$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa File: 6a7c1fcd-5997-353b-aa88-da1a2d616872.roa (raw, json) Hash identifier: o0Jzh6RaDTuUsr3gchRDOncjW2cOZ4EX39e+6q7i5Rc= Subject key identifier: DF:AF:59:1B:9D:91:FC:7D:2A:03:CA:26:45:CA:B8:6B:DA:B8:CD:7B Certificate issuer: /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Certificate serial: 010D0C9F4328584F4972CFAC4199A6CD260D7230 Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3737 IP address blocks: 23.172.16.0/24 maxlen: 32 68.70.0.0/19 maxlen: 32 72.28.0.0/18 maxlen: 32 199.96.176.0/21 maxlen: 32 199.192.136.0/22 maxlen: 32 199.241.168.0/22 maxlen: 32 2607:3e00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:cf:ac:41:99:a6:cd:26:0d:72:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=03261be2-5a34-4707-a4ca-2492da42cb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:87:a1:94:69:75:fb:d0:a9:fa:18:a5:37: a2:14:0b:ed:13:ed:1f:00:58:c2:14:d7:1a:9a:aa: 80:83:8b:da:72:d5:ab:2c:f8:21:f4:ae:37:ae:4e: d6:e2:c3:93:df:8d:05:83:b2:96:12:3d:dc:c1:0d: 1b:a1:ea:f4:07:58:35:77:f6:69:f2:a6:8d:47:4a: 8a:7d:ae:37:84:50:45:31:d1:2a:44:25:63:2b:b2: f3:48:51:42:48:40:ef:b3:d2:37:e4:fa:e3:44:b8: c8:a0:52:45:1f:78:e2:6c:96:8d:e0:23:c9:a6:57: ed:35:e6:2b:45:11:ac:ac:e8:79:eb:1b:1f:f5:b0: 7f:53:73:7a:21:48:18:ea:9e:05:df:db:0a:97:a7: 92:bb:78:fb:e3:50:28:50:25:aa:9f:be:d0:01:f3: f2:4e:c7:80:24:cb:e2:b2:95:00:18:28:14:cf:41: 22:7d:8c:7e:1b:f9:18:d5:6e:49:22:71:2a:3f:96: 13:fd:82:47:d7:36:20:fe:8d:42:16:fc:8d:35:75: ff:fe:58:36:d5:8d:fc:6e:d0:f3:ee:9c:64:bf:5c: 20:77:f5:43:43:31:c1:59:50:73:39:cc:d4:05:94: 4c:2a:3f:f5:e3:0d:6e:43:60:2f:66:fd:63:f4:52: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AF:59:1B:9D:91:FC:7D:2A:03:CA:26:45:CA:B8:6B:DA:B8:CD:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl X509v3 Authority Key Identifier: keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer sbgp-ipAddrBlock: critical IPv4: 23.172.16.0/24 68.70.0.0/19 72.28.0.0/18 199.96.176.0/21 199.192.136.0/22 199.241.168.0/22 IPv6: 2607:3e00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ef:8b:b4:7c:f3:52:b7:71:b0:27:5f:59:9d:2b:61:cd:da: 0a:e8:85:45:1b:d2:3c:b7:0b:cf:b1:86:dd:8f:39:a1:98:41: ee:26:bc:11:95:d8:23:1a:64:0d:28:3d:d1:12:24:cb:35:86: 02:9f:22:c6:a0:e1:fe:95:27:5a:ad:de:00:a7:59:4c:db:cf: f6:4d:6b:2d:20:90:3d:52:91:d9:b5:60:37:e2:53:d3:ee:d7: c7:ff:1f:ee:18:e2:dd:27:f3:39:13:6a:e5:d9:10:c4:bf:00: 5e:d6:6f:e7:eb:f2:5b:b1:b1:87:63:40:46:08:15:31:9e:33: 67:5a:16:e3:7d:49:75:26:c9:5c:f4:9a:f2:7b:b6:58:18:53: 70:73:58:b3:e8:ed:ca:8b:66:b6:bb:9c:c8:78:a3:20:50:8d: fd:25:3e:ec:f1:1c:57:82:91:35:e1:05:9f:89:d9:3b:52:75: b3:4f:05:74:69:32:1e:d7:02:b6:02:84:4e:d8:e8:83:85:4a: 2b:13:b5:13:c6:00:b5:ec:fb:d9:3a:7a:02:87:6b:77:15:bd: 86:40:9f:9a:d9:19:60:51:1d:27:da:d9:3c:86:2c:b6:32:ef: da:e5:33:95:56:87:8f:f4:8f:f7:b2:73:87:64:75:d7:c4:1c: f5:56:e5:0a -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWE9Jcs+sQZmmzSYNcjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlYTEwNTEtZDJmNi00OWE2LWE1NTMtYjc1ZWI5Yjgz YjExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDMyNjFiZTItNWEzNC00NzA3LWE0Y2EtMjQ5MmRhNDJjYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytiHoZRpdfvQqfoYpTeiFAvtE+0fAFjCFNca mqqAg4vactWrLPgh9K43rk7W4sOT340Fg7KWEj3cwQ0boer0B1g1d/Zp8qaNR0qK fa43hFBFMdEqRCVjK7LzSFFCSEDvs9I35PrjRLjIoFJFH3jibJaN4CPJplftNeYr RRGsrOh56xsf9bB/U3N6IUgY6p4F39sKl6eSu3j741AoUCWqn77QAfPyTseAJMvi spUAGCgUz0EifYx+G/kY1W5JInEqP5YT/YJH1zYg/o1CFvyNNXX//lg21Y38btDz 7pxkv1wgd/VDQzHBWVBzOczUBZRMKj/14w1uQ2AvZv1j9FIVKQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFN+vWRudkfx9KgPKJkXKuGvauM17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVh MTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVlYjliODNiMTEvNmE3YzFmY2QtNTk5Ny0z NTNiLWFhODgtZGExYTJkNjE2ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjFlYTEwNTEtZDJmNi00OWE2LWE1 NTMtYjc1ZWI5YjgzYjExLzIxZWExMDUxLWQyZjYtNDlhNi1hNTUzLWI3NWViOWI4 M2IxMS5jcmwwHwYDVR0jBBgwFoAU17/spji01sUwIRm+CadPKvJr4/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVhMTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVl YjliODNiMTEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAF6wQAwQF REYAAwQGSBwAAwQDx2CwAwQCx8CIAwQCx/GoMA0EAgACMAcDBQAmBz4AMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAFrvi7R881K3cbAnX1mdK2HN2grohUUb0jy3C8+xht2POaGYQe4mvBGV2CMa ZA0oPdESJMs1hgKfIsag4f6VJ1qt3gCnWUzbz/ZNay0gkD1Skdm1YDfiU9Pu18f/ H+4Y4t0n8zkTauXZEMS/AF7Wb+fr8luxsYdjQEYIFTGeM2daFuN9SXUmyVz0mvJ7 tlgYU3BzWLPo7cqLZra7nMh4oyBQjf0lPuzxHFeCkTXhBZ+J2TtSdbNPBXRpMh7X ArYChE7Y6IOFSisTtRPGALXs+9k6egKHa3cVvYZAn5rZGWBRHSfa2TyGLLYy79rl M5VWh4/0j/eyc4dkddfEHPVW5Qo= -----END CERTIFICATE-----Generated at Sat Oct 3 17:42:45 2026 by rpki-client