$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/0c5eaa23-353b-3a99-b28e-0c8e96aec4ed.roa File: 0c5eaa23-353b-3a99-b28e-0c8e96aec4ed.roa (raw, json) Hash identifier: GPrq8dxTRhE0oy5nUQimKM1PyJ5EdpRPYAcOZhAYKSE= Subject key identifier: A2:98:2B:C7:2F:FE:D6:00:98:5C:FC:32:B6:C4:B3:42:73:74:81:F5 Certificate issuer: /CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f Certificate serial: 010D0C9F4328584FB3AAF4824F516F116FE38800 Authority key identifier: 09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/0c5eaa23-353b-3a99-b28e-0c8e96aec4ed.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 13911 IP address blocks: 66.51.108.0/22 maxlen: 22 198.161.206.0/24 maxlen: 24 216.194.64.0/21 maxlen: 21 216.234.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:aa:f4:82:4f:51:6f:11:6f:e3:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=c2c6102e-0065-4806-ab37-f42236c3f958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:88:6e:6c:2e:fb:92:5e:21:8d:ad:5e:f4:71: 09:18:4e:6b:24:56:31:f0:53:ae:d9:3b:f1:7e:3e: e5:4b:b1:d6:da:f9:ed:c4:f8:a1:53:2b:f8:38:03: 25:58:23:bf:34:2d:ff:d4:60:df:9b:7d:87:a9:7f: 45:c9:c3:c1:c8:fd:c5:4e:5b:fe:76:24:80:7b:5e: 69:94:db:35:c1:71:0f:30:1b:63:05:b1:be:e3:7f: 62:4c:da:a8:fa:d4:00:5d:96:ce:a3:7e:55:0c:b9: 9a:d4:9b:96:9c:74:65:89:bf:7f:fb:e8:81:79:51: c4:82:1b:d2:f9:78:47:d0:4c:a3:2e:26:4b:80:8a: 55:e8:00:06:d4:3f:93:2d:b6:6a:9b:c9:bb:88:b8: bf:7c:f4:72:30:b2:bc:52:57:71:0c:e7:ee:b6:3a: 41:81:91:fc:7c:7f:b1:32:21:e0:11:d2:f8:97:a0: 1d:df:83:14:54:e7:9f:87:95:c4:09:f2:c5:ed:8a: 8c:5c:bc:75:33:f1:24:90:02:42:d2:22:3e:e8:72: 37:13:e8:76:23:45:54:96:c6:10:b7:71:be:88:8c: 63:74:50:90:0c:7c:4e:94:5b:b6:e1:1d:32:2d:21: d3:cc:11:45:04:c9:8b:6c:c3:93:66:f0:52:d3:19: ca:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:98:2B:C7:2F:FE:D6:00:98:5C:FC:32:B6:C4:B3:42:73:74:81:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/0c5eaa23-353b-3a99-b28e-0c8e96aec4ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl X509v3 Authority Key Identifier: keyid:09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer sbgp-ipAddrBlock: critical IPv4: 66.51.108.0/22 198.161.206.0/24 216.194.64.0/21 216.234.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f6:85:8d:d5:f7:a7:08:dd:ff:1f:2e:89:22:63:99:3f:da: 91:fa:59:71:f6:5a:30:34:4b:b3:87:4b:4a:f3:93:5e:01:22: 1a:16:a5:80:bb:f2:0e:97:88:03:2d:52:35:aa:df:35:f1:7c: 01:b3:08:45:9d:d7:96:21:69:89:ab:6e:9b:fd:59:32:13:33: 9d:cc:93:8a:e6:c5:4f:03:8c:48:6b:78:76:6f:20:4a:f2:0a: 4e:64:a3:cd:97:ce:6e:43:b6:57:b4:f0:19:d4:20:00:46:ed: 39:a4:39:49:41:e8:66:0b:22:2c:e8:d5:bb:3e:9b:01:30:b6: 83:8e:01:b3:de:b5:66:5a:78:3f:e5:8c:70:df:a9:6c:fc:33: 1c:0f:3c:72:30:1b:ba:5b:bf:90:f3:fb:15:8b:af:c9:24:54: c1:ef:46:23:68:94:c9:13:35:7b:55:31:11:80:e2:50:c6:ab: ac:6f:0c:7e:b6:8d:69:c2:50:88:43:1a:5a:b9:33:de:09:43: ab:36:56:74:46:f8:38:3b:c2:3e:37:01:5c:6c:12:2b:10:ee: 1b:f0:9f:a2:9a:16:c5:d9:5c:a1:5b:33:a7:96:c7:52:ad:6e: ad:9b:f5:b9:c9:28:f0:75:fb:5c:cf:c5:50:84:74:4d:7c:f0: ab:ff:07:f4 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE+zqvSCT1FvEW/jiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY5YWMxNDMtM2YyNi00YjliLTg5OTctM2QzZmJkMzEw ZjhmMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YzJjNjEwMmUtMDA2NS00ODA2LWFiMzctZjQyMjM2YzNmOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYhubC77kl4hja1e9HEJGE5rJFYx8FOu2Tvx fj7lS7HW2vntxPihUyv4OAMlWCO/NC3/1GDfm32HqX9FycPByP3FTlv+diSAe15p lNs1wXEPMBtjBbG+439iTNqo+tQAXZbOo35VDLma1JuWnHRlib9/++iBeVHEghvS +XhH0EyjLiZLgIpV6AAG1D+TLbZqm8m7iLi/fPRyMLK8UldxDOfutjpBgZH8fH+x MiHgEdL4l6Ad34MUVOefh5XECfLF7YqMXLx1M/EkkAJC0iI+6HI3E+h2I0VUlsYQ t3G+iIxjdFCQDHxOlFu24R0yLSHTzBFFBMmLbMOTZvBS0xnKtwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFKKYK8cv/tYAmFz8MrbEs0JzdIH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lZjlh YzE0My0zZjI2LTRiOWItODk5Ny0zZDNmYmQzMTBmOGYvMGM1ZWFhMjMtMzUzYi0z YTk5LWIyOGUtMGM4ZTk2YWVjNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWY5YWMxNDMtM2YyNi00YjliLTg5 OTctM2QzZmJkMzEwZjhmL2VmOWFjMTQzLTNmMjYtNGI5Yi04OTk3LTNkM2ZiZDMx MGY4Zi5jcmwwHwYDVR0jBBgwFoAUCWpnLttgeYiqMKhOrI64oj1ZGJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lZjlhYzE0My0zZjI2LTRiOWItODk5Ny0zZDNm YmQzMTBmOGYuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCQjNsAwQA xqHOAwQD2MJAAwQD2OqgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIr2hY3V96cI3f8fLokiY5k/2pH6WXH2 WjA0S7OHS0rzk14BIhoWpYC78g6XiAMtUjWq3zXxfAGzCEWd15YhaYmrbpv9WTIT M53Mk4rmxU8DjEhreHZvIEryCk5ko82Xzm5Dtle08BnUIABG7TmkOUlB6GYLIizo 1bs+mwEwtoOOAbPetWZaeD/ljHDfqWz8MxwPPHIwG7pbv5Dz+xWLr8kkVMHvRiNo lMkTNXtVMRGA4lDGq6xvDH62jWnCUIhDGlq5M94JQ6s2VnRG+Dg7wj43AVxsEisQ 7hvwn6KaFsXZXKFbM6eWx1Ktbq2b9bnJKPB1+1zPxVCEdE188Kv/B/Q= -----END CERTIFICATE-----Generated at Mon Nov 2 22:47:19 2026 by rpki-client