$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa File: 7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa (raw, json) Hash identifier: agh7nyWVMIlaHO5RMi6As+Y01mzCsiO1AKIDDlijpFw= Subject key identifier: A6:D2:27:20:02:91:24:23:E8:85:C0:A4:5C:F3:24:BF:83:68:A6:FE Certificate issuer: /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Certificate serial: 010D0C9F4328584F9BCDF141BB1EF290A1630FC0 Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 401731 IP address blocks: 23.139.60.0/24 maxlen: 24 23.139.61.0/24 maxlen: 24 64.32.50.0/24 maxlen: 24 2620:d7:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:f1:41:bb:1e:f2:90:a1:63:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=d1688a39-6ca2-4851-9c70-ad5b2f09833b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:b3:d6:67:d9:9b:97:5a:9a:8b:dc:c8:86: ab:1d:2c:dd:61:9b:e3:2f:03:43:ba:9a:7b:a9:30: ac:24:1b:da:15:04:5a:92:c5:64:9b:ab:81:49:72: b7:07:18:ec:99:63:54:36:87:74:33:a1:a6:44:f5: 4e:83:b5:27:32:77:4f:2c:0d:be:f1:af:f4:52:55: 54:e3:34:f9:ee:39:c8:f1:d1:2e:d7:fe:a6:2f:04: 17:d5:df:59:01:bb:8e:46:d7:be:17:d4:ce:52:2a: 1e:60:e0:b5:73:af:1f:34:bc:1a:92:39:a3:12:77: 27:79:52:b0:90:d5:7a:da:65:ef:e5:90:3c:45:8f: 49:b0:f7:81:1e:10:70:b3:5f:47:50:a6:0c:d8:a7: 95:bf:0d:9a:f8:ac:79:1b:ec:fb:3e:eb:9f:78:0e: c0:e4:31:74:de:fa:84:fd:85:09:3e:ee:7b:93:35: 87:f1:b6:01:3c:ac:73:ab:58:c9:f0:22:de:d8:bc: d6:a4:89:87:63:92:8b:d3:1c:33:33:8b:c9:d5:9e: bd:bc:e4:e6:ae:52:72:cc:94:1c:b6:65:58:a2:9c: e5:04:96:f0:39:73:02:c1:5d:1f:fd:dd:39:47:d3: 9e:19:67:68:40:4a:76:7f:90:79:76:49:fd:83:ea: 50:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D2:27:20:02:91:24:23:E8:85:C0:A4:5C:F3:24:BF:83:68:A6:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl X509v3 Authority Key Identifier: keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer sbgp-ipAddrBlock: critical IPv4: 23.139.60.0/23 64.32.50.0/24 IPv6: 2620:d7:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4b:11:e9:6d:e3:76:60:68:24:85:38:ae:cc:c8:1e:c0:f1: 5d:47:7b:47:32:56:57:89:1c:d1:15:a7:e6:a5:39:f4:ed:cd: e4:8e:d6:71:a1:94:c8:e1:82:56:0d:47:ef:89:d1:d1:d4:e5: 9f:65:82:68:62:f5:55:70:02:4c:de:3e:0a:b5:c8:77:83:c3: 7e:2e:35:c9:dc:65:3f:c6:5e:8a:1d:99:12:c8:f6:ce:c9:45: 52:ef:7a:fe:3b:fc:1e:ac:ee:64:26:05:e7:8d:55:63:50:41: cd:c5:bd:34:a7:e7:2b:8b:f1:52:0c:da:7f:a6:e0:a5:d4:18: c6:90:5a:72:f7:0f:a1:d5:cc:b9:92:4a:91:d0:11:f5:01:a5: 88:d4:e6:8d:2e:e8:06:39:0d:3a:73:29:58:bf:52:8c:d6:7e: dd:34:59:48:7d:df:f8:e8:79:65:b3:3e:c2:08:ab:62:be:bf: fb:9e:81:9b:64:8e:5a:b8:48:53:75:b2:fc:15:6e:24:30:97: 28:d4:10:e4:f3:26:a4:39:9f:c3:e1:65:03:b5:91:92:10:f7: fb:e9:8b:29:20:f4:99:6f:15:7d:87:f6:b1:8a:3b:7b:b8:a1: bb:af:43:46:af:b5:7f:7a:7c:f2:bb:e9:ad:16:e1:9d:19:14: 85:b6:70:d6 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE+bzfFBux7ykKFjD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4 NTFmMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZDE2ODhhMzktNmNhMi00ODUxLTljNzAtYWQ1YjJmMDk4MzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCCz1mfZm5damovcyIarHSzdYZvjLwNDupp7 qTCsJBvaFQRaksVkm6uBSXK3BxjsmWNUNod0M6GmRPVOg7UnMndPLA2+8a/0UlVU 4zT57jnI8dEu1/6mLwQX1d9ZAbuORte+F9TOUioeYOC1c68fNLwakjmjEncneVKw kNV62mXv5ZA8RY9JsPeBHhBws19HUKYM2KeVvw2a+Kx5G+z7PuufeA7A5DF03vqE /YUJPu57kzWH8bYBPKxzq1jJ8CLe2LzWpImHY5KL0xwzM4vJ1Z69vOTmrlJyzJQc tmVYopzlBJbwOXMCwV0f/d05R9OeGWdoQEp2f5B5dkn9g+pQXwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFKbSJyACkSQj6IXApFzzJL+DaKb+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvN2RiZjFjZWEtNmQ3MS0z Yzc0LWE2NmMtZmZkZGZmN2IxNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj NGY1MDg1MWYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBF4s8AwQA QCAyMA8EAgACMAkDBwAmIADXoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQEsR6W3jdmBoJIU4rszIHsDx XUd7RzJWV4kc0RWn5qU59O3N5I7WcaGUyOGCVg1H74nR0dTln2WCaGL1VXACTN4+ CrXId4PDfi41ydxlP8Zeih2ZEsj2zslFUu96/jv8HqzuZCYF541VY1BBzcW9NKfn K4vxUgzaf6bgpdQYxpBacvcPodXMuZJKkdAR9QGliNTmjS7oBjkNOnMpWL9SjNZ+ 3TRZSH3f+Oh5ZbM+wgirYr6/+56Bm2SOWrhIU3Wy/BVuJDCXKNQQ5PMmpDmfw+Fl A7WRkhD3++mLKSD0mW8VfYf2sYo7e7ihu69DRq+1f3p88rvprRbhnRkUhbZw1g== -----END CERTIFICATE-----Generated at Tue Oct 27 01:13:32 2026 by rpki-client