$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa File: 7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa (raw, json) Hash identifier: FhJP3wPyjXMBQ/aBc14eqPj3qkVXVA5eCBnXJVYWRP0= Subject key identifier: 8D:5A:77:21:88:1A:94:25:DF:E7:B9:65:E7:7E:5B:30:5D:39:CC:C3 Certificate issuer: /CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Certificate serial: 010D0C9F4328584F497536BBB39B51CD65714EC0 Authority key identifier: 4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398777 IP address blocks: 24.233.144.0/20 maxlen: 20 149.137.160.0/19 maxlen: 19 150.252.96.0/20 maxlen: 20 192.173.152.0/21 maxlen: 21 2605:ec40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:36:bb:b3:9b:51:cd:65:71:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f3d14eb9-bc10-424c-b97b-56b263e77144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:87:88:e7:bd:9d:d9:c9:22:8d:06:0c:86:ae: 62:12:b3:17:a0:ed:3a:ef:1d:f1:30:ca:3a:4c:f2: ad:07:99:c9:5d:69:9a:cd:29:af:a9:07:53:94:3c: 3f:5a:3f:f3:27:cf:2d:75:de:5f:89:f0:d3:24:08: bf:a7:97:7a:3a:e4:2c:ea:cf:f7:15:a5:46:1e:3a: e8:eb:cc:b7:6e:16:e8:c4:3c:b2:13:a9:4a:90:a0: ff:e7:43:03:44:d0:2e:a1:a4:b0:b5:b0:4d:e5:50: 82:05:b8:df:68:0a:3d:47:78:43:b7:ac:dc:57:53: 5e:e6:5d:66:fe:95:33:ba:14:48:83:62:bd:b7:0b: 65:0e:0e:fb:62:47:67:1e:79:46:96:d6:7b:60:2a: 59:95:d2:b9:75:74:43:5e:8e:6b:4c:e7:5c:7d:ec: e6:78:0f:0d:a3:ba:e7:88:ac:39:54:aa:5e:f6:b3: a4:34:14:b5:f7:4f:ef:e3:66:d9:5d:49:14:35:de: 07:24:74:e4:60:9e:40:36:57:6d:3f:16:19:2c:33: 98:98:80:8e:1a:d1:e5:37:6a:86:09:fa:0c:86:85: f8:39:73:e2:da:3f:fa:99:d6:37:65:cd:cb:a3:26: 4c:7c:1b:ae:e1:5f:93:96:73:55:39:4b:d3:4f:5d: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5A:77:21:88:1A:94:25:DF:E7:B9:65:E7:7E:5B:30:5D:39:CC:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl X509v3 Authority Key Identifier: keyid:4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer sbgp-ipAddrBlock: critical IPv4: 24.233.144.0/20 149.137.160.0/19 150.252.96.0/20 192.173.152.0/21 IPv6: 2605:ec40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0d:db:41:8d:7e:c7:0c:7f:f1:3f:db:31:e6:c8:af:70:7b: 7e:6e:a1:b6:5d:80:21:dd:4a:6f:05:e6:a8:c0:6d:2f:a7:d9: d5:b3:1a:f9:00:c2:3a:62:fa:b0:4d:89:d7:84:71:b6:29:c7: c5:8d:d1:1a:ae:ab:e1:a8:1c:b9:ed:d7:44:30:70:73:bd:66: ae:50:c7:6c:9c:5b:9d:b7:dc:c9:db:fd:ba:b9:e5:67:9f:4c: fe:af:2f:6e:52:30:61:7f:8f:8b:08:a9:8b:c9:e2:26:83:ef: 48:07:c7:56:00:f4:b3:4f:63:63:08:54:b8:97:9f:79:52:ef: 80:3a:1e:78:70:80:da:97:fc:65:f7:20:81:ab:e5:fe:19:4e: 2e:88:6c:44:f2:89:63:b2:ea:b6:cc:5a:c0:e8:c7:de:5f:89: 50:51:b5:20:85:2f:e0:56:0b:9e:6c:4c:8f:07:80:7b:48:c3: b4:fa:40:a5:37:a2:3d:49:90:f7:84:d4:16:59:3e:c5:42:ce: 3a:e9:57:e3:98:7f:a3:c2:e4:2d:c5:fc:74:78:d9:f9:da:09: bf:7d:9d:3e:f9:57:7f:dc:ea:ff:61:09:40:13:c2:1f:70:bc: 94:3f:29:b3:88:f6:c9:43:36:1e:98:72:fb:a0:6a:94:83:0a: 5b:41:d0:59 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE9JdTa7s5tRzWVxTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5MGVlZmItMWM1NS00Y2Q4LWFkYjYtZTYxMmM4ZDBm OTk5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjNkMTRlYjktYmMxMC00MjRjLWI5N2ItNTZiMjYzZTc3MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oeI572d2ckijQYMhq5iErMXoO067x3xMMo6 TPKtB5nJXWmazSmvqQdTlDw/Wj/zJ88tdd5fifDTJAi/p5d6OuQs6s/3FaVGHjro 68y3bhboxDyyE6lKkKD/50MDRNAuoaSwtbBN5VCCBbjfaAo9R3hDt6zcV1Ne5l1m /pUzuhRIg2K9twtlDg77YkdnHnlGltZ7YCpZldK5dXRDXo5rTOdcfezmeA8No7rn iKw5VKpe9rOkNBS190/v42bZXUkUNd4HJHTkYJ5ANldtPxYZLDOYmICOGtHlN2qG CfoMhoX4OXPi2j/6mdY3Zc3LoyZMfBuu4V+TlnNVOUvTT10FRwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFI1adyGIGpQl3+e5Zed+WzBdOczDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkw ZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEyYzhkMGY5OTkvNzU0NWZhOTYtOGY3My0z NGY5LTk3YjAtM2QwZmEyYjM3MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzg5MGVlZmItMWM1NS00Y2Q4LWFk YjYtZTYxMmM4ZDBmOTk5L2M4OTBlZWZiLTFjNTUtNGNkOC1hZGI2LWU2MTJjOGQw Zjk5OS5jcmwwHwYDVR0jBBgwFoAUTu9yW77rjBLGOkHZCcOTsb4pffgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkwZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEy YzhkMGY5OTkuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEGOmQAwQF lYmgAwQElvxgAwQDwK2YMA0EAgACMAcDBQAmBexAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIoN20GNfscM f/E/2zHmyK9we35uobZdgCHdSm8F5qjAbS+n2dWzGvkAwjpi+rBNideEcbYpx8WN 0Rquq+GoHLnt10QwcHO9Zq5Qx2ycW5233Mnb/bq55WefTP6vL25SMGF/j4sIqYvJ 4iaD70gHx1YA9LNPY2MIVLiXn3lS74A6HnhwgNqX/GX3IIGr5f4ZTi6IbETyiWOy 6rbMWsDox95fiVBRtSCFL+BWC55sTI8HgHtIw7T6QKU3oj1JkPeE1BZZPsVCzjrp V+OYf6PC5C3F/HR42fnaCb99nT75V3/c6v9hCUATwh9wvJQ/KbOI9slDNh6Ycvug apSDCltB0Fk= -----END CERTIFICATE-----Generated at Sun Oct 11 20:56:50 2026 by rpki-client