$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252/ab6634a4-4f05-360c-b603-168f3f05af5d.roa File: ab6634a4-4f05-360c-b603-168f3f05af5d.roa (raw, json) Hash identifier: c+k0ZQdm8P9QakDhP5cBgqmk0+KhLD9YyO6vm47tWaQ= Subject key identifier: 55:6B:6C:CD:BD:74:D5:82:74:AF:E9:A5:F2:5E:1B:52:C1:CF:49:25 Certificate issuer: /CN=ef2c17bb-2de9-42bf-9197-37afb9fde252 Certificate serial: 010D0C9F4328584FAA76F6455944D1401AC14D64 Authority key identifier: 49:4E:C9:57:D6:EF:24:B5:7A:2E:34:0B:B9:58:CD:20:55:FF:B4:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252/ab6634a4-4f05-360c-b603-168f3f05af5d.roa Signing time: Thu 29 Oct 2026 19:02:34 +0000 ROA not before: Thu 29 Oct 2026 19:02:34 +0000 ROA not after: Wed 27 Jan 2027 20:02:34 +0000 asID: 16509 IP address blocks: 67.223.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252/ef2c17bb-2de9-42bf-9197-37afb9fde252.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252/ef2c17bb-2de9-42bf-9197-37afb9fde252.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:76:f6:45:59:44:d1:40:1a:c1:4d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2c17bb-2de9-42bf-9197-37afb9fde252 Validity Not Before: Oct 29 19:02:34 2026 GMT Not After : Jan 27 20:02:34 2027 GMT Subject: CN=0fbac06a-7e9f-44d1-9310-e3e37db986c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:1c:4f:24:b0:5f:b0:a9:41:dd:49:5b:d1: 54:78:6f:99:77:d6:71:6f:5d:3b:2e:66:13:00:a7: 59:ea:d6:86:20:31:55:39:74:e9:41:3b:ee:8b:56: 01:89:2a:cc:26:ac:91:a0:ff:8a:b5:1f:e2:b7:e8: d8:d4:d6:e5:94:81:d6:86:63:14:c0:df:1e:08:a1: 97:bf:8b:d3:3e:38:f3:ad:fe:6c:a5:07:fa:89:70: 43:69:e9:78:df:96:08:99:6f:89:1f:0f:e9:6f:ac: 1f:57:ee:bf:03:ad:f2:1d:de:8f:23:6f:53:07:be: 5f:a9:1c:29:ad:cb:0e:14:03:53:7d:8f:c3:f5:67: b6:9f:7f:45:8f:02:03:83:9c:f1:41:b8:cc:26:6b: 23:4b:8d:a4:d8:49:aa:dc:66:8b:da:61:fd:ab:f4: 09:12:f9:84:9b:e1:23:2a:56:a8:7c:88:3e:93:8d: 16:92:70:6d:a4:6d:3f:53:05:af:97:9b:4b:c3:e9: 23:6d:1c:a0:81:17:95:7b:28:53:64:6c:c6:03:42: 22:79:e9:12:d3:95:89:b8:d8:bb:d6:9e:d6:73:3e: ec:5f:66:a2:0e:85:75:52:7b:76:64:12:45:19:ef: 0f:3e:63:e7:8a:9c:21:2a:72:8e:80:31:69:fa:a1: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6B:6C:CD:BD:74:D5:82:74:AF:E9:A5:F2:5E:1B:52:C1:CF:49:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252/ab6634a4-4f05-360c-b603-168f3f05af5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252/ef2c17bb-2de9-42bf-9197-37afb9fde252.crl X509v3 Authority Key Identifier: keyid:49:4E:C9:57:D6:EF:24:B5:7A:2E:34:0B:B9:58:CD:20:55:FF:B4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252.cer sbgp-ipAddrBlock: critical IPv4: 67.223.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:db:dd:3c:67:5f:5b:d8:4d:f8:48:ba:21:6a:20:ff:7e:1c: 6b:3b:d9:54:61:8a:3a:46:56:96:a6:04:c2:12:58:7b:69:ae: 33:97:e5:e0:63:61:42:41:68:19:c9:05:f6:a4:f9:c6:e7:2b: cf:4c:e3:fc:08:f2:6f:7b:b2:09:20:f9:e4:5e:bf:f1:78:5e: 6b:14:7b:fa:31:eb:80:d8:52:63:d5:4c:0f:69:9a:c4:70:09: a4:ff:04:9f:4a:d0:21:d9:ff:a3:f5:2f:ee:05:d5:03:43:f0: b2:7a:b4:3a:84:b1:57:85:a6:f3:37:9e:d8:63:90:4c:3d:80: c4:d5:d7:44:c3:b4:28:3c:51:ad:62:06:ce:b5:a0:a1:31:ae: f6:f7:58:c4:5f:ab:7b:a5:08:26:d9:ca:04:18:ee:7e:da:56: c7:70:e6:5a:81:51:ce:8a:ea:bf:f1:96:6c:dc:59:30:10:58: 48:56:aa:ce:0c:d4:f1:65:7f:3f:9b:46:d7:86:52:eb:7c:07: 39:90:b6:14:ad:94:40:01:c6:84:c7:46:56:91:91:f2:06:d8: 06:2e:11:ef:60:9a:14:a3:c5:af:ab:e3:17:f5:40:ba:c3:b2: 09:9d:a0:c6:fc:c6:a0:0c:10:cc:74:d9:ab:92:56:43:ec:b4: 3f:2c:e6:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+qdvZFWUTRQBrBTWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYyYzE3YmItMmRlOS00MmJmLTkxOTctMzdhZmI5ZmRl MjUyMB4XDTI2MTAyOTE5MDIzNFoXDTI3MDEyNzIwMDIzNFowLzEtMCsGA1UEAxMk MGZiYWMwNmEtN2U5Zi00NGQxLTkzMTAtZTNlMzdkYjk4NmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM4cTySwX7CpQd1JW9FUeG+Zd9Zxb107LmYT AKdZ6taGIDFVOXTpQTvui1YBiSrMJqyRoP+KtR/it+jY1NbllIHWhmMUwN8eCKGX v4vTPjjzrf5spQf6iXBDael435YImW+JHw/pb6wfV+6/A63yHd6PI29TB75fqRwp rcsOFANTfY/D9We2n39FjwIDg5zxQbjMJmsjS42k2Emq3GaL2mH9q/QJEvmEm+Ej KlaofIg+k40WknBtpG0/UwWvl5tLw+kjbRyggReVeyhTZGzGA0IieekS05WJuNi7 1p7Wcz7sX2aiDoV1Unt2ZBJFGe8PPmPnipwhKnKOgDFp+qFIVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVrbM29dNWCdK/ppfJeG1LBz0klMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9lZjJj MTdiYi0yZGU5LTQyYmYtOTE5Ny0zN2FmYjlmZGUyNTIvYWI2NjM0YTQtNGYwNS0z NjBjLWI2MDMtMTY4ZjNmMDVhZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvZWYyYzE3YmItMmRlOS00MmJmLTkx OTctMzdhZmI5ZmRlMjUyL2VmMmMxN2JiLTJkZTktNDJiZi05MTk3LTM3YWZiOWZk ZTI1Mi5jcmwwHwYDVR0jBBgwFoAUSU7JV9bvJLV6LjQLuVjNIFX/tH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi9lZjJjMTdiYi0yZGU5LTQyYmYtOTE5Ny0zN2Fm YjlmZGUyNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArb3TxnX1vYTfhIuiFqIP9+HGs72VRhijpGVpamBMISWHtprjOX5eBj YUJBaBnJBfak+cbnK89M4/wI8m97sgkg+eRev/F4XmsUe/ox64DYUmPVTA9pmsRw CaT/BJ9K0CHZ/6P1L+4F1QND8LJ6tDqEsVeFpvM3nthjkEw9gMTV10TDtCg8Ua1i Bs61oKExrvb3WMRfq3ulCCbZygQY7n7aVsdw5lqBUc6K6r/xlmzcWTAQWEhWqs4M 1PFlfz+bRteGUut8BzmQthStlEABxoTHRlaRkfIG2AYuEe9gmhSjxa+r4xf1QLrD sgmdoMb8xqAMEMx02auSVkPstD8s5ko= -----END CERTIFICATE-----Generated at Mon Nov 2 16:06:36 2026 by rpki-client