$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa File: a976272e-66d4-3404-810a-1db9636b39a3.roa (raw, json) Hash identifier: Lkz6l6X1EGRsQYYV1XUP6tYy1faJpXImVRC+2Lapaw8= Subject key identifier: 5B:E2:C0:38:83:F8:9F:3F:19:AA:26:1E:BB:1C:6D:93:DE:83:2C:B8 Certificate issuer: /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766 Certificate serial: 010D0C9F4328584F7A4D8F61C157C1D4173EA560 Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 399628 IP address blocks: 209.237.154.0/24 maxlen: 24 2620:96:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:8f:61:c1:57:c1:d4:17:3e:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=faaed86b-e41c-4dcf-8ec8-4b36e9693bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:ba:2f:38:f9:22:ca:15:8f:23:2d:8a:ed: 66:57:de:c6:39:c4:a3:70:e0:aa:ec:02:7b:1e:d5: 9d:79:d9:55:38:87:4d:30:10:66:43:ea:ed:b9:cd: 47:93:07:83:b4:7a:bc:a8:04:83:c0:39:bc:ae:be: 49:1e:72:c3:f9:17:e6:90:9d:91:41:09:bb:4d:ce: 02:43:1a:94:c0:04:8f:db:8d:8d:40:70:79:9a:41: e2:28:25:ef:83:73:6d:48:97:78:58:2c:5e:d3:b5: 4e:5b:b4:e2:42:30:e3:1b:3c:63:9b:6e:60:3c:8c: 42:33:24:a0:63:27:22:07:a1:f2:6f:64:0f:64:9f: 91:b0:51:21:95:1c:68:d0:c9:12:9b:e0:ab:63:5c: fa:4a:cc:84:a4:77:8e:d5:17:4e:cd:f4:2c:1f:1f: f1:c0:05:13:12:93:ba:37:16:47:1a:49:8a:b6:27: d2:b1:50:9b:2e:79:c7:f3:aa:37:8c:b6:0d:b8:24: 24:ae:f5:69:ac:f7:2b:89:46:5b:31:f2:82:fb:ab: ae:54:52:3d:91:5b:b6:bb:08:51:e8:01:62:5f:e2: aa:55:42:96:89:d2:14:98:79:bd:56:ea:b4:41:2e: 3e:1a:d7:02:63:53:e5:64:b4:87:4f:42:eb:e5:1e: cc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E2:C0:38:83:F8:9F:3F:19:AA:26:1E:BB:1C:6D:93:DE:83:2C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl X509v3 Authority Key Identifier: keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer sbgp-ipAddrBlock: critical IPv4: 209.237.154.0/24 IPv6: 2620:96:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1a:2c:fd:b3:94:b1:3e:5d:dc:26:68:16:0d:b0:a2:67:ae: 7c:e2:9c:75:5c:2d:dc:17:59:ac:73:f3:97:90:1a:80:69:48: b7:14:3f:b8:59:bc:28:03:eb:d5:a1:24:3c:60:2e:2c:dc:d9: c1:43:cf:0f:08:e5:4a:de:b2:c0:8b:33:97:2e:9d:c0:a2:18: c1:eb:ac:e5:5c:e8:f8:38:8e:57:98:87:18:3c:4e:f3:01:86: 10:26:ef:d4:7e:84:42:43:07:0a:89:b0:d7:52:b2:63:e6:c8: d3:e5:5c:f7:f6:b3:0f:bb:0f:ac:5b:a3:3a:40:a3:a7:b4:da: 61:da:d5:f3:a2:8a:d6:f8:0e:79:d1:23:a4:24:69:dc:80:2e: 12:f5:01:fc:e6:c0:e0:80:a5:ae:f7:38:b9:43:4d:06:bb:ab: 5f:b7:01:a9:33:47:7c:ca:95:12:74:9c:37:1a:fb:08:d7:18: 6e:2f:68:75:96:b9:a9:0a:01:eb:06:89:bf:08:bc:30:bf:c8: 37:a6:5b:37:99:d1:03:72:0e:49:f9:2b:9a:8b:ce:95:2a:47: e9:37:52:7c:26:51:c7:b9:b6:ba:e3:68:53:e6:0a:15:1e:08: 91:9a:1f:a3:87:37:56:f1:41:42:9f:d2:11:06:02:10:6a:3b: 10:2b:85:4e -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE96TY9hwVfB1Bc+pWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjMxM2E1ZWMtZWRiNS00OWEzLWIzYjMtOTgwZDgwZDhl NzY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmFhZWQ4NmItZTQxYy00ZGNmLThlYzgtNGIzNmU5NjkzYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3166Lzj5IsoVjyMtiu1mV97GOcSjcOCq7AJ7 HtWdedlVOIdNMBBmQ+rtuc1HkweDtHq8qASDwDm8rr5JHnLD+RfmkJ2RQQm7Tc4C QxqUwASP242NQHB5mkHiKCXvg3NtSJd4WCxe07VOW7TiQjDjGzxjm25gPIxCMySg YyciB6Hyb2QPZJ+RsFEhlRxo0MkSm+CrY1z6SsyEpHeO1RdOzfQsHx/xwAUTEpO6 NxZHGkmKtifSsVCbLnnH86o3jLYNuCQkrvVprPcriUZbMfKC+6uuVFI9kVu2uwhR 6AFiX+KqVUKWidIUmHm9Vuq0QS4+GtcCY1PlZLSHT0Lr5R7MmwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFviwDiD+J8/GaomHrscbZPegyy4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEz YTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBkODBkOGU3NjYvYTk3NjI3MmUtNjZkNC0z NDA0LTgxMGEtMWRiOTYzNmIzOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjMxM2E1ZWMtZWRiNS00OWEzLWIz YjMtOTgwZDgwZDhlNzY2LzIzMTNhNWVjLWVkYjUtNDlhMy1iM2IzLTk4MGQ4MGQ4 ZTc2Ni5jcmwwHwYDVR0jBBgwFoAUjxrzeGIjGzrpD8kDBhRRObCYM+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEzYTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBk ODBkOGU3NjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA0e2aMA8E AgACMAkDBwAmIACWoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABhos/bOUsT5d3CZoFg2womeufOKcdVwt 3BdZrHPzl5AagGlItxQ/uFm8KAPr1aEkPGAuLNzZwUPPDwjlSt6ywIszly6dwKIY weus5Vzo+DiOV5iHGDxO8wGGECbv1H6EQkMHComw11KyY+bI0+Vc9/azD7sPrFuj OkCjp7TaYdrV86KK1vgOedEjpCRp3IAuEvUB/ObA4IClrvc4uUNNBrurX7cBqTNH fMqVEnScNxr7CNcYbi9odZa5qQoB6waJvwi8ML/IN6ZbN5nRA3IOSfkrmovOlSpH 6TdSfCZRx7m2uuNoU+YKFR4IkZofo4c3VvFBQp/SEQYCEGo7ECuFTg== -----END CERTIFICATE-----Generated at Sun Oct 25 22:20:54 2026 by rpki-client