$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa File: b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa (raw, json) Hash identifier: I86K9mr8X5ParZN1CX+B+f2jrATmBWGh3aAtfSLAkKY= Subject key identifier: 3A:17:B3:FA:2E:D5:70:9F:AB:33:21:B5:12:CB:0D:99:78:34:9A:C3 Certificate issuer: /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Certificate serial: 010D0C9F4328584F067294D18ACDE14B86646C20 Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 19686 IP address blocks: 23.139.60.0/24 maxlen: 24 23.139.61.0/24 maxlen: 24 64.32.50.0/24 maxlen: 24 2620:d7:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:94:d1:8a:cd:e1:4b:86:64:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=0e256140-b8ff-4bc2-8293-fb22884f7990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:06:2b:88:1e:e8:57:08:f6:c6:c9:bc:e9: 0a:7b:c5:71:17:56:b1:b4:53:1a:70:8d:9b:de:76: 36:67:69:3f:3f:f2:a2:f1:9d:91:b1:31:b2:08:d7: 64:9b:32:56:86:37:f4:2b:ce:c1:98:54:c5:73:c6: 38:72:f6:b2:79:5e:7e:f2:4c:3e:06:88:e0:ae:50: a1:65:d4:95:4a:f3:14:59:f7:00:eb:55:34:8f:f1: 2d:e9:69:eb:18:6d:4e:41:f6:03:51:d5:9d:ad:54: 25:02:5c:d2:89:86:76:af:6e:57:c0:9b:51:1b:47: 9a:b0:e7:39:c4:ad:72:79:b2:c5:38:6b:25:8e:a6: 55:ca:96:91:d8:71:50:29:a2:ea:85:ce:e0:cd:5f: 1d:72:d4:bf:5c:c7:46:ec:9d:e2:da:d2:85:b8:2e: bc:5e:d0:bf:5d:1f:ad:b9:f3:9e:c8:e3:4e:15:4a: cf:1e:d3:60:7f:72:42:be:52:29:7a:02:52:7d:22: 81:7a:bf:c8:63:a2:13:74:09:be:14:58:5b:b1:03: b9:1c:99:64:45:e3:ad:6e:95:3d:a2:91:08:34:3a: f4:85:07:e8:f4:c9:06:71:4b:fd:0f:50:96:45:0f: ed:ef:2d:25:ae:9d:29:ac:9a:c5:f3:35:76:8d:a3: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:17:B3:FA:2E:D5:70:9F:AB:33:21:B5:12:CB:0D:99:78:34:9A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl X509v3 Authority Key Identifier: keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer sbgp-ipAddrBlock: critical IPv4: 23.139.60.0/23 64.32.50.0/24 IPv6: 2620:d7:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:91:99:7c:8e:1d:ca:d3:ce:49:e3:2c:ed:e8:4e:06:fd:41: a1:be:d7:13:9f:2f:0c:8a:43:6d:6f:8f:40:e5:99:0b:0a:a1: a6:6a:c5:4b:a9:a9:b4:19:d3:8d:60:6f:b5:54:ab:23:07:2c: 18:08:9e:d5:a0:ef:5a:7b:10:60:5f:17:89:01:fe:19:a8:cb: 1d:bc:f8:44:e8:86:1f:ed:88:fa:0b:80:a4:12:48:8d:2c:70: 7f:eb:83:5c:38:b9:0a:b3:05:00:2c:20:f5:6b:18:6e:68:0c: ef:cd:b9:fd:27:1f:e1:de:e1:3a:34:0e:80:38:f2:cc:b6:e3: 37:46:fe:c0:b5:ea:e5:ba:d1:dd:c7:9d:a6:80:e3:c6:2b:6b: 32:cf:41:b7:5d:6a:e5:32:c9:a4:95:fc:92:66:47:ff:81:5d: 35:8b:08:21:0f:5a:81:51:53:16:c9:c1:c0:db:e5:66:ef:f7: 0c:26:81:0f:fa:2b:db:c4:dd:07:ac:d5:b4:aa:dd:bd:29:a5: 81:64:8b:21:b9:1c:7c:2a:89:f0:58:11:07:35:cb:f8:55:2d: ed:2d:eb:8f:9e:c1:d4:b7:cd:19:0a:76:8f:8a:96:3d:32:44: 48:d5:5b:13:e9:1d:f0:62:e5:07:1a:a4:54:55:56:5d:8a:e1: 2a:02:a0:f3 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE8GcpTRis3hS4ZkbCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4 NTFmMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MGUyNTYxNDAtYjhmZi00YmMyLTgyOTMtZmIyMjg4NGY3OTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEwGK4ge6FcI9sbJvOkKe8VxF1axtFMacI2b 3nY2Z2k/P/Ki8Z2RsTGyCNdkmzJWhjf0K87BmFTFc8Y4cvayeV5+8kw+BojgrlCh ZdSVSvMUWfcA61U0j/Et6WnrGG1OQfYDUdWdrVQlAlzSiYZ2r25XwJtRG0easOc5 xK1yebLFOGsljqZVypaR2HFQKaLqhc7gzV8dctS/XMdG7J3i2tKFuC68XtC/XR+t ufOeyONOFUrPHtNgf3JCvlIpegJSfSKBer/IY6ITdAm+FFhbsQO5HJlkReOtbpU9 opEINDr0hQfo9MkGcUv9D1CWRQ/t7y0lrp0prJrF8zV2jaMH/wIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFDoXs/ou1XCfqzMhtRLLDZl4NJrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvYjI1ZmIyZTUtM2M2Ny0z YmY3LWE1MGItZjA2MzVmYmE4MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj NGY1MDg1MWYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBF4s8AwQA QCAyMA8EAgACMAkDBwAmIADXoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATJGZfI4dytPOSeMs7ehOBv1B ob7XE58vDIpDbW+PQOWZCwqhpmrFS6mptBnTjWBvtVSrIwcsGAie1aDvWnsQYF8X iQH+GajLHbz4ROiGH+2I+guApBJIjSxwf+uDXDi5CrMFACwg9WsYbmgM7825/Scf 4d7hOjQOgDjyzLbjN0b+wLXq5brR3cedpoDjxitrMs9Bt11q5TLJpJX8kmZH/4Fd NYsIIQ9agVFTFsnBwNvlZu/3DCaBD/or28TdB6zVtKrdvSmlgWSLIbkcfCqJ8FgR BzXL+FUt7S3rj57B1LfNGQp2j4qWPTJESNVbE+kd8GLlBxqkVFVWXYrhKgKg8w== -----END CERTIFICATE-----Generated at Sun Oct 11 07:07:23 2026 by rpki-client