$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa File: 88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa (raw, json) Hash identifier: lVbYZt+RZrvpOudyyCbAxfq6J0Vrj7IMn4UX5JKF4L8= Subject key identifier: 39:69:5E:DA:4A:70:18:AA:A7:B4:22:D2:1C:D8:44:E5:DC:C6:97:34 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584F7A4D8F70F4F6A835A63E9000 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 17017 IP address blocks: 168.245.136.0/24 maxlen: 24 208.70.144.0/21 maxlen: 21 2604:7fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:8f:70:f4:f6:a8:35:a6:3e:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=9d4e4536-195f-4808-838d-94fb90e63115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:70:fe:7a:01:eb:4e:68:87:59:2e:05:79: fa:36:46:8a:88:2a:b8:0c:b9:81:07:6d:60:92:63: 3a:f2:9d:23:fe:9a:61:b9:0f:fc:5b:ca:4a:0c:24: fa:3c:38:bf:da:2f:35:d6:49:81:28:1c:a7:c9:47: 47:ee:f8:17:83:da:46:af:81:85:ac:f3:97:74:6f: 6b:8d:32:07:2a:9d:84:00:f2:ed:df:5d:1d:3d:d3: 8a:03:d0:28:e2:81:e9:1c:92:80:34:ec:5d:4c:a6: c4:9e:92:50:7d:e2:cc:65:ed:5f:0e:b6:27:54:61: 3d:28:ed:9f:d8:93:e7:9f:2e:a7:2f:3b:a7:63:0b: fb:4c:0c:47:71:54:e8:0c:f2:3a:bc:7f:02:e1:38: 72:a3:08:51:e1:dd:ae:a6:02:c2:58:29:28:75:8d: ad:43:b8:b0:c4:89:f1:b3:47:40:4f:80:39:31:90: 70:90:ac:74:89:77:7b:9f:fd:3d:42:46:ca:bb:84: f3:54:f9:a0:b0:19:9f:19:94:e5:02:ae:44:ef:7f: 2f:6b:62:91:c0:61:02:50:b1:07:1f:fe:17:97:58: 27:b2:35:b0:50:5f:23:02:f2:b9:9f:c3:6f:9b:4a: 9c:8d:4d:dd:97:84:aa:d0:9e:ba:19:c3:44:63:92: ac:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:69:5E:DA:4A:70:18:AA:A7:B4:22:D2:1C:D8:44:E5:DC:C6:97:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 168.245.136.0/24 208.70.144.0/21 IPv6: 2604:7fc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:90:9e:3f:0b:e5:9e:2d:69:04:e6:83:4c:99:a6:7d:9e:1e: 55:98:0c:fe:64:4c:f1:d3:7a:6b:ca:7c:aa:df:4a:40:9b:ad: 77:80:bb:4e:f5:8d:c0:39:69:66:8c:a6:4c:62:5d:3b:1b:2e: 4e:32:f7:c0:14:47:8f:30:a5:2a:93:ec:a3:b8:da:39:31:c7: 8a:bb:d1:3d:49:7e:fa:b6:d6:dc:78:84:9a:9b:67:b5:ca:ad: 95:7d:69:f1:bb:ff:2d:f5:ca:8d:4d:bd:76:7a:c4:4b:e9:1c: 26:e4:89:78:32:e6:b1:60:60:93:26:a0:f0:26:0a:e9:80:c0: ef:be:d9:12:7e:75:9c:7d:22:a9:86:45:ad:e8:20:6b:1c:b7: b3:19:e4:7f:af:55:00:a5:ba:5f:49:67:6c:7a:c6:9d:9a:5d: 45:60:60:7d:9d:70:bb:85:9c:21:96:0d:b3:02:7d:90:32:9f: 82:7f:14:5d:49:48:d2:e3:e6:47:86:7c:a1:65:0d:c6:b5:c9: 9f:c1:4c:af:33:51:eb:81:06:79:58:ff:fa:23:18:be:46:90: 5d:4a:a8:58:24:43:66:61:bd:8c:6a:37:bb:b8:7f:72:bf:cd: 2b:0d:b4:0f:df:e7:35:97:c4:c9:a8:d0:ba:f5:a6:f3:bd:b8: 83:ec:41:e8 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE96TY9w9PaoNaY+kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OWQ0ZTQ1MzYtMTk1Zi00ODA4LTgzOGQtOTRmYjkwZTYzMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX1w/noB605oh1kuBXn6NkaKiCq4DLmBB21g kmM68p0j/pphuQ/8W8pKDCT6PDi/2i811kmBKBynyUdH7vgXg9pGr4GFrPOXdG9r jTIHKp2EAPLt310dPdOKA9Ao4oHpHJKANOxdTKbEnpJQfeLMZe1fDrYnVGE9KO2f 2JPnny6nLzunYwv7TAxHcVToDPI6vH8C4ThyowhR4d2upgLCWCkodY2tQ7iwxInx s0dAT4A5MZBwkKx0iXd7n/09QkbKu4TzVPmgsBmfGZTlAq5E738va2KRwGECULEH H/4Xl1gnsjWwUF8jAvK5n8Nvm0qcjU3dl4Sq0J66GcNEY5Ks6wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFDlpXtpKcBiqp7Qi0hzYROXcxpc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvODhlYzEyZjYtN2EwNS0z MGUxLWJhNjQtZjA3M2UyYTkwMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAqPWIAwQD 0EaQMA0EAgACMAcDBQAmBH/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADiQnj8L5Z4taQTmg0yZpn2eHlWY DP5kTPHTemvKfKrfSkCbrXeAu071jcA5aWaMpkxiXTsbLk4y98AUR48wpSqT7KO4 2jkxx4q70T1Jfvq21tx4hJqbZ7XKrZV9afG7/y31yo1NvXZ6xEvpHCbkiXgy5rFg YJMmoPAmCumAwO++2RJ+dZx9IqmGRa3oIGsct7MZ5H+vVQClul9JZ2x6xp2aXUVg YH2dcLuFnCGWDbMCfZAyn4J/FF1JSNLj5keGfKFlDca1yZ/BTK8zUeuBBnlY//oj GL5GkF1KqFgkQ2ZhvYxqN7u4f3K/zSsNtA/f5zWXxMmo0Lr1pvO9uIPsQeg= -----END CERTIFICATE-----Generated at Sat Oct 31 08:19:45 2026 by rpki-client