$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3cac8765-93e7-47e3-8682-109f0b70e113/26d884f7-8876-3e17-bddd-169fd1bff435.roa File: 26d884f7-8876-3e17-bddd-169fd1bff435.roa (raw, json) Hash identifier: t/VSFl0dRXWE6KhqwCm5ZxWn3qjZT5VkgBaH44tWkvQ= Subject key identifier: D9:DF:AA:02:5A:2C:60:F1:92:B1:0F:6A:E0:E8:24:8B:A6:90:C0:7F Certificate issuer: /CN=3cac8765-93e7-47e3-8682-109f0b70e113 Certificate serial: 010D0C9F4328584F612D60A52AC1BDF1B84A8E00 Authority key identifier: F2:3E:BD:B8:24:1A:9D:FD:82:9F:A0:BF:D9:4F:C5:F7:2D:2E:6C:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3cac8765-93e7-47e3-8682-109f0b70e113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3cac8765-93e7-47e3-8682-109f0b70e113/26d884f7-8876-3e17-bddd-169fd1bff435.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 395582 IP address blocks: 68.171.112.0/20 maxlen: 24 72.35.160.0/19 maxlen: 24 207.186.200.0/22 maxlen: 24 216.139.96.0/19 maxlen: 24 2606:4430::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3cac8765-93e7-47e3-8682-109f0b70e113/3cac8765-93e7-47e3-8682-109f0b70e113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3cac8765-93e7-47e3-8682-109f0b70e113/3cac8765-93e7-47e3-8682-109f0b70e113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3cac8765-93e7-47e3-8682-109f0b70e113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:60:a5:2a:c1:bd:f1:b8:4a:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cac8765-93e7-47e3-8682-109f0b70e113 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=b5dabf23-2bb4-4dbc-a5d8-3f0aedc20d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:98:b1:6f:22:2a:c5:89:00:a8:e1:2a:0c: 95:78:ea:84:ce:fd:9e:ec:70:ae:2e:38:91:24:1a: d7:7c:e4:62:80:2f:c6:41:b9:31:0c:9e:e6:0a:37: 84:99:ba:91:66:bb:c4:8a:ab:4a:f7:4e:0d:4a:5d: 0a:e9:e5:88:62:46:c0:a7:4e:bc:eb:e0:2b:0a:35: 3e:2e:51:84:42:85:8e:92:df:39:30:9d:77:e6:ad: 95:b0:35:bd:40:52:46:28:a9:34:c8:56:74:d8:8b: 5d:c2:95:e6:d8:9c:69:7c:9b:95:3f:29:ab:fa:b9: 1a:28:19:bb:12:6c:f0:81:1f:60:c9:1e:99:47:56: 0d:04:e7:22:51:e2:b6:9d:4c:ee:e1:ff:5e:e9:e5: 87:a8:51:86:90:28:88:fe:85:3e:f4:12:f9:b8:34: 72:13:cd:2f:c0:12:75:5e:f4:ff:1e:4e:bb:ee:30: 06:6a:28:2f:36:b9:f5:b2:aa:89:dc:5b:92:48:ff: b5:c4:65:b5:18:13:24:da:05:18:c5:b1:76:66:03: 1e:c5:7f:d7:42:8f:d3:1d:1e:ca:0b:46:be:85:2d: 41:c9:fe:b6:a4:b5:bc:15:32:3d:bf:aa:2f:16:8a: 09:b3:15:4a:ef:7c:28:f6:19:1d:cb:da:93:5a:d4: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DF:AA:02:5A:2C:60:F1:92:B1:0F:6A:E0:E8:24:8B:A6:90:C0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3cac8765-93e7-47e3-8682-109f0b70e113/26d884f7-8876-3e17-bddd-169fd1bff435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3cac8765-93e7-47e3-8682-109f0b70e113/3cac8765-93e7-47e3-8682-109f0b70e113.crl X509v3 Authority Key Identifier: keyid:F2:3E:BD:B8:24:1A:9D:FD:82:9F:A0:BF:D9:4F:C5:F7:2D:2E:6C:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3cac8765-93e7-47e3-8682-109f0b70e113.cer sbgp-ipAddrBlock: critical IPv4: 68.171.112.0/20 72.35.160.0/19 207.186.200.0/22 216.139.96.0/19 IPv6: 2606:4430::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b2:d1:4e:b8:04:86:38:f0:b3:0a:a4:cc:00:e5:f7:c2:c3: b9:fa:17:b6:d1:70:73:49:b2:79:2e:ca:88:b6:46:63:6f:37: 2b:b9:34:8a:93:b6:cb:45:97:1f:4d:0c:8f:84:ee:71:91:41: 7e:af:4c:78:2f:3a:f0:22:1a:f5:e2:77:27:8e:cf:b9:82:8f: 02:47:8f:88:e1:78:7c:3b:e5:09:83:d1:38:3b:bd:fc:6f:a8: c0:1c:c3:ba:f0:4b:7c:94:4f:0e:a4:72:87:9a:82:41:9b:01: 6b:5c:27:68:37:cb:75:db:14:35:c6:90:3f:ae:85:9c:39:e3: 8e:c9:33:1c:29:7f:1e:97:8e:ed:6f:b2:79:79:d7:87:74:ab: bb:42:7b:b2:98:0d:46:a7:1f:44:ab:33:56:33:bd:64:f5:57: 22:56:c1:31:9f:89:8f:b4:a7:4f:1a:2a:09:d0:a6:6e:54:30: 4c:32:e9:3d:36:2c:64:61:5a:b3:9b:1c:ba:83:95:57:49:dd: 22:f6:6d:e3:05:ed:dc:47:19:00:ee:d7:08:06:cb:d4:dd:b7: 7a:63:a3:7d:e0:f1:cf:c9:54:47:ae:c4:c4:71:f0:20:a7:f7: 68:80:ed:6d:8f:85:f1:32:0e:1c:fd:af:f1:ca:dd:aa:18:ef: ac:30:91:00 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE9hLWClKsG98bhKjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NhYzg3NjUtOTNlNy00N2UzLTg2ODItMTA5ZjBiNzBl MTEzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk YjVkYWJmMjMtMmJiNC00ZGJjLWE1ZDgtM2YwYWVkYzIwZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDKYsW8iKsWJAKjhKgyVeOqEzv2e7HCuLjiR JBrXfORigC/GQbkxDJ7mCjeEmbqRZrvEiqtK904NSl0K6eWIYkbAp0686+ArCjU+ LlGEQoWOkt85MJ135q2VsDW9QFJGKKk0yFZ02ItdwpXm2JxpfJuVPymr+rkaKBm7 EmzwgR9gyR6ZR1YNBOciUeK2nUzu4f9e6eWHqFGGkCiI/oU+9BL5uDRyE80vwBJ1 XvT/Hk677jAGaigvNrn1sqqJ3FuSSP+1xGW1GBMk2gUYxbF2ZgMexX/XQo/THR7K C0a+hS1Byf62pLW8FTI9v6ovFooJsxVK73wo9hkdy9qTWtSYzQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFNnfqgJaLGDxkrEPauDoJIumkMB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zY2Fj ODc2NS05M2U3LTQ3ZTMtODY4Mi0xMDlmMGI3MGUxMTMvMjZkODg0ZjctODg3Ni0z ZTE3LWJkZGQtMTY5ZmQxYmZmNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2NhYzg3NjUtOTNlNy00N2UzLTg2 ODItMTA5ZjBiNzBlMTEzLzNjYWM4NzY1LTkzZTctNDdlMy04NjgyLTEwOWYwYjcw ZTExMy5jcmwwHwYDVR0jBBgwFoAU8j69uCQanf2Cn6C/2U/F9y0ubHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zY2FjODc2NS05M2U3LTQ3ZTMtODY4Mi0xMDlm MGI3MGUxMTMuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQERKtwAwQF SCOgAwQCz7rIAwQF2ItgMA0EAgACMAcDBQAmBkQwMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFay0U64BIY4 8LMKpMwA5ffCw7n6F7bRcHNJsnkuyoi2RmNvNyu5NIqTtstFlx9NDI+E7nGRQX6v THgvOvAiGvXidyeOz7mCjwJHj4jheHw75QmD0Tg7vfxvqMAcw7rwS3yUTw6kcoea gkGbAWtcJ2g3y3XbFDXGkD+uhZw5447JMxwpfx6Xju1vsnl514d0q7tCe7KYDUan H0SrM1YzvWT1VyJWwTGfiY+0p08aKgnQpm5UMEwy6T02LGRhWrObHLqDlVdJ3SL2 beMF7dxHGQDu1wgGy9Tdt3pjo33g8c/JVEeuxMRx8CCn92iA7W2PhfEyDhz9r/HK 3aoY76wwkQA= -----END CERTIFICATE-----Generated at Tue Oct 6 07:28:50 2026 by rpki-client