$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed7a6a95-4f93-37f8-b0e5-8a86bd3870a2.roa File: ed7a6a95-4f93-37f8-b0e5-8a86bd3870a2.roa (raw, json) Hash identifier: o05UB8flX3+GVA1aqa1kPQ50gF33QWtILvyWPRe/L4U= Subject key identifier: 32:6C:9D:46:54:7E:D5:FE:18:4C:29:51:9A:30:E8:10:3E:62:4E:CC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F70881B931018BE74DAB96A80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed7a6a95-4f93-37f8-b0e5-8a86bd3870a2.roa Signing time: Fri 09 Oct 2026 01:00:12 +0000 ROA not before: Fri 09 Oct 2026 01:00:12 +0000 ROA not after: Thu 07 Jan 2027 02:00:12 +0000 asID: 212655 IP address blocks: 149.40.0.0/21 maxlen: 21 154.56.224.0/21 maxlen: 21 154.61.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:88:1b:93:10:18:be:74:da:b9:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 9 01:00:12 2026 GMT Not After : Jan 7 02:00:12 2027 GMT Subject: CN=5294fe12-4a6a-46f5-87db-772049d13896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:57:a3:0b:cc:f3:ab:6d:44:20:dc:28:dd:08: c0:c1:46:a9:cf:18:70:75:c0:a3:6a:aa:03:85:fb: a6:85:49:88:cb:c2:81:5d:63:6d:61:b7:da:41:ff: 87:3f:0a:bd:5d:ef:70:14:b4:b9:35:e7:f7:78:43: 5c:b4:96:7e:a4:ea:e0:e7:a8:70:7b:cc:66:53:21: 7b:b7:67:c6:e0:42:25:bf:fe:bf:52:48:23:53:03: 5a:b8:0a:d8:e2:2f:df:67:ef:17:04:9d:87:1b:40: 14:94:8c:94:65:c1:e5:0f:bc:28:2d:ed:16:3a:41: ab:8e:d4:44:f8:24:29:88:c8:e1:f6:b3:db:4b:cb: 77:27:80:8e:c1:37:53:5c:c9:fe:9c:86:6c:42:59: f9:2c:ce:e3:0d:0e:7f:6f:c2:7e:38:01:24:b6:bc: 32:40:2f:f5:01:f7:6a:e3:87:35:92:59:3b:4c:57: 30:c3:89:87:ab:db:c8:21:9b:ef:1a:43:76:12:67: fb:05:ec:d7:8b:ec:0f:89:e7:35:f0:3f:f7:18:3d: 0b:f1:f5:3b:b3:09:84:5b:eb:20:99:c0:bc:7c:e2: 15:d2:89:52:94:3b:86:29:d4:30:43:c0:5d:60:71: e0:7a:38:4d:10:5b:f4:fa:e2:07:4f:6f:5b:7c:cd: ae:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6C:9D:46:54:7E:D5:FE:18:4C:29:51:9A:30:E8:10:3E:62:4E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed7a6a95-4f93-37f8-b0e5-8a86bd3870a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.40.0.0/21 154.56.224.0/21 154.61.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:92:92:a2:33:43:a2:29:61:b9:a7:59:eb:40:87:8f:bf:d9: ce:ee:a7:27:bd:46:f5:68:e0:a4:48:c6:8f:c0:38:f4:35:68: ff:29:45:c8:f3:c5:5d:93:19:64:d1:da:b0:11:c4:a8:f8:d4: bb:a5:b2:ba:44:e2:d5:01:e7:71:ad:f1:a9:ad:91:59:3b:d5: ad:c8:34:db:9d:35:09:e1:68:63:db:52:a2:a0:b3:d2:ec:e9: 01:b1:37:67:59:55:93:4b:49:d7:41:59:be:fa:d0:9a:61:41: 41:6d:7b:39:dc:84:2b:3a:83:15:4a:df:0b:e6:24:94:44:9e: 1f:8b:4d:7f:66:3d:48:5b:61:f1:b4:42:f3:ff:1f:ad:4d:44: 5a:e0:3b:5c:12:e3:3a:fa:ab:f9:66:2e:86:be:ce:8b:8d:b9: fc:3f:af:d8:9f:d7:76:58:4a:f7:24:9b:3a:00:c3:0c:08:ce: 8f:8b:dd:4e:b8:16:e7:d4:68:1c:b9:5c:3f:c4:ef:5d:50:a1: 54:94:d4:b7:7a:e9:c7:31:be:ba:21:3b:ce:a0:35:64:3c:98: ce:e8:ba:48:ba:6a:6e:40:83:0a:a3:28:ae:ad:ff:4d:78:d4: 12:ed:73:aa:39:f3:35:68:24:c7:6f:4b:97:05:02:ea:aa:4a: cc:d3:2b:ec -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9wiBuTEBi+dNq5aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk NTI5NGZlMTItNGE2YS00NmY1LTg3ZGItNzcyMDQ5ZDEzODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1ejC8zzq21EINwo3QjAwUapzxhwdcCjaqoD hfumhUmIy8KBXWNtYbfaQf+HPwq9Xe9wFLS5Nef3eENctJZ+pOrg56hwe8xmUyF7 t2fG4EIlv/6/UkgjUwNauArY4i/fZ+8XBJ2HG0AUlIyUZcHlD7woLe0WOkGrjtRE +CQpiMjh9rPbS8t3J4COwTdTXMn+nIZsQln5LM7jDQ5/b8J+OAEktrwyQC/1Afdq 44c1klk7TFcww4mHq9vIIZvvGkN2Emf7BezXi+wPiec18D/3GD0L8fU7swmEW+sg mcC8fOIV0olSlDuGKdQwQ8BdYHHgejhNEFv0+uIHT29bfM2uWwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDJsnUZUftX+GEwpUZow6BA+Yk7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWQ3YTZhOTUtNGY5My0z N2Y4LWIwZTUtOGE4NmJkMzg3MGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDlSgAAwQD mjjgAwQDmj04MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJqSkqIzQ6IpYbmnWetAh4+/2c7upye9RvVo4KRI xo/AOPQ1aP8pRcjzxV2TGWTR2rARxKj41LulsrpE4tUB53Gt8amtkVk71a3INNud NQnhaGPbUqKgs9Ls6QGxN2dZVZNLSddBWb760JphQUFteznchCs6gxVK3wvmJJRE nh+LTX9mPUhbYfG0QvP/H61NRFrgO1wS4zr6q/lmLoa+zouNufw/r9if13ZYSvck mzoAwwwIzo+L3U64FufUaBy5XD/E711QoVSU1Ld66ccxvrohO86gNWQ8mM7ouki6 am5AgwqjKK6t/0141BLtc6o58zVoJMdvS5cFAuqqSszTK+w= -----END CERTIFICATE-----Generated at Tue Oct 13 17:38:53 2026 by rpki-client