$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa File: 7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa (raw, json) Hash identifier: iQO5h+WwwHFjk7yTR0+a/E+giV5r9wOramvN1bH0slI= Subject key identifier: C5:DB:E4:70:89:63:07:30:7C:99:B5:CD:FB:77:09:9D:85:C3:9C:D2 Certificate issuer: /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Certificate serial: 010D0C9F4328584EF9E20F54ED5BBD3E86079600 Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 401731 IP address blocks: 23.139.60.0/24 maxlen: 24 23.139.61.0/24 maxlen: 24 64.32.50.0/24 maxlen: 24 2620:d7:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:0f:54:ed:5b:bd:3e:86:07:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=cf73fe5b-9b77-4b31-af3f-53f472fbef2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:58:ae:12:33:84:4a:4a:da:c5:7f:ae:4d: 5a:ec:a2:16:bf:90:a0:3b:19:57:12:a9:78:53:c2: 4e:b2:0b:ed:52:c5:66:53:e9:a7:b8:cf:39:e7:01: dd:08:74:b0:85:0b:35:14:a0:1e:d5:7b:02:52:3a: bb:de:e8:33:16:8e:c7:7c:fa:31:96:95:2a:b4:19: 2f:b9:3c:06:31:86:a7:97:c9:52:fb:5d:dc:6d:a4: 91:27:ed:3c:ef:93:77:57:73:ea:36:96:b9:2d:91: 5a:6c:26:1b:b4:81:d2:8d:2a:cb:f4:db:e7:e5:68: 84:cc:97:09:9a:1e:c3:10:af:3c:7d:db:7a:d8:45: e5:d4:13:a0:c2:a4:33:b9:9d:45:9d:bf:cb:ff:45: 56:11:61:8d:7d:2d:ab:48:a8:98:34:5e:3a:ba:51: ff:c8:0f:87:d4:3e:0a:79:bc:ac:a9:25:92:26:c5: d8:ad:b7:00:c5:db:e9:6a:36:3f:56:30:e2:17:51: 08:3a:41:0c:0e:82:2b:85:fe:89:14:dd:df:3b:93: 3f:1c:41:57:09:50:f5:7b:df:0b:34:18:b1:10:fc: a4:f1:77:c8:9a:81:9c:05:01:c4:a8:ad:55:64:3b: bc:de:c4:5b:fc:59:36:23:3e:e4:06:ef:cb:03:37: 0f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DB:E4:70:89:63:07:30:7C:99:B5:CD:FB:77:09:9D:85:C3:9C:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl X509v3 Authority Key Identifier: keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer sbgp-ipAddrBlock: critical IPv4: 23.139.60.0/23 64.32.50.0/24 IPv6: 2620:d7:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4c:ab:f2:d8:4a:5f:7a:96:d3:bf:7c:1c:af:2f:48:0a:95: 78:9c:87:9d:c4:77:6d:a2:2b:26:28:17:cc:18:7b:55:8c:ee: a0:74:3d:29:5d:5d:2b:6f:e5:0f:d9:66:a1:18:7a:7d:0f:a4: fd:9f:80:8f:0a:17:65:13:80:70:10:86:81:ec:fe:7e:11:25: 39:52:7e:02:fe:c7:90:70:35:cd:73:1b:5b:bd:5e:a3:6f:01: 1e:79:ca:9d:21:a7:70:56:59:d2:28:d7:f4:fc:55:8a:35:e3: 62:f4:b6:3c:62:2c:d2:0f:87:48:94:8a:ad:82:e1:6a:56:e9: 0a:0f:aa:da:a0:f0:cf:f3:eb:4e:35:30:6a:a9:88:f3:c4:79: 1d:10:90:27:e4:8c:5f:ba:ae:90:67:82:c1:4d:a1:70:cb:c0: b9:fe:6f:a1:6f:f0:e9:52:5a:4f:89:35:8b:62:f1:52:d4:d9: 96:22:e7:14:cb:c5:06:5f:be:c6:b4:fa:dc:fa:aa:c5:27:f5: f4:8a:aa:ca:37:38:66:07:7a:49:01:7a:be:2c:bb:5f:42:5c: 61:a8:6d:18:c9:dd:66:99:c2:b5:6e:72:44:f9:07:87:25:88: 37:62:5f:2e:69:6f:b7:f0:cc:af:95:63:4c:46:93:b7:55:35: 46:84:d6:48 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE754g9U7Vu9PoYHlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4 NTFmMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk Y2Y3M2ZlNWItOWI3Ny00YjMxLWFmM2YtNTNmNDcyZmJlZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1BYrhIzhEpK2sV/rk1a7KIWv5CgOxlXEql4 U8JOsgvtUsVmU+mnuM855wHdCHSwhQs1FKAe1XsCUjq73ugzFo7HfPoxlpUqtBkv uTwGMYanl8lS+13cbaSRJ+0875N3V3PqNpa5LZFabCYbtIHSjSrL9Nvn5WiEzJcJ mh7DEK88fdt62EXl1BOgwqQzuZ1Fnb/L/0VWEWGNfS2rSKiYNF46ulH/yA+H1D4K ebysqSWSJsXYrbcAxdvpajY/VjDiF1EIOkEMDoIrhf6JFN3fO5M/HEFXCVD1e98L NBixEPyk8XfImoGcBQHEqK1VZDu83sRb/Fk2Iz7kBu/LAzcPmQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFMXb5HCJYwcwfJm1zft3CZ2Fw5zSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvN2RiZjFjZWEtNmQ3MS0z Yzc0LWE2NmMtZmZkZGZmN2IxNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj NGY1MDg1MWYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBF4s8AwQA QCAyMA8EAgACMAkDBwAmIADXoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMEyr8thKX3qW0798HK8vSAqV eJyHncR3baIrJigXzBh7VYzuoHQ9KV1dK2/lD9lmoRh6fQ+k/Z+AjwoXZROAcBCG gez+fhElOVJ+Av7HkHA1zXMbW71eo28BHnnKnSGncFZZ0ijX9PxVijXjYvS2PGIs 0g+HSJSKrYLhalbpCg+q2qDwz/PrTjUwaqmI88R5HRCQJ+SMX7qukGeCwU2hcMvA uf5voW/w6VJaT4k1i2LxUtTZliLnFMvFBl++xrT63PqqxSf19Iqqyjc4Zgd6SQF6 viy7X0JcYahtGMndZpnCtW5yRPkHhyWIN2JfLmlvt/DMr5VjTEaTt1U1RoTWSA== -----END CERTIFICATE-----Generated at Sat Oct 10 12:18:14 2026 by rpki-client