$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa File: c975af3b-1769-381f-b596-ba7b61e7fce8.roa (raw, json) Hash identifier: Zvwc3ipqFo7sh/dAC3TlSYe/QgAILm3rt6Kb4XFawIs= Subject key identifier: 7A:D4:28:18:E0:FC:6E:30:A9:A5:0D:38:94:E1:38:0C:C5:8D:22:62 Certificate issuer: /CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Certificate serial: 010D0C9F4328584F4973D571B4F5656707110070 Authority key identifier: 92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20257 IP address blocks: 69.80.80.0/20 maxlen: 24 74.222.96.0/20 maxlen: 24 74.222.112.0/20 maxlen: 24 153.57.64.0/18 maxlen: 24 158.115.160.0/19 maxlen: 24 173.233.112.0/20 maxlen: 24 216.218.64.0/18 maxlen: 24 2605:4cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d5:71:b4:f5:65:67:07:11:00:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e5335630-0287-42f0-afba-0237a0c267a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:64:d8:f8:81:13:81:bc:cf:4e:8e:7c:88: 56:2a:5e:3a:19:a2:13:0a:af:f5:39:a6:ca:8d:ee: 04:4d:a9:c5:15:a3:9c:fc:cf:2f:07:91:54:47:0e: 47:19:26:08:fa:9a:be:8a:1a:5f:23:6b:7a:47:e9: b7:d5:3f:46:f5:fa:55:dd:80:ea:00:cf:60:bd:7a: 59:b9:c7:f7:76:ef:69:75:68:0a:cb:48:e8:92:21: 02:37:75:54:12:d2:b1:78:0b:e6:cb:40:69:2d:25: 06:ae:5e:d5:0c:39:71:0b:00:6a:e6:cb:5d:20:05: 90:6e:35:0d:1e:e3:3d:9d:af:07:bf:46:4b:7f:e8: b5:67:4f:a9:52:61:8d:9f:e8:7c:02:80:39:90:15: ff:08:a0:d7:1e:c8:4a:bc:b0:27:e9:4e:01:1b:96: 88:4a:df:93:3b:fc:20:c4:87:ef:d2:30:c8:b6:4d: a0:7b:10:c6:e5:80:c7:93:38:e5:7a:36:79:21:b2: f4:ff:12:27:2a:16:5a:64:e1:16:1b:0f:2b:f4:c8: 43:07:83:35:b4:50:b8:52:6f:e1:fc:d3:0a:59:c6: 91:f5:54:f1:f8:17:73:f9:88:3e:48:28:ed:9e:a8: db:82:b9:a9:df:eb:d6:4f:36:a5:8f:83:28:d1:be: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D4:28:18:E0:FC:6E:30:A9:A5:0D:38:94:E1:38:0C:C5:8D:22:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl X509v3 Authority Key Identifier: keyid:92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer sbgp-ipAddrBlock: critical IPv4: 69.80.80.0/20 74.222.96.0/19 153.57.64.0/18 158.115.160.0/19 173.233.112.0/20 216.218.64.0/18 IPv6: 2605:4cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:39:ce:8d:1b:8a:e9:a7:58:ff:2f:5e:60:38:8d:95:71:d5: 0e:7d:ce:49:28:ce:cb:68:29:cf:02:9c:94:2e:ce:9b:11:53: 07:0d:2e:61:bc:8d:b0:1a:1a:5b:1f:a2:db:3a:fe:a5:eb:48: 6b:88:c9:64:fc:d9:6b:02:4e:7a:fe:e1:2c:8a:61:f8:77:40: 96:da:8b:9f:66:61:fe:b2:62:67:04:da:c0:ae:83:56:c8:b9: af:95:d4:30:0e:7b:45:b3:eb:56:4c:9a:7c:95:ec:12:d4:d8: cd:2a:cf:4a:c0:99:c2:02:54:2f:bd:b9:0e:f5:1e:12:70:02: 7f:ea:03:04:b9:87:6d:6f:2f:94:99:84:b1:84:7a:4b:07:08: 35:59:34:e1:78:23:ec:d4:8b:86:5f:b1:97:90:b6:a2:48:f9: e8:cc:c0:77:36:71:51:7c:f7:2e:21:29:6c:3c:2e:7b:1f:1a: 75:eb:ac:30:dd:3a:e7:e6:64:50:73:dc:2f:60:9d:e6:65:69: 60:a8:30:ed:28:9f:86:f4:e8:5c:b1:de:20:c3:e2:f5:38:7e: cf:c8:96:74:a5:51:c1:a9:25:8a:13:51:31:22:51:3e:ce:6c: 81:fb:e5:23:7c:53:0e:bf:fd:e6:1f:b8:42:ce:93:ad:4b:69: 11:9e:04:d8 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWE9Jc9VxtPVlZwcRAHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkNGY1MmYtNDA1My00NWRiLWI4ZTAtYTdlMGUzYjg1 ZmJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTUzMzU2MzAtMDI4Ny00MmYwLWFmYmEtMDIzN2EwYzI2N2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgtk2PiBE4G8z06OfIhWKl46GaITCq/1OabK je4ETanFFaOc/M8vB5FURw5HGSYI+pq+ihpfI2t6R+m31T9G9fpV3YDqAM9gvXpZ ucf3du9pdWgKy0jokiECN3VUEtKxeAvmy0BpLSUGrl7VDDlxCwBq5stdIAWQbjUN HuM9na8Hv0ZLf+i1Z0+pUmGNn+h8AoA5kBX/CKDXHshKvLAn6U4BG5aISt+TO/wg xIfv0jDItk2gexDG5YDHkzjlejZ5IbL0/xInKhZaZOEWGw8r9MhDB4M1tFC4Um/h /NMKWcaR9VTx+Bdz+Yg+SCjtnqjbgrmp3+vWTzalj4Mo0b6vFwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFHrUKBjg/G4wqaUNOJThOAzFjSJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0 ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2UwZTNiODVmYmEvYzk3NWFmM2ItMTc2OS0z ODFmLWI1OTYtYmE3YjYxZTdmY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmNkNGY1MmYtNDA1My00NWRiLWI4 ZTAtYTdlMGUzYjg1ZmJhLzJjZDRmNTJmLTQwNTMtNDVkYi1iOGUwLWE3ZTBlM2I4 NWZiYS5jcmwwHwYDVR0jBBgwFoAUkn7HN1kqfEs1XfsP97jWTn+dzfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2Uw ZTNiODVmYmEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQERVBQAwQF St5gAwQGmTlAAwQFnnOgAwQErelwAwQG2NpAMA0EAgACMAcDBQAmBUzAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAHM5zo0biumnWP8vXmA4jZVx1Q59zkkozstoKc8CnJQuzpsRUwcNLmG8jbAa Glsfots6/qXrSGuIyWT82WsCTnr+4SyKYfh3QJbai59mYf6yYmcE2sCug1bIua+V 1DAOe0Wz61ZMmnyV7BLU2M0qz0rAmcICVC+9uQ71HhJwAn/qAwS5h21vL5SZhLGE eksHCDVZNOF4I+zUi4ZfsZeQtqJI+ejMwHc2cVF89y4hKWw8LnsfGnXrrDDdOufm ZFBz3C9gneZlaWCoMO0on4b06Fyx3iDD4vU4fs/IlnSlUcGpJYoTUTEiUT7ObIH7 5SN8Uw6//eYfuELOk61LaRGeBNg= -----END CERTIFICATE-----Generated at Sat Sep 26 00:20:49 2026 by rpki-client