$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/efd5b1a7-a066-35e8-b1de-4f3895d78184.roa File: efd5b1a7-a066-35e8-b1de-4f3895d78184.roa (raw, json) Hash identifier: QDJrq+CLTvalvgctvyw/EplCT48JnjBfzwFfKmaW35I= Subject key identifier: 41:72:2B:57:AE:9D:D8:7B:AE:18:19:62:80:3D:39:29:82:F5:AD:80 Certificate issuer: /CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Certificate serial: 010D0C9F4328584F6C58523CC5C40F5F7033A2E0 Authority key identifier: F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/efd5b1a7-a066-35e8-b1de-4f3895d78184.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 395173 IP address blocks: 23.149.128.0/23 maxlen: 24 64.239.8.0/21 maxlen: 24 64.239.64.0/22 maxlen: 24 64.239.76.0/22 maxlen: 24 131.226.8.0/22 maxlen: 24 131.226.12.0/24 maxlen: 24 131.226.13.0/24 maxlen: 24 131.226.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:52:3c:c5:c4:0f:5f:70:33:a2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=c437243f-b539-4569-9a15-c6a8c6a01904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b7:af:a7:9d:2d:e6:e1:06:43:02:90:ad:77: a0:4d:85:22:ba:09:53:01:22:17:66:dd:c6:0f:70: 0d:6d:78:6a:d5:a7:ee:48:1f:4b:c1:2c:5d:0a:81: 31:37:68:d3:29:e3:6e:73:bf:9c:fe:ac:65:68:83: f2:38:13:ef:d5:7d:ab:7f:2d:b8:4a:2b:ad:28:1c: 03:be:90:51:8f:5c:80:71:47:4a:5f:33:57:b1:f3: 94:c4:44:56:b6:a7:3f:9b:98:8f:12:de:aa:64:5a: 28:70:3f:f8:e3:96:b1:c4:41:a5:e4:2a:f8:71:24: 79:18:e6:8c:62:eb:a6:cc:d9:ef:e3:cd:32:a0:f0: db:76:e6:e6:09:98:49:79:69:c7:2c:10:df:a1:43: 2e:80:07:67:09:8a:76:91:a8:bd:9c:ea:f1:9a:59: 57:8b:07:8a:95:66:c8:c0:b2:96:56:34:6c:9c:a5: e4:b9:73:30:81:a1:e1:5a:5e:be:a2:bf:8f:b6:2d: 64:06:ff:52:51:93:41:c1:ae:72:ad:a5:41:7d:f0: fe:af:97:09:39:39:bc:77:75:dc:db:ac:ee:b4:2b: e8:6c:64:6a:32:91:72:8e:96:45:f6:71:38:cb:d0: 10:d0:15:12:85:92:b9:b7:9e:3e:0e:7e:77:cd:b4: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:72:2B:57:AE:9D:D8:7B:AE:18:19:62:80:3D:39:29:82:F5:AD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/efd5b1a7-a066-35e8-b1de-4f3895d78184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl X509v3 Authority Key Identifier: keyid:F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer sbgp-ipAddrBlock: critical IPv4: 23.149.128.0/23 64.239.8.0/21 64.239.64.0/22 64.239.76.0/22 131.226.8.0-131.226.14.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:af:63:a8:4d:6c:f5:ca:ac:cb:ec:40:ae:ec:58:60:f5:66: a1:14:3f:ee:2c:66:e3:44:0c:07:c3:9c:4f:dc:1e:1a:e9:3f: 0d:70:ce:8b:8f:87:99:68:e7:86:d1:93:ac:63:46:f9:dc:3a: b2:a2:15:6c:7f:8a:26:60:50:fd:be:8a:c0:24:6c:70:63:9c: 5a:7f:71:c3:dd:82:c3:09:a9:25:77:dd:b8:d8:9d:1d:c8:28: fc:96:16:9b:07:a9:65:19:39:04:1a:da:3c:99:c2:93:59:85: 0e:9a:63:38:f7:13:bc:70:08:fb:50:68:0a:c9:a8:10:cf:c8: 0a:19:c7:9d:e1:8c:ed:0e:ba:93:12:c9:36:9b:3a:1d:66:01: dd:b6:38:36:05:10:43:8f:12:5a:a7:6d:d8:13:ba:38:54:2b: 9f:ae:9e:42:2c:e9:44:6e:e0:f2:9b:f2:81:6e:bb:fb:c0:32: 23:e3:74:d5:3c:80:28:9b:8b:11:d6:68:b0:f4:41:2c:02:94: 68:08:c1:6f:8a:19:c1:e5:d8:fd:5b:f8:67:23:56:99:f4:99: 04:69:c7:67:c6:f7:07:ea:e5:23:85:c3:dd:0b:2c:3c:25:3c: ac:80:94:e0:c9:04:ed:4b:65:47:a0:ee:85:33:c9:bd:d0:9f: d7:14:01:f8 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE9sWFI8xcQPX3AzouAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwOWE3ZjItN2I1YS00ZTgyLTg2Y2MtMjE3ZWFiMDkz MTMxMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YzQzNzI0M2YtYjUzOS00NTY5LTlhMTUtYzZhOGM2YTAxOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bevp50t5uEGQwKQrXegTYUiuglTASIXZt3G D3ANbXhq1afuSB9LwSxdCoExN2jTKeNuc7+c/qxlaIPyOBPv1X2rfy24SiutKBwD vpBRj1yAcUdKXzNXsfOUxERWtqc/m5iPEt6qZFoocD/445axxEGl5Cr4cSR5GOaM YuumzNnv480yoPDbdubmCZhJeWnHLBDfoUMugAdnCYp2kai9nOrxmllXiweKlWbI wLKWVjRsnKXkuXMwgaHhWl6+or+Pti1kBv9SUZNBwa5yraVBffD+r5cJOTm8d3Xc 26zutCvobGRqMpFyjpZF9nE4y9AQ0BUShZK5t54+Dn53zbTv4QIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFEFyK1eundh7rhgZYoA9OSmC9a2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5 YTdmMi03YjVhLTRlODItODZjYy0yMTdlYWIwOTMxMzEvZWZkNWIxYTctYTA2Ni0z NWU4LWIxZGUtNGYzODk1ZDc4MTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTUwOWE3ZjItN2I1YS00ZTgyLTg2 Y2MtMjE3ZWFiMDkzMTMxL2E1MDlhN2YyLTdiNWEtNGU4Mi04NmNjLTIxN2VhYjA5 MzEzMS5jcmwwHwYDVR0jBBgwFoAU9Qno9QgenHjbr1KjAFM1lIUkjuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5YTdmMi03YjVhLTRlODItODZjYy0yMTdl YWIwOTMxMzEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBF5WAAwQD QO8IAwQCQO9AAwQCQO9MMAwDBAOD4ggDBACD4g4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAea9jqE1s9cqs y+xAruxYYPVmoRQ/7ixm40QMB8OcT9weGuk/DXDOi4+HmWjnhtGTrGNG+dw6sqIV bH+KJmBQ/b6KwCRscGOcWn9xw92CwwmpJXfduNidHcgo/JYWmwepZRk5BBraPJnC k1mFDppjOPcTvHAI+1BoCsmoEM/IChnHneGM7Q66kxLJNps6HWYB3bY4NgUQQ48S Wqdt2BO6OFQrn66eQizpRG7g8pvygW67+8AyI+N01TyAKJuLEdZosPRBLAKUaAjB b4oZweXY/Vv4ZyNWmfSZBGnHZ8b3B+rlI4XD3QssPCU8rICU4MkE7UtlR6DuhTPJ vdCf1xQB+A== -----END CERTIFICATE-----Generated at Wed Oct 14 18:48:39 2026 by rpki-client