$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa File: 257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa (raw, json) Hash identifier: EovX7kpCSoneQJ9vZtshAqMGXJhemiOHT1tDaN5KUEg= Subject key identifier: D1:E2:A6:21:0B:FB:3F:1D:64:FD:D8:06:0C:1A:2E:0A:31:5F:BF:F4 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584F8F3DBB6FFCBFCE6EAAB7AD60 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 136473 IP address blocks: 168.245.216.0/21 maxlen: 24 208.56.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:bb:6f:fc:bf:ce:6e:aa:b7:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=d7179429-b742-47ac-8885-3367ab591ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:93:6f:b6:40:8a:dc:34:e5:e1:26:fd:7b: 5e:66:48:a5:ab:75:81:f4:d4:9f:24:b1:4f:2b:c8: 5f:3e:da:94:3f:a6:9a:f9:4b:ff:c8:4a:4a:ac:0b: 4c:4c:a4:d9:6e:bc:16:da:51:e3:d2:31:ae:70:1d: 4f:03:08:4e:7c:95:97:c6:e7:21:43:30:7d:77:8f: 67:75:50:ed:96:7c:ac:af:23:e4:82:2a:3f:d1:91: 05:7c:ad:c1:57:29:a5:b5:bf:7c:8c:c7:39:25:db: 71:43:62:8d:75:4f:15:95:8e:08:56:44:59:5d:ee: 23:e4:6d:58:01:9a:3f:4b:ad:64:bf:3b:1c:70:7c: 70:65:bd:ae:e5:cf:ef:ec:24:ce:af:5c:2b:e7:2f: 2c:32:a2:28:94:1a:08:12:7d:1c:f1:c9:46:35:9d: bd:61:9a:a9:77:e6:54:ff:70:61:b0:23:fc:95:14: 96:02:49:48:9d:55:94:98:51:f3:7b:cb:ca:68:1a: 38:06:d0:78:84:61:c5:f8:55:28:d2:e4:df:f9:f8: c7:84:49:1c:43:81:84:fc:b9:86:b4:d5:9f:ca:83: 20:43:48:e1:2e:2f:4a:1c:bb:3e:43:b8:f1:22:5a: 31:2c:56:7a:36:61:9e:d0:01:eb:41:69:55:63:dd: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E2:A6:21:0B:FB:3F:1D:64:FD:D8:06:0C:1A:2E:0A:31:5F:BF:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 168.245.216.0/21 208.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f4:69:56:a4:f0:73:8d:1a:76:8a:9f:3c:6d:97:4e:a0:15: 59:21:17:a5:69:48:2b:be:06:fa:38:b9:a4:8e:32:20:dd:50: f0:42:02:76:cd:66:62:fa:56:94:d9:1c:60:cc:6d:34:08:bd: 0d:25:37:17:9d:f2:84:5f:2b:40:b2:55:d2:f9:49:d3:f1:4b: 85:f1:81:3b:c3:d5:0a:87:de:09:c6:0c:b3:97:b9:c6:fd:ce: 83:af:fc:9d:7d:df:17:de:bb:31:22:48:d0:aa:e3:fe:c9:71: ba:6e:f7:64:f8:c8:c9:af:d1:fa:7d:24:37:1e:68:4a:12:22: dc:36:c1:2d:8d:57:ce:cb:9c:06:24:bf:57:e5:9f:b2:c0:49: 71:bd:cd:19:97:fa:73:10:e0:ce:37:b7:e5:54:57:af:3d:e8: 39:82:aa:3b:ae:99:e4:89:f8:29:d6:76:47:24:27:86:5f:10: 8a:1b:48:ea:1f:d8:b9:ab:48:51:04:8d:c1:da:66:90:a0:fb: 2c:66:bd:54:ef:3b:f6:22:cc:be:76:a5:44:1d:9b:35:5a:e5: 34:80:84:41:2b:3b:ee:d8:74:a4:10:6b:a7:0c:06:84:e8:66: 1d:8e:49:b9:f5:51:94:bb:1e:c7:1f:4a:a5:f5:e5:8f:b3:17: a5:42:50:70 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+PPbtv/L/Obqq3rWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk ZDcxNzk0MjktYjc0Mi00N2FjLTg4ODUtMzM2N2FiNTkxY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0yTb7ZAitw05eEm/XteZkilq3WB9NSfJLFP K8hfPtqUP6aa+Uv/yEpKrAtMTKTZbrwW2lHj0jGucB1PAwhOfJWXxuchQzB9d49n dVDtlnysryPkgio/0ZEFfK3BVymltb98jMc5JdtxQ2KNdU8VlY4IVkRZXe4j5G1Y AZo/S61kvzsccHxwZb2u5c/v7CTOr1wr5y8sMqIolBoIEn0c8clGNZ29YZqpd+ZU /3BhsCP8lRSWAklInVWUmFHze8vKaBo4BtB4hGHF+FUo0uTf+fjHhEkcQ4GE/LmG tNWfyoMgQ0jhLi9KHLs+Q7jxIloxLFZ6NmGe0AHrQWlVY90bgwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNHipiEL+z8dZP3YBgwaLgoxX7/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvMjU3ZTlhNDItNGVjMC0z YTg1LTg5YTktYTIwNWI4ZjllM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDqPXYAwQG 0DgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABz0aVak8HONGnaKnzxtl06gFVkhF6VpSCu+Bvo4uaSOMiDd UPBCAnbNZmL6VpTZHGDMbTQIvQ0lNxed8oRfK0CyVdL5SdPxS4XxgTvD1QqH3gnG DLOXucb9zoOv/J193xfeuzEiSNCq4/7Jcbpu92T4yMmv0fp9JDceaEoSItw2wS2N V87LnAYkv1fln7LASXG9zRmX+nMQ4M43t+VUV6896DmCqjuumeSJ+CnWdkckJ4Zf EIobSOof2LmrSFEEjcHaZpCg+yxmvVTvO/YizL52pUQdmzVa5TSAhEErO+7YdKQQ a6cMBoToZh2OSbn1UZS7HscfSqX15Y+zF6VCUHA= -----END CERTIFICATE-----Generated at Wed Oct 28 04:59:52 2026 by rpki-client