$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/b21aa04d-0aa5-3b24-8bb8-0cdd905aef81.roa File: b21aa04d-0aa5-3b24-8bb8-0cdd905aef81.roa (raw, json) Hash identifier: nRAtdFqNXXZLQAhlEsfBoeA24taqSWac/FIbShX4/WQ= Subject key identifier: A0:DD:FF:6E:F1:8A:42:3C:25:B0:BE:E0:8B:93:BE:40:58:A5:74:0E Certificate issuer: /CN=87edc032-d938-4504-bf4b-96c599e50195 Certificate serial: 010D0C9F4328584F655D7CA67FD11E70AEEA4E00 Authority key identifier: 1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/b21aa04d-0aa5-3b24-8bb8-0cdd905aef81.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 27005 IP address blocks: 65.39.96.0/19 maxlen: 24 69.2.0.0/20 maxlen: 24 148.59.212.0/23 maxlen: 24 162.253.232.0/21 maxlen: 24 207.254.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7c:a6:7f:d1:1e:70:ae:ea:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87edc032-d938-4504-bf4b-96c599e50195 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=46f94c05-bc9b-4a56-a6ca-b05fd8992aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:a0:d1:34:3c:ae:74:91:f3:d5:67:b8:84: 4a:93:44:1c:27:cd:80:62:d0:84:a8:b1:19:a5:47: a1:46:b5:4f:eb:51:86:3d:6f:5c:64:c7:04:54:b5: 57:fd:ee:ac:b6:fb:22:39:17:da:55:41:a2:40:ac: f9:24:50:16:ed:46:67:ba:ed:d0:82:6a:96:ae:c7: 25:68:f5:9d:80:75:90:48:cf:93:f2:5d:78:d1:32: 54:82:26:f9:ae:52:ef:95:ad:8d:32:04:f3:0f:87: 6e:ae:7e:b6:6f:c0:7e:41:6b:42:48:a3:7a:b1:e4: 42:70:1f:22:49:19:54:64:8f:32:26:4c:bb:64:6a: af:5b:45:16:a6:4a:97:5d:dc:d9:de:93:8c:16:7d: 84:30:da:2f:a3:ac:4d:b5:bf:0e:4a:2e:92:9f:f1: 37:fd:09:08:61:91:fd:63:d1:30:60:95:99:85:9d: 6e:87:c3:83:88:2e:c9:92:19:2a:56:04:a9:2c:29: ee:50:f8:6a:0a:71:99:31:36:81:48:a9:c4:12:e7: ef:05:d8:c7:f3:dd:37:62:ba:3d:ed:ce:8a:39:36: 7a:5b:01:dd:7d:a7:f6:c9:19:b6:37:26:b0:22:66: 47:d6:20:14:da:36:90:64:84:18:72:04:34:8e:c9: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DD:FF:6E:F1:8A:42:3C:25:B0:BE:E0:8B:93:BE:40:58:A5:74:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/b21aa04d-0aa5-3b24-8bb8-0cdd905aef81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl X509v3 Authority Key Identifier: keyid:1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer sbgp-ipAddrBlock: critical IPv4: 65.39.96.0/19 69.2.0.0/20 148.59.212.0/23 162.253.232.0/21 207.254.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c6:fa:6b:50:ec:ae:4a:2c:1e:b5:a2:15:0e:64:4a:53:0c: b2:c9:60:70:97:8c:37:80:67:49:c9:4c:2d:34:00:4d:73:83: 17:97:d0:f1:34:bf:ee:a3:5b:c5:7f:cf:78:c2:54:71:69:92: 3c:69:14:eb:3e:c1:13:d6:3d:42:b8:07:62:de:63:bc:4e:fa: 95:77:d6:f4:99:01:1a:b7:7b:d7:0c:ab:bd:c3:d2:fb:40:d0: dd:99:08:14:24:ae:fd:4d:6c:95:59:e3:c1:e3:6d:04:84:fb: 04:c6:99:6a:0e:4d:03:d3:75:dc:dd:ee:50:7d:21:10:bb:2e: 8c:ec:9f:df:97:b9:5d:52:da:a8:7a:68:7e:51:9d:b9:9e:ae: a8:d6:79:56:b4:bb:b3:4c:93:f5:01:ad:82:7c:69:f0:e3:44: de:9d:01:46:16:16:7c:19:ed:4e:d9:87:15:21:28:4a:60:04: 4c:6a:d4:f2:15:4f:e7:ed:22:52:4e:10:32:f3:30:87:8d:05: 72:b5:60:b2:e5:b7:1f:41:47:d3:b8:5f:e9:a3:56:52:9f:58: 02:47:96:76:30:24:22:6b:3a:c9:4c:e6:19:cd:78:9a:71:27: 52:8e:5a:86:47:66:e6:9b:d8:9a:4f:6c:0e:d9:04:38:6d:56: 73:75:46:9b -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE9lXXymf9EecK7qTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdlZGMwMzItZDkzOC00NTA0LWJmNGItOTZjNTk5ZTUw MTk1MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NDZmOTRjMDUtYmM5Yi00YTU2LWE2Y2EtYjA1ZmQ4OTkyYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVOg0TQ8rnSR89VnuIRKk0QcJ82AYtCEqLEZ pUehRrVP61GGPW9cZMcEVLVX/e6stvsiORfaVUGiQKz5JFAW7UZnuu3QgmqWrscl aPWdgHWQSM+T8l140TJUgib5rlLvla2NMgTzD4durn62b8B+QWtCSKN6seRCcB8i SRlUZI8yJky7ZGqvW0UWpkqXXdzZ3pOMFn2EMNovo6xNtb8OSi6Sn/E3/QkIYZH9 Y9EwYJWZhZ1uh8ODiC7JkhkqVgSpLCnuUPhqCnGZMTaBSKnEEufvBdjH8903Yro9 7c6KOTZ6WwHdfaf2yRm2NyawImZH1iAU2jaQZIQYcgQ0jsnJyQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFKDd/27xikI8JbC+4IuTvkBYpXQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84N2Vk YzAzMi1kOTM4LTQ1MDQtYmY0Yi05NmM1OTllNTAxOTUvYjIxYWEwNGQtMGFhNS0z YjI0LThiYjgtMGNkZDkwNWFlZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODdlZGMwMzItZDkzOC00NTA0LWJm NGItOTZjNTk5ZTUwMTk1Lzg3ZWRjMDMyLWQ5MzgtNDUwNC1iZjRiLTk2YzU5OWU1 MDE5NS5jcmwwHwYDVR0jBBgwFoAUG+7VGGB9PanC6C23Dg6d0AyNYegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84N2VkYzAzMi1kOTM4LTQ1MDQtYmY0Yi05NmM1 OTllNTAxOTUuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFQSdgAwQE RQIAAwQBlDvUAwQDov3oAwQDz/7AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJrG+mtQ7K5KLB61ohUOZEpT DLLJYHCXjDeAZ0nJTC00AE1zgxeX0PE0v+6jW8V/z3jCVHFpkjxpFOs+wRPWPUK4 B2LeY7xO+pV31vSZARq3e9cMq73D0vtA0N2ZCBQkrv1NbJVZ48HjbQSE+wTGmWoO TQPTddzd7lB9IRC7Lozsn9+XuV1S2qh6aH5RnbmerqjWeVa0u7NMk/UBrYJ8afDj RN6dAUYWFnwZ7U7ZhxUhKEpgBExq1PIVT+ftIlJOEDLzMIeNBXK1YLLltx9BR9O4 X+mjVlKfWAJHlnYwJCJrOslM5hnNeJpxJ1KOWoZHZuab2JpPbA7ZBDhtVnN1Rps= -----END CERTIFICATE-----Generated at Sun Oct 11 19:03:30 2026 by rpki-client