.255.0/24 199.231.92.0/22 208.72.20.0/22 208.93.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:de:65:e9:38:6f:f2:ab:46:d0:dc:54:6a:40:fd:b0:a3:97: 7a:ce:f6:3e:62:2c:f9:db:79:df:71:8d:25:6d:df:83:e7:82: 46:0c:d3:cd:67:4c:98:d6:bc:88:76:fd:19:06:dd:54:14:95: 03:ca:8d:da:29:0d:35:c9:9f:01:c1:72:cf:39:c1:58:89:9c: 18:73:f4:57:cc:35:ac:f9:48:92:8e:c0:04:3c:43:6a:f5:01: 71:7a:67:33:b1:45:ec:3f:c8:c8:4d:d1:c5:7e:49:0b:e6:15: 29:d4:98:77:01:e0:cc:f7:be:fb:b0:16:d6:61:d4:b3:06:09: c4:6a:68:f0:93:dd:d9:74:21:1e:98:71:fd:ea:aa:df:7d:46: 48:03:aa:cf:77:ec:eb:6d:55:5b:3e:56:0c:80:a9:9a:d4:e6: c1:75:f0:4b:78:2b:7d:a7:2d:fb:3b:3a:7f:06:fb:b5:0e:f3: 5a:d6:b5:c7:ba:14:c7:ac:78:61:e1:04:4f:50:b4:1f:9a:ee: 3d:90:1a:c2:ed:9d:1a:99:0c:b7:eb:d7:69:ae:68:c9:49:4f: a7:33:99:2d:0f:ba:be:10:a9:ff:ed:4b:f4:0d:0e:3a:78:c9: 88:87:21:32:96:a1:16:6e:15:38:ec:f2:57:79:a3:05:82:f4: 3a:f5:c0:48 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE+PPbvJ/oXuoUhLiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBkZWZjOTktNzNmMS00Y2NmLTkzZmYtYWMwOGI3MzAx YTE4MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk OTk5N2QyYTctMjg2My00OWM1LWE0MGYtMmI3YzY1MmFmMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S/0kWSTUYJIHFNfq+NMrd+8MraGESu8KT6Y OiayFkK7oZeXfChqJLoqAthnqWdU1yREG+wqZ83ofY0oxVBx6gVY4yJtiJFaj6Jj Stz9m2b06h3cxv4coH9j2m/+lKj43WESNEwD/m9hXxZHlBl++Wy70AK4s2iaL4bo 2pBhOyqR+tOrFn5u6ydqWR5woZsz2ipAUlxTnu3XczFQyK3+nQ2BeOkrDRkKIgFy rH6ZTamR4w2so/jgyYxXNkLUAh5ymvXcCBoxgu1XXcyHN4euHGgXKxtuNwGcbfEj eD+craRaMk6qtKv1ewNwMhc2KGoqeoolmQ/vOrbW898yDpvNMwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFAHR8MQrtRllcvLX2j8Ip7kQ59++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGRl ZmM5OS03M2YxLTRjY2YtOTNmZi1hYzA4YjczMDFhMTgvMGJlOWMwMDgtMGI4MS0z OTgxLWJkYWEtYzJjMGQwZWMxZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBkZWZjOTktNzNmMS00Y2NmLTkz ZmYtYWMwOGI3MzAxYTE4LzIwZGVmYzk5LTczZjEtNGNjZi05M2ZmLWFjMDhiNzMw MWExOC5jcmwwHwYDVR0jBBgwFoAUGVL0PL3a0EHYb5rqmuhcTFVNeGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGRlZmM5OS03M2YxLTRjY2YtOTNmZi1hYzA4 YjczMDFhMTguY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAF6jBAwQC aJksAwQCotmQAwQAwOf/AwQCx+dcAwQC0EgUAwQC0F3YMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADDeZek4 b/KrRtDcVGpA/bCjl3rO9j5iLPnbed9xjSVt34PngkYM081nTJjWvIh2/RkG3VQU lQPKjdopDTXJnwHBcs85wViJnBhz9FfMNaz5SJKOwAQ8Q2r1AXF6ZzOxRew/yMhN 0cV+SQvmFSnUmHcB4Mz3vvuwFtZh1LMGCcRqaPCT3dl0IR6Ycf3qqt99RkgDqs93 7OttVVs+VgyAqZrU5sF18Et4K32nLfs7On8G+7UO81rWtce6FMeseGHhBE9QtB+a 7j2QGsLtnRqZDLfr12muaMlJT6czmS0Pur4Qqf/tS/QNDjp4yYiHITKWoRZuFTjs 8ld5owWC9Dr1wEg= -----END CERTIFICATE-----Generated at Tue Nov 3 01:29:23 2026 by rpki-client