$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f/89527e72-7f58-3b69-aa46-2028f08c65db.roa File: 89527e72-7f58-3b69-aa46-2028f08c65db.roa (raw, json) Hash identifier: TG5nxNB/qpFDpQoaZ/aP5S2mH14FwtwAdsTAI/LEl7w= Subject key identifier: 3D:91:81:4A:04:04:25:58:12:8A:4B:EF:57:03:B7:C0:8E:DE:57:10 Certificate issuer: /CN=0bb54491-b95e-4fa9-87fb-9692a405ea9f Certificate serial: 010D0C9F4328584F5E62F153BA46E803ED8FD880 Authority key identifier: 58:9E:C6:78:48:B1:07:B7:73:0E:E6:5A:CF:CA:BD:F5:D6:06:2E:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f/89527e72-7f58-3b69-aa46-2028f08c65db.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 401988 IP address blocks: 23.145.164.0/24 maxlen: 24 64.111.94.0/23 maxlen: 23 64.111.94.0/24 maxlen: 24 64.111.95.0/24 maxlen: 24 2602:f55d::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f/0bb54491-b95e-4fa9-87fb-9692a405ea9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f/0bb54491-b95e-4fa9-87fb-9692a405ea9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:f1:53:ba:46:e8:03:ed:8f:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb54491-b95e-4fa9-87fb-9692a405ea9f Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=bb268bfa-f3e1-4d01-ab52-5111bb348b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:65:d7:a1:d7:11:80:c6:43:1a:6e:c7:4b: e5:2d:fd:ba:55:22:52:f5:2b:66:99:68:9f:f3:a3: 3d:0e:37:2d:75:8d:5f:2b:45:2b:17:27:10:1e:a9: f6:e4:87:68:a5:c0:3e:95:cf:fd:45:99:fc:c9:b8: 44:bb:92:bb:a3:9b:6c:60:95:bb:9c:cb:17:85:69: 5e:7e:c0:1e:1b:34:ef:89:65:90:c5:24:92:ff:e7: ce:3d:e0:1f:4a:0f:37:71:73:e4:a4:9f:ba:2b:a9: ad:99:10:d9:1d:9d:4a:eb:78:29:3d:33:61:6e:f9: 16:11:a9:75:30:e1:69:a9:fb:27:38:cc:0f:59:ac: 03:a1:af:8c:1d:53:f0:44:df:f3:3c:b4:f7:95:63: 84:e0:c2:b7:26:39:72:9d:ea:ca:e1:4c:13:4e:10: 57:9f:42:bf:77:d8:d3:46:df:d3:f3:4f:6f:fa:97: 6f:22:5c:54:99:7f:7f:74:ed:5a:80:26:cc:0a:a4: 1d:fd:ec:94:31:22:6b:58:c7:45:87:f1:38:49:dd: f2:b1:64:00:b7:d0:41:d3:52:ca:8c:d4:0a:71:5f: ad:24:4c:ab:ff:3f:44:41:eb:53:72:b4:91:86:7e: a7:9e:33:77:39:58:e6:87:aa:4f:38:e0:2c:1b:4b: 76:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:91:81:4A:04:04:25:58:12:8A:4B:EF:57:03:B7:C0:8E:DE:57:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f/89527e72-7f58-3b69-aa46-2028f08c65db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f/0bb54491-b95e-4fa9-87fb-9692a405ea9f.crl X509v3 Authority Key Identifier: keyid:58:9E:C6:78:48:B1:07:B7:73:0E:E6:5A:CF:CA:BD:F5:D6:06:2E:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.164.0/24 64.111.94.0/23 IPv6: 2602:f55d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6c:4a:c8:a0:9f:83:3c:11:cd:a4:b5:97:cd:06:1f:de:d7: ca:3f:75:04:8c:3e:53:99:0e:7d:71:93:71:33:ed:b7:63:a6: d6:22:aa:8f:51:48:42:36:f7:2b:a8:9c:50:f8:0b:1f:e2:78: 16:bd:f9:b0:cd:fc:d1:01:29:da:c3:0a:25:23:9b:dd:aa:40: 00:71:9e:be:dc:1b:2a:e5:40:f3:2f:96:eb:a8:66:fb:3d:2d: d4:28:91:10:01:f7:eb:d8:ba:d3:1f:b6:4e:43:46:53:d4:42: 6a:3e:84:8f:ac:6a:75:47:d8:57:57:5b:64:a1:3f:8b:16:12: 49:fa:d2:75:6d:af:97:cb:35:4e:bd:0b:f3:0b:b5:af:08:14: 8e:67:4c:4e:51:47:2c:ea:a1:f2:91:8b:81:f5:6f:87:35:7b: 67:3d:41:7f:27:84:52:fd:7f:ff:b6:69:5e:b8:cd:54:b2:9e: b2:94:cf:63:c9:32:fa:b7:35:f0:c8:94:c0:3f:b8:b1:1a:60: cb:2d:ba:56:0a:f5:d6:4a:f0:00:0d:13:79:d2:bc:d9:d5:58: 55:f5:97:05:a6:e4:1a:2a:28:8a:ce:9d:76:04:8c:56:74:bb: f3:14:64:37:fa:38:3c:e4:b3:11:68:bb:63:00:57:aa:ff:63: 9f:15:e1:f1 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9eYvFTukboA+2P2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJiNTQ0OTEtYjk1ZS00ZmE5LTg3ZmItOTY5MmE0MDVl YTlmMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YmIyNjhiZmEtZjNlMS00ZDAxLWFiNTItNTExMWJiMzQ4YjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg1l16HXEYDGQxpux0vlLf26VSJS9StmmWif 86M9DjctdY1fK0UrFycQHqn25IdopcA+lc/9RZn8ybhEu5K7o5tsYJW7nMsXhWle fsAeGzTviWWQxSSS/+fOPeAfSg83cXPkpJ+6K6mtmRDZHZ1K63gpPTNhbvkWEal1 MOFpqfsnOMwPWawDoa+MHVPwRN/zPLT3lWOE4MK3JjlynerK4UwTThBXn0K/d9jT Rt/T809v+pdvIlxUmX9/dO1agCbMCqQd/eyUMSJrWMdFh/E4Sd3ysWQAt9BB01LK jNQKcV+tJEyr/z9EQetTcrSRhn6nnjN3OVjmh6pPOOAsG0t2NwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFD2RgUoEBCVYEopL71cDt8CO3lcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYmI1 NDQ5MS1iOTVlLTRmYTktODdmYi05NjkyYTQwNWVhOWYvODk1MjdlNzItN2Y1OC0z YjY5LWFhNDYtMjAyOGYwOGM2NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGJiNTQ0OTEtYjk1ZS00ZmE5LTg3 ZmItOTY5MmE0MDVlYTlmLzBiYjU0NDkxLWI5NWUtNGZhOS04N2ZiLTk2OTJhNDA1 ZWE5Zi5jcmwwHwYDVR0jBBgwFoAUWJ7GeEixB7dzDuZaz8q99dYGLjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYmI1NDQ5MS1iOTVlLTRmYTktODdmYi05Njky YTQwNWVhOWYuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5GkAwQB QG9eMA4EAgACMAgDBgAmAvVdADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWbErIoJ+DPBHNpLWXzQYf3tfK P3UEjD5TmQ59cZNxM+23Y6bWIqqPUUhCNvcrqJxQ+Asf4ngWvfmwzfzRASnawwol I5vdqkAAcZ6+3Bsq5UDzL5brqGb7PS3UKJEQAffr2LrTH7ZOQ0ZT1EJqPoSPrGp1 R9hXV1tkoT+LFhJJ+tJ1ba+XyzVOvQvzC7WvCBSOZ0xOUUcs6qHykYuB9W+HNXtn PUF/J4RS/X//tmleuM1Usp6ylM9jyTL6tzXwyJTAP7ixGmDLLbpWCvXWSvAADRN5 0rzZ1VhV9ZcFpuQaKiiKzp12BIxWdLvzFGQ3+jg85LMRaLtjAFeq/2OfFeHx -----END CERTIFICATE-----Generated at Sun Oct 11 23:27:16 2026 by rpki-client