$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa File: f6720a31-8263-3bb2-b646-ce9236139a67.roa (raw, json) Hash identifier: GBqLaUl9JmBDtht6d810U7WyoEuVXZpTV73bIZ6IE5k= Subject key identifier: BA:9E:BF:17:A0:A7:89:37:92:AA:1B:ED:80:A6:2C:76:4E:2B:98:2E Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Certificate serial: 010D0C9F4328584F6F22E93FE52183D4921DD580 Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 26341 IP address blocks: 198.29.16.0/22 maxlen: 24 198.29.22.0/24 maxlen: 24 198.29.23.0/24 maxlen: 24 198.29.24.0/24 maxlen: 24 198.29.25.0/24 maxlen: 24 198.29.26.0/24 maxlen: 24 2602:f9e7:20::/45 maxlen: 48 2602:f9e7:28::/46 maxlen: 48 2602:f9e7:2c::/46 maxlen: 48 2602:f9e7:40::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e9:3f:e5:21:83:d4:92:1d:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=7dde0701-f7ac-4a55-b672-6e91970f0a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:90:55:47:0c:d3:68:41:e5:de:13:ea:39:05: 15:68:33:0b:08:9e:9b:6d:78:22:66:86:5b:4b:48: 17:03:43:eb:e2:9f:90:03:00:e1:06:a8:95:9a:86: d1:a2:a9:32:6b:b3:db:28:0f:4b:df:97:c9:19:01: 64:1f:40:41:de:b6:e5:c1:0f:ce:d7:0a:ab:55:d7: 5e:15:19:b9:57:ed:7a:9d:4c:c8:5b:b9:0a:06:e0: 12:be:58:b1:33:4d:4c:35:27:61:1c:46:7e:14:25: 64:2c:f9:1f:54:1c:ab:2f:91:16:7d:aa:71:6b:16: 76:fe:fb:45:16:91:9e:53:d5:d6:51:63:09:ae:6c: 7e:3c:c3:78:0a:f3:d2:32:f0:30:3c:ea:7e:db:36: 4d:4d:36:8e:21:66:2e:81:e7:bf:ee:78:cc:46:e7: 3e:e3:9c:af:d4:1e:ab:1e:1c:d3:30:99:a9:8e:c0: b2:e0:8f:ab:3d:e4:02:b2:4b:bd:06:11:26:f7:e6: 6f:fe:58:8c:d4:82:e0:47:93:89:ed:c0:33:8e:73: a0:7f:2b:5b:25:e1:fa:69:a4:6f:be:89:c2:f5:27: a3:01:d4:4c:dc:2c:31:e7:22:d0:fc:4e:c5:26:a0: 6e:f8:6c:fe:f8:9b:0e:0c:28:61:30:f4:65:62:aa: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9E:BF:17:A0:A7:89:37:92:AA:1B:ED:80:A6:2C:76:4E:2B:98:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl X509v3 Authority Key Identifier: keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer sbgp-ipAddrBlock: critical IPv4: 198.29.16.0/22 198.29.22.0-198.29.26.255 IPv6: 2602:f9e7:20::/44 2602:f9e7:40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:df:47:55:d8:77:d7:ed:57:e8:69:71:3f:a3:da:5e:22:cb: ff:97:5f:42:d7:d0:b2:e8:ec:5f:b5:8a:3a:2d:ec:a8:2b:b7: ec:fe:1d:36:f9:b2:00:70:61:bb:7a:5a:93:7a:cb:fc:c6:20: b3:92:49:f7:f0:87:c9:83:48:b7:5e:96:ac:25:55:f5:6a:c5: 65:4e:17:1b:66:e8:f7:6d:e9:4c:56:c6:62:f1:85:aa:7c:cf: ac:fd:0c:e2:da:3c:b1:99:df:ba:b7:e3:59:33:d4:ab:15:c1: d5:85:37:78:b8:e9:27:78:35:6e:53:24:1c:41:02:89:da:31: 5e:0b:f6:77:73:d0:f9:7e:4b:e0:c5:d6:6f:30:8c:9c:39:95: f4:9a:71:2f:49:e0:89:3b:8e:a7:2a:c6:d4:60:ec:66:28:80: c4:1e:68:b1:29:87:47:e0:78:ca:5a:39:1b:ac:2c:7a:a9:90: 5f:eb:35:35:eb:31:38:1d:d8:11:f1:70:4a:a4:5c:fc:42:3a: 22:45:a3:a6:1e:5e:d8:c7:f3:8f:9f:71:32:e2:46:2e:f3:e1: b7:dd:0a:22:4d:b9:d6:a4:25:4c:34:95:9f:53:27:08:da:fa: 60:7a:2e:43:d9:bc:dc:66:3d:4f:ac:1a:0a:c8:f6:8f:3c:bd: 6a:e4:cb:64 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWE9vIuk/5SGD1JId1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj MzRmMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk N2RkZTA3MDEtZjdhYy00YTU1LWI2NzItNmU5MTk3MGYwYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpBVRwzTaEHl3hPqOQUVaDMLCJ6bbXgiZoZb S0gXA0Pr4p+QAwDhBqiVmobRoqkya7PbKA9L35fJGQFkH0BB3rblwQ/O1wqrVdde FRm5V+16nUzIW7kKBuASvlixM01MNSdhHEZ+FCVkLPkfVByrL5EWfapxaxZ2/vtF FpGeU9XWUWMJrmx+PMN4CvPSMvAwPOp+2zZNTTaOIWYugee/7njMRuc+45yv1B6r HhzTMJmpjsCy4I+rPeQCsku9BhEm9+Zv/liM1ILgR5OJ7cAzjnOgfytbJeH6aaRv vonC9SejAdRM3Cwx5yLQ/E7FJqBu+Gz++JsODChhMPRlYqpGJQIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFLqevxegp4k3kqob7YCmLHZOK5guMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvZjY3MjBhMzEtODI2My0z YmIyLWI2NDYtY2U5MjM2MTM5YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm NDZmMmMzNGYuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAaBAIAATAUAwQCxh0QMAwD BAHGHRYDBADGHRowGAQCAAIwEgMHBCYC+ecAIAMHAiYC+ecAQDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk 30dV2HfX7VfoaXE/o9peIsv/l19C19Cy6OxftYo6LeyoK7fs/h02+bIAcGG7elqT esv8xiCzkkn38IfJg0i3XpasJVX1asVlThcbZuj3belMVsZi8YWqfM+s/Qzi2jyx md+6t+NZM9SrFcHVhTd4uOkneDVuUyQcQQKJ2jFeC/Z3c9D5fkvgxdZvMIycOZX0 mnEvSeCJO46nKsbUYOxmKIDEHmixKYdH4HjKWjkbrCx6qZBf6zU16zE4HdgR8XBK pFz8QjoiRaOmHl7Yx/OPn3Ey4kYu8+G33QoiTbnWpCVMNJWfUycI2vpgei5D2bzc Zj1PrBoKyPaPPL1q5Mtk -----END CERTIFICATE-----Generated at Sun Oct 11 21:59:57 2026 by rpki-client