$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa File: 731e66c1-a71e-3d9f-a838-e78228e9ff90.roa (raw, json) Hash identifier: kpRrRkXMV9H9WiOp6/gCxflR6oPnBIQtae1NDj1gaAc= Subject key identifier: 70:53:29:8A:C7:E9:CC:A2:8D:DF:5C:FF:C6:92:1B:AD:A6:2A:42:A4 Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Certificate serial: 010D0C9F4328584F8F3DB4CD9A265F105A815140 Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 11734 IP address blocks: 104.151.136.0/21 maxlen: 24 104.153.192.0/22 maxlen: 24 199.19.208.0/22 maxlen: 24 199.189.64.0/22 maxlen: 24 208.74.28.0/22 maxlen: 24 208.74.48.0/22 maxlen: 24 208.82.204.0/22 maxlen: 24 208.91.48.0/22 maxlen: 24 209.134.48.0/20 maxlen: 24 2607:f148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b4:cd:9a:26:5f:10:5a:81:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=e52adee0-86a4-48a9-ada5-7271fbd6f2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a0:b3:f0:80:9c:29:61:0f:e8:c5:6f:12:2a: e0:f4:97:30:cf:0e:dd:c8:ea:2e:df:52:ff:09:f1: 97:ea:c1:8c:09:da:56:7d:3d:95:ae:01:8b:d8:19: 47:d9:e3:95:67:c2:bd:49:e9:07:86:3e:11:73:7c: e6:33:23:94:ac:4e:9b:2f:a9:92:66:98:77:f5:c3: 91:c5:1f:ff:57:11:d5:29:51:63:46:d7:e1:99:b0: 42:90:d0:54:1a:66:21:d3:54:d1:a1:e7:dc:3c:8e: ef:f6:d4:52:9c:8b:93:48:19:f4:a2:23:85:18:9d: c2:74:b2:7b:1e:67:a2:97:af:9b:2f:5f:d9:89:1e: de:d4:29:e6:71:35:f8:fc:37:7f:41:ff:13:68:76: f1:94:71:7f:1b:ec:ea:c1:f4:2d:b5:c1:10:5f:1d: a6:0c:fd:07:6e:8a:6b:81:d6:9c:96:32:32:13:34: f9:2c:a1:ba:00:31:8a:36:c5:c7:f7:f6:80:83:75: d1:d5:73:ef:87:9e:49:72:e5:19:1c:e8:c5:6e:42: 44:26:c1:05:17:85:03:80:72:2c:d4:00:c8:d4:8c: 05:c8:ea:6f:b5:7e:f7:d6:eb:b3:2b:35:4f:c1:d7: 87:b3:69:fa:92:29:67:e4:49:df:4d:4f:0e:04:4e: c6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:29:8A:C7:E9:CC:A2:8D:DF:5C:FF:C6:92:1B:AD:A6:2A:42:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl X509v3 Authority Key Identifier: keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:37:8e:0d:f5:ad:5e:50:cc:b5:e3:c0:75:3b:ba:5f:cc:47: 67:27:03:68:93:50:74:dd:da:fd:e5:86:71:43:c8:bf:a7:c0: 2c:00:e7:10:81:a8:5f:1a:4a:5d:e3:aa:39:22:6c:29:01:df: 67:7e:47:13:1c:42:ea:a1:71:a6:1b:00:66:55:76:ff:ce:16: 0f:cd:d0:e6:6c:a2:19:61:8a:c4:43:79:c0:83:0b:d8:2b:0c: 70:de:4c:fd:dd:95:86:32:18:5e:4f:37:88:1c:b0:4b:80:10: ba:4e:11:73:04:fd:fd:29:83:71:75:1e:63:5a:84:3f:c5:13: 41:e1:37:4f:ea:45:4e:79:df:5e:4d:15:3f:bd:b3:82:90:3e: f6:08:87:98:a7:4c:30:a9:93:e8:0c:cb:f5:36:dd:95:1e:45: 8a:36:57:07:3b:d9:29:ab:fa:f4:20:5d:23:77:d7:b7:9a:ac: 53:6b:a5:34:71:a2:b4:d7:cb:ba:a0:0e:45:1f:36:33:d9:6d: 77:d1:41:03:13:93:7c:64:f4:bd:85:07:51:f3:a4:03:1f:f5: a1:18:f2:4b:0f:d3:b3:b5:21:5b:21:30:c5:18:25:06:54:15: 24:c5:91:55:ae:b3:b2:d7:cd:ec:de:0b:8a:3d:c3:9a:63:c8: ff:b3:49:fd -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWE+PPbTNmiZfEFqBUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2Vm OTVjMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk ZTUyYWRlZTAtODZhNC00OGE5LWFkYTUtNzI3MWZiZDZmMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaCz8ICcKWEP6MVvEirg9Jcwzw7dyOou31L/ CfGX6sGMCdpWfT2VrgGL2BlH2eOVZ8K9SekHhj4Rc3zmMyOUrE6bL6mSZph39cOR xR//VxHVKVFjRtfhmbBCkNBUGmYh01TRoefcPI7v9tRSnIuTSBn0oiOFGJ3CdLJ7 Hmeil6+bL1/ZiR7e1CnmcTX4/Dd/Qf8TaHbxlHF/G+zqwfQttcEQXx2mDP0Hbopr gdacljIyEzT5LKG6ADGKNsXH9/aAg3XR1XPvh55JcuUZHOjFbkJEJsEFF4UDgHIs 1ADI1IwFyOpvtX731uuzKzVPwdeHs2n6kiln5EnfTU8OBE7GGwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFHBTKYrH6cyijd9c/8aSG62mKkKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Fj NWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvNzMxZTY2YzEtYTcxZS0z ZDlmLWE4MzgtZTc4MjI4ZTlmZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNhYzVlZGUtMWQyNy00MWE1LTkz MmMtMjE4MzJmM2VmOTVjLzQzYWM1ZWRlLTFkMjctNDFhNS05MzJjLTIxODMyZjNl Zjk1Yy5jcmwwHwYDVR0jBBgwFoAUCT5IKHeuyWZd5/E/OeO3foSfms0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgz MmYzZWY5NWMuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDaJeIAwQC aJnAAwQCxxPQAwQCx71AAwQC0EocAwQC0EowAwQC0FLMAwQC0FswAwQE0YYwMA0E AgACMAcDBQAmB/FIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAJg3jg31rV5QzLXjwHU7ul/MR2cnA2iTUHTd 2v3lhnFDyL+nwCwA5xCBqF8aSl3jqjkibCkB32d+RxMcQuqhcaYbAGZVdv/OFg/N 0OZsohlhisRDecCDC9grDHDeTP3dlYYyGF5PN4gcsEuAELpOEXME/f0pg3F1HmNa hD/FE0HhN0/qRU55315NFT+9s4KQPvYIh5inTDCpk+gMy/U23ZUeRYo2Vwc72Smr +vQgXSN317earFNrpTRxorTXy7qgDkUfNjPZbXfRQQMTk3xk9L2FB1HzpAMf9aEY 8ksP07O1IVshMMUYJQZUFSTFkVWus7LXzezeC4o9w5pjyP+zSf0= -----END CERTIFICATE-----Generated at Sat Oct 24 10:42:25 2026 by rpki-client